cancel
Showing results for 
Search instead for 
Did you mean: 

BackupExec GRT - AD and Exchange

pedropony55
Level 4

Hi,


I am setting up 2012 to backup my ESX servers.

I can perform granular restore on all servers regarding individual files etc, but the applications side is not working. When I try to backup AD or Exchange I get the message

"Backup Exec failed to snap virtual machine and was unable to collect the necessary metadata to restore indivdual application items. You cannot perform GRT-enabled restores of application data from this backup"

I have the 3600 applciance so all agents are included. I have selected the grt options in the backup job. They are running under the domain admin account (this is right?)

 

Very annoying.. any ideas?

 

1 ACCEPTED SOLUTION

Accepted Solutions

pedropony55
Level 4

ok, rang Symantec.. cant do application granular restore on dynamic disks...

 

oh well :( thanks for your help.

View solution in original post

8 REPLIES 8

CraigV
Moderator
Moderator
Partner    VIP    Accredited

pedropony55
Level 4

Thanks.

 

1. Remote Agent for Windows Servers is not installed or is installed however the Backup exec remote agent service is not started on the Virtual Machine
2. GRT is disabled for an application.
3. Backup Exec cannot connect to the virtual machine.
4. Incorrect credentials were entered for the virtual machine.

so RAWS is installed. GRT is not disabled, Backup Exec can connect to the VM.

and I am using domain admin credentials.

Surely domain admin is ok?

 

CraigV
Moderator
Moderator
Partner    VIP    Accredited

The account would be fine, but just double-check to make sure it has rights to Exchange etc.

RAWS must be started on the VM, and GRT must be enabled if you want to do GRT-based restores from Exchange etc.

BE won't connect to the VM if you're tying to run the backup via the RAWS agent. If this is stopped, you will get an error.

pedropony55
Level 4

So I ran debug on DC and get this.

 

[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status performing account check for 2003 Domain Controller in SystemState::PerformAccountCheck:1273
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is not a Local System in SystemState::PerformAccountCheck:1291
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status Username ''domain\admin'is not a Domain Admin in SystemState::PerformAccountCheck:1292
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is not a Backup Operator in SystemState::PerformAccountCheck:1293
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status FS_SS_ACCESS_DENIED (0xE000FE7D) performing security check in SystemState::PerformAccountCheck:1298
[0384] 2012-08-14T10:11:15.421 [fsys\systemstate]   -   AD:Status FS_SS_ACCESS_DENIED (0xE000FE7D) calling SystemState::PerformAccountCheck in SystemState::AttachToDLE:623
[0384] 2012-08-14T10:11:15.421 [besc]               - Error in SnapshotBackupEngine::open_file_systems from FS_AttachToDLE() for

CraigV
Moderator
Moderator
Partner    VIP    Accredited

...OK, then create a new account in Active Directory, and give it both Domain Admin rights, and any other application admin rights as per the TN I posted on the BESA above.

Then open up BEutility and change the BESA to use this account. Once done, try again.

pedropony55
Level 4

Thanks Craig , i appreciate your assistance

 

looks like im getting closer, just the local system check it fails on.

[5856] 2012-08-14T11:50:20.500 [fsys\systemstate]   -   AD:Status performing account check for 2003 Domain Controller in SystemState::PerformAccountCheck:1273
[5856] 2012-08-14T11:50:20.562 [fsys\systemstate]   -   AD:Status Username ''domain\admin's not a Local System in SystemState::PerformAccountCheck:1291
[5856] 2012-08-14T11:50:20.562 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is a Domain Admin in SystemState::PerformAccountCheck:1292
[5856] 2012-08-14T11:50:20.562 [fsys\systemstate]   -   AD:Status Username 'domain\admin' is a Backup Operator in SystemState::PerformAccountCheck:1293
[5856] 2012-08-14T11:50:20.625 [fsys\shadow]        - Informational: all writers except the Active Directory & Exchange & SQL writers have been excluded

CraigV
Moderator
Moderator
Partner    VIP    Accredited

Mmm...check your AV and see if it is blocking BE from accessing the system state of the server. If so, put in exclusions for the BE services.

pedropony55
Level 4

ok, rang Symantec.. cant do application granular restore on dynamic disks...

 

oh well :( thanks for your help.