Configuration requirements to backup or restore Exchange and to perform Exchange GRT (Granular Recovery Technology) backups or restores

Problem

Configuration requirements to backup or restore Exchange and to perform Exchange GRT (Granular Recovery Technology) backups or restores

Cause

The account used to backup and restore the Exchange server does not meet the required credentials.  

Solution

Basic requirements in order to connect to and back up the Exchange Information Store Databases using Backup Exec

When Exchange is installed to a separate server than Backup Exec, the following is required:

• The Backup Exec Remote Agent for Windows Servers is installed on the Exchange server(s).
• The Microsoft Exchange Management Tools are installed on the Backup Exec media server. The Backup Exec Media Server must have the same version of the Management Tools that is currently installed on the Exchange Server. This can be achieved by performing a custom installation of the Exchange Service Packs.

Logon requirements in order to connect to and back up the Exchange Information Store Databases using Backup Exec

Ensure the Backup Exec "Logon Account" (System Logon Account by default at Network > Logon Account in the Backup Exec console) being used to backup Exchange is:

• an explicit member of the Local Administrators group of the Exchange server (implied membership via Domain Admin group may not be sufficient, unless Exchange server is also a Domain Controller).
• Exchange Organization Administrator role within Exchange.
• BE logon account should be setup using domain credentials (e.g. Domain\Username)

Additional info about Exchange specific rights see:
https://www.veritas.com/support/en_US/article.100026696

• Go to Active Directory Users and Computers and go to the Users directory. Right-click on the Administrator account and select copy (Figure 1) and create an account for BACKUP EXEC.

  Figure 1
  

• Go to Network, Logon Accounts within the Backup Exec console. Click New... and enter the details of the account created in #1.

• Figure 2

• 

• Open the Exchange Management Console.

• In the Exchange Management Console, select Organization Configuration. (Figure 3)

  Figure 3
  

• Right click on Organization Configuration and select Add Exchange Administrator. (Figure 4)

  Figure 4
  

• On the Add Exchange Administrator page, click Browse and select the user that you want to delegate control to.

• Select the Exchange Organization Administrator Role radial button.

• Click OK. Click Add.

• On the Completion page verify that the delegation was successful and click Finish.

Additional requirements to utilize the functionality of GRT (Granular Restore Technology) to backup or restore Exchange 

• Define the jobs in Backup Exec by using the Resource Credentials pane to use the newly created "Logon Account".
  1. Microsoft Exchange Server MAPI Client and Collaboration Data Objects (MAPI/CDO) must be installed on the Exchange Server only.
      
• The Exchange Administrator Account Backup Exec used to attach to the Exchange Server must have the following:

   

  • A uniquely named mailbox within the Exchange organization that is getting backed up
  • The first five characters of that mailbox name must be unique within the Exchange organization.
  • The mailbox for that account cannot be disabled or hidden from the Global Address List
  • This mailbox must also have sent and received mail to and from it.

• For GRT Backups to tape, mailbox users must reside in the same domain as the Exchange Server. For more information, review the following:
  • Exchange Granular Recovery Technology (GRT) backup to tape does not display the mailboxes in the restore selections for users that reside in a domain other than the Exchange server(s) domain. https://www.veritas.com/docs/000090177

• For GRT Backups to disk (B2D), the Backup to Disk Test Tool - B2Dtest.exe should be run on the target disk first to ensure the basic file level functionality requirements are met. For more information, review and download the following:
  • https://www.veritas.com/docs/000037869 - Backup Exec Backup to Disk Test Tool - B2Dtest.exe

NOTE: If any of the above requirements cannot be confirmed, configured, etc... and there are any job failures or other issues, it is recommended to run at least one full test backup of Exchange with the Granular Recovery Option UNCHECKED prior to running another GRT Backup or opening a case with Veritas Technical Support.