Creating Backup job of trusted Domain DC fails

[soulseeker]

Hi there,

We use two domains, one produktive and ond develop domain with "one way trust" (that means only develop trusts produktive).

I set up one user named beadmin that is a member of productive domain admins.

I added this user to the group builtin/administrators and builtin/backup operators on the develop dc and was able to install the agent after doing this. But I can't create a backup job, I see an error message like this (translated)

Error browsing dc.develop.de - Windows login failed. 

Please make shure, that you entered correct login data (I did) and that you fulfil following minimum requirements: 

- the used login data identify you as member of the backup operators
- win vista/2008 give login data for batch jobs

Maybe you need additional rights for accessing this ressource.

Sorry for the poor translation ... I also tried it with a native user from the develop domain that is also domain admin for the develop domain but going this way makes it impossible to install the agent.

Regards

Marcel

PS: Backup jobs of member servers work, if I add the backup exec job user to the local admin group. But because a dc doesn't use local groups I used the builtin/domainlocal groups. At least this worked for adding the server and installing the agent.

[Siddhant_Saini · Accepted solution]

Hello Marcel,

Please refer to the following link and ensure that you have the relevant rights: http://www.symantec.com/business/support/index?page=content&id=TECH136148 . 

Also, this should be helpful: http://www.symantec.com/business/support/index?page=content&id=TECH125617

[soulseeker]

Hi,

thanks, but my user is a member of builtin/administrators, backup operators and I also added "logon as a batchjob" in the default domain policy. It doesn't work ...

[Siddhant_Saini]

...along with that, could you provide the following rights? 

Act as part of the operating system
Backup files and directories 
Create a token object 
Log on as a batch job 
Log on as a service  
Manage auditing and security log 
Restore files and directories 
Take ownership of files and other objects 

[VJware]

Are the BE services running under this 'beadmin' account ? Is this same account added as a system logon account (in domain\username format) ?

[soulseeker]

Ok, got it ... logon as a batch job was set, but I had to force the gpo again. Now it works :)

Thanks@all