Rights for Acronis services
The Acronis Backup & Recovery 10 Agent for Windows, Acronis Backup & Recovery 10 Management Server, and Acronis Backup & Recovery 10 Storage Node components run as services. When installing any of these components, you need to specify the account under which the component’s service will run.
For each service, you can either create a dedicated user account (recommended in most cases) or specify an existing account of a local or domain user—for example: .\LocalUser or DomainName\DomainUser.
If you choose to create dedicated user accounts for the services, the setup program will create the following user accounts:
The newly created accounts are given the following privileges:
The setup program will assign the above listed user rights to any existing account you specify for a corresponding service.
If you choose to specify an existing user account for the agent service or the storage node service, make sure that this account is a member of the Backup Operators group, before proceeding with the installation.
If you choose to specify an existing user account for the management server service, this account will be added to the Acronis Centralized Admins group automatically.
If the machine is part of an Active Directory domain, make sure that the domain’s security policies do not prevent the accounts described in this section (whether existing or newly created) from having the above listed user rights.
Important: After the installation, do not specify a different user account for a component’s service. Otherwise, the component may stop working.
The newly created user accounts are also granted access to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Acronis (called Acronis registry key) with the following rights: Query Value, Set Value, Create Subkey, Enumerate Subkeys, Notify, Delete, and Read Control.
In addition, there are two Acronis services which run under a system account: