Enterprise Vault™ Setting up File System Archiving (FSA)
- About this guide
- About File System Archiving
- About FSA shortcut files
- Steps to configure File System Archiving
- Adding a Windows file server to File System Archiving
- About archiving from Windows Server 2012 or later file servers
- Permissions and privileges required by the Vault Service account on Windows file servers
- Adding a NetApp filer to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Adding a Celerra/VNX device to File System Archiving
- Adding a Dell EMC Unity 4.3 device to File System Archiving
- Configuring FSA with clustered file servers
- Troubleshooting the configuration of FSA with clustered file servers
- Installing the FSA Agent
- Defining volume and folder policies
- About selecting the shortcut type for an FSA policy
- About FSA policy archiving rules
- Configuring the deletion of archived files on placeholder deletion
- Configuring target volumes, target folders, and archive points
- About adding target volumes, target folders, and archive points for FSA
- About managing archive points
- Archive point properties
- Effects of modifying, moving, or deleting folders
- About deleting target folders, volumes, and file servers
- Configuring pass-through recall for placeholder shortcuts
- Configuring and managing retention folders
- Configuring and running FSA tasks
- Using Run Now to process FSA targets manually
- Configuring file system filtering
- Managing the file servers
- PowerShell cmdlets for File System Archiving
- Appendix A. Permissions and privileges required for the Vault Service account on Windows file servers
- Permissions required by the Vault Service account for the FSA Agent
Local security user rights required by the Vault Service account
If the Vault Service account does not have local administrator rights on a target Windows file server, it requires a set of local user rights.
Table: User rights required by the Vault Service account lists the required user rights.
Table: User rights required by the Vault Service account
Privilege Constant/Value | User right string | Notes |
---|---|---|
SE_DEBUG_NAME / SeDebugPrivilege | Debug programs | The Enterprise Vault Placeholder service requires this right to read the process name, for excluding certain processes from recalling files. |
SE_TAKE_OWNERSHIP_NAME/ SeTakeOwnershipPrivilege | Take ownership of files or other objects | The Vault Service account requires this privilege to modify file properties when performing file archiving, for example to change file attributes or to delete files, when it does not have direct access to a file or folder |
SE_BACKUP_NAME/ SeBackupPrivilege | Backup files and directories | Required for the archiving of files that the Vault Service account does not have direct access to. The Enterprise Vault Placeholder service requires this right to read the XML and alternate datastream metadata of files on shares. |
SE_RESTORE_NAME/ SeRestorePrivilege | Restore files and directories | Required for the restoring of files that the Vault Service account does not have direct access to. |
Log on as a service /SeServiceLogonRight | Log on as a service | The Vault Service account requires this right for the FSA Agent services. |
To view or set the user right strings, open the Local Security Settings Microsoft Management Console (MMC) snap-in and navigate to Security Settings > Local Policies > User Rights Assignment. Windows displays the user right strings in the Policy column.
Note:
You must make sure that there are no Group policy overrides for these local user rights.