Forum Discussion

F2Andy's avatar
F2Andy
Level 3
10 years ago

User permissions for remote console

We have Backup Exec running on a Windows 2011 SBS server. Another employee usually swaps the drives, and I want him to be able to do limited trouble-shooting. To that end I have set up the console on his PC, so he can connect to the backup agent on the server and see what the job status is. However, to connect, the console requires a username and password (as well as the server name).

I can connect successfully using the admin account, but I do not want to give him the admin password, so I want to modify his user account so he can connect with that (or create a new account for this purpose).

So here is my question: What permissions does this user account need to be able to connect to the backup agent?

2014
Backup and Recovery
Backup Exec
Best Practice
Windows Server (2003-2008)
  • F2Andy's avatar
    F2Andy
    10 years ago

    I eventually found this out.

    The user needs to be a member of the Backup Operators group, which has to be done through Active Directory, not the SBS console.

17 Replies

Sort By
  • CraigV's avatar
    CraigV
    Moderator
    10 years ago

    Hi Andy,

     

    read my article on this...might assist you...







    https://www-secure.symantec.com/connect/articles/backing-databases-and-files-same-tape-separate-jobs-using-backup-exec

    Thanks!
  • F2Andy's avatar
    F2Andy
    Level 3
    10 years ago

    As far as I can see that is about the permissions the backup agent itself needs to do backups. I am talking about something different - connecting to the agent from a remote console.

  • VJware's avatar
    VJware
    Level 6
    10 years ago

    I guess Craig inserted the incorrect link. Have a look @ this link authored by him as well - http://www.symantec.com/connect/articles/how-leverage-backup-execs-remote-console

  • F2Andy's avatar
    F2Andy
    Level 3
    10 years ago

    Ah, yes, that derscribes what I want. Unfortunately it just glosses over the detail I am looking for with "First off, a service account was created in Active Directory which had the necessary rights." What are the necessary rights?!?

  • pkh's avatar
    pkh
    Moderator
    10 years ago
    It might be easier to use the notification section of the job to send him the job status via email
  • CraigV's avatar
    CraigV
    Moderator
    10 years ago

    ...standard user account with NO AD admin rights.

    Thanks!

  • CraigV's avatar
    CraigV
    Moderator
    10 years ago

    Thanks very much for clearing up VJware...that was the link I was supposed to have posted!

    Thanks!

  • F2Andy's avatar
    F2Andy
    Level 3
    10 years ago

    Just tried that and it does not work, the credentials are refused.

  • F2Andy's avatar
    F2Andy
    Level 3
    10 years ago

    I had already done that, but I want him to have some control, eg to be able to cancel a backup if necessary.

  • pkh's avatar
    pkh
    Moderator
    10 years ago
    In that case, he will need more authority than a ordinary user. However, since BE is never designed for role-based authorization. You will probably need to give him a lot more authority than you would like