User Accounts and Passwords - How To

Topics | How To | Related Topics

Change the CommCell Network Password

Change the Media Password

Change Account for Accessing the Maintenance Advantage Page

Change Account to Register a Domain Controller with the CommServe

Change Account for Accessing Application Servers/Filers

Change Account for Accessing Databases

Change Account for Accessing Instances

Change Account for Accessing Updates

Use Account for Data Classification

Change Account for Configuring UNC Paths

Change Account for Discovering Network Drives

Change Account for Restoring to Mapped/Share Network Drives and Restricted Directories

Configure Filer/Proxy Authentication Credentials

View or Modify User Rights Assignments on a Workgroup or Member Server

View or Modify User Rights Assignments on a Domain Controller

Set up User Permissions and Rights on a Windows Workgroup or Member Server

Set up Rights on a Windows 2000 Domain Controller

Set up Registry Permissions on Windows 2000

Set up Folder Permissions

Change the CommCell Network Password

Required Capability: See Capabilities and Permitted Actions

To change the CommCell network password of a CommCell computer

1. From the CommCell Browser, right-click the CommCell icon, and then click Control Panel from the short-cut menu.
2. From the Control Panel window, within the column headed by "Name", search for and double-click System.
3. In the System dialog box, ensure that Change Network Password is selected.
4. In the Change password for computer list, click the name of the computer for which you want to change the network password.
5. Enter the new network password in the Password field and re-enter it in the Confirm Password field.
6. When you are finished, click OK. The password is changed.

Change the Media Password

Required Capability: See Capabilities and Permitted Actions

To change the media password:

1. From the CommCell Browser, right-click the CommCell icon, and then click Control Panel from the short-cut menu.
2. From the Control Panel window, within the column headed by "Name", search for and double-click System.
3. In the System dialog box, ensure that Change Media Password is selected.
4. Enter the new media password in the Enter Password field and re-enter it in the Confirm Password field.
5. Enter the old media password in the Enter Old Media Password field.
6. When you are finished, click OK. The media password is changed.

Change Account for Accessing the Maintenance Advantage Page

Required Capability: See Capabilities and Permitted Actions

To use/change the account for accessing the Maintenance Advantage Page

1. From the CommCell Browser, right-click the CommCell icon and then click Control Panel from the short-cut menu.
2. From the Control Panel window, within the column headed by "Name", search for and double-click System.
3. In the System dialog box, click the Advanced tab.
4. In the System (Advanced) tab, type the user name and password in the appropriate spaces.
5. Click OK. The Maintenance Advantage Page should be displayed.

Change Account to Register a Domain Controller with the CommServe

Required Capability: See Capabilities and Permitted Actions

To change a user account to register a domain controller with CommServe:

1. From the CommCell Browser, expand Security, expand Name Servers, right-click the name of the appropriate domain controller, and click Properties.
2. In the Edit Domain Controller Details dialog box, click Edit.
3. In the Enter User Account Information dialog box, update the fields as appropriate and click OK.
4. In the Edit Domain Controller Details dialog box, make any other desired changes and then click OK.

Change Account for Accessing Application Servers/Filers

Required Capability: See Capabilities and Permitted Actions

To change most Agent user account for accessing an application server or filer:

1. From the CommCell Browser, expand the tree if necessary to view the affected agent icon. Then right-click the agent icon and click Properties.
2. From the General tab, click the Change Account button associated with the User Account information.
3. For Active Directory, if you want to use NTLM Bind, Enter Administrator as the user and then enter the administrator's password in the Change User Account dialog box.
4. For NetWare/NDS, File Archiver for NetWare, or Active Directory, enter the requested information in the Change User Account dialog box.
5. For the affected Exchange-based agent or QR Agent, enter the requested information in the Exchanged-based Change User Account dialog box.
6. For SharePoint, enter the requested information in the SharePoint-based Change User Account dialog box.
7. Click OK to save the settings.

