All Backup Exec services on the media server run in the context of a user account that is configured for the Backup Exec system services. You can create this account during the Backup Exec installation, or you can use an existing user account. To create a service account for Backup Exec during installation, enter the name and password of an Administrator account for the Backup Exec services to use.
See Changing service account information.
If this computer is in a domain, enter a Domain Administrators account, or an equivalent account that is part of the Domain Admins group. In the Domain list, select or enter the Domain name.
If this computer is in a workgroup, enter an Administrators account, or an equivalent account that is part of the Administrators group on the computer. In the Domain list, select or enter the computer name.
The account that you designate for Backup Exec services, whether it is a new account or an existing user account, is assigned the following rights:
-
Authenticate as any user and gain access to resources under any user identity.
-
Create a token object, which can then be used to access any local resources.
-
Administrative rights (provides complete and unrestricted rights to the computer).
-
Backup operator rights (provides rights to restore files and directories).
See Required user rights for backup jobs.
Due to security implementations in Microsoft Small Business Server, the service account must be Administrator.
You cannot install Backup Exec with an account that has a blank password on Windows Server 2003/2008 or XP computers unless Windows is configured to allow it. If you try to do so, the following error message appears when Backup Exec services are created:
The given password is not correct for account [server]\[username].
You can, however, configure Windows to allow for blank passwords. For more information, see your Windows documentation.