• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 918
  • Last Modified:

does BEadmin need to be a domain admin in Backup Exec 12.5?

Our BEADMIN account is a member of DOMAIN ADMIN and too many people, including former employees know the password. I know I could methodically change the password in services on the backup servers, but I was wondering if this even needs to be a domain admin. It would be a lot easier to just take away the authority, instead of changing the password each time staff changes...anyone that knows the minimum authority required for this account, please let me know...thanks
0
Thor2923
Asked:
Thor2923
  • 7
  • 5
1 Solution
 
jzaniewskiCommented:
The account needs to be a "backup administrator" to work properly, so it wouldn't need to be a domain admin.  Also, you can change the credentials from within backup exec by clicking on the "Gear" icon on the bottom of the backup exec console screen without having to manually do it in AD and in services.
0
 
Thor2923Author Commented:
thank for the info...I will try that
0
 
Thor2923Author Commented:
I see a "backup operator" group AD but not a "Backup Adminitrator" is that what you meant?
0
Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

 
Thor2923Author Commented:
I do not see a grear icon either in Backup Exec 12.5....is there a certain view I need to turn on?
0
 
jzaniewskiCommented:
Sorry, I meant "Backup Operator".  I attached a PDF screenshot of the icon I was referring to. I use 2010, but I believe it's the same in 12.5.

 Doc1.pdf
0
 
Thor2923Author Commented:
ok thanks,I will test my backups this weekend and obvously return and give you the points
0
 
Thor2923Author Commented:
I found just making BEadmin a member of the domain Backup Operator group, was not enough to let me restart Backup Exec Job Engine service.....what I did was make BEadmin a member of the local Administrators group and Backup Operator group on both our backup servers and also left it as a member of Backup Operators group in AD...now all the Backup Exec services are running on both our servers and test backups appear to be working fine.....is that what you would expect?
0
 
jzaniewskiCommented:
My apologies. You're right. I must be having a bad week. You would need the Domain Admin group to backup Active Directory, but in order to backup the System State, you would also need the Backup Operators group. The Local Admin group is usually only needed for the Remote Windows Agents.
0
 
Thor2923Author Commented:
I am testing out backing up an AD server, EXCHANGE server and our Blackberry server. I will report back in how it goes, looks ok so far...are u saying you would expect our AD server backup to fail?
0
 
jzaniewskiCommented:
In my experience, the Local Admin group is usually not a member of the Domain Admin's group unless you made if that way, so backing up AD may fail if you don't have administrative access to the entire domain.
0
 
Thor2923Author Commented:
well I just got 2 AD backups done....I will not quarrel with success! thanks...
I do not suppose you know how to get rid of this do you?

"It is recommended that you rerun the Intelligent Disaster Recovery Preparation Wizard and select "Copy - Disaster recovery information (.dr) files" option, to back up your disaster recovery information (.dr) file."

Would you like me to open up another case so you will get more points?
0
 
jzaniewskiCommented:
No that's fine and thank you for asking.

You just need to run the Wizard under tools / wizards.  You will need your O/S CD to do this though.
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

  • 7
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now