Windows Backup Account locks out

[Lisa_Cochran]

We have come across an issue where the Backup Administrator account we use, dbadmin, will get locked out before the nightly backups complete, causing some backups to fail and making it so that the backup admins have to wait the allotted reset time or for a network admin to reset the account. We do not want to use the domain administrator account for backups for obvious reasons. What could be causing the account to be locked out? This happens randomly. Our environment is BE 9.1 on Windows 2000 and 2003 servers. We have 6 SAN servers running backups across a fibre cable to a tape library. Those 6 SAN servers pull the remaining server backups through them. Please assist.

[Amruta_Purandar]

Hello,

- Is there an error message?
- Are you backing up only local resources (on the server where Backup Exec is installed?)
- Ensure that the Backup Exec service account has the following rights:
1. Authenticate as any user and gain access to resources under any
user identity.
2. Create a token object, which can then be used to access any local
resources.
3. Log on as a service.
4. Administrative rights (provides complete and unrestricted rights
to the computer).
5. Backup operator rights (provides rights to restore files and directories).
6. Manage auditing and security log.


NOTE : If we do not receive your reply within two business days, this post would be marked
assumed answered and would be moved to answered questions pool.

[Lisa_Cochran]

Thank you for the response. All of the settings you list are done. This only happens randomly, there are no errors in the event logs (including security logs) and the backups run fine on every other day with the same settings. We are also not sure which server is causing the issue. I know it's vague, but that's why I've posted here.

[Renuka_-]

Hello,




1. We have come across an issue where the Backup Administrator account we use, dbadmin, will get locked out before the nightly backups complete, causing some backups to fail and making




Could you please tell us what job is failing and with what error message.


2. You have also mentioned that the account is not the domain administrator. SO what group memberships does this account have?


3. Please run the same backup using a domain equivalent account. This is for test purposes to identify if this could be the isue.


NOTE : If we do not receive your reply within two business days, this post would be marked assumed answeredand would be moved toanswered questions pool.

[Lisa_Cochran]

Thank you for your response. The dbadmin account is a domain admin equivalent account, but is not the original domain admin. We are also not sure where the lockout is occurring, as it is not listed in any of the event logs. It makes it very difficult to monitor the issue. I will change all the BE services to use the original domain admin account when starting up. However, the lock out does not seem to be occurring when the jobs are running. This morning, the lockout occurred at 9:20 and no job was running at that time.

[Amruta_Purandar]

Hello,

- Please update us on the status of the issue after changing the account.
- Also stop third party services during backup to isolate the cause of this issue.

NOTE : If we do not receive your reply within two business days, this post would be marked assumed answered and would be moved to answered questions pool.

[A_van_der_Boom]

An account lockout normally occurs when a pasword is entered wrongly for x amount of times, depending on you domain policy. Are their any scripts running who are using this account but use a wrong password ? Does the password of your backup account recently changed ?

Regards
A van der Boom

[Renuka_-]

Hello,

Please update us on this issue.

NOTE : If we do not receive your reply within two business days, this post would be marked assumed answeredand would be moved toanswered questions pool.