Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Upgrade Guide
  3. Planning for an upgrade
  4. General upgrade information
  5. Creating the user account to support the NetBackup web server
NetBackup™ Upgrade Guide

Creating the user account to support the NetBackup web server

The NetBackup primary server includes a configured web server to support critical backup operations. This web server operates under user account elements with limited privileges. These user account elements must be available on each primary server (or each node of a clustered primary server).

You can use numerous procedures to create users and groups in operating systems. Some specific approaches are shown but other methods may accomplish the same goal. The home directory path, user name, and group names are not hard-coded, and can be changed. The default local user name is nbwebsvc, and the default local group name is nbwebgrp.

Note:

For Linux platforms, the UID must be the same for each local account in a clustered environment. Be sure that the local accounts are defined consistently on all cluster nodes.

To create the user account and the user group on Linux

  1. Create the local group with the command shown:

    Command: # groupadd group_name

    Example: # groupadd nbwebgrp

  2. Create the local user account with the command shown:

    Command: # useradd -g group_name -c comment -d /usr/openv/wmc user_name

    Example: # useradd -g nbwebgrp -c 'NetBackup Web Services application account' -d /usr/openv/wmc nbwebsvc

To create the user account and the user group on Windows

Note:

You must use domain accounts in clustered environments on Windows.

Note:

Web service user account names are limited to 20 characters.

  1. Create the local user account with the command shown:

    Command: C:\>net user user_name StrongPassword /add (where StrongPassword is a strong password to associate with the account)

    Example: C:\>net user nbwebsvc 1U*s7lQ# /add

  2. Create the local group with the command shown:

    Command: C:\>net localgroup group_name /add

    Example: C:\>net localgroup nbwebgrp /add

  3. Make the new user a member of the new group with the command shown:

    Command: C:\>net localgroup group_name user_name /add

    Example: C:\>net localgroup nbwebgrp nbwebsvc /add

  4. Grant the Log On As a Service right to the new user as follows:
    • Go to Control Panel > Administrative Tools > Local Security Policy.

    • Under Security Settings, click Local Policies and then User Rights Assignment.

    • Right-click on Log on as a service and select Properties.

    • Add the local user.

    • Save your changes and close the Log on as a service properties dialog.

Installation of the NetBackup primary server fails if any of these requirements are not met. On Windows, you are asked to provide the password for the user account as part of the installation process.

Feedback

Was this page helpful?
Previous

Starting NetBackup daemons and services as non-administrative user

Next

Upgrade NetBackup Snapshot Manager before primary and media servers

Feedback

Was this page helpful?