Hi all,
The customer refuses to use the domain admin account for the NetBackup Client Service logon for internal security stuff.
Can anyone inform us what are the exact privileges and roles needed of an account that we create and we use it for the NetBackup Client Service logon in place of the domain admin in order to backup a dag exchange and to do granular recovery.
Thank you very much in advance.
Hi Riadh_R17
From the deep pits of my mind I recall these tech notes:
https://www.veritas.com/support/en_US/article.100011017
https://www.veritas.com/support/en_US/article.100027103
Best Regards
Nicolai
First, run the NetBackup Client Service as LocalSystem. That changed in NetBackup 7.6. Everyone stop telling customers to run it as the domain admin.
Second, we have documented the "minimal Exchange user" in the NetBackup for Exchange admin guide since 7.5.
Whether you use the minimal user or a more privileged one, you configure the credentials for this account in the client host properties for every Exchange server in your DAG.
The minimal user has one restriction. You can only use the active database copy option in your policy. This is a limitation in the Microsoft Active Directory API (ADSI). It won't enumerate the passive database copies unless we are running as a member of Organization Management. Domain Admins are members of Organization Management.
