Can an Enterprise Admin account be used as for the DC access account for multiple Domains in the same Forest? (4236663)

Can an Enterprise Admin account be used as for the DC access account for multiple Domains in the same Forest?

Trying to install the Forest Recovery Agent with an account from the root domain that has Enterprise Admin rights, as well as specify the same account for the Domain Access account in the FR Project, results in a logon failure. Using an account from the domain that each DC is a member of allows the agent to be installed and Verify Settings to work. Can an Enterprise Admin account be used instead of a Domain Admin account from each domain?

WORKAROUND:

1. Close the FR console
2. Edit the FRConsoleSettings.xml file found under the following path on the server where the FR Console is installed:<installDrive>\Program Files\Dell\Recovery Manager for Active Directory Forest Edition
   
   Note: If you had previously upgraded from RMAD to RMADFE, the xml file may be under:
   <installDrive>\Program Files\Dell\Recovery Manager for Active Directory
   
3. Search for AllowExplicitCredentials and modify the line from:
   <AllowExplicitCredentials defaultValue="False">False</AllowExplicitCredentials>
   
   To
   <AllowExplicitCredentials defaultValue="False">True</AllowExplicitCredentials>
   
4. Open the FR Project
5. You can now set the DC Access credentials for each DC using domain\username. Alternatively you can select a DC from each domain, click view next to Use Default Domain Access Credentials and enter the credentials there. You can then select to use the Default credentials for any DC from that domain
6. Click Verify Settings to test

Note: A reboot of the RMAD server may be required.

STATUS:

Enhancement request PT141395163 has been submitted to Development for consideration in a future release of Recovery Manager for Active Directory Forest Edition.

PT141395163

Provided the root domain is available to process authentication requests, and there are no network issues, the restore should work using the root account. This was tested in the lab to work, however there were no issues in any domain when the restore was tested. It is suggested to test different restore scenarios, however if there is any doubt, use an account from each domain as the Access account for the DCs in those domains.