Exchange mailbox backup

[#1]

My setup:

MS Windows SBS 2003 Standard R2
Symantec Backup Exec 11d for SBS Standard
Dell PowerEdge 2900 with LTO-2 tape drive

Installed Backup Exec, created an account called "backupexec"

Backup Exec's diagnostics shows:

Net Group Memberships for Backup Exec service account MTS\backupexec

Domain Admins
Domain Users

MTS\backupexec is a member of the following groups:
MTS\Domain Users
Everyone
BUILTIN\Users
BUILTIN\Administrators
BUILTIN\Remote Desktop Users
NT AUTHORITY\SERVICE
NT AUTHORITY\Authenticated Users
NT AUTHORITY\This Organization
LOCAL

MTS\backupexec has the following privileges:
Create a token object
Bypass traverse checking
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Adjust memory quotas for a process
Remove computer from docking station
Perform volume maintenance tasks
Impersonate a client after authentication
Create global objects
Enable computer and user accounts to be trusted for delegation
Add workstations to domain

MTS\backupexec is used for running the Backup Exec services and as as the logon account used to access resources to backup

File system backup works fine
Exchange Information Store backup works fine (if I set the job not to to use the IS backup to restore individual items)

If I try and do a backup which involves restoring individual items, either using the "legacy" method of a separate backup, or by using the new 11d way, it fails

The only way it works is if MTS\administrator is made the default logon account in Backup Exec

Using mts\administrator (not as default logon account) does not work

Does anyone have any ideas?

We are using the same way at another site (SBS 2003 Standard R2, BE 11d SBS Standard, set up in the same way) and the domainname\backupexec account works fine

Any help appreciated

Thanks

Samir Patel

[Russ_Perry]

Has the backupexec account been delegated full control within Exchange System Mgr? For regular IS backups with the GRT function enabled or legacy mailbox backups, the MAPI subsystem is used to go through the mailboxes and Exchange rights are required for this. At the top (domain) level from within Exch Sys Mgr, right click and select 'Delegate control...'. Go through and add the backupexec account with the Exchange Full Administrator Role.

Russ

[#3]

Thanks Russ, but that doesn't help

FYI, mts\administrator is an Exchange Full Administrator and that user account only works for a mailbox (new or legacy) backup if set as the default from the"Network | Logon accounts..." menu

mts\backupexec can't do the mailbox backup at all! IS backup works though

Additional info:

Windows, SBS & Exchange are all fully patched

Backup Exec is also fully patched

Regards

Samir

[Derek_Hill]

I am having the same problem, the only account that is backed up is the mailbox of the backup exec service account, the other accounts don't even get accesses (looking at the last access time in System Manager).

We are running Exchange 2003 Enterprise on Windows Server 2003 Standard R2, with a fully patched Backup Exec 11d install. The Media server is also our Exchange server, just for some reason the other mailboxes don't get touched or backed up.

I already have a case open with Symantec, but as of now no success.

Any insight is appreciated.

Regards,

Derek

[#5]

Thanks

We're now reconfiguring all our 11d installations to use the legacy mailbox backup rather than trusting the new way... seen too many horror stories of not being able to restore with the new one

Samir

[Philip_Pearson]

Does backup exec account have a amilbox?

When you log onto a workstation as the backup exec user, can you open other peoples mailboxes with full access?

[#7]

No, didn't have a mailbox

Created a mailbox for it, it can now select the mailboxes in the selection list

Looks like it's working now, if slowly

Should've spotted that before

Thanks