Granting Appropriate User Privileges
Published : April 8, 2005 | Updated : August 17, 2005
Before you begin a DPM deployment, verify that appropriate users have been granted required privileges for performing the various deployment tasks. Table 2.7 shows the user privileges that are required to perform the major tasks associated with a DPM deployment.
Table 2.7 User Privileges Required for Performing Major DPM Deployment Tasks
DPM Deployment Task |
Required Privileges |
|---|---|
Adding a DPM server to an Active Directory domain |
Domain administrator account, or user right to add a workstation to a domain |
Installing DPM |
Administrator account on the DPM server Note Although a local administrator can install DPM, most configuration tasks require domain user privileges. We recommend installing DPM using a domain account that is a member of the local administrators group. |
Installing the DPM File Agent on a file server |
Domain account that is a member of the local administrators group on the file server |
Opening DPM Administrator Console |
Administrator or backup operator account on the DPM server |
Extending the Active Directory schema to enable end-user recovery |
Schema and domain administrator privileges in the Active Directory domain |
Creating an Active Directory container to enable end-user recovery |
Schema and domain administrator privileges in the Active Directory domain |
Granting a DPM server permissions to change the contents of the container |
Schema and domain administrator privileges in the Active Directory domain |
Enabling end-user recovery feature on a DPM server |
Administrator or backup operator account on the DPM server |
Running the DpmBackup command-line tool |
Administrator or backup operator on the DPM server |
Installing shadow copy client software on a client computer |
Administrator account on the client computer |
Accessing previous versions of protected data from a client computer |
User account with access to the protected share |