Changing Windows security

You can set up Windows security with the Backup Exec service account to protect your data.

Depending on how the Windows network is configured, change security properties for the following scenarios:

Servers in one domain.
Servers and selected workstations in one domain.
Servers in more than one domain.
Servers and workstations in more than one domain.

The following procedures give the Backup Exec service account administrative rights in the appropriate domains and workstations. You must grant the Backup Exec service account administrative rights to give Backup Exec access to the administrative shares (for example, C$) and the ability to protect the Windows registry.

Use the Active Directory Users and Computers tool and Domain and Trusts tool in the Active Directory administrative tools group to change Windows security properties.

To back up servers (only) in one domain

When prompted for a user name in the Service Account window, add the name of an existing or new Service Account (for example, Administrator) as a member of the local Administrators group for the Domain. It is highly recommended that you also enter a password.

To back up servers and selected workstations in one domain

Add the name of an existing or new Service Account (for example, Administrator) as a member of the Global Domain Admins group.
Ensure that on each workstation in the domain you want to back up, the Global Domain Admins group is a member of the workstation's local Administrators group.

To back up servers in more than one domain

Establish a One Way Trust Relationship between the Host Domain (the domain in which the media server resides) and the Target Domains (the domains that are to be backed up).
Do the following in the order listed:
- In the Host Domain, permit the Target Domains to trust the Host Domain.
- In each Target Domain, trust the Host Domain.
In each Target Domain, add the Host Domain's name of an existing or new Service Account (for example, Administrator) in the local Administrators group.

To back up servers and workstations in more than one domain

Establish a One Way Trust Relationship between the Host and Target Domains.
Do the following in the order listed:
- In the Host Domain, permit the Target Domains to trust the Host Domain.
- In each Target Domain, trust the Host Domain.
In each Target Domain, add the Host Domain's name of an existing or new Service Account (for example, Administrator) in the Local Administrators group.
On each workstation to back up, add the Host Domain's name of an existing or new Service Account (for example, Administrator) in the Local Administrators group.