Ask the Community
Groups
Running the Windows agent as local system account on Hyper-V server and granting account read/write permissions for SMB shares - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="summary"><strong>SUMMARY</strong></h2> <p>Running the Windows agent as local system account on Hyper-V server and granting account read/write permissions for SMB shares</p> <h2 data-id="issue"><strong>ISSUE</strong></h2> <p></p> <h3 data-id="purpose">Purpose</h3> <p><span id="answer">To provide instructions for running the Unitrends Windows agent as local system account on a Hyper-V or SQL server and grant it read/write permissions for SMB shares</span></p> <h3 data-id="description">Description</h3> <p>To protect Hyper-V VMs and SQL databases with disk storage located on SMB 3.0 shares, you must run the Unitrends Windows agent as local system account on the Hyper-V or SQL server and grant it read/write permissions for SMB shares. Use the instructions described below. For details on protecting VMs and databases with storage located on SMB 3.0 shares, see <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fwww.unitrends.com%2Fdocuments%2Flegacy-rs-ueb-admin-guide%2Fdefault.htm%23cshid%3D1553">Protecting Hyper-V virtual machines with storage located on SMB 3.0</a> shares in the <i>Unitrends Recovery-Series and UEB Administrator’s Guide</i>.</p> <h4 data-id="to-run-the-agent-as-local-system-account-on-the-hyper-v-or-sql-server-and-grant-local-system-account-read-write-permissions-for-the-smb-shares"><b>To run the agent as local system account on the Hyper-V or SQL server and grant local system account read/write permissions for the SMB shares</b></h4> <p>1. Add LOCAL SYSTEM account to the 'Backup Operators' domain builtin group on the domain controller server.</p> <p>2. Add each Hyper-V or SQL Server system name to the 'Backup Operators' domain builtin group on the domain controller server. For failover clusters, make sure you add each node in the cluster.</p> <p>3. To edit the domain 'Backup Operators' group, run the 'Active Directory Users and Computers' administrative app on the domain controller.<br><br>4. On each server hosting an SMB 3.0 share, repeat steps 1 through 3 for the local server 'Backup Operators' group.</p> <p> a. Run the 'Computer Management' application</p> <p> b. Select 'Local Users and Groups.'</p> <p> c. Select Groups. 'Backups Operators' should be shown as a local group.</p> <p>5. On the servers hosting the SMB 3.0 shares, give the 'Backup Operators' group 'full control' permissions.</p> <p> a. Run the 'Server Manager' application.</p> <p> b. From the 'Dashboard' screen, select 'File and Storage Services.'</p> <p> c. Select 'Shares.'</p> <p> d. Right click the desired share and select 'Properties.'</p> <p> e. Select 'Permissions,' then 'Custom Permissions.'</p> <p> f. Add the local 'Backup Operators' group with 'Full Control' permission.</p> <p> g. Press OK and save the changes.</p> 6 For SQL Server only, on each server hosting an SMB 3.0 share, add the SQL Server system names to the local server 'Administrators' group. <p> a. Run the 'Computer Management' application</p> <p> b. Select 'Local Users and Groups.'</p> <p> c. Select Groups. 'Administrators' should be shown as a local group.</p> <ol></ol><ol></ol> </article> </main>