Backing up Exchange 2003 Mailboxes with Veritas BackupExec 9.1 1

[oyashare]

I am trying to backup my exchange 2003 mailboxes with BE 9.1. I get this error message when I try to pick them:
Logon account "veritas@xxx.xxx.com" failed to access "\\Server\Microsoft Exchange Mailboxes." Access is denied.

Here are the steps I have taken:
Created a Veritas user and mailbox on the exchange server.
Installed Outlook 2003 on the backup server.
Delegated Veritas user to Exchange.
Gave Veritas administtrator rights.

Any help on this would be greatly appreciated.

Thanks,

Omid

 

[xmsre]

"Gave Veritas administtrator rights."

In Exchange 2003, organization administrators and domain administrators are specifically denied Receive As and Send As permissions. You need these permissions to do a brick level backup. See:

http://support.microsoft.com/default.aspx?scid=kb;en-us;823143

 

[oyashare]

xmsre, thank you. I tried that, but it still did not work. I removed Veritas from the administrator group, and took of its delegation of exchange. Created a a security group called ExMerge, then gave ExMerge full control in the security tab for my exchange server. Any other ideas? I still get the same error message. OH, btw, i changed the default login for BE to administrator now, since veritas could not back up the other objects i had, and just tried to connect to the mailboxes via veritas.

Omid

 

[NortonES2]

I assume you have purchsed the Veritas Exchange agent.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[migglezimblatt]

I wrestled with this problem for ages. I tried everything that the veritas, microsoft and this type of forum had to offer. It kept saying Access Is Denied. I eventually found the problem:

the administrator mailbox was "hidden from address lists". (The option is in ADUC / exchange advanced)

Unhiding it (and running the recipient update services so that it would "really unhide it") made my backup work.

Summary of things that made it work for me:
account must have exchange full permissions and no explicit denies (I.E. use delegation and then remove inheritance at the server and folder levels and get rid of those stupid "deny admins" settings). account must have a mailbox (despite what veritas say). account must be same as the service account for veritas services. account must be visible in address lists.

Additional: if it fails on any particular mailbox whilst successfully doing others, then ensure that mailbox has the "associated external account" permission for the SELF account. (fixes a lot of problems that one).