Veritas-bu

[Veritas-bu] Security Question.

2003-06-17 11:19:42
Subject: [Veritas-bu] Security Question.
From: Keath.Marx AT Anthem DOT com (Marx, Keath)
Date: Tue, 17 Jun 2003 11:19:42 -0400
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C334E3.50B8E160
Content-Type: text/plain

We run Netbackup on a Win2k master with Win2k server & workstation and NT4
server & workstation clients.  We backup Active Directory Controllers,
Exchange 2000 and Exchange 5.5.  All have had proven restores from Netbackup
at disaster recovery sites.

NONE of them are running using domain accounts.  All of our Netbackup
services (client and master) are running as local system, INCLUDING the
exchange and Active Directory clients.  

Now, we do NOT do mailbox level exchange backups.  We do use the exchange
database client.  We have been running this for quite some time.  Veritas
support had us switch to local system when we were having an issue late last
year.

Of course your mileage may vary.

Keath Marx
SELC
Anthem Southeast
804 354-3282
keath.marx AT anthem DOT com

                This message, including files attached to it, may contain
confidential information that is intended only for the use of the
ADDRESSEE(S) named above. If you are not an intended recipient, you are
hereby notified that any dissemination or copying of the information
contained in this message, or the taking of any action in reliance upon the
information, is strictly prohibited. If you have received this message in
error, please notify the sender immediately and delete the message from your
system. Thank you. 


                -----Original Message-----
                From: veritas-bu-admin AT mailman.eng.auburn DOT edu@AICI On 
Behalf
Of "Yosifovski, Tammy" <Tammy.Yosifovski AT usfc DOT com>
                Sent: Tuesday, June 17, 2003 10:43 AM
                To: 'veritas-bu AT mailman.eng.auburn DOT edu'
                Subject: [Veritas-bu] Security Question.


                Can anyone assist with the following questions?
                 
                        What level of local/global security does the
NetBackup DataCenter 4.5.3 account really need on the client?
                        What about multiple domains? 

                 
                Currently we have a global group with our NetBackup account
as a member.  We then put the global group in the local admin group on every
NT/2000 machine.  This allows us to backup, restore and troubleshoot
everything.  The local service is then owned by this account.  
                 
                        Has anyone tested a lower security level on each
client other than admin rights?  If so what worked?
                        Does this security level change with additional
agents?  IE Exchange, SQL, Oracle, Informix. 
                        Does this vary per Master Server OS?    We have
Solaris 8 and Windows 2000.  

                 
                Your knowledge is appreciated.  
                 
                Tammy.  

------_=_NextPart_001_01C334E3.50B8E160
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3DUS-ASCII">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2656.13">
<TITLE>RE: [Veritas-bu] Security Question.</TITLE>
</HEAD>
<BODY>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">We run =
Netbackup on a Win2k master with Win2k</FONT><FONT COLOR=3D"#000080" =
SIZE=3D2 FACE=3D"Arial"> server &amp; workstation and</FONT> <FONT =
COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">NT4 server</FONT><FONT =
COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial"> &amp;</FONT><FONT =
COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial"> workstation</FONT><FONT =
COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial"> clients.&nbsp; We backup =
Active Directory Controllers, Exchange 2000 and Exchange 5.5.&nbsp; All =
have had proven restores from Netbackup at disaster recovery =
sites.</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">NONE of =
them are running using domain accounts.&nbsp; All of our</FONT> <FONT =
COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">Netbackup</FONT><FONT =
COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial"> services (client and master) =
are running as local system</FONT><FONT COLOR=3D"#000080" SIZE=3D2 =
FACE=3D"Arial">, INCLUDING the exchange and Active Directory =
clients.&nbsp; </FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">Now, we =
do NOT do mailbox level exchange backups.&nbsp; We do use the exchange =
database client.&nbsp; We have been running this for quite some =
time.&nbsp; Veritas support had us switch to local system when we were =
having an issue late last year.</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">Of =
course your mileage may vary.</FONT></P>

