Solved

Does Backup Exec service account require interactive logon rights?

Posted on 2008-10-15
4
1,394 Views
Last Modified: 2013-12-04
Can I disable logon rights for the accounts that the BExec services run as?  
0
Comment
Question by:qpm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 19

Expert Comment

by:CoccoBill
ID: 22719980
According to this, no: http://seer.support.veritas.com/docs/254239.htm

It requires:
Act as Part of the Operating System
Backup Files and Directories
Create a Token Object
Logon as a service
Manage Auditing and Security Log
Restore Files and Directories
Take ownership of files and other objects
0
 

Author Comment

by:qpm
ID: 22721824
Thanks for the quick response, I have to wait until the lab administrator gets back in the office later today to try that out.

If I give the account those rights, is there anything I should test other than starting the services, backup, and restore?  Also, this article doesn't explicitly mention release 12, should that matter?  

My main concern is that we have to fill out a bunch of paperwork get this system configuration approved.  If we do that then find out it isn't right, we have to file a bunch more paperwork to change it.  
0
 
LVL 3

Accepted Solution

by:
------------ earned 125 total points
ID: 22737160
your admin guide mentions all the necessary rights required by the backup exec service account

If backup exec is in a domain, besa account should be a domain admin
and if backing up exchange server it also has to be a exchange full admin or org admin for exchange 2007
for sql it has to be the db owner and so on..
0
 

Author Comment

by:qpm
ID: 22743070
we were not able to get the service to start with the rights assigned as listed in the veritas document above unless the servce account was also an admin (BUILTIN\Administrators on the server).  If we took away admin rights, we got the error described in (http://seer.entsupport.symantec.com/docs/284604.htm).  
0

Featured Post

[Webinar] Learn How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is an update and follow-up of my previous article:   Storage 101: common concepts in the IT enterprise storage This time, I expand on more frequently used storage concepts.
OfficeMate Freezes on login or does not load after login credentials are input.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question