PowerProtect Data Manager 19.11 Microsoft Exchange Server User Guide

Configure users with the App Agent Exchange Admin Configuration tool

In order to protect a stand-alone Microsoft Exchange Server or Microsoft Exchange Server database availability group (DAG) with the Microsoft application agent you must configure an account with the required privileges.

The App Agent Exchange Admin Configuration tool simplifies configuring security group memberships by ensuring that users have all the required Active Directory security group memberships and PowerShell management roles.

The App Agent Exchange Admin Configuration tool enables you to create or reset account permissions with the necessary privileges to perform backup and recovery operations on an Microsoft Exchange Server. After installing the Microsoft application agent, use the tool to create an account, or to modify, validate, and update existing account privileges.

To use the App Agent Exchange Admin Configuration tool, you must be logged in with domain administrator permissions. You can use an existing non-administrative user to run the App Agent Exchange Admin Configuration tool only if you select Skip Active Directory Authentication and configure the user on each Microsoft Exchange Server node. This option skips the Active Directory authentication and authorization operations for the user, and only sets the user as the Microsoft Exchange Server application agent user account in the registry for backup and recovery operations.

The Microsoft application agent uses the user account that is set in the registry by the App Agent Exchange Admin Configuration tool to perform backups and database or granular-level recovery.

To create a Microsoft Exchange Server application agent administrator account, the App Agent Exchange Admin Configuration tool performs the following steps:

• Creates an Active Directory user account.
• Creates a custom Microsoft Exchange Server security group, which is EMC App Agent Exchange Admin Roles.
• Adds the user account to the groups that are listed in the following table.

  Table 1. Permissions that the Exchange Admin Configuration tool configures

  User group	Microsoft Exchange Server role
  Security group membership on the application agent client computer	Local Administrator
  Security group membership on Domain Controller	Domain User
  Exchange Security Group membership	EMC App Agent Exchange Admin Roles, which include: Database Copies Databases Mailbox Import Export View-Only Configuration