User`s guide

70 Copyright © Acronis, Inc., 2000-2009
2.11.7.2. Privileges for local connection
Local connection on a machine running Windows can be established by any user who has the "Log on
locally" user right on the machine.
2.11.7.3. Privileges for remote connection in Windows
To establish a remote connection to a machine running Windows, the user must be a member of the
Acronis Remote Users security group on that machine.
After remote connection is established, the user has management rights on the remote machine as
described in User rights on a managed machine (p. 31).
Note: On a remote machine running Windows Vista with enabled User Account Control (UAC)and which is not
part of a domainonly the built-in Administrator user can back up data and perform disk management
operations. To overcome the restriction, include the machine into a domain or disable UAC on the machine (by
default, UAC is enabled).
For information about Acronis security groups and their default members, see Acronis security groups
(p. 70).
2.11.7.4. Acronis security groups
On a machine running Windows, Acronis security groups determine who can manage the machine
remotely and act as Acronis Backup & Recovery 10 Management Server administrator.
These groups are created when Acronis Backup & Recovery 10 Agents or Acronis Backup & Recovery
10 Management Server are being installed. During installation, you can specify what users to include
in each group.
Acronis Backup & Recovery 10 Agents
When Acronis Backup & Recovery 10 Agent for Windows is being installed on a machine, the Acronis
Remote Users group is created (or updated).
A user who is a member of this group can manage the machine remotely by using Acronis Backup &
Recovery 10 Management Console, according to the management rights described in Users' privileges
on a managed machine (p. 31).
By default, this group includes all members of the Administrators group.
Acronis Backup & Recovery 10 Management Server
When Acronis Backup & Recovery 10 Management Server is being installed on a machine, two groups
are created (or updated):
Acronis Centralized Admins
A user who is a member of this group is a management server administrator. Management server
administrators can connect to the management server by using Acronis Backup & Recovery 10
Management Console; they have the same management rights on the registered machines as
users with administrative privileges on those machinesregardless of the contents of Acronis
security groups there.