IBM DS6000, DS8000 The Backup Exec Service Account

Exchange 2003 VSS Backup Solution
For IBM Storage DS8000/DS6000
And Symantec Backup Exec 11d
Page 53 David West, David Hartman
©Copyright IBM Corp. 2007
• (Recommended) A mouse.
• (Optional for pager notification) Modem supported by Microsoft
Windows.
• (Optional for printer notification) Printer supported by Microsoft
Windows.
Storage hardware
• Backup Exec requires at least one storage media drive or single-drive
robotic library and the appropriate controller card.
• You can also use removable storage devices and non-removable hard
drives. Refer to the Backup Exec hardware compatibility list for a
complete list of supported devices:
http://support.veritas.com/docs/282249.
The Backup Exec Service Account
All Backup Exec services on the media server run in the context of a user
account configured for the Backup Exec system services. You can create this
account prior to the Backup Exec installation, or you can use an existing user
account. To create a service account for Backup Exec during installation,
enter the name and password of an Administrator account for the Backup
Exec services to use. A separate dedicated service account for Backup Exec
is recommended.
Use a Domain Administrators account, or an equivalent account that is part of
the Domain Admins group. The account should also be assigned Exchange
Administrator rights, which are set within the Exchange System Manager.
The account that you designate for Backup Exec services, whether it is a new
account or an existing user account, is assigned the following rights:
• Authenticate as any user and gain access to resources under any user
identity.
• Create a token object, which can then be used to access any local
resources.
• Log on as a service.
• Administrative rights (provides complete and unrestricted rights to the
computer).
• Backup operator rights (provides rights to restore files and directories).
• Manage auditing and security log.