Running the Windows agent as local system account on Hyper-V and SQL server and granting account read/write permissions for SMB shares

SUMMARY

Provides instructions for running the Unitrends Windows agent as local system account on a Hyper-V or SQL server and grant it read/write permissions for SMB shares

ISSUE

Purpose

To provide instructions for running the Unitrends Windows agent as local system account on a Hyper-V or SQL server and grant it read/write permissions for SMB shares.

Description

To protect Hyper-V VMs and SQL databases with disk storage located on SMB 3.0 shares, you must run the Unitrends Windows agent as local system account on the Hyper-V or SQL server and grant it read/write permissions for SMB shares.  Use the instructions described below.  For details on protecting VMs and databases with storage located on SMB 3.0 shares, see Protecting Hyper-V virtual machines and SQL Server databases with storage located on SMB 3.0 shares in the Unitrends Recovery-Series and UEB Administrator’s Guide.

To run the agent as local system account on the Hyper-V or SQL server and grant local system account read/write permissions for the SMB shares

1. Add LOCAL SYSTEM  account to the 'Backup Operators' domain builtin group on the domain controller server.

2. Add each Hyper-V or SQL Server system name to the 'Backup Operators' domain builtin group on the domain controller server.  For failover clusters, make sure you add each node in the cluster.

3. To edit the domain 'Backup Operators' group, run the 'Active Directory Users and Computers' administrative app on the domain controller.

4. On each server hosting an SMB 3.0 share, repeat steps 1 through 3 for the local server 'Backup Operators' group.

   a. Run the 'Computer Management' application

   b. Select 'Local Users and Groups.'

   c. Select Groups.  'Backups Operators' should be shown as a local group.

5. On the servers hosting the SMB 3.0 shares, give the 'Backup Operators' group 'full control' permissions.

    a. Run the 'Server Manager' application.

    b.  From the 'Dashboard' screen, select 'File and Storage Services.'

    c.  Select 'Shares.'

    d.  Right click the desired share and select 'Properties.'

    e.  Select 'Permissions,' then 'Custom Permissions.'

    f.  Add the local 'Backup Operators' group with 'Full Control' permission.

    g.  Press OK and save the changes.

   a. Run the 'Computer Management' application

   b. Select 'Local Users and Groups.'

   c. Select Groups.  'Administrators' should be shown as a local group.