Requirements for the Backup Exec Service Account (BESA).

  • Modified Date:
  • Article ID:000028683


Requirements for the Backup Exec Service Account (BESA).


All Backup Exec Services on a media server, with the exception of the Backup Exec Remote Agent, run in the context of a user account configured for the Backup Exec services.
The Backup Exec Service Account (BESA) requires the following User Rights in group policy and group memberships:

User rights requirements:
  • Act as a part of Operating System ( Only for Windows Server 2000 ).
  • Create a token object.
  • Log on as a service.
  • Logon as a batch job.
  • Manage auditing and security log.
  • Backup files and directories.
  • Restore files and directories.
Group Memberships or equivalent access:
  • Domain Admins or Administrators.
  • Backup Operators.

Due to security implementations in Microsoft Small Business Server, the service account must be " DomainName\Administrator " account.

Refreshes local and Active Directory-based Group Policy settings, including security settings by executing "gpupdate" command.


For a complete list of User Rights and their descriptions, please see :

Terms of use for this information are found in Legal Notices.



Did this article answer your question or resolve your issue?


Did this article save you the trouble of contacting technical support?


How can we make this article more helpful?

Email Address (Optional)