To change a Quick Recovery Agent user account for accessing an application server or filer:

1. From the CommCell Browser, expand the tree if necessary to view the affected agent icon. Then right-click the agent icon and click Properties.
2. Click the Authentication tab.
3. From the default Exchange/SQL sub-tab, click the appropriate application and then click Edit.

   When configuring the Exchange server(s) for the Quick Recovery Agent on a cluster, be sure to enter the Exchange server name into the Exchange Server Name field of the Change User Account dialog box. If you do not enter the server name, the agent may not be able to detect the Exchange Server.

4. Enter the required information in the Change User Account dialog box.
5. Click OK.

To change a ContinuousDataReplicator user account (Windows only) for accessing an application server:

1. From the CommCell Browser, expand the tree if necessary to view the affected agent icon. Then right-click the agent icon and click Properties.
2. Click the Authentication tab.
3. Click the appropriate application in the list and then click Edit.
4. Enter the required information in the Change User Account dialog box.
5. Click OK.

Change Account for Accessing Databases/Applications

Required Capability: See Capabilities and Permitted Actions

To change a user account for accessing DB2 databases:

1. From the CommCell Browser, expand the tree if necessary to view the desired level icon.
   • From the agent level, right-click the agent icon, click All Tasks from the short-cut menu, click New Instance, and go to the next step.
   • From the instance level, right-click the instance icon, click Properties from the short-cut menu, and go to Step 3.
   • From the backup set level, right-click the backup set icon, click Properties from the short-cut menu, and go to Step 4.
2. Use the Creating New Instance dialog box to create and configure the instance. Thereafter, from the General tab, click the Change button associated with the User Account information. Then go to Step 5.
3. From the General tab of the Instance Properties dialog box, click the Change button associated with the User Account information. Then go to Step 5.
4. From the General tab of the Backup Set Properties dialog box, ensure that the Connect as a Different User option is selected. Then click the Change button associated with the User Account information.
5. Enter the required information in the Set DB2 User Account dialog box.
6. Click OK to save the settings.

To change a user account for accessing Oracle or SAP for Oracle applications on Windows not associated with QR Agent:

1. From the CommCell Browser, expand the tree if necessary to view the desired level icon.
   • From the agent level, right-click the agent icon, click All Tasks from the short-cut menu, and click New Instance (Oracle SID).
   • From the instance level, right-click the instance icon and click Properties from the short-cut menu.
2. From the General tab, click the Change button associated with the User Account information.
3. Enter the required information in the Impersonate NT User dialog box.
4. Click OK to save the settings.

To change a user account for accessing Oracle applications for QR Agent:

1. From the CommCell Browser, expand the tree if necessary to view the QR agent icon. Then right-click the icon and click Properties.
2. From the Authentication tab, click the Oracle sub-tab.
3. From the Oracle sub-tab, either click Add Instance or select an Oracle instance to edit and then click Edit Instance.
4. From the Add Oracle Instance to QR Agent dialog box, click Change.
5. Enter the required information in the Impersonate NT User dialog box.
6. Click OK to save the settings.

To change a user account for accessing Informix, Oracle, or SAP for Oracle applications on Unix:

1. From the CommCell Browser, expand the tree if necessary to view the desired level icon. From the agent level, right-click the agent icon, click All Tasks from the short-cut menu, click New Instance, and go to the next step. From the instance level, right-click the instance icon, click Properties from the short-cut menu, and go to Step 3.
2. Use the New Instance dialog box to create and configure the instance.
3. From the General tab of the Instance Properties dialog box, do one of the following, as appropriate.
   • For Informix, type the name of the user account in the INFORMIX USER field.
   • For Oracle or SAP for Oracle, type the name of the user account in the ORACLE USER field.
4. Click OK to save the settings.

