Hi Everyone
We are using BackupExec 2010 and BackupExec 2012 in our network.
The backup admin demands that he need the privileges of Domain Admin to take backups.
I have denied him saying that backups for Domain Controllers and Exchange Servers only need Doman Admin privileges
for which i will create one account and BE services for exchange servers and domain controllers will run from that account and i will have that password.
and for rest of all the members servers i will give his account local admin rights with the below GPO changes.
Act as a part of Operating System
Create a token object.
Log on as a service.
Logon as a batch job.
Manage auditing and security log.
Backup files and directories.
Restore files and directories.
Do Backup Administrator need privileges of Domain Admin to take backups for member servers?
Is my approach the right way.