Symantec backup Exec 2014 backups for one of Exchange 2013 installation Prerequisites

1.1 Installing the Exchange Management Console
Before installing the Exchange Management Console, we need to install the following prerequisites: On a computer that requires Symantec Backup Exec 2014 (hereinafter referred to as BE2014), open the PowerShell console as an administrator
A) Installing the Remote Tools Management Pack
Install-windowsfeature Rsat-adds

650) this.width=650; "title=" 01.png "style=" height:529px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m00/58/56/wkiom1sugtciu5uvaai621bqdtk146.jpg "width=" 720 "height=" 529 "alt=" Wkiom1sugtciu5uvaai621bqdtk146.jpg "/>

b). Install the Exchange Management tools Prerequisites

Enter the following command:

Install-Windows Feature as-http-activation, Desktop-experience, Net-framework-45-features, Rpc-over-http-proxy, RSAT-Clustering, Rsat-clustering-cmdinterface, Rsat-clustering-mgmt, Rsat-clustering-powershell, Web-mgmt-console, Was-process-model, Web-asp-net45, Web-basic-auth, Web-client-auth, Web-digest-auth, web-dir-browsing, Web-dyn-compression, Web-http-errors, web-http-logging, Web-http-redirect, web-http-tracing, WEB-ISAPI-EXT, Web-isapi-filter, Web-lgcy-mgmt-console, Web-metabase, Web-mgmt-console, Web-mgmt-service, Web-Net-Ext45, Web-request-monitor, Web-server, Web-stat-compression, Web-static-content, Web-windows-auth, Web-WMI, Windows-identity-foundation

650) this.width=650; "title=" 02.png "style=" height:529px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m01/58/52/wkiol1sug5liycl_aaosqgodoa8912.jpg "width=" 720 "height=" 529 "alt=" WKioL1Sug5LiYcl_ Aaosqgodoa8912.jpg "/>

c). Under Start installing the Exchange Management tool, insert the Exchange installation CD, tick " connect to the Internet and check for updates "

650) this.width=650; "title=" 01.png "style=" height:632px;width:720px; "border=" 0 "hspace=" 0 "src=" http:// S3.51cto.com/wyfs02/m02/58/52/wkiol1suhjpyqvx1aai3eupv_n4827.jpg "width=" 720 "height=" 632 "alt=" Wkiol1suhjpyqvx1aai3eupv_n4827.jpg "/>

Click " Next Step "

650) this.width=650; "title=" 02.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/56/ Wkiom1sug9hqja7vaafbfx2dgy0608.jpg "alt=" Wkiom1sug9hqja7vaafbfx2dgy0608.jpg "/>

Click " Next Step "

650) this.width=650; "title=" 03.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/58/52/ Wkiol1suhjojobmpaaknwhtsde0082.jpg "alt=" Wkiol1suhjojobmpaaknwhtsde0082.jpg "/>

Select " I accept the terms of the license Agreement "

650) this.width=650; "title=" 04.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/58/56/ Wkiom1sug9gq6-tkaam3isiyf68524.jpg "alt=" Wkiom1sug9gq6-tkaam3isiyf68524.jpg "/>

Select " do not use recommended configurations "

650) this.width=650; "title=" 05.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/53/ Wkiol1suhjtgezueaaiig107ung616.jpg "alt=" Wkiol1suhjtgezueaaiig107ung616.jpg "/>

here we only need to install the management tool, cancel out the other check boxes, click " Next Step "

650) this.width=650; "title=" 06.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/56/ Wkiom1sug9lj42tvaahb4ta6dlo704.jpg "alt=" Wkiom1sug9lj42tvaahb4ta6dlo704.jpg "/>

Select the Administrative Tools installation path, here by default, click " Next Step "

650) this.width=650; "title=" 07.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/53/ Wkiol1suhjtbt360aagnfaegpuq102.jpg "alt=" Wkiol1suhjtbt360aagnfaegpuq102.jpg "/>

Pre- requisite analysis check, check pass, click " installation "

650) this.width=650; "title=" 08.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/56/ Wkiom1sug9ldztg-aagbh0uuk6s431.jpg "alt=" Wkiom1sug9ldztg-aagbh0uuk6s431.jpg "/>

Click " Complete " , complete the BE2014 on Exchange installation of Administrative Tools

650) this.width=650; "title=" 09.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M00/58/53/ Wkiol1suhjxdrytqaagck92tyvq616.jpg "alt=" Wkiol1suhjxdrytqaagck92tyvq616.jpg "/>

