cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Veritas.com
Support

What happened to TECH136148

Go to solution
King_Julien
Level 5

‎03-15-2013 06:16 AM

Hi 

Does anybody knows what happened to the following technote: 

 

How to define/grant the required user rights/permissions for a Backup Exec Service Account ( BESA )

http://www.symantec.com/business/support/index?page=content&id=TECH136148

 

Or at least, if some of you had a PDF copy of that, could you send it to me by PM? 

 

I need that one so I can forward to our new sys admin! (Yes , i know!) 

 

Thanks in advance! 

0 Kudos
1 ACCEPTED SOLUTION

Accepted Solutions

Go to solution
SuperBrain
Moderator
Moderator
Employee Accredited

‎03-18-2013 06:15 AM

 

Hi King_Julien,

Due to some reason, that technote seems to have been taken offline.

However, the account designated for Backup Exec services, whether it is a new account or an existing user account, will require the following rights:
  • Act as part of the operating system [ a.k.a. TcbPrivilege ]
  • Backup files and directories (provides rights to backup files and directories) [ a.k.a. BackupPrivilege ] .
  • Create a token object (which can be used to access any local resources)    [ a.k.a. TokenRightPrivilege].
  • Log on as a batch job (allows a user to be logged on by means of a batch-queue facility)  [ a.k.a. BatchLogonRight ].
  • Log on as a service  [ a.k.a. ServiceLogonRight ].
  • Manage auditing and security log [ a.k.a. AuditPrivilege ].
  • Restore files and directories (provides rights to restore files and directories  [ a.k.a. RestorePrivilege ].
  • Take ownership of files and other objects [ a.k.a TakeOwnershipPrivilege ].
For more information on any of the above User Rights Assignment please refer to : http://technet.microsoft.com/en-us/library/cc780182(WS.10).aspx.

Note: Due to security implementations in Microsoft Small Business Server, the service account must be "Administrator".
 
The Backup Exec Support Tool can test the Backup Exec Service Account permissions and group memberships for you.
 
Click here to download the tool:
 

 

View solution in original post

0 Kudos
1 REPLY 1

Go to solution
SuperBrain
Moderator
Moderator
Employee Accredited

‎03-18-2013 06:15 AM

 

Hi King_Julien,

Due to some reason, that technote seems to have been taken offline.

However, the account designated for Backup Exec services, whether it is a new account or an existing user account, will require the following rights:
  • Act as part of the operating system [ a.k.a. TcbPrivilege ]
  • Backup files and directories (provides rights to backup files and directories) [ a.k.a. BackupPrivilege ] .
  • Create a token object (which can be used to access any local resources)    [ a.k.a. TokenRightPrivilege].
  • Log on as a batch job (allows a user to be logged on by means of a batch-queue facility)  [ a.k.a. BatchLogonRight ].
  • Log on as a service  [ a.k.a. ServiceLogonRight ].
  • Manage auditing and security log [ a.k.a. AuditPrivilege ].
  • Restore files and directories (provides rights to restore files and directories  [ a.k.a. RestorePrivilege ].
  • Take ownership of files and other objects [ a.k.a TakeOwnershipPrivilege ].
For more information on any of the above User Rights Assignment please refer to : http://technet.microsoft.com/en-us/library/cc780182(WS.10).aspx.

Note: Due to security implementations in Microsoft Small Business Server, the service account must be "Administrator".
 
The Backup Exec Support Tool can test the Backup Exec Service Account permissions and group memberships for you.
 
Click here to download the tool:
 

 

0 Kudos