Rights for Acronis services

Acronis Backup & Recovery 11 Agent for Windows runs as service. When installing this component, you need to specify the account under which the agent's service will run.

You can either create a dedicated user account or specify an existing account of a local or domain user.

If you choose to create a dedicated user account for the service (recommended), the setup program will create the following user account:

• Acronis Agent User

The newly created account is given the following privileges:

• The account is assigned the Log on as a service, Adjust memory quotas for a process, and Replace a process level token user rights.
• The account is included in the Backup Operators and Administrators groups.

If you choose to specify an existing local or domain user account—for example, .\LocalUser or DomainName\DomainUser—make sure that the account is a member of the Backup Operators group before proceeding with the installation. The setup program will assign the above listed user rights to such account.

If the machine is part of an Active Directory domain, make sure that the domain's security policies do not prevent the account from having the above listed user rights.

Important: After the installation, do not specify a different user account for the agent service. Otherwise, the agent may stop working.

The newly created user accounts are also granted access to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Acronis (called Acronis registry key) with the following rights: Query Value, Set Value, Create Subkey, Enumerate Subkeys, Notify, Delete, and Read Control.

In addition, there are two Acronis services which run under a system account:

• The Acronis Scheduler2 Service provides scheduling for Acronis components' tasks. It runs under the Local System account and cannot run under a different account.
• The Acronis Remote Agent Service provides connectivity among Acronis components. It runs under the Network Service account and cannot run under a different account.