Credentials Fail on System login account
Hello Everybody,
I have Backup Exec set up in a two server Windows domain. One server is running Server 2008 Enterprise x64 (ServerA) The other server is running Server 2008 R2 Enterprise x64 (ServerB). Both are domain controllers and DNS servers. Server B is set up as a file server as well. Symantec Endpoint Protection is running on both servers.
Backup Exec 2012 is installed on Server A, and the remote backup agent is intalled on Server B. I set up an account for Backup Exec, which is set to log in as a batch job on both servers and has domain admin privlidages. When setting up the backup jobs, Server A works without issue. When attempting to backup Server B the credentials fail for both of the individual drives. I've attached a screenshot below.
Comments 11 Comments • Jump to latest comment
Hi,
While you said you set up the BESA with domain admin priviledges, check the TN below to make sure of this:
http://www.symantec.com/business/support/index?pag...
Thanks!
If you find this is a solution, please mark it as such.
CraigV, I've checked the link that you mentioned in your post. I've followed the instructions and have double checked that I have everything correct, but I'm still having the same issue.
The two domains needs to trust each other and the BESA needs to be added to the domain admin group in the domain containing Server B.
pkh, The two domain controllers are on the same domain. Server A is the primary domain controller, and Server B is the backup domain controller. I've included a screenshot of the backup exec agent utility on Server B showing that the two servers have a trust with each other.
I have Backup Exec set up in a two server Windows domain
I was mislead by this statement in your initial post.
...and have you tried to stop SEP to see if this fixes the issue?
If you find this is a solution, please mark it as such.
CraigV,
I have tried disabling the SEP client, as well as completely uinnstalling the client from both servers but still the credentials fail when trying to log into the remote server.
Please verify that for the logon and a batch and logon as a service rights that you have selected them correctly and not mistakenly selected deny logon as a batch/service. It sounds like a silly request but i have seen this mistake made a numbrer of times
I hope this posting was helpful
Donald Eady,
I checked that the backupexec account has all the necessary permissions. Below is a screenshot of the group policy that I used to set all of the necessary permissions. I have verified that both servers have applied the group policy using the gpresult command.
In case you can't read it the group policy defines the following settings:
Act as part of the operating system:
Back up files and directoreis:
Create a token object:
Log on as a batch job:
Log on as a service:
Manage auditing and security log:
Restore files and directores:
The account is also a member of the domain admins group as well as the backup operators group.
I would suggest creating a formal support ticket and having a technician troubleshoot it. Are you familiar with the debug monitor ? if you wouldnt mind running the debug monitor on both the media server and server B i would like to review them. I can DM you my contact info.
EDIT..
Im sorry please run the debug monitor on both servers and attempt to run the Test Credentials and provide me with the capture
http://www.symantec.com/docs/HOWTO11932
Also select Capture to file
I hope this posting was helpful
One other this i would like you to try ... please go into local security policy and grant the BESA account the rights as listed in the doc. This is outside of the group that it belogs to veify that the service account itself is given the permissions and then attempt to run the test credentials
I hope this posting was helpful
Would you like to reply?
Login or Register to post your comment.