1.2 Preparing service Account
Create a regular account in AD and enable the mailbox feature650) this.width=650; "title=" 222.png "src=" http://s3.51cto.com/wyfs02/M01/58/53/ Wkiol1suhe7a2yofaagrebctnh8417.jpg "alt=" wkiol1suhe7a2yofaagrebctnh8417.jpg "/>1.3 Service Account Rights Assignment
Under EMS, run the following script to establish a role group that has the lowest backup and restore permissions, but does not support granular restores
new-rolegroup-name backupexecroles-roles @ ("Database Copies", "Databases", "Exchange Servers", "Monitoring", "Mail Recipient Creation "," Mail Recipients "," Recipient policies "," Mail Enabled public Folders "," public Folders ")

650) this.width=650; "title=" 01.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/53/ Wkiol1suiubg62jfaah9bf6pze0641.jpg "alt=" Wkiol1suiubg62jfaah9bf6pze0641.jpg "/>

Add the service account Backupexecuser that you just established to the established Backupexecroles group, with the following command:
Add-rolegroupmember-identity Backupexecroles-member Backupexecuser

650) this.width=650; "title=" 02.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/56/ Wkiom1suiiszvojuaaizdl8dip8174.jpg "alt=" Wkiom1suiiszvojuaaizdl8dip8174.jpg "/>

After you join the Backupexecroles group, you can see the group you just joined in the user properties

650) this.width=650; "title=" 03.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/53/wKioL1SuiUfRbj_ Paahizjd_awc869.jpg "alt=" Wkiol1suiufrbj_paahizjd_awc869.jpg "/>

Grant support for service account to perform granular recovery on Exchange Server, you need to do the following to create a new management role, which is named: SymantecEWSImpersonationRoles01, the command is as follows:
New-managementrole-name "SYMANTECEWSIMPERSONATIONROLE01"-parent applicationimpersonation

650) this.width=650; "title=" 04.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M02/58/56/ Wkiom1suiixdxeilaaf-ag2cmuc226.jpg "alt=" Wkiom1suiixdxeilaaf-ag2cmuc226.jpg "/>

Assign a user role to the service account Backupexecuser, with the following command:
New-managementroleassignment-role "SymantecEWSImpersonationRole01"-user backupexecuser-name " Backupexecuser-ewsimpersonation "

650) this.width=650; "title=" 04-2.png "style=" Float:none "src=" http://s3.51cto.com/wyfs02/M00/58/53/ Wkiol1suiuft7cjtaahspjzojec907.jpg "alt=" Wkiol1suiuft7cjtaahspjzojec907.jpg "/>

Create a throttlingpolicy with the following command:
New-throttlingpolicy-name "Symantecewsrestorethrottlingpolicy"-ewscutoffbalance unlimited-ewsmaxburst Unlimited- Ewsmaxconcurrency unlimited-exchangemaxcmdlets Unlimited-messageratelimit unlimited-powershellcutoffbalance Unlimited-powershellmaxburst unlimited-powershellmaxcmdlets unlimited-powershellmaxconcurrency Unlimited- Powershellmaxoperations Unlimited-recipientratelimit Unlimited-throttlingpolicyscope Regular

650) this.width=650; "title=" 05.png "style=" Float:none; "src=" HTTP://S3.51CTO.COM/WYFS02/M00/58/56/WKIOM1SUIIWYTR7 _aajwj0sfdzo847.jpg "alt=" Wkiom1suiiwytr7_aajwj0sfdzo847.jpg "/>

Assign the policy to the service account Backupexecuser with the following command:
Set-mailbox-identity backupexecuser-throttlingpolicy "Symantecewsrestorethrottlingpolicy"

650) this.width=650; "title=" 06.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/53/wKioL1SuiUjxP_ Xcaafbsjyr33s011.jpg "alt=" Wkiol1suiujxp_xcaafbsjyr33s011.jpg "/>

Continue to assign the following permissions to the service account, with the following command:
Set-throttlingpolicyassociation-identity backupexecuser-throttlingpolicy "Symantecewsrestorethrottlingpolicy"

650) this.width=650; "title=" 07.png "style=" Float:none; "src=" http://s3.51cto.com/wyfs02/M01/58/56/ Wkiom1suiixc3m3saaib_kg8-2w430.jpg "alt=" Wkiom1suiixc3m3saaib_kg8-2w430.jpg "/>

To this finish with the minimum permissions granular backup and restore permissions, if only for testing, in fact, we only need to add the service account to the organization Manager group is OK, but in production, often for the security requirements of the company more stringent, It is recommended to assign the service account with minimal privileges!

This article from "Robin's Home" blog, declined reprint!

Symantec backup Exec 2014 backups for one of Exchange 2013 installation Prerequisites