Change Account for Accessing Instances

Required Capability: See Capabilities and Permitted Actions

To change a user account for accessing an instance:

1. From the CommCell Browser, expand the tree to view the instance for the affected agent. Then right-click the instance, click Properties, and click Accounts.
2. In the Instance Properties (Accounts) tab, enter (for SQL, MySQL, or Sybase) the user name information. For Sybase and MySQL, also enter SA-related information.
3. Click OK to save the settings.

Change Account for Accessing Automatic Updates

Required Capability: See Capabilities and Permitted Actions

To change a user account for accessing updates:

1. From the CommCell Browser, right-click the CommCell icon and then click Control Panel from the short-cut menu
2. From the Control Panel window, within the column headed by "Name", search for and double-click Update Configuration.
3. From the Update Configuration dialog box, click Change.
4. Enter the required information in the User Name and Password dialog box.
5. Click OK. The account is now changed.

Use Account for Data Classification (Windows)

Required Capability: See Capabilities and Permitted Actions

To use/change a user account to authenticate against the Active Directory domain controller to look up group membership:

1. From the CommCell Browser, expand the tree if necessary to view the desired enabler-level icon.
2. Right-click the agent icon and then click Properties from the short-cut menu.
3. From the General tab in the agent dialog box, click Authenticate Active Directory Domain Controller.
4. Type the domain name, user name, and password in the appropriate spaces.
5. Make any other desired changes and then click OK.

To use/change a user account to authenticate against the Active Directory domain controller to look up a user or (if the authentication is not already saved) to look up group membership:

1. From the CommCell Browser, if you are creating a new DataClassSet (subclient), expand the tree if necessary to view the appropriate DataClassSet backupset-level icon. Then right-click the backup set, click All Tasks, click Create DataClassSet, and start to create the DataClassSet. If you are using an existing DataClassSet, right-click the appropriate DataClassSet subclient and then click Properties.
2. From the Rules tab of the DataClass Property dialog box, click Folders\Files Owned By.
3. In the Folders\Files Owned By tab, to include files owned by a specific user in the migration, click Include Users and then do one of the following:
   • Click Browse.
   • Click User and then Browse.
   • Click User Group and then Browse.

   Then type the appropriate domain name, user name, and password in the Authenticate Active Directory Domain Controller dialog box and click OK.

4. Click the appropriate user groups/users and then click Add.
5. Repeat the preceding two steps as necessary.
6. In the Folders\Files Owned By tab, to exclude files owned by a specific user in the migration, click Exclude Users and then do one of the following:
   • Click Browse.
   • Click User and then Browse.
   • Click User Group and then Browse.

   Then type the appropriate domain name, user name, and password in the Authenticate Active Directory Domain Controller dialog box and click OK.

7. Click the appropriate user groups/users and then click Add.
8. Repeat the preceding two steps as necessary.
9. Make any other desired changes and then click OK.

Change Account for Configuring UNC Paths

Required Capability: See Capabilities and Permitted Actions

To change a user account for configuring UNC paths:

1. From the CommCell Browser, expand the tree to view the subclient for the affected Windows File System agent. Then right-click the subclient and click Properties.
2. From the Subclient Properties dialog box, click the Content tab.
3. From the Content tab, if you want to include more shares as subclient content, type in the UNC path of the first share that you want to add in the Enter New Content field and click Add. Repeat this step if you want to add more files and/or folders to the content.
4. Click As User.
5. Enter the required information in the Impersonate User dialog box.
6. Click OK to save the settings.

Change Account for Discovering Network Drives

Required Capability: See Capabilities and Permitted Actions

To change a user account for discovering network drives:

1. From the CommCell Browser, expand the tree if necessary to view the Quick Recovery Agent (Windows) icon. Then right-click the icon and click Properties.
2. From the Authentication tab, click the NAS sub-tab.
3. From the NAS sub-tab, click Change.
4. Enter the required information in the Enter User Account Details dialog box.
5. Click OK.

