Computer Associates BABWBR1151S38 Implementation Guide - Page 207

How CA ARCserve Backup Manages Authentication, How to Use the System Account for Job Security

Page 207 highlights

CA ARCserve Backup System Account How CA ARCserve Backup Manages Authentication CA ARCserve Backup uses Windows and third-party security to establish secure connections when performing various storage-related functions. For instance, if a job backs up a remote server, the security entered for that job must meet the Windows security criteria to access the remote server. The security context under which the jobs are run varies depending on the resource being accessed. The security required to back up the local CA ARCserve Backup server may be different from the security required when backing up a domain resource. CA ARCserve Backup also interacts with third-party security such as Microsoft SQL, Oracle, and Lotus Notes. For more information, see the various option and agent guides on the CA ARCserve Backup installation disk or you can download the guides from the CA support website. How to Use the System Account for Job Security Typically, when you implement CA ARCserve Backup you give the CA ARCserve Backup System Account the following rights and use it as the main backup account: ■ Group Rights: Administrators, Backup Operators, Domain Admins ■ Advanced Rights: Act as part of operating system, Log on locally, Log on as a service These security rights are only a reference and are not necessarily applicable to all scenarios. Important! You should not use the CA ARCserve Backup System Account for job security for all of your backup and restore operations. However, you can enable this capability by granting rights to the CA ARCserve Backup System Account that exceed the local administrator and backup operator. Chapter 7: Configuring CA ARCserve Backup 207

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359

CA ARCserve Backup System Account
Chapter 7: Configuring CA ARCserve Backup
207
How CA ARCserve Backup Manages Authentication
CA ARCserve Backup uses Windows and third-party security to establish secure
connections when performing various storage-related functions. For instance, if a job
backs up a remote server, the security entered for that job must meet the Windows
security criteria to access the remote server.
The security context under which the jobs are run varies depending on the resource
being accessed. The security required to back up the local CA ARCserve Backup server
may be different from the security required when backing up a domain resource.
CA ARCserve Backup also interacts with third-party security such as Microsoft SQL,
Oracle, and Lotus Notes. For more information, see the various option and agent guides
on the CA ARCserve Backup installation disk or you can download the guides from the
CA support website.
How to Use the System Account for Job Security
Typically, when you implement CA ARCserve Backup you give the CA ARCserve Backup
System Account the following rights and use it as the main backup account:
Group Rights: Administrators, Backup Operators, Domain Admins
Advanced Rights: Act as part of operating system, Log on locally, Log on as a service
These security rights are only a reference and are not necessarily applicable to all
scenarios.
Important!
You should not use the CA ARCserve Backup System Account for job security
for all of your backup and restore operations. However, you can enable this capability by
granting rights to the CA ARCserve Backup System Account that exceed the local
administrator and backup operator.