Symantec NetBackup 7.5.0.6 Exchange and AD GRT backup issue

[sriramrane]

Hi Friends,

We have configured the Exchange & AD GRT backup in NetBackup 7.5.0.6 and we haev provided all requried permissions to the user but still GRT backups are failing with status code 1.  Appreciate if you can help here. I have listed all the permission which we have provided to the user. 

Since the Local Policies are locked out by a Group Policy, the permissions been added in Group Policy Management Console at the domain controller.

• Account must be part of Domain Administrator
• Act as part of the operating system  
• Backup files and directories
• Create a token object
• Log on as a batch job
• Log on as a service 
• Manage auditing and security log
• Restore files and directories
• Take ownership of files and other objects
• The account must be an Exchange Organization Management (Exchange 2010) at the top level of Exchange. 
• The account must have an active mailbox on the Exchange Server. 
• The account must have received an e-mail via the mailbox. 
• The account must have sent an e-mail via the mailbox. 
• The account must be visible to the Global Address List, not hidden.
• Member of Built in Administrators Group in Active Directory.
• Member of Backup Operators in Active Directory.
• Member of Organization Management in RBAC (Role Based Access Control).
• Member of EWS Impersonation Role in Exchange
• Netbackup Service account used for Backup and Restore of Exchange 2010 has a unique and active mailbox associated with it. ·        
• Make sure that EWS (Exchange Web Service) is functioning properly.
• Backup Service Account is a member of the Local Administrator's group on the Exchange Server)

NFS Server is enabled on Master/Media Server and the NFS Client Service is running on all the clients. 

I am not sure, if still the NetBackup Service Account need to be Member of Domain User as this account is already part of Domain Admin. Please suggest do this service account explicitly need to have the Domain User privileges. 

I have attached the Job Status Logs for both AD and Exchange.

NetBackup Master / Media Server - 7.5.0.6 Windows 2008 R2

Active Directory - Windows 2008 R2 

Exchange - 2010 DAG 

Thanks

Rane

[SymTerry]

Hello

For the AD GRT, we require the Netbackup Client services (to incluide Legacy client/network) to run as a Domain Admin. 

[sriramrane]

Hi,

Both the below listed services on the NetBackup Client are running with Domain Admin Account. 

NetBackup Client Service

NetBackup Legacy Client Service

[inn_kam]

https://www-secure.symantec.com/connect/forums/exchange-snapshot-takes-2-hours

[Mark_Solutions]

You need the Legacy Network Service to run using that account too and it should be a member of the local administrators group on the servers

[sriramrane]

All three services are running on Domain Admin Account with all the additonal privileges and permissions required. 

For GRT Backup on Active Directory - It has added in BuiltIn\Administrator group and for Exchange Servers Added in Local Administrator Group.

Still we have a same issue of GRT backup completing with Status Code 1 and [WIN32 1314] Code.