Windows Admin Rights

[H_Sharma]

Hello Experts,

We have a very weird situation out Admin rights on our windows 2008 R2  Master servers i.e 7.6 are being revoked by the management and we were

told to run netbackup with oridinary rights lets say power users by the management. We tested it in windows but we could not open netbackup

console and many commands are not  being exucuted lets say Robtest and below. So is there so that we can manage our whole netbackup

operations without the Windows Admin rights?

We could not run commands as well.

C:\Program Files\Veritas\Volmgr\bin>tpconfig

Access to perform the operation was denied

C:\Program Files\Veritas\Volmgr\bin>tpconfig -l

Access to perform the operation was denied

C:\Program Files\Veritas\Volmgr\bin>robtest

Must be administrator to run robtest

[revarooo · Accepted solution]

Netbackup MUST have admin rights to work. You could configure NBAC for non-admin users to run commands.

[Marianne]

I agree. Requirement for Local Admin rights is clearly documented in NBU Installation Guide. Please note that the requirement is for Local Admin rights on the backup server. No need for Domain Admin rights.

[Will_Restore]

Having a tough time finding reference in the documention.  Finally found this in the Admin Guide

The NetBackup-Java application server authenticates the user name and password
by using standard Windows authentication capabilities for the specified computer.
If NetBackup Access Control is not configured for the users, by default the
NetBackup-Java application server provides authorization data. The authorization
data allows all users who are members of the local administrator group on the
NetBackup master server to use all of the NetBackup-Java applications. Other
users are allowed to access only Backup, Archive, and Restore.

[Will_Restore]

SharePoint backup has even more requirements

To perform backups and restores, NetBackup must know the user name and
password of the account for the SharePoint administrator. NetBackup also requires
this information so you can browse for SharePoint objects when you create a backup
policy. NetBackup validates the user name and password you provide.

This account must meet the following requirements:
■ It must have the following rights on the servers where the SharePoint components
are installed: Local administrative privileges, domain administrative privileges,
and site collection administration rights. The account must be a SharePoint farm
administrator account.