Backup or a restore job fails with the following error "Failed to log on to Microsoft Windows. Ensure that your logon credentials are correctly entered."

Article:TECH74365  |  Created: 2009-01-10  |  Updated: 2011-11-17  |  Article URL http://www.symantec.com/docs/TECH74365
Article Type
Technical Solution



Issue



"Failed to log on to Microsoft Windows. Ensure that your logon credentials are correctly entered and that they meet the following minimum requirements to log on to a Windows computer"


Error



Final error: 0xe0000383 - Failed to log on to Microsoft Windows. Ensure that your logon credentials are correctly entered and that they meet the following minimum requirements to log on to a Windows computer:


Cause



Attempt to browse a Windows 2008 server which is also a Domain Controller in Backup Selections, from Backup Exec installed on a Windows 2003 server if Backup Exec logon account does not have "log on as a batch job" right in the Domain Security Policy.


Solution



This error occurs when user doesn't have sufficient privileges to run a backup or restore job.  Check that the Backup Exec Service Account or logon account which is used for backups or restore is added in Backup Operators Group. Members of this group can back up and restore all files on domain controllers in the domain, regardless of their own individual permissions on those files. This group has no default members. Because this group has significant power on domain controllers, add users with caution per the following steps:
 
1. Log on to Windows as Administrator/Domain Admin

2. Go to Start | Programs | Administrative Tools, select Active directory User and computers for Domains or Computer management| Local Users and groups

3. Double-click the user that has the insufficient rights, and click Groups

4. Add the user to either the Administrators/Domain Admin or Backup Operators group then click OK

5. Click OK

6. Log out of Windows


For Windows Vista/2008 and later, check that the Backup Exec Logon Account which is used for backups or restores has the right to  "Logon as a batch job". By default, this policy is applied to Administrators and the Backup Operators group. This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers and it allows a user to be logged on by means of a batch-queue facility.
 
In a Workgroup Environment, edit Local Security Policy 
 
1.Start |  Administrative Tools | Local Security Policy  | User Rights Assignments
 
2.In the details pane, double-click Log on as batch job.
 
 
 
3. Click Add User or Group, and then add the appropriate BESA account.
 
4. Make sure the account does NOT appear under Deny Logon as a batch Job
 
 
 
In a Domain Environment, edit Default Domain Security Policy.
 
1.Start |  Administrative Tools | Domain Security Policy  | Local Policies | User Rights Assignments
 
2. In the details pane, double-click Log on as batch job.
 
3. Click Add User or Group, and then add the appropriate BESA account.
 
4. On windows 2008 server click start | run and type in gpupdate /force (this will update the group policy).
 
5. Restart Backup Exec services on Media server( Click on Tools | Backup exec services | Restart all services).
 

 
For more information, refer to the following Microsoft Articles:
 

 
Default groups
 
Add the Log on as a service right to an account
 
 
http://technet.microsoft.com/en-us/library/cc731654(WS.10).aspx      For Windows Server 2008, Windows Server 2008 R2

 
Note:
 
1. If Windows 2008 server is a domain controller then the same right needs to be assigned to Backup Exec logon account under Domain Controller security policy.
 
2. If Windows 2008 server is not part of a domain then the logon account used in Backup Exec to backup the Windows 2008 server needs to be assigned the same right under Local Security policy on Windows 2008 server.




 

Supplemental Materials

SourceUMI
ValueV-79-57344-899
Description

Ensure that your logon credentials are correctly entered and that they meet the following minimum requirements to log on to a Windows computer


SourceETrack
Value1701487

SourceError Code
Value0xe0000383
Description

Failed to log on to Microsoft Windows. Ensure that your logon credentials are correctly entered and that they meet the following minimum requirements to log on to a Windows computer.



Legacy ID



331589


Article URL http://www.symantec.com/docs/TECH74365


Terms of use for this information are found in Legal Notices