a trust relationship was not established between remote agent and media server

[burtos]

Got this error message appearing only on 2 servers that im backup up

Error             : e0009b86 - Backup Exec cannot connect to the remote agent because a trust relationship was not established between the remote agent and the media server.  To establish a trust relationship, add the remote agent to the Favorite Resources in the backup selections tree

Media server is Windows server 2008 standard R2

Backup Server Software - Backup Exec 2010 r3  (fully updated)

Server 1 with error -  Windows server 2003 std

Server 2 with error -  Windows server 2003 std

I have tried the following

http://www.symantec.com/business/support/index?page=content&pmv=print&impressions=&viewlocale=&id=TE...

I couldnt install the remote agent remotely due to this error appearing on both machines

Error connecting to the remote computer. Ensure that the computer is available, has WMI enabled and is not blocked by a firewall.24

So i manually installed the remote agent on both servers, rebooted and than checked the service was up and running on the servers which it is.

Reselected both servers in the backup list, and even right clicked on the servers and selected establish trust relaionship and nothing happens, tries a refresh but the orange triangle still appears next to the server.

[CraigV]

...you can go into the selection list, right-click the server and choose the trust option.

Also make sure that the correct ports are opened on any firewalls you might be running.

[burtos]

Hi Craig

i have done your first point, but nothing seems to happen, is there a way of manually forcing the relationship through.

your 2nd point backup exec  remote agent is in the firewall exception list, but still cant get it to work

The remote agent has installed, just wondering if theres an issue due do it being Windows 2003 and not wondows 2008.

Just a quick note, i went on one of the problem servers and opened the backup exec agent utiltiy, went to  the security tab there is in there a entry for a trust relationship with hash from the media server

[burtos · Accepted solution]

browsing the forumn came accros this and the post by RahulG, seemed to of fixed the issue

https://www-secure.symantec.com/connect/forums/2010-remote-agent-installation-error

Also you can try the following Microsoft solution:
WMI Remote execution requires the following:
For Local Group / Local Computer Policy
Computer Configuration/Windows Settings/Security Settings/Local Policies/User Rights Assignments
Administrators, Local Service, and Network Service accounts have the right "Adjust Memory Quotas for Process Properties"
Local Service, and Network Service have the "Replace a process level token"
Remote User is a member of the local Administrators Group
Remote registry is enabled.
WMI enabled and remote request to create process should be accepted by the server
Verify using "gpedit.msc" console the the above rights.
If the right for "Local Service" and "Network Service" services don't have the right "Replace a process level token" within local computer policy, run the following commands
Can use the following command to apply these rights
ntrights -u "Local Service" -m \\server1 +r SeAssignPrimaryTokenPrivilege
ntrights -u "Network Service" -m \\server1 +r SeAssignPrimaryTokenPrivilege

(Note: Install Windows 2003 Resource Kit for the ntrights.exe application.
The above right was not applied to Newly installed Servers built with Windows 2003SP1 or later.)

Update group policy (GPUPDATE /Force). A reboot may be needed.