β02-15-2011 09:09 AM
Ok, next question...
One of our servers, that happens to be a backup domain controller, we're using to run test backups with the trial version of 2010. The system logon account (which is same as system account right now) being used to backup this dc is a member of the domain admin group which in turn is a member of the administrators group. We have even tried with another domain admin account and get same results. Have followed the error link and tried solutions but no luck...
...and we keep getting following errors on the test jobs:
Error category : Security Errors Error : e000fe7d - Access is denied. To back up or restore System State, administrator privileges are required. For additional information regarding this error refer to link V-79-57344-65149
We have also turned on AOFO (thanks pkh).
Thanks for helping,
Klingonwork32
Solved! Go to Solution.
β02-25-2011 12:40 AM
Klingonwork,
As you must be aware a Domain controller has 2 kind of policy stored
1> Domain Policy
2> Domain Controller`s Policy
The above is true for both 2003 and 2008 version of Microsoft Windows Server
Considering you case you have a Win2003 DC that you are backing up, you might want to try this
Navigate to the domain controllers policy (not domain policy)
Navigate to Security Settings >Local Policies and the User right assignment look for these rights and add the domain admin account that you are using to backup the system state of the 2003 DC
From the command prompt of the 2003 DC run > Gpudate/force <hit enter> command, run the same command on the Backup exec server too
If it still fails to backup
Repeat the same steps with Domain Policies (Not the domain controller policy this time as its already done)
Restart all the backup exec services
Run the backup.
β02-15-2011 09:13 AM
Hi
Is this the DC on win2003 or win2008 also have you tried doing backup of system state using Ntbakup & see if that has worked or on win2008 using windows server bakup tool
Thank You
β02-15-2011 09:14 AM
Have you configued the BESA as "Domain\Administrator"
β02-15-2011 09:33 AM
Trial BE 2010 on 2008R2 HP Proliant backing up a Win 2003 box. NTBackup working fine.
Klingonwork32
β02-15-2011 09:36 AM
Hi Amol,
If BESA = Backup Exec System Logon Account then yes, that user is a domain admin. Also, I forgot to mention this is Win 2008R2 trying to backup the dc on a Win 2003 box. Don't know if that makes a difference...
Klingonwork32
β02-15-2011 09:44 AM
Hi there.
Is the domain controller using win server 2008 . if yes follow the document & provide the privilege to the system logon account
http://www.symantec.com/docs/TECH74365
You can try this if its not win 2008
Go to active directory , open the properties of system log on account , go to member of tab & make sure domain admins is added . If yes highlight domain admins & select "set as primary "
Run the backups & update the results
β02-15-2011 09:58 AM
No, dc not on 2008 but the BE test box is, going to dc on a Win 2003 box. NTBackup OK.
Klingonwork32
β02-15-2011 10:00 AM
You can try this if its not win 2008
Go to active directory , open the properties of system log on account , go to member of tab & make sure domain admins is added . If yes highlight domain admins & select "set as primary "
Run the backups & update the results
β02-15-2011 10:25 AM
Thanks for helping...my understanding though is doing that is for mac/unix clients, so setting domain admins as the primary group for that user would have what benefit? This dc (win 2003) is a test box and I understand replication goes on with only changes made, but changing this would BE agents expect to see the logon account as "domain user" thus failing? Perhaps I am answering my own question (just thinking out loud), and it doesn't matter since it's failing the backup anyway at system state.
Klingonwork32
β02-15-2011 10:35 AM
Hello
You can give a try to the above suggestion & see if it helps .....
Go to \program files\symantec\backup exec\ & check the properties of the beremote.exe . Click on details tab & tell me the version number
Also
Verify the following rights
http://www.symantec.com/docs/HOWTO22647
Run live update on the media server if its not up-to-date & then update the remote agent on the DC.
β02-15-2011 12:34 PM
File version: 13.0.4164.0
Product version: 13.0.4164
and thanks for the link...reading.
Klingonwork32
β02-18-2011 06:54 AM
Any update ?
β02-25-2011 12:40 AM
Klingonwork,
As you must be aware a Domain controller has 2 kind of policy stored
1> Domain Policy
2> Domain Controller`s Policy
The above is true for both 2003 and 2008 version of Microsoft Windows Server
Considering you case you have a Win2003 DC that you are backing up, you might want to try this
Navigate to the domain controllers policy (not domain policy)
Navigate to Security Settings >Local Policies and the User right assignment look for these rights and add the domain admin account that you are using to backup the system state of the 2003 DC
From the command prompt of the 2003 DC run > Gpudate/force <hit enter> command, run the same command on the Backup exec server too
If it still fails to backup
Repeat the same steps with Domain Policies (Not the domain controller policy this time as its already done)
Restart all the backup exec services
Run the backup.
β03-02-2011 03:56 PM
Thanks Kenny!!
forgive the late reply, but working OK now....