Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

BackupExec GRT - AD and Exchange

Created: 14 Aug 2012 • Updated: 16 Aug 2012 | 8 comments
This issue has been solved. See solution.

Hi,

I am setting up 2012 to backup my ESX servers.

I can perform granular restore on all servers regarding individual files etc, but the applications side is not working. When I try to backup AD or Exchange I get the message

"Backup Exec failed to snap virtual machine and was unable to collect the necessary metadata to restore indivdual application items. You cannot perform GRT-enabled restores of application data from this backup"

I have the 3600 applciance so all agents are included. I have selected the grt options in the backup job. They are running under the domain admin account (this is right?)

 

Very annoying.. any ideas?

 

Comments 8 CommentsJump to latest comment

pedropony55's picture

Thanks.

 

1. Remote Agent for Windows Servers is not installed or is installed however the Backup exec remote agent service is not started on the Virtual Machine
2. GRT is disabled for an application.
3. Backup Exec cannot connect to the virtual machine.
4. Incorrect credentials were entered for the virtual machine.

so RAWS is installed. GRT is not disabled, Backup Exec can connect to the VM.

and I am using domain admin credentials.

Surely domain admin is ok?

 

CraigV's picture

The account would be fine, but just double-check to make sure it has rights to Exchange etc.

RAWS must be started on the VM, and GRT must be enabled if you want to do GRT-based restores from Exchange etc.

BE won't connect to the VM if you're tying to run the backup via the RAWS agent. If this is stopped, you will get an error.

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

pedropony55's picture

So I ran debug on DC and get this.

 

[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status performing account check for 2003 Domain Controller in SystemState::PerformAccountCheck:1273
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is not a Local System in SystemState::PerformAccountCheck:1291
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status Username ''domain\admin'is not a Domain Admin in SystemState::PerformAccountCheck:1292
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is not a Backup Operator in SystemState::PerformAccountCheck:1293
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status FS_SS_ACCESS_DENIED (0xE000FE7D) performing security check in SystemState::PerformAccountCheck:1298
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status FS_SS_ACCESS_DENIED (0xE000FE7D) calling SystemState::PerformAccountCheck in SystemState::AttachToDLE:623
[0384] 2012-08-14T10:11:15.421 [besc]               - Error in SnapshotBackupEngine::open_file_systems from FS_AttachToDLE() for

CraigV's picture

...OK, then create a new account in Active Directory, and give it both Domain Admin rights, and any other application admin rights as per the TN I posted on the BESA above.

Then open up BEutility and change the BESA to use this account. Once done, try again.

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

pedropony55's picture

Thanks Craig , i appreciate your assistance

 

looks like im getting closer, just the local system check it fails on.

[5856] 2012-08-14T11:50:20.500 [fsys\systemstate]   -   AD:Status performing account check for 2003 Domain Controller in SystemState::PerformAccountCheck:1273
[5856] 2012-08-14T11:50:20.562 [fsys\systemstate]   -   AD:Status Username ''domain\admin's not a Local System in SystemState::PerformAccountCheck:1291
[5856] 2012-08-14T11:50:20.562 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is a Domain Admin in SystemState::PerformAccountCheck:1292
[5856] 2012-08-14T11:50:20.562 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is a Backup Operator in SystemState::PerformAccountCheck:1293
[5856] 2012-08-14T11:50:20.625 [fsys\shadow]        - Informational: all writers except the Active Directory & Exchange & SQL writers have been excluded

CraigV's picture

Mmm...check your AV and see if it is blocking BE from accessing the system state of the server. If so, put in exclusions for the BE services.

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

pedropony55's picture

ok, rang Symantec.. cant do application granular restore on dynamic disks...

 

oh well :( thanks for your help.

SOLUTION