I can reply to the first question.....at least in the manner in how I did this.
Bring up The Backup Exec console... click Network .... Logon Accounts.
I already had an account in my NDS tree with an ID of AdminBU ( I gave this account privileges to do backups).
Click on 'New'
In the User Name Area type in the fully qualified user name (IE .AdminBU.accounting.Novell) ...NOTE: I did not need to put in OU before accounting or O before Novell.
Then I just put in this accounts' password and confirmed it.... I gave the account a Name of 'NetWare Backup Login'
Now, here are where your personal preferences come in...
I personally did not make this a restricted account because I wanted anyone who might access the backup exec program with there own restricted account the ability to backup any NetWare resources...The big security loophole here is someone redirecting a restore with this account.
Now, if you are doing primarily NetWare backups with this media server you can click "This is my default account' ...This helps when you create a backup or restore job by using these credenti
als whenever you create a job (BKUP-EXEC will assume that it should try this credentials when clicking on NetWare resources such as NDS, GroupWise, Volumes, etc)..... Otherwise when you create a backup or restore job will probably be asked to choose an account from an "account logon selection" pop-up window to identify this account as the one needed to authenticate to the NetWare server(s).
As to the second question... I do not know
I hope this helps