Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Credentials Fail on System login account

Created: 18 Mar 2013 • Updated: 18 Mar 2013 | 11 comments

Hello Everybody,

I have Backup Exec set up in a two server Windows domain.  One server is running Server 2008 Enterprise x64 (ServerA) The other server is running Server 2008 R2 Enterprise x64 (ServerB).  Both are domain controllers and DNS servers.  Server B is set up as a file server as well.  Symantec Endpoint Protection is running on both servers. 

Backup Exec 2012 is installed on Server A, and the remote backup agent is intalled on Server B.  I set up an account for Backup Exec, which is set to log in as a batch job on both servers and has domain admin privlidages.  When setting up the backup jobs, Server A works without issue.  When attempting to backup Server B the credentials fail for both of the individual drives.  I've attached a screenshot below.

Operating Systems:

Comments 11 CommentsJump to latest comment

CraigV's picture

Hi,

While you said you set up the BESA with domain admin priviledges, check the TN below to make sure of this:

http://www.symantec.com/business/support/index?pag...

Thanks!

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

VirtualTechnician619's picture

CraigV,  I've checked the link that you mentioned in your post.  I've followed the instructions and have double checked that I have everything correct, but I'm still having the same issue.

pkh's picture

The two domains needs to trust each other and the BESA needs to be added to the domain admin group in the domain containing Server B.

VirtualTechnician619's picture

pkh, The two domain controllers are on the same domain.  Server A is the primary domain controller, and Server B is the backup domain controller.  I've included a screenshot of the backup exec agent utility on Server B showing that the two servers have a trust with each other.

pkh's picture

I have Backup Exec set up in a two server Windows domain

I was mislead by this statement in your initial post.

CraigV's picture

...and have you tried to stop SEP to see if this fixes the issue?

Alternative ways to access Backup Exec Technical Support:

https://www-secure.symantec.com/connect/blogs/alte...

VirtualTechnician619's picture

CraigV,

I have tried disabling the SEP client, as well as completely uinnstalling the client from both servers but still the credentials fail when trying to log into the remote server.

Donald Eady's picture

Please verify that for the logon and a batch and logon as a service rights that you have selected them correctly and not mistakenly selected deny logon as a batch/service. It sounds like a silly request but i have seen this mistake made a numbrer of times

I hope this posting was helpful

  

VirtualTechnician619's picture

Donald Eady,

I checked that the backupexec account has all the necessary permissions.  Below is a screenshot of the group policy that I used to set all of the necessary permissions.  I have verified that both servers have applied the group policy using the gpresult command.

90px_batchjob.jpg

 In case you can't read it the group policy defines the following settings:

Act as part of the operating system:
Back up files and directoreis:
Create a token object:
Log on as a batch job:
Log on as a service:
Manage auditing and security log:
Restore files and directores:

The account is also a member of the domain admins group as well as the backup operators group.

Donald Eady's picture

I would suggest creating a formal support ticket and having a technician troubleshoot it. Are you familiar with the debug monitor ? if you wouldnt mind running the debug monitor on both the media server and server B i would like to review them. I can DM you my contact info.

EDIT..

Im sorry please run the debug monitor on both servers and attempt to run the Test Credentials and provide me with the capture

http://www.symantec.com/docs/HOWTO11932

 
Select 
 
  • Backup Exec Job Engine
  • Backup Exec Remote Agent for Windows
  • Administration console
  • Management

Also select Capture to file 

I hope this posting was helpful

  

Donald Eady's picture

One other this i would like you to try ... please go into local security policy and grant the BESA account the  rights as listed in the doc. This is outside of the group that it belogs to veify that the service account itself is given the permissions and then attempt to run the test credentials

I hope this posting was helpful