Windows denies or grants access to its resources by means of user accounts. When running this software in a domain, create a domain user account solely for use by this software. Add the account to the Domain Admins and Backup Operators Group, thereby allowing the account access to required resources. Specify this account from the Create Protection Plan (or store task) wizard schedule page, or in the Run as field of the scheduled task of each protection plan.


By specifying backup user account credentials on the User Account tab of the Archive Manager properties page you avoid being prompted for credentials each time you create or make a change to a protection plan or store task.


If the Archive Manager server or the remote computer is in a workgroup, not a domain, then a matching user account and password must be created for the Archive Manager server and each remote computer. This user account must be a member of the local Administrators group. You will also need to add the following registry setting to each remote computer if it is not already there. Windows User Account Control (UAC) treats local administrator accounts as standard accounts when accessing the computer using a remote administrative connection. To disable this restriction add a DWORD value to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System called LocalAccountTokenFilterPolicy and set its data to 1. Refer to http://support.microsoft.com/kb/951016 for more information. Log on to the Archive Manager server with this account. When creating remote computer protection plans, specify the account for the remote computer in the Run as field of the scheduled task. This configuration will allow credentials to pass through to the other computer for access to necessary resources.


Do not use administrator accounts with blank passwords.