Local Admin rights on a Domain Controller

Hello,

I have a question regarding user permissions to take backups of Domain controllers. I followed the forum post Account permissions needed for protecting machine? and that works great for non DC servers. But now I need to get the DC connected with the NON domain Admin account. On DC's there is no local administrators group, and I do not want to give this account domain admin privileges. What permissions do I need to have to allow a full backup and will allow exporting of the VMs.

0 Luciano.Guerra over 2 years ago

Hello Eric,

When protecting an Agent, local admin or domain admin rights are required. As a backup software, Rapid Recovery needs access to Windows features such as the VSS writers with admin rights.

For a Domain controller, domain admin rights are needed. Perhaps creating a service account for the protection of the DC works for you.

If the DC is a virtual machine, the credentials used for agentless protection are the ones for the Hypervisor. You can find more about agentless protection in the KBs below:

Protecting multiple machines on a VMware vCenter/ESX(i) virtual host using Agentless Protection (180507)

Protecting Hyper-V Guests using Agentless Protection with Rapid Recovery (217413)

Please let me know if you have any inquiries.
Cancel
Up 0 Down

Reply

Verify Answer

Reject Answer

Cancel