05-23-2014 02:48 AM
Hi there,
We use two domains, one produktive and ond develop domain with "one way trust" (that means only develop trusts produktive).
I set up one user named beadmin that is a member of productive domain admins.
I added this user to the group builtin/administrators and builtin/backup operators on the develop dc and was able to install the agent after doing this. But I can't create a backup job, I see an error message like this (translated)
Error browsing dc.develop.de - Windows login failed.
Please make shure, that you entered correct login data (I did) and that you fulfil following minimum requirements:
- the used login data identify you as member of the backup operators
- win vista/2008 give login data for batch jobs
Maybe you need additional rights for accessing this ressource.
Sorry for the poor translation ... I also tried it with a native user from the develop domain that is also domain admin for the develop domain but going this way makes it impossible to install the agent.
Regards
Marcel
PS: Backup jobs of member servers work, if I add the backup exec job user to the local admin group. But because a dc doesn't use local groups I used the builtin/domainlocal groups. At least this worked for adding the server and installing the agent.
Solved! Go to Solution.
05-23-2014 02:52 AM
Hello Marcel,
Please refer to the following link and ensure that you have the relevant rights: http://www.symantec.com/business/support/index?page=content&id=TECH136148 .
Also, this should be helpful: http://www.symantec.com/business/support/index?page=content&id=TECH125617
05-23-2014 02:52 AM
Hello Marcel,
Please refer to the following link and ensure that you have the relevant rights: http://www.symantec.com/business/support/index?page=content&id=TECH136148 .
Also, this should be helpful: http://www.symantec.com/business/support/index?page=content&id=TECH125617
05-23-2014 03:19 AM
Hi,
thanks, but my user is a member of builtin/administrators, backup operators and I also added "logon as a batchjob" in the default domain policy. It doesn't work ...
05-23-2014 03:35 AM
...along with that, could you provide the following rights?
Act as part of the operating system
Backup files and directories
Create a token object
Log on as a batch job
Log on as a service
Manage auditing and security log
Restore files and directories
Take ownership of files and other objects
05-23-2014 03:38 AM
Are the BE services running under this 'beadmin' account ? Is this same account added as a system logon account (in domain\username format) ?
05-23-2014 04:09 AM
Ok, got it ... logon as a batch job was set, but I had to force the gpo again. Now it works :)
Thanks@all