Forum Discussion

Cliffyb's avatar
Cliffyb
Level 3
13 years ago

Console Connection

Hi,

 

I have manage to install the management console for BE 2010 on an XP machine, but when I try and connect to the server using a normal user account I get the message that "Access is denied". If I give that user admin rights on the server, or domain admin rights, it works fine. Now, with earlier versions of Backup Exec, the users didn't need to have admin rights to check on backup jobs etc, and to be honest I am VERY reluctant to give them that level of access. Is there any way around this?

 

Thanks.

2010
Backing Up
Backup and Recovery
Backup Exec
Best Practice
Configuring
Managing Backup Devices
Monitoring
Tip-How to
  • CraigV's avatar
    CraigV
    13 years ago

    Nope, a domain group is not necessarily made an automatic member of a local group...its got nothing to do with what OS your DC is running.

    Glad you got it working, which means you can close this off now =)

  • Cliffyb's avatar
    Cliffyb
    Level 3
    13 years ago

    Hi,

     

    This refers to "The logon account for the Backup Exec Remote Admin Console fails to access the resources across domains", whereas this is in the same domain. I think that artical refers to an older version of BE as well as the screen shots and info within them are different.  

     

    Any other thoughts?

  • AmolB's avatar
    AmolB
    Moderator
    13 years ago

    Sorry for the above article, My bad frown

    Try adding the non admin account in the "Backup Operators" group

  • Cliffyb's avatar
    Cliffyb
    Level 3
    13 years ago

    Hi,

     

    The user is already in the Backup Operators group. I have found an article which gives me a list of rights the user needs to have (almost Admin by the look of it) to run the console. I will give it a go tomorrow.

    Thanks for your replies.

  • AmolB's avatar
    AmolB
    Moderator
    13 years ago

    Hope the list you found includes the below policies.

     

    • Act as a part of Operating System ( Only for windows server 2000 )
    • Create a token object
    • Log on as a service
    • Logon as a batch job
    • Manage auditing and security log
    • Backup files and directories
    • Restore files and directories
  • ArulPrasad's avatar
    ArulPrasad
    Level 6
    13 years ago

    Create logon account for the user who tries to login to the console and check

  • CraigV's avatar
    CraigV
    Moderator
    13 years ago

    Hi Cliffy,

     

    You might want to read the article I wrote below on how to use the BE Remote Console. I've implemtned this to allow site reps to check their backup servers without needing admin rights...

     

    https://www-secure.symantec.com/connect/articles/how-leverage-backup-execs-remote-console

     

    THanks!

  • Cliffyb's avatar
    Cliffyb
    Level 3
    13 years ago

    Hi,

    I created a new backup account and by using the "local security policy" editor, assigned it the following rights -

  • Create a token object

  • Log on as a service

  • Logon as a batch job

  • Manage auditing and security log

  • Backup files and directories

  • Restore files and directories 

  •  

  • I had already installed the console on a client PC, and used the backup account to try and log on. UnfortunatelyI got the same "Access is denied" message.

  •  

  • Anything else I can try?

  •  

  • Thanks for your help so far!

  •  

  •  

  •  

  •  

  • Cliffyb's avatar
    Cliffyb
    Level 3
    13 years ago

    Just a checking, is it OK to run the BE services on the server with the Administrator account, and connect from the console on a remote machine using a different account, with the rights listed in the TECH70860 article? 

     

    Thanks.