<P ALIGN=3DLEFT><A NAME=3D"_MailAutoSig"><FONT COLOR=3D"#000080" =
SIZE=3D2 FACE=3D"Arial">Keath Marx</FONT></A></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 =
FACE=3D"Arial">SELC</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">Anthem =
Southeast</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 FACE=3D"Arial">804 =
354-3282</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D2 =
FACE=3D"Arial">keath.marx AT anthem DOT com</FONT></P>
<UL><UL>
<P ALIGN=3DLEFT><FONT COLOR=3D"#000080" SIZE=3D1 FACE=3D"Comic Sans =
MS">This message, including files attached to it, may contain =
confidential information that is intended only for the use of the =
ADDRESSEE(S) named above. If you are not an intended recipient, you are =
hereby notified that any dissemination or copying of the information =
contained in this message, or the taking of any action in reliance upon =
the information, is strictly prohibited. If you have received this =
message in error, please notify the sender immediately and delete the =
message from your system. Thank you.</FONT><FONT COLOR=3D"#000080" =
SIZE=3D2 FACE=3D"Arial"></FONT> </P>
</UL></UL>
<P ALIGN=3DLEFT></P>
<UL><UL>
<P ALIGN=3DLEFT><FONT SIZE=3D2 FACE=3D"Tahoma">-----Original =
Message-----<BR>
</FONT><B></B><B><FONT SIZE=3D2 FACE=3D"Tahoma">From:</FONT></B><FONT =
SIZE=3D2 FACE=3D"Tahoma"> =
veritas-bu-admin AT mailman.eng.auburn DOT edu@AICI</FONT><B></B><B> <FONT =
SIZE=3D2 FACE=3D"Tahoma">On Behalf Of</FONT></B> <FONT SIZE=3D2 =
FACE=3D"Tahoma">&quot;Yosifovski, Tammy&quot; =
&lt;Tammy.Yosifovski AT usfc DOT com&gt;<BR>
</FONT><B></B><B><FONT SIZE=3D2 FACE=3D"Tahoma">Sent:</FONT></B><FONT =
SIZE=3D2 FACE=3D"Tahoma"> Tuesday, June 17, 2003 10:43 AM<BR>
</FONT><B></B><B><FONT SIZE=3D2 FACE=3D"Tahoma">To:</FONT></B><FONT =
SIZE=3D2 FACE=3D"Tahoma"> 'veritas-bu AT mailman.eng.auburn DOT edu'<BR>
</FONT><B></B><B><FONT SIZE=3D2 =
FACE=3D"Tahoma">Subject:</FONT></B><FONT SIZE=3D2 FACE=3D"Tahoma"> =
[Veritas-bu] Security Question.</FONT></P>
<BR>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms Rmn">Can =
anyone assist with the following questions?</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms =
Rmn">&nbsp;</FONT></P>
<UL>
<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms Rmn">What =
level of local/global security does the NetBackup DataCenter 4.5.3 =
account really need on the client?</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms Rmn">What =
about multiple domains? </FONT></P>
</UL>
<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms =
Rmn">&nbsp;</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms =
Rmn">Currently we have a global group with our NetBackup account as a =
member.&nbsp; We then put the global group in the local admin group on =
every NT/2000 machine.&nbsp; This allows us to backup, restore and =
troubleshoot everything.&nbsp; The local service is then owned by this =
account.&nbsp; </FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms =
Rmn">&nbsp;</FONT></P>
<UL>
<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms Rmn">Has =
anyone tested a lower security level on each client other than admin =
rights?&nbsp; If so what worked?</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms Rmn">Does =
this security level change with additional agents?&nbsp; IE Exchange, =
SQL, Oracle, Informix. </FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms Rmn">Does =
this vary per Master Server OS?&nbsp;&nbsp;&nbsp; We have Solaris 8 and =
Windows 2000.&nbsp; </FONT></P>
</UL>
<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms =
Rmn">&nbsp;</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms Rmn">Your =
knowledge is appreciated.&nbsp; </FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms =
Rmn">&nbsp;</FONT></P>

<P ALIGN=3DLEFT><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Tms =
Rmn">Tammy.&nbsp; </FONT></P>
</UL></UL>
</BODY>
</HTML>
------_=_NextPart_001_01C334E3.50B8E160--

<Prev in Thread] Current Thread [Next in Thread>