SCS KB 1072: Required managed machine service user rights

Applies to:

Acronis SCS Cyber Backup 12.5 Hardened Edition

Use Case / Symptoms 

During installation, you can specify an existing user or create a new one. The specified user will be granted necessary rights during installation. In case you need to specify the rights manually (e.g. when changing the user later), please follow the instructions below:

Manually add the affected user to the "Backup Operators" group:

1. Click Search, type in compmgmt.msc and press Enter.
2. Computer Management opens. Navigate to Local Users and Groups, click Groups, then double-click Backup Operators on in the right hand side.
3. In the Properties window, click Add.
4. In Enter the object names to select, type the affected user' username and click Check names.
5. Click OK and save changes.

Solution

Acronis Managed Machine Service user should be assigned these privileges:

1. Included in the Backup Operators and Administrators groups. On a Domain Controller, the user must be included in the group Domain Admins.
2. Granted the Full Control permission on the folder %PROGRAMDATA%\Acronis (in Windows XP and Server 2003, %ALLUSERSPROFILE%\Application Data\Acronis) and on its subfolders.
3. Assigned these user rights:
   • Log on as a service
   • Adjust memory quotas for a process
   • Replace a process level token
   • Modify firmware environment values