Forum Discussion

VMF's avatar
VMF
Level 4
13 years ago

trouble installing BE 2010 r3

im trying to install a BE 2010 r3 sp1 on a freshly built 2008 R2 x64 server that is a member of the domain.

when i get to the server account step and i provide domain account credentials, i get "unable to authenticate with the user and password information given for domain\user".

it works fine in the test domain that has same gpos applied but fails in the prod env. i even disabled all GPOs and FW for the OU where the server resides. still the same error. i tried running the installer on the DC just to see if it will work, still the same error. im at a loss right now as to why it is not authenticating. any insight will be appreciated

2010
Backup and Recovery
Backup Exec
Installing
  • VMF's avatar
    VMF
    13 years ago

    ok i found what was causing this. looking at evenid 4625 having subtype 0xc0000418 lead me to conclusion that DC is blocking NTLM.  original GPOs were restricing all but NTLM v2 and apparently BE, being in the 2010 r3 release still needs original very unsecure NTLM , which is a security flaw. i removed the gpo but not having policies defined is not enough for windows. since it kept ntlm blocked. i had to explicitly allow ALL kinds of incoming/outgoing ntlm traffic in the gpo to get BE installer to authenticate successfully.

35 Replies

Sort By
  • samueljn's avatar
    samueljn
    Level 5
    13 years ago

    Hi,

    Follow this articles:

    http://www.symantec.com/docs/TECH68481

    http://www.symantec.com/docs/TECH47432

  • VMF's avatar
    VMF
    Level 4
    13 years ago

    thanks for the replys. forgot to mention i did made sure that it has all those rights. and the account that im trying is an enterprise admins account. so far im still getting the error

  • ZeRoC00L's avatar
    ZeRoC00L
    Level 6
    13 years ago

    can you logon with this 'service' account to the Backup Exec server you are trying to install ?

  • VJware's avatar
    VJware
    Level 6
    13 years ago

    ensure you have no deny's as they would supersede allow rights...also, try turning off UAC, if not disabled yet...KB - http://www.symantec.com/docs/TECH136148

  • VMF's avatar
    VMF
    Level 4
    13 years ago

    no denys present, i ran RSOP and checked it for this user/comp config

  • VMF's avatar
    VMF
    Level 4
    13 years ago

    im using enterprise admin account, for the sake of this experiment, and im still getting this error

  • ZeRoC00L's avatar
    ZeRoC00L
    Level 6
    13 years ago

    Can you logon to the server with the service account and then start the installation ?

  • VJware's avatar
    VJware
    Level 6
    13 years ago

    Have you tried creating a new user or tried using a different user ?

  • VMF's avatar
    VMF
    Level 4
    13 years ago

    i sure did. it seems like the problem is not with the user or permissions. it looks like BE installer just cant communicate with the AD. no audit failures are written to the security log.....