Change Account for Restoring to Mapped/Shared Network Drives and Restricted Directories

Required Capability: See Capabilities and Permitted Actions

To change a user account for restoring to mapped/shared network drives and restricted directories:

1. From the CommCell Browser, expand the tree to view the desired level icon for the affected agent. Then right-click the icon and click All Tasks from the short-cut menu.
2. Click the appropriate Browse or Restore option. Then populate, select, and click as appropriate to access the Restore Options (for All Selected Items) dialog box.
3. From the Restore Options (for All Selected Items) dialog box, click Advanced.
4. From the Advanced Restore Options dialog box, select Impersonate (Windows, NetWare) User. Then type the appropriate user name and password.
5. Click OK to save the settings.

Configure File Server/Proxy Authentication Credentials

Before You Begin

This feature requires a Feature License to be available in the CommServe. Review general license requirements included in License Administration. For step-by-step instructions on how to view the license information, see View All Licenses.

Required Capability: See Capabilities and Permitted Actions

To configure filer/proxy authentication credentials:

1. From the CommCell Browser, right-click the instance icon for the File Archiver Agent for Windows that you want to configure and then click Properties.
2. Click Configure Password.
3. Enter the User Name for the domain in which the network storage file server/proxy resides. Include the domain name with the user name. For example, domainA \administrator.
4. Enter the Password for the User Name entered above.

After all configuration tasks have been completed, reboot the IIS Server and for Celerra instances, the proxy computer where the File Archiver for Windows Agent is installed. This will ensure that the recall service recognizes all the configuration changes necessary to recall archived data.

View or Modify User Rights Assignments on a Workgroup or Member Server

To view or modify user rights assignments on a Workgroup or Member Server:

1. Click Start > Settings > Control Panel > Administrative Tools.
2. From Administrative Tools, select the local security policy and add the Service user to all the required rights (logon as service, backup, restore). 

View or Modify User Rights Assignments on a Domain Controller

To view or modify user rights assignments on a domain controller:

1. Click Start > Settings > Control Panel > Administrative Tools.
2. From Administrative Tools\Domain Controller Security Policy, expand the tree to Security Settings, Local Policies, and User Rights Assignment. Add the user to all the required rights (logon as service, backup, restore).

Set up User Permissions and Rights on a Windows Workgroup or Member Server

To set up user permissions and rights on a Windows Workgroup or Member Server:

1. Click Start > Settings > Control Panel > Administrative Tools.
2. From Administrative Tools, double-click Computer Management.
3. Create or prepare to manage a Windows user who will run the services.
4. Open Computer Management by expanding Local User and Groups and then Users. Double-click or create the User who will be running the services.
5. Right-click the User (if new), click Properties, and click Member of. Then add the Backup Operators group to the User.
6. Change the services account to the User and re-start the services.
7. Log off and log in as the Administrator for the policies to take effect. Sometimes you may have to restart the computer to this end. 

Set up Rights on a Windows 2000 Domain Controller

To set up rights on a Windows 2000 domain controller:

1. Create or prepare to manage a Windows user who will run the services.
2. From Administrative Tools\Active Directory Users and Computers\Users, double-click or create the user who will be running the services.
3. Right-click the User (if new), click Properties, and click Member of. Then add the 'Backup Operators' group to the User.
4. Change the services account to the user and re-start the services.
5. Log off and log in as the Administrator for the policies to take effect. Sometimes you may have to restart the computer to this end.

Set up Registry Permissions on Windows 2000

To set up registry permissions on Windows 2000:

1. Run regedt32.
2. Highlight the company name under HKEY_LOCAL_MACHINE/SOFTWARE and click security - permissions from the tool bar.
3. Add Backup Operators (or the service user) with full control to the registry key.

Set up Folder Permissions

To set up folder permissions:

1. As appropriate, provide the service user with full control to the installation directory or confirm that such control is in place. The default location is C:\Program Files\Company Name.
2. Right-click, select Properties, and then select the Security tab and Add Backup Operators (or the service user) with full control rights.

Back to Top