Exchange Agent How to: Configuration requirements to backup Exchange 2007 and to perform Exchange GRT (Granular Recovery Technology) backups with Backup Exec for Windows Servers (BEWS)
--------------------------------------------------------------------------------
Details:
In Exchange 2003, the following security roles were available through the Delegation Wizard in Exchange System Manager:
Exchange Full Administrator
Exchange Administrator
Exchange View Only Administrator
Exchange 2007 has the following predefined groups that manage Exchange configuration data:
Exchange Organization Administrators
Exchange Recipient Administrators
Exchange View-Only Administrators
Exchange Server Administrators
The following tasks should be performed in order to connect to and back up the Exchange 2007 Information Store Databases using Backup Exec:
If the Exchange server is not locally installed on the Backup Exec media server, confirm the following:
The Backup Exec Remote Agent for Windows Servers is installed on the Exchange 2007 server.
The Microsoft Exchange 2007 Management Tools are installed on the Backup Exec media server.
32 bit - http://www.microsoft.com/downloads/details.aspx?familyid=6be38633-7248-4532-929b-76e9c677e802&displaylang=en
64 bit - To download the 64-bit version of the management tools, use the same media or download that is used to install Exchange 2007
Confirm that the Microsoft Exchange Server MAPI Client and Collaboration Data Objects are installed on the Exchange 2007 Server.
http://www.microsoft.com/downloads/details.aspx?FamilyID=e17e7f31-079a-43a9-bff2-0a110307611e&DisplayLang=en
Ensure the Backup Exec "Logon Account" (System Logon Account by default at Network > Logon Account in the Backup Exec Interface) being used to backup Exchange is:
A member of Domain Administrators
Is an explicit member of the Local Administrators group of the Exchange 2007 server (implied membership via Domain Admins for example may not be sufficient)
For further details on creating a new account with the proper permissions, refer to the following instructions:
1. Go to Active Directory Users and Computers and go to the Users directory. Right-click on the Administrator account and select copy (Figure 1) and create an account for BACKUP EXEC.
Figure 1
2. Go to Network, Logon Accounts within the Backup Exec console. Click New... and enter the details of the account created in #1.
Figure 2
3. Open the Exchange Management Console.
4. In the Exchange Management Console, select Organization Configuration. (Figure 3)
Figure 3
5. Right click on Organization Configuration and select Add Exchange Administrator. (Figure 4)
Figure 4
6. On the Add Exchange Administrator page, click Browse and select the user that you want to delegate control to.
7. Select the Exchange Server Administrator Role radial button. (Figure 5)
Figure 5
8. Click Add and under Select the server(s) to which this role has access select the servers to which to delegate control.(Figure 6)
Figure 6
9. Click OK. Click Add.
10. On the Completion page verify that the delegation was successful and click Finish.
11. Define the jobs in Backup Exec by using the Resource Credentials pane to use the newly created "Logon Account".
Note: The requirements listed above only pertain to the basic configuration required to connect to and backup the Exchange 2007 Information Store databases, storage groups, etc... for the purpose of restoring these items in their entirety. To fully utilize the functionality of Exchange 2007 and prior GRT (Granular Recovery Technology) backups and restores, the following must be configured/confirmed:
The Exchange Administrator Account Backup Exec uses to attach to the Exchange Server must have a uniquely named mailbox within the Exchange organization that is not disabled or hidden from the Global Address List. For more information on this, review the following document:
How to confirm that an Exchange mailbox name is unique within the Exchange organization when configuring Backup Exec to backup mailboxes or if a GRT (Granular Restore Technology) based backup does not display individual mailboxes for restore http://support.veritas.com/docs/256537
How to remove the "Hidden" attribute from Exchange 2000 and Exchange 2003 mailboxes so that the mailboxes will be available to the Global Address List for backup purposes
http://support.veritas.com/docs/243328
Exchange 2007 and Outlook 2007 can not be installed on the same Windows 2003 Server.
For GRT Backups to tape, mailbox users must reside in the same domain as the Exchange Server. For more information, review the following:
Exchange Granular Recovery Technology (GRT) backup to tape does not display the mailboxes in the restore selections for users that reside in a domain other than the Exchange server(s) domain. http://support.veritas.com/docs/295627
For GRT Backups to disk (B2D), the Backup to Disk Test Tool - B2Dtest.exe should be run on the target disk first to ensure the basic file level functionality requirements are met. For more information, review and download the following:
Information regarding the Backup Exec Backup to Disk Test Tool - B2Dtest.exe
http://support.veritas.com/docs/321584
Note: If any of the above requirements cannot be confirmed, configured, etc... and there are any job failures or other issues, it is recommended to run at least one full test backup of Exchange with the Granular Recovery Option deselected prior to running another GRT Backup or opening a case with Symantec Technical Support.