Configuring the NetBackup services for SQL Server backups and restores
For SQL Server intelligent policies, NetBackup uses the NetBackup Client Service and the NetBackup Legacy Network Service to access the SQL Server when it performs backups and restores.
Note the following requirements for the NetBackup services logon account:
The account has the fixed server role "sysadmin". You can use a domain account, a member of BUILTIN\Administrators, or another account that has this role.
(non-VMware backups) If you want to use Local System for the logon account, apply the SQL Server sysadmin role manually to the NT AUTHORITY\SYSTEM or the BUILTIN\Administrators group.
(VMware backups) You must use an account other the Local System account as the logon account. Both services must use the same logon account.
(VMware backups) If you choose to truncate logs, ensure that the account that runs the Microsoft SQL Server Service has full permissions for the NetBackup Legacy Network Service
tempdirectory.This directory is
C:\Users\user\AppData\Local\Temp. User is the account that runs the NetBackup Legacy Network Service.To use a gMSA account for backups and restores, you must create a credential with the option .
For VMware backups with Replication Director, the account has access to the CIFS shares on the NetApp disk array.
To configure the NetBackup services for SQL Server backups and restores
- Log on to the Windows host with the account that has the SQL Server sysadmin role and any necessary local security privileges.
- If the SQL Server host and instance use standard or mixed security, perform the following steps:
Open the NetBackup MS SQL Client.
Select File > Set SQL Server connection properties.
Provide the SQL Server Userid and Password, click Apply > Close.
- In the Windows Services application, open the NetBackup Client Service.
Configure the account as follows:
(non-VMware backups) Confirm that Local System account or a SQL Server administrator account is configured.
If you use the setting Use credentials that are defined locally on the client for instance credentials, both services must use the same logon account. If you use the setting Use these specific credentials for instance credentials, the services can use the same logon or separate logon accounts.
(VMware backups) Provide the name of the logon account and click OK.
The account must include the domain name, followed by the user account, domain_name\account. For example, recovery\netbackup.
- Open the NetBackup Legacy Network Service.
Configure the account as follows:
(non-VMware backups) Confirm that Local System account or a SQL Server administrator account is configured.
If you use the setting Use credentials that are defined locally on the client for instance credentials, both services must use the same logon account. If you use the setting Use these specific credentials for instance credentials, the services can use the same logon or separate logon accounts.
(VMware backups) Provide the name of the logon account and click OK.
Configure the same logon account for this service as you did for the NetBackup Client Service.
- If you selected a different logon account, restart the services.
- If you selected the option Use these specific credentials for instance or for replica credentials, an account other than Local System requires certain local security privileges.
- For virtual environments, configure the services on the necessary services.
For VMware backups, configure the services for each host that you use to browse for backups and perform restores.
For a SQL Server cluster, configure the services on each node in the cluster.
For availability groups, configure the services on all replicas in the availability group where you want to run backups.