Security Risks

13 Topics

ralus agent and root privileges
Hy, I do a ralus installation as root user. Then I create and add auser "backup" to beoper group. I use that user on media's job. My doubt is: Can I do that "backup" user can to stop and start beremote services (/etc/init.d/VRTSralus.init stop or start) For security the linux opertators don't usea root account, they must use an account which only can restart the backup agent service or access to backup agent folders, nothing else... Is it possible? Thanks.
eduzav
14 years ago Place Backup Exec
276Views
0likes
0Comments
Can't backup system state
Ok, next question... One of our servers, that happens to be a backup domain controller, we're using to run test backupswith thetrial version of 2010. The system logon account (which is same as system account right now)being used to backup this dc is a member of the domain admin group which in turn is a member of the administrators group. We have even tried with another domain admin account and get same results. Have followed the error link and tried solutions but no luck... ...andwe keep getting following errors on the test jobs: Error category : Security Errors Error : e000fe7d - Access is denied. To back up or restore System State, administrator privileges are required. For additional information regarding this error refer to link V-79-57344-65149 We have also turned on AOFO (thanks pkh). Thanks for helping, Klingonwork32
Solved
Klingonwork32
14 years ago Place Backup Exec
4.1KViews
1like
13Comments
Symantec Backup Exec
Is there a way to password protect this program. ie If someone tries to run the program a password is required?
Need_Info
14 years ago Place Backup Exec
587Views
0likes
3Comments
Backup Exec 2010 and SEP
Backing up a server we get the following errors: File is in use: \\server.domainname.net\C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo\e82a4ce0-2712-4701-a304-0d7f12568b5b.tmp File is in use :\\server.domainname.net\C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\log\client\8945a81b-a161-40d5-bb3a-8002d8ffa173.tmp File is in use: \\server.domainname.net\C:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.db File is in use: \\server.domainname.net\C:\Program Files\Symantec\Symantec Endpoint Protection Manager\db\sem5.log We're using trial version of Backup Exec and get this every time we hit test server(s). Excited about moving to BE, but wanna work bugs out first. Klingonwork
Solved
Klingonwork32
14 years ago Place Backup Exec
693Views
0likes
2Comments
Backup Exec 2010 on win2008 DC
Dear All, I'm newbie on BE, can you please show me: What account is recommended to set as logon account for the following service? and what account permission is used while backup and restore local/remote system data? BE Remote agent BE Device and media BE server service BE job engine service BE Agent browaser Second question, can I use BE with non admin account? If so how to grant permission for such account? Many questions :P Thanks your help.
Solved
trueno
14 years ago Place Backup Exec
609Views
0likes
3Comments
Privileges required on remote machine
Regarding BackupExec 12.5 running on Windows Server 2003 SP2: Please let me know if the following statement is always true. To successfully back up a remote machine, the service account that runs BackupExec must be a member of the remote machine's administrators group.
Solved
ttps
14 years ago Place Backup Exec
517Views
0likes
1Comment
cremental or deferential the snapshot processing take long time and the exchage stop sending or receiving mail
i have symantec backup exec 2010 installed on windows server 64bit... i used agent for exchage to backup my exchange server 2007 that installed in windowes server 2008 64bit.. i run full backup for my exchage server it run succufully without any poroblem BUT when run incremental or deferential the snapshot processing take long time and the exchage stop sending or receiving mail the exchage stop sending or receving mail when the incremental or deferential job start and begian "snapshot processing"
Ahmed_Mostafa_H
14 years ago Place Backup Exec
1.3KViews
0likes
6Comments
Evidence of copy of write protected LTO tape
If I have an LTO tape that has been written to and then write protected, is there a way to tell if that tape had been copied or viewed by looking at the tape? Is there any information that could possibly be written on the tape that would indicate this? My assumption is that nothing can be written to a 'write protected' tape.
Solved
RonA123
14 years ago Place Backup Exec
1.2KViews
0likes
6Comments
Se hace el backup pero no finaliza
Estimados tengo un problema con un backup, lo ejecuta pero nucna termina se queda por horas y horas y tengo que darle finalizar para que termine y sale el sgte. error Error category : Job ErrorsError : e0008821 - Job was recovered as a result of Backup Exec RPC service starting. No user action is required. For additional information regarding this error refer to link V-79-57344-34849
alneida
14 years ago Place Backup Exec
822Views
0likes
3Comments
Creation of Restricted User Account on Backup Exec 2010
Hi, From past two weeks we have been continously working with Symantec support and observerd that- If we try to create a restricted user account on Backup Exec that restriciteduser can edit and modify the job which has been created by another user. He even can modify the schedule timimgs of the job. So can anyone here suggest us the best practise for creating the restricted user account. Mean to say the user should not have the privilege of editing or modifying any current jobs which are running, He should be able to do only monitoring job. Thanks and Regards, Chetan Krishna
Chetan_Krishna
14 years ago Place Backup Exec
400Views
0likes
1Comment