RE: Backup Exec v10 can't access mailboxes

Hello Nick,

Following these instructions should solve your problem of backing up
mailboxes via MAPI at the brick-level.

1) Create a service account
Did you create a backup services account with domain admin rights? If not,
create this first in Active Directory. You do not want to use the SYSTEM or
administrator account, as the SYSTEM account may not have all the proper
rights/permissions over the network and the administrator accounts password
is subject to change. As a suggestion lets call the service account
"backupexec". Make sure the backupexec account has a strong password and
"Password Never Expires" is checked. This account should be mail enabled and
added to the Domain Admin's group.

2) Configure Veritas to use the service account
In Backup Exec, go to the "Tools" menu and click "Backup Exec Services."
Click the "Service Credentials..." button. Click "Change service account
information" and enter the account logon name you created, select the domain
name, enter and confirm the password. If you desire you can configure the
startup options, but these should be set to automatic by default. Backup Exec
should add the appropriate rights automatically, such as "logon as a
service." Stop and start all services then close the Services Manager window.

3) Configure Veritas to use a logon/resources account
Select the "Network Menu" and click "Logon Accounts..." This account should
be your YOURDOMAIN\administrator account as this is most likely the account
you will use to manage backup exec. Make sure it is set as the "System
Account."

4) Modify mailbox access permissions for Exchange organization and services
Start regedit and navigate to this path:
HKEY_CURRENT_USER\Software\Microsoft\Exchange\EXAdmin
Create a new DWORD value named "ShowSecurityPage"(without quotes) under the
"EXAdmin" key and give it a value of 1.
Open the Exchange System Manager. In the left pane Right-click the very top
object, this should be your Exchange Organization, and select "Properties".
Click the "Security" tab. Click the "Advanced" button. Delete any DENY
entries under the "Permissions" tab. Now add the "backupexec" account created
in Step 1 with "Full Control."

*** With Exchange 2003 one other DENY entry may need to be deleted if you
have certain accounts added to the "Exchange Domain Servers" group. As you
are using SBS I reccoment you delete this. Open "Active Directory Sites and
Services" console from "Administrative Tools." Follow this path:
Services\Microsoft Exchange\YOUR-ORG-NAME\Administrative
Groups\YOUR-ADMIN-GROUP\Servers
Right-click the "Servers" folder and select "Properties." Click the
"Security" tab. Click the "Advanced" button. Delete any DENY entries under
the "Permissions" tab.

*** You should memorize that installing an Exchange service pack,
adding/modifying Exchange components, or installing additional exchange
servers will most like add some of these DENY entries back in, thus goofing
up your access to backing up at the brick level in the future. You will have
to remove the DENY entries to restore functionality.

5) Restart and good luck!


"Nick Hill" wrote:

> Hi
>
> SBS2003 Premium, Backup Exec v10
>
> I've been getting some backup errors which seem to be due to the system
> account not having rights to read the Exchange mailboxes or Sharepoint. Has
> anyone else had this issue?
>
> Regards
> Nick
>
>
>
.