Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ for Microsoft Exchange Server Administrator's Guide
  3. Configuring the account for NetBackup Exchange operations
  4. Creating a privileged NetBackup user account for EWS access
Veritas NetBackup™ for Microsoft Exchange Server Administrator's Guide

Creating a privileged NetBackup user account for EWS access

This procedure provides an example of how to create a privileged account for NetBackup Exchange operations for EWS access. This account is used for the Exchange credentials in the Exchange client host properties, enabling NetBackup to perform operations with Granular Recovery Technology (GRT).

Note the following:

  • Configure each Exchange mailbox server.

  • Configure each client that performs granular operations. To determine which clients to configure, see the following topic:

    See Exchange granular clients and non-VMware backups .

    See Exchange granular clients and VMware backups.

  • In a cluster environment, perform the steps on each database node in the cluster. For an Exchange DAG, perform the steps on each database node in the DAG.

To create a privileged NetBackup user account for EWS access

  1. In the Exchange Management Console, create a new Exchange mailbox for NetBackup.

    This process creates a new user that is automatically a domain user.

  2. Double-click on the user account you created.
  3. Select the Member Of tab.
  4. Click Add and add this user to the Organization Management group.
  5. Provide the credentials for this account in the Exchange client host properties.

    See About the Exchange credentials in the client host properties.

    Veritas recommends that you configure the Exchange credentials in the Exchange client host properties. However, existing NetBackup customers can continue to configure the logon account for the NetBackup Client Service.

  6. Configure this account with the right to "Replace a process level token."

    If you configure the NetBackup Client Service with a logon account and configure the Exchange credentials in the Exchange client host properties, you must configure the "Replace a process level token" for both users.

More Information

About configuring the account for NetBackup Exchange operations with the right to Replace a process level token

Feedback

Was this page helpful?
Previous

About NetBackup and Microsoft Exchange Web Services

Next

Creating a minimal NetBackup account for Exchange operations

Feedback

Was this page helpful?