Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section IX. Administering NetBackup
  4. Management topics
  5. Configuring the NetBackup Client Service
Veritas NetBackup™ Administrator's Guide, Volume I

Configuring the NetBackup Client Service

By default, the NetBackup Client Service is configured on Windows with the Local System account. The Local System account lacks sufficient rights to perform certain backup and restore operations.

For example, for NetBackup to access CIFS volumes, the account must be changed from Local System to an account with access to the CIFS share.

To change the NetBackup Client Service logon account on a Windows computer:

  • Open the Windows Services application.

  • To change the logon account, stop the NetBackup Client Service.

  • Open the properties for the NetBackup Client Service.

  • Provide the name and password of the account that has the necessary permissions. For example, change the logon to that of Administrator.

  • Restart the service.

If the logon property is not changed for the NetBackup Client Service, the policy validation fails with status code 4206.

Situations in which the NetBackup Client Service logon account requires changing

The following list contains situations in which the NetBackup Client Service logon account needs to be changed:

  • To access CIFS storage for a storage unit.

  • To use UNC paths, the network drives must be available to the service account that the NetBackup Client Service logs into at startup. You must change this account on each Windows client that is backed up that contains data that is shared with another computer.

  • During a snapshot: To have read access to the share for backup purposes and write access during restores.

    The account must be for a domain user that is allowed to access and write to the share. To verify the account, log on as that user and try to access the UNC path. For example: \\server_name\share_name.

  • For database agents and options, configure the service with a logon account that has the necessary permission or privileges. See the documentation for your agent or option for more information.

  • For the database agents that support VMware backups on a NetApp disk array, configure the logon account to one that has access to the disk array.

Feedback

Was this page helpful?
Previous

Management topics

Next

Units of measure used with NetBackup

Feedback

Was this page helpful?