HP P9000 Replication Manager Software 7.2 Configuration Guide

CAUTION:
If you execute a VSS backup for a GPT disk, registry keys related to the backup server GPT disk are
added. If the VSS backup is repeated and too many device entries have accumulated in the registry,
the backup might fail. Therefore, HP does not recommend using Application Agent in an environment
that uses GPT disks. If you want to execute a VSS backup for a GPT disk, follow the instructions in the
Microsoft technical information note KB934234, and clean up the backup server registry after executing
a VSS backup.
Additional server requirements
The following are other requirements and precautions for the database and backup servers.
User authorization for command execution
The following authorizations are required to execute Application Agent commands:
• OS administrator permissions and administrator privileges
A user executing a Application Agent command must have local Administrator authorization on
the server on which the command is to be executed. In a Windows Server 2008 operating envir-
onment, the user must also have OS administrator privileges. If the user does not have OS admin-
istrator privileges, an error message appears, and command execution fails.
• Database access authorization
• When backing up an SQL Server database: When a user executes a Application Agent com-
mand, Windows must first authenticate the user before gaining access to the SQL Server. A
user must have sysadmin authorization to execute Application Agent commands for an SQL
server.
• When backing up an Exchange database: A user must be assigned to the Enterprise Admins
group or the Exchange Domain Servers group of a domain to execute Application Agent
commands.
Account for Application Agent Services
Before installing Application Agent, you must create an account that will be used to execute the
Application Agent Services (a collective term for the Copy Controller service and the Common Agent
Service).
The account must satisfy the following conditions:
• It must have OS administrator permissions.
• In Security Policy, Logon as a service must be enabled and Deny logon as a service must be dis-
abled.
• It must have the following database access permissions:
For backing up an Exchange database: The account used to execute Common Agent Service must
belong to the Enterprise Admins group or Exchange Domain Servers group in the domain. To
backup an Exchange database, the Exchange management tools must be installed on both the
database server and the backup server. For Exchange Server 2003, the ESEUTIL command must
also be installed. The ESEUTIL command does not need to be installed for any other versions of
Exchange Server.
For backing up a SQL Server database: Application Agent accesses SQL Server using Windows
authentication. Therefore, the account used to execute the Common Agent Service must be registered
as a member that has a sysadmin fixed server role for SQL Server.
Setting up Application Agent60