Avamar Hyper-V: Create and Configure a User Account with or without Using Domain Admin Privileges

1. Create a domain user for the Avamar Hyper-V backup and recoveries with the following permissions:
   1. Local Administrator (Local Machine permission in all nodes)
   2. WinRMRemoteWMIUsers (Local Machine permission in all nodes)
   3. Backup Operator (Local Machine permission in all nodes)
   4. Domain Administrator (Active Directory permission)
2. Once done, open the windows command prompt cmd as Administrator in all nodes, and perform the following command:

gpupdate /force

Option 2: Using a user account without domain admin rights (alternative option):

1. Create a domain user for the Avamar Hyper-V backup and recoveries with the following elevated permissions
2. Add the following Active Directory Security Groups to the newly created domain user:
   1. Domain Users
   2. Group Policy Creator Owners
   3. Hyper-V Administrators
   4. Remote Desktop Users
   5. Users
   6. Windows Authorization Access Group
3. On each cluster node of the Hyper-V CSV environment, login and add the newly created domain user account to the local nodes:
   1. Administrators Group
   2. Backup Operators Group
   3. Hyper-V Administrators Group
   4. Remote Desktop Users Group
   5. WinRMRemoteWMIUsers Group (For Hyper-V 2016 environments, this group name is "Remote Management Users" instead)
4. On each cluster node, open PowerShell and perform the following command:

PS C:\Users\...> Grant-ClusterAccess -User domain\username -Full
Example => PS C:\Users\bradmin> Grant-ClusterAccess -User avemc\bradmin -Full 

5. Once done open the windows command prompt "cmd" as Administrator in all nodes, and perform the following command:

gpupdate /force

​​​​After having followed either of the two procedures above, the Avamar Services must be configured to run with the newly created user account:

1. On each proxy node, open the Services management window (Services.msc)
   1. Right-click Avamar Plug-in Service for Windows and select Properties.
   2. Click the Log On tab and in Logon select This Account radio button and give the newly created user credentials in the form of domain and username and corresponding password.
   3. Click the General tab and Start the service.
   4. Repeat the same steps for the Backup Agent service.

• This information is also mentioned in more detail in the Dell Avamar for Hyper-V User Guide version 19.10, or for any other version, see the Avamar Product Support page. 
• If the user rights are not correct, see article: Avamar: Hyper-V backups fail with Access Denied errors (Login required)