Veritas-bu

[Veritas-bu] Client Installation Questions

2006-04-21 10:34:25
Subject: [Veritas-bu] Client Installation Questions
From: simon.weaver AT astrium.eads DOT net (WEAVER, Simon)
Date: Fri, 21 Apr 2006 15:34:25 +0100
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C66550.B05B4B80
Content-Type: text/plain


I use Local System Account. all my client servers do not access Internet and
are all locked down with access controls.
I have never, in all my time of using NBU wanted to change this method of
services running under an alternative account.
 
My opinion only :-)

Regards

Simon Weaver
3rd Line Technical Support
Windows Domain Administrator 

EADS Astrium Limited, B32AA IM (DCS)
Anchorage Road, Portsmouth, PO3 5PU

Email:  <mailto:Simon.Weaver AT Astrium-eads DOT net> Simon.Weaver AT 
Astrium-eads DOT net

-----Original Message-----
From: Conner, Mike [mailto:MConner AT imb DOT org] 
Sent: 21 April 2006 15:26
To: veritas-bu AT mailman.eng.auburn DOT edu
Subject: [Veritas-bu] Client Installation Questions



Hi everyone, we have NBU 5.1 MP4 on a windows platform.  I have a couple
questions for you...

We script out the installation of NetBackup to not require any user
interaction. We currently have installation documentation that states that
we should run the NetBackup service under administrative credentials,
therefore requiring us to use a specific domain account. We are wondering
what the best practice is here? Seeing as the default installation setting
sets up the service to run as "Local System." We would like to simply use
the "Local System" account. If however, it is best practice to specify an
administrative account, can we include that information in our MSI
installation script? I do not see where to do so. We do not have an advanced
packaging environment to create custom MST's, knowing that we could probably
use such a method to install the client service using whatever account we
wish. We also know we can go behind our installation with a VBS to change
service login information. However, this does not provide that specific
account "Log on as service" rights in the Local Security policy. We do not
currently control this setting using a GPO. 

 

One more question: In our installation script, we are using the
%computername% variable to specify the computer's name in the client
software. This however, provides the NetBIOS name. Is there a way, or
variable, to automatically provide the machine's Fully Qualified Domain
Name?

 



This email is for the intended addressee only.
If you have received it in error then you must not use, retain, disseminate or 
otherwise deal with it.
Please notify the sender by return email.
The views of the author may not necessarily constitute the views of EADS 
Astrium Limited.
Nothing in this email shall bind EADS Astrium Limited in any contract or 
obligation.

EADS Astrium Limited, Registered in England and Wales No. 2449259
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, England
------_=_NextPart_001_01C66550.B05B4B80
Content-Type: text/html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<TITLE>Message</TITLE>

