Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Application Impersonation Exchange 2010

Posted on 2012-08-19
4
Medium Priority
?
1,145 Views
Last Modified: 2013-02-22
Hello,

Can anyone advise on how to configure an account with for Application Impersonation in Exchange 2010 using GUI..

I will need to use the user account both for Backup Exec and GFI MailArchiver

Thanks,
0
Comment
Question by:fais79
  • 2
4 Comments
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 38309811
Here are the rights for Backup Exec

Backup Exec 2010 requires the following rights to protect Exchange data:

1. For non-GRT backups (database only with no granular restore functionality) the logon account specified must be a member of the local Backup Operators group on the Exchange server
2. For database only restores (database only with no granular restore functionality) the logon account specified must be a member of the local Administrators group on the Exchange server
3. For GRT (Granular Restore Technology) enabled backups to disk (where the disk device is local to the BE Media Server and in the same domain) the logon account specified must be a member of the local Administrators group on the Exchange server
4. For GRT backups to a tape device and ALL GRT restore operations, from tape or disk, the logon account specified must be a member of the local Administrators group on the Exchange server. In addition, the logon account must have a unique mailbox and the mailbox can NOT be hidden from the Global Address List. For Exchange 2003 the account must also be granted the Exchange Administrator, or Exchange Full Administrator role. On Exchange 2007 and 2010 servers the account must be granted the Exchange Organization Administrator role. Finally, for Exchange 2010 the account must also have the Administrator role on the AD Domain for AD access as part of the GRT operations.

Best Practice(for ease of use): Make the account in Backup Exec for Exchange backup and restore operations a member of the Domain Admins group and grant that account the Exchange Full Administrator or Exchange Organization Administrator role (as is appropriate for the version of Exchange). Also make sure the account has a unique mailbox visible in the GAL and can send and receive mail.

Ref: link

If you still have issues, feel free to ask.

Regards,
Exchange_Geek
0
 

Accepted Solution

by:
fais79 earned 0 total points
ID: 38310174
Being a financial institution security is very tight in out infra therefore, we cant just make an account member of domain admin...

Anyways I found the solution.. This is what I was looking for:
http://fma0408.blogspot.co.uk/2012/08/configure-application-impersonation-in.html?m=1
0
 

Author Closing Comment

by:fais79
ID: 38358524
I asked for a GUI solution and in the end found it myself via google
0
 
LVL 1

Expert Comment

by:Stephen York
ID: 38917940
The BLOG is gone - if you happen to still have it, could you share what you found here please?
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I will demonstrate that how to do a PST migration from Exchange Server to Office 365. This method allows importing one single PST, or multiple PST's at once.
Upgrading from older Exchange server to the latest Exchange server can be tiresome, error-prone and risky, without being a seasoned exchange server administrators. It can become even problematic if you're an organization that runs on tight timeline…
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question