does BEadmin need to be a domain admin in Backup Exec 12.5?
Our BEADMIN account is a member of DOMAIN ADMIN and too many people, including former employees know the password. I know I could methodically change the password in services on the backup servers, but I was wondering if this even needs to be a domain admin. It would be a lot easier to just take away the authority, instead of changing the password each time staff changes...anyone that knows the minimum authority required for this account, please let me know...thanks
jzaniewski
The account needs to be a "backup administrator" to work properly, so it wouldn't need to be a domain admin. Also, you can change the credentials from within backup exec by clicking on the "Gear" icon on the bottom of the backup exec console screen without having to manually do it in AD and in services.
ASKER
thank for the info...I will try that
ASKER
I see a "backup operator" group AD but not a "Backup Adminitrator" is that what you meant?
ASKER
I do not see a grear icon either in Backup Exec 12.5....is there a certain view I need to turn on?
Sorry, I meant "Backup Operator". I attached a PDF screenshot of the icon I was referring to. I use 2010, but I believe it's the same in 12.5.
Doc1.pdf
Doc1.pdf
ASKER
ok thanks,I will test my backups this weekend and obvously return and give you the points
ASKER
I found just making BEadmin a member of the domain Backup Operator group, was not enough to let me restart Backup Exec Job Engine service.....what I did was make BEadmin a member of the local Administrators group and Backup Operator group on both our backup servers and also left it as a member of Backup Operators group in AD...now all the Backup Exec services are running on both our servers and test backups appear to be working fine.....is that what you would expect?
My apologies. You're right. I must be having a bad week. You would need the Domain Admin group to backup Active Directory, but in order to backup the System State, you would also need the Backup Operators group. The Local Admin group is usually only needed for the Remote Windows Agents.
ASKER
I am testing out backing up an AD server, EXCHANGE server and our Blackberry server. I will report back in how it goes, looks ok so far...are u saying you would expect our AD server backup to fail?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
well I just got 2 AD backups done....I will not quarrel with success! thanks...
I do not suppose you know how to get rid of this do you?
"It is recommended that you rerun the Intelligent Disaster Recovery Preparation Wizard and select "Copy - Disaster recovery information (.dr) files" option, to back up your disaster recovery information (.dr) file."
Would you like me to open up another case so you will get more points?
I do not suppose you know how to get rid of this do you?
"It is recommended that you rerun the Intelligent Disaster Recovery Preparation Wizard and select "Copy - Disaster recovery information (.dr) files" option, to back up your disaster recovery information (.dr) file."
Would you like me to open up another case so you will get more points?
No that's fine and thank you for asking.
You just need to run the Wizard under tools / wizards. You will need your O/S CD to do this though.
You just need to run the Wizard under tools / wizards. You will need your O/S CD to do this though.