<META content="MSHTML 6.00.2900.2802" name=GENERATOR>
<STYLE>@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; }
P.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
        COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
        COLOR: blue; TEXT-DECORATION: underline
}
P {
        FONT-SIZE: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; FONT-FAMILY: 
"Times New Roman"
}
SPAN.EmailStyle20 {
        COLOR: navy; FONT-FAMILY: Arial
}
DIV.Section1 {
        page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-US vLink=blue link=blue>
<DIV><SPAN class=175323314-21042006><FONT face=Arial 
color=#0000ff><STRONG><EM>I 
use Local System Account. all my client servers do not access Internet and are 
all locked down with access controls.</EM></STRONG></FONT></SPAN></DIV>
<DIV><SPAN class=175323314-21042006><STRONG><EM><FONT face=Arial 
color=#0000ff>I 
have never, in all my time of using NBU wanted to change this method of 
services 
running under an alternative account.</FONT></EM></STRONG></SPAN></DIV>
<DIV><SPAN class=175323314-21042006><STRONG><EM><FONT face=Arial 
color=#0000ff></FONT></EM></STRONG></SPAN>&nbsp;</DIV>
<DIV><SPAN class=175323314-21042006><STRONG><EM><FONT face=Arial 
color=#0000ff>My opinion only :-)</FONT></EM></STRONG></SPAN></DIV>
<P align=left><SPAN lang=en-gb><EM><FONT color=#3f6296><FONT size=2><FONT 
face=Arial><FONT 
color=#0000ff>Regards</FONT></FONT></FONT></FONT></EM></SPAN></P>
<P align=left><SPAN lang=en-gb><EM><FONT color=#3f6296><FONT size=2><FONT 
face=Arial><FONT color=#0000ff>Simon 
Weaver</FONT><BR></FONT></FONT></FONT><FONT 
face=Arial color=#0000a0 size=2><STRONG>3rd Line Technical Support<BR>Windows 
Domain Administrator</STRONG></FONT></EM><FONT face=Arial> </FONT></SPAN></P>
<P><SPAN lang=en-gb><I><FONT face=Arial color=#0000ff size=2>EADS Astrium 
Limited, B32AA IM (DCS)</FONT></I></SPAN><SPAN lang=en-gb><BR><FONT face=Arial 
color=#0000ff size=2><EM>Anchorage Road, Portsmouth, PO3 
5PU</EM></FONT></SPAN></P>
<P><SPAN lang=en-gb><FONT face=Arial color=#0000ff size=2><EM>Email: 
</EM></FONT><A href="mailto:Simon.Weaver AT Astrium-eads DOT net"><FONT 
face=Arial 
size=2><EM>Simon.Weaver AT Astrium-eads DOT net</EM></FONT></A></SPAN></P>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT 
  face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> Conner, Mike 
  [mailto:MConner AT imb DOT org] <BR><B>Sent:</B> 21 April 2006 
15:26<BR><B>To:</B> 
  veritas-bu AT mailman.eng.auburn DOT edu<BR><B>Subject:</B> [Veritas-bu] 
Client 
  Installation Questions<BR><BR></FONT></DIV>
  <DIV class=Section1>
  <BLOCKQUOTE style="MARGIN-TOP: 5pt; MARGIN-BOTTOM: 5pt; MARGIN-RIGHT: 0in">
    <P class=MsoNormal><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Hi everyone, we have NBU 5.1 
MP4 
    on a windows platform.&nbsp; I have a couple questions for 
    you...</SPAN></FONT></P>
    <P class=MsoNormal><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">We script out the installation 
    of NetBackup to not require any user interaction. We currently have 
    installation documentation that states that we should run the NetBackup 
    service under administrative credentials, therefore requiring us to use a 
    specific domain account. We are wondering what the best practice is here? 
    Seeing as the default installation setting sets up the service to run as 
    "Local System." We would like to simply use the "Local System" account. If 
    however, it is best practice to specify an administrative account, can we 
    include that information in our MSI installation script? I do not see where 
    to do so. We do not have an a</SPAN></FONT><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">dv</SPAN></FONT><FONT 
face=Arial 
    size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">anced packaging 
    environment to create custom MST's, knowing that we could probably use such 
    a method to install the client service using whatever account we wish. We 
    also know we can go behind our installation with a VBS to change service 
    login information. However, this does not provide that specific account 
"Log 
    on as service" rights in the Local Security policy. We do not currently 
    control this setting using a GPO. </SPAN></FONT></P>
    <P class=MsoNormal><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"></SPAN></FONT>&nbsp;</P>
    <P class=MsoNormal><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">One more question: In our 
    installation script, we are using the %computername% variable to specify 
the 
    computer's name in the client software. This however, provides the NetBIOS 
    name. Is there a way, or variable, to automatically provide the machine's 
    Fully Qualified Domain Name?</SPAN></FONT></P>
    <P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN 
    style="FONT-SIZE: 
12pt"></SPAN></FONT>&nbsp;</P></BLOCKQUOTE></DIV></BLOCKQUOTE></BODY></HTML>

<table><tr><td bgcolor=#ffffff><font color=#000000>This email is for the 
intended addressee only.<br>
If you have received it in error then you must not use, retain, disseminate or 
otherwise deal with it.<br>
Please notify the sender by return email.<br>
The views of the author may not necessarily constitute the views of EADS 
Astrium Limited.<br>
Nothing in this email shall bind EADS Astrium Limited in any contract or 
obligation.<br>
<br>
EADS Astrium Limited, Registered in England and Wales No. 2449259<br>
Registered Office: Gunnels Wood Road, Stevenage, Hertfordshire, SG1 2AS, 
England<br>
</font></td></tr></table>
------_=_NextPart_001_01C66550.B05B4B80--

<Prev in Thread] Current Thread [Next in Thread>