24 Copyright © Acronis International GmbH, 2002-2015
Privileges for accounts
Both existing and newly created accounts are given the following privileges:
The accounts for the agent service and the storage node service are included in the Backup
Operators group.
New accounts for the agent service and the storage node service are also included in the
Administrators group. If you specify an existing account for the storage node service, we
recommend that this account be a member of the Administrators group. Otherwise, the service
may lack access to some Windows resources. For security reasons, the setup program does not
automatically include existing accounts in the Administrators group.
The account for the management server service is included in the Acronis Centralized Admins
group.
All three accounts are assigned the Log on as a service user right.
All three accounts are granted the Full Control permission on the
folder %PROGRAMDATA%\Acronis (in Windows XP and Server
2003, %ALLUSERSPROFILE%\Application Data\Acronis) and on its subfolders.
Each of the three accounts is granted the Full Control permission on certain registry keys in the
following key: HKEY_LOCAL_MACHINE\SOFTWARE\Acronis.
The account for the agent service is assigned the Adjust memory quotas for a process, Replace a
process level token and Modify firmware environment values user rights.
Tips for further usage
The new accounts for the agent service, the management server service, and the storage node
service have the names Acronis Agent User, AMS User, and ASN User, respectively.
If the machine is part of an Active Directory domain, make sure that the domain's security
policies do not prevent the accounts described in this section (whether existing or newly created)
from having the above listed user rights.
After the installation, avoid specifying a different account for a component's service. Otherwise,
the component may stop working. If you must specify a different account, make sure that the
new account is granted the above listed privileges.
Specifying Microsoft SQL servers
When installing Acronis Backup Management Server, you need to specify the Microsoft SQL servers
that the management server will use:
The operational SQL server ensures synchronization of the Acronis Backup components. It stores
a database with rapidly changing operational data. Therefore, we recommend that it reside on
the same machine as the management server.
The reporting SQL server stores the operation log and statistics. The databases stored on this
server may become considerably large over time. The reporting SQL server can be the same as
the operational SQL server, or it can be a different server that is installed on the same or a
different machine.
By default, a new instance of SQL Server will be installed on the machine and used as both the
operational and the reporting SQL server.
The following version of SQL Server will be installed:
In the Windows 8/8.1, Windows Server 2012/2012 R2, Windows 10, and Windows Server 2016
operating systems: Microsoft SQL Server 2008 Express.
