What parameters should be checked if you change the account under which Acronis Backup & Recovery 10 services run

This article applies to:

• Acronis Backup & Recovery 10 Advanced Server
• Acronis Backup & Recovery 10 Advanced Server - Small Business Server Edition
• Acronis Backup & Recovery 10 Advanced Server - Virtual Edition
• Acronis Backup & Recovery 10 Advanced Workstation
• Acronis Backup & Recovery 10 Server for Windows
• Acronis Backup & Recovery 10 Workstation

Introduction

During installation of Acronis Backup & Recovery 10 the product asks you to specify credentials for Acronis services: you can either select an existing account or you can choose to create a new account. In the latter case, the product creates the following accounts:

• Acronis Agent User for Acronis Managed Machine Service
• AMS User for Acronis Management Server Service
• ASN User for Acronis Storage Node Service

During installation, the program assigns the necessary rights and privileges to these accounts. For details see Acronis Backup & Recovery 10: Required User Permissions for Local and Remote Management.

Solution

If you need to change the user under which the Acronis services run, it is recommended to reinstall the product and specify the new user during installation, as this allows the program to set all the necessary rights for these users during the installation routine.

If reinstallation is not possible, you can change the log on accounts for Acronis services manually. You can use the same user for all three services if this user has all the necessary rights, or you can create a separate user for each service. In this case, before changing the account for Acronis services, make sure that the new account fulfills the following requirements:

1. The user must have read/write permissions for the following folders:
   • Windows 2000/XP/2003: C:\Documents and Settings\All Users\Application Data\Acronis\
   • Windows Vista/7/ 2008: C:\ProgramData\Acronis\
   • Windows 32-bit: C:\Program Files\Common Files\Acronis\Agent
   • Windows 64-bit: C:\Program Files (x86)\Common Files\Acronis\Agent
2. The user must have full control of the following registry keys and all subkeys:
   • Windows 32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Acronis\
   • Windows 64-bit: HKEY_LOCAL_MACHINE\Software\Wow6432Node\Acronis\
3. The user must have the following privileges:
   • Log on as service
   • Adjust memory quotas for a process
   • Replace a process-level token
4. The user for Acronis Managed Machine Service must belong to the Backup operators group. On Domain Controllers, the user must also be a member of the Domain Administrators group to have access to the Active Directory during a backup with VSS.
5. The user for Acronis Management Server Service must be owner or administrator of SQL databases of Acronis Management Server. The necessary database permissions are:
   • acronis_cms: ALLOW DML, DENY DDL
   • acronis_cms_cards: ALLOW DML, DENY DDL
   • acronis_cms_logs: ALLOW DML, ALLOW creation and removal of temporary tables, DENY remaining DDL
6. The user for Acronis Storage Node Service must belong to the Backup operators group;
7. If deduplication is used, the user for Acronis Storage Node Service must have read/write permissions for the Deduplication database folder.

After making sure that the user has all the necessary rights, you can change Acronis services to run under this user.

 

More information

See also:

• Acronis Backup & Recovery 10: Windows Processes and Services
• Acronis Backup & Recovery: Required User Permissions for Local and Remote Management