Forum Discussion

Klingonwork32's avatar
14 years ago

Can't backup system state

Ok, next question...

One of our servers, that happens to be a backup domain controller, we're using to run test backups with the trial version of 2010. The system logon account (which is same as system account right now) being used to backup this dc is a member of the domain admin group which in turn is a member of the administrators group. We have even tried with another domain admin account and get same results. Have followed the error link and tried solutions but no luck...

...and we keep getting following errors on the test jobs:

Error category    : Security Errors
Error             : e000fe7d - Access is denied.
To back up or restore System State, administrator privileges are required.

For additional information regarding this error refer to link V-79-57344-65149

We have also turned on AOFO (thanks pkh).

Thanks for helping,

Klingonwork32

  • Klingonwork,

    As you must be aware a Domain controller has 2 kind of policy stored

    1> Domain Policy

    2> Domain Controller`s Policy 

    The above is true for both 2003 and 2008 version of Microsoft Windows Server

    Considering you case you have a Win2003 DC that you are backing up, you might want to try this

    Navigate to the domain controllers policy (not domain policy)

    Navigate to Security Settings >Local Policies and the User right assignment look for these rights and add the domain admin account that you are using to backup the system state of the 2003 DC

     

    • Authenticate as any user and gain access to resources under any user identity OR Act as a part of Operating System 
    • Logon as a batch job
    • Create a token object, which can then be used to access any local resources
    • Log on as a service
    • Administrative rights (provides complete and unrestricted rights to the computer)
    • Backup operator rights (provides rights to restore files and directories)
    • Manage auditing and security log

    From the command prompt of the 2003 DC run > Gpudate/force <hit enter> command, run the same command on the Backup exec server too

    If it still fails to backup 

    Repeat the same steps with Domain Policies (Not the domain controller policy this time as its already done) 

     

    Restart all the backup exec services

    Run the backup.

     

     

13 Replies

  • Klingonwork,

    As you must be aware a Domain controller has 2 kind of policy stored

    1> Domain Policy

    2> Domain Controller`s Policy 

    The above is true for both 2003 and 2008 version of Microsoft Windows Server

    Considering you case you have a Win2003 DC that you are backing up, you might want to try this

    Navigate to the domain controllers policy (not domain policy)

    Navigate to Security Settings >Local Policies and the User right assignment look for these rights and add the domain admin account that you are using to backup the system state of the 2003 DC

     

    • Authenticate as any user and gain access to resources under any user identity OR Act as a part of Operating System 
    • Logon as a batch job
    • Create a token object, which can then be used to access any local resources
    • Log on as a service
    • Administrative rights (provides complete and unrestricted rights to the computer)
    • Backup operator rights (provides rights to restore files and directories)
    • Manage auditing and security log

    From the command prompt of the 2003 DC run > Gpudate/force <hit enter> command, run the same command on the Backup exec server too

    If it still fails to backup 

    Repeat the same steps with Domain Policies (Not the domain controller policy this time as its already done) 

     

    Restart all the backup exec services

    Run the backup.