PowerProtect Data Manager 19.11 Microsoft Exchange Server User Guide

Creating a non-administrative domain account for creating Microsoft Exchange Server backup users

You can create Microsoft Exchange Server backup users with a non-administrative Windows account if it is configured with the required privileges.

1. Create a new domain user.
   Once created, the user is listed in the Active Directory Users and Computers window.
2. Open the user Properties window, and in the Members Of tab, ensure that the user is added to the following user groups:

   User right	Description
   Remote Desktop Users	Allows the user to remotely connect to a domain controller.
   Account Operators	Allows the user to create domain user accounts.

   The user is also a member of the Domain Users group by default.
3. Open the Group Policy Management Editor window, and under Windows Settings > Security Settings > Local Policies > User Rights Assignment, grant the user the following rights:

   User right	Description
   Allow log on locally	Allows the user to log on to all domain controllers in the domain.
   Allow log on through Remote Desktop Services	Allows the user to log on to all domain controllers in the domain through Remote Desktop Services.
   Account Operators	Allows the user to create domain user accounts.

4. To apply the changes, log out of the domain controller.