• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1159
  • Last Modified:

Application Impersonation Exchange 2010

Hello,

Can anyone advise on how to configure an account with for Application Impersonation in Exchange 2010 using GUI..

I will need to use the user account both for Backup Exec and GFI MailArchiver

Thanks,
0
fais79
Asked:
fais79
  • 2
1 Solution
 
Exchange_GeekCommented:
Here are the rights for Backup Exec

Backup Exec 2010 requires the following rights to protect Exchange data:

1. For non-GRT backups (database only with no granular restore functionality) the logon account specified must be a member of the local Backup Operators group on the Exchange server
2. For database only restores (database only with no granular restore functionality) the logon account specified must be a member of the local Administrators group on the Exchange server
3. For GRT (Granular Restore Technology) enabled backups to disk (where the disk device is local to the BE Media Server and in the same domain) the logon account specified must be a member of the local Administrators group on the Exchange server
4. For GRT backups to a tape device and ALL GRT restore operations, from tape or disk, the logon account specified must be a member of the local Administrators group on the Exchange server. In addition, the logon account must have a unique mailbox and the mailbox can NOT be hidden from the Global Address List. For Exchange 2003 the account must also be granted the Exchange Administrator, or Exchange Full Administrator role. On Exchange 2007 and 2010 servers the account must be granted the Exchange Organization Administrator role. Finally, for Exchange 2010 the account must also have the Administrator role on the AD Domain for AD access as part of the GRT operations.

Best Practice(for ease of use): Make the account in Backup Exec for Exchange backup and restore operations a member of the Domain Admins group and grant that account the Exchange Full Administrator or Exchange Organization Administrator role (as is appropriate for the version of Exchange). Also make sure the account has a unique mailbox visible in the GAL and can send and receive mail.

Ref: link

If you still have issues, feel free to ask.

Regards,
Exchange_Geek
0
 
fais79Author Commented:
Being a financial institution security is very tight in out infra therefore, we cant just make an account member of domain admin...

Anyways I found the solution.. This is what I was looking for:
http://fma0408.blogspot.co.uk/2012/08/configure-application-impersonation-in.html?m=1
0
 
fais79Author Commented:
I asked for a GUI solution and in the end found it myself via google
0
 
Stephen YorkCommented:
The BLOG is gone - if you happen to still have it, could you share what you found here please?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now