About configuring the account for NetBackup Exchange operations with the right to Replace a process level token
On each Exchange mailbox server you must assign the account for NetBackup Exchange operations the right to "Replace a process level token". This right is necessary to pass the impersonation token to the NetBackup process that performs Active Directory and PowerShell commands.
This procedure describes how to configure the Local Security Policy so that the account for NetBackup Exchange operations has the right to Replace a process level token.
To configure the account for NetBackup Exchange operations with the right to Replace a process level token (Local Security Policy)
- Open the Local Security Policy.
- Click Local Policies.
- In the User Rights Assignment, add the account for NetBackup Exchange operations to the Replace a process level token property.
- Run the group policy update command (group policy update) for this change to take effect:
gpupdate /Force
This procedure describes how to configure the policy on a domain controller so that the account for NetBackup Exchange operations has the right to "Replace a process level token".
To configure the account for NetBackup Exchange operations with the right to Replace a process level token (on a domain controller)
- Open the Group Policy Management.
- Under the domain, select Group Policy Objects > Default Domain Controllers Policy.
- Click the Settings tab.
- Expand Security Settings > Local Policies.
- Right-click on User Rights Assignment and click Edit.
- In the Group Policy Object Editor, expand Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies.
- In the User Rights Assignment, add the account for NetBackup Exchange operations to the Replace a process level token property.
- Run the group policy update command (group policy update) for this change to take effect:
gpupdate /Force