cancel
Showing results for 
Search instead for 
Did you mean: 

"Access is denied" during backup job selections

Neil_Buchanan
Not applicable
I am receiving a message: Logon account "Account name ..." failed to access "target_server_name". Access is denied.

The environment contains a backup server attempting to back up 2 seemingly identical target servers:
A development server (DEV_GOOD) which can be successfully backed up.
A production server (PROD_BAD) which fails with an "Access is denied" message during the selection process.

Backup server:
Windows 2003 SP1
Backup Exec 9.1.4691 with:
be4691RHF52_275909.exe
Be4691RSP1_267180.exe


Target servers:
Windows 2000 (Build 2195 SP4)
Beremote.exe 9.1.4691.49


SAMPLE LOG from PROD_BAD. This log is the result of attempting to backup the PROD_BAD server by selecting it using the default login (Domain\Domain_Admin_Acct), then trying the local admimistrator account (PROD_BAD\Administrator) and finally, explicitly choosing the (Domain\Domain_Admin_Acct). All 3 attempts failed. The names have been changed for security purposes. Also, the Security log shows:
Successful Logon:
User Name:Administrator
Domain:PROD_BAD
Logon ID:(0x0,0x385627)
Logon Type:2
Logon Process:Advapi
Authentication Package:MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name:PROD_BAD

and:
Successful Logon:
User Name:Domain_Admin_Acct
Domain:Domain
Logon ID:(0x0,0x38553D)
Logon Type:2
Logon Process:Advapi
Authentication Package:MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name:PROD_BAD

It is also possible to attach to the administrative shares on PROD_BAD using the default login on the backup server.

SAMPLE LOG:
af4 10/4/2005 8:03:27: Opening debug log C:\Program Files\VERITAS\Backup Exec\RANT\logs\PROD_BAD-beremote00.log
ae8 10/4/2005 8:03:27: FS_InitFileSys
ae8 10/4/2005 8:03:27: loaded bedsnt5.dll
ae8 10/4/2005 8:03:27: loaded bedssql2.dll
ae8 10/4/2005 8:03:27: loaded bedsxchg.dll
ae8 10/4/2005 8:03:27: loaded bedsxese.dll
ae8 10/4/2005 8:03:27: loaded bedsmbox.dll
ae8 10/4/2005 8:03:27: bedspush.dll could not be loaded: The specified module could not be found.
ae8 10/4/2005 8:03:27: loaded bedsnote.dll
ae8 10/4/2005 8:03:27: loaded bedsmdoc.dll
ae8 10/4/2005 8:03:27: loaded bedsupfs.dll
ae8 10/4/2005 8:03:27: loaded bedsshadow.dll
ae8 10/4/2005 8:03:27: bedsagnt.dll could not be loaded: The specified module could not be found.
ae8 10/4/2005 8:03:27: loaded bedssms.dll
ae8 10/4/2005 8:03:27: loaded bedssmsp.dll
ae8 10/4/2005 8:03:27: Initializing FSs
ae8 10/4/2005 8:03:27: This is NOT an Exchange server.
ae8 10/4/2005 8:03:27: FS 12 failed to initialize: -489
ae8 10/4/2005 8:03:27: unloading bedsmbox.dll
ae8 10/4/2005 8:03:27: first load attempt of esebcli2.dll failed: The specified module could not be found.
ae8 10/4/2005 8:03:27: second load attempt failed from path = 'esebcli2.dll': The specified module could not be found.
ae8 10/4/2005 8:03:27: Looking for esebcli2.dll in sysetm path
ae8 10/4/2005 8:03:27: never found EseBcli2.dll
ae8 10/4/2005 8:03:27: esebcli2.dll not loaded
af4 10/4/2005 8:03:28: Running... 'Q' to stop
af8 10/4/2005 8:04:04: Successfully impersonated Domain\Domain_Admin_Acct
af8 10/4/2005 8:04:04: WhoAmI( ) reports: Domain\Domain_Admin_Acct
af8 10/4/2005 8:04:07: Successfully impersonated PROD_BAD\administrator
af8 10/4/2005 8:04:07: WhoAmI( ) reports: PROD_BAD\Administrator
ad0 10/4/2005 8:04:13: Successfully impersonated Domain\Domain_Admin_Acct
ad0 10/4/2005 8:04:13: WhoAmI( ) reports: Domain\Domain_Admin_Acct
ae8 10/4/2005 8:04:26: ndmpRun: accept() returned 10004
ae8 10/4/2005 8:04:26: FS_RemoveFileSys
ae8 10/4/2005 8:04:26: unloading bedssms.dll
ae8 10/4/2005 8:04:26: unloading bedsxchg.dll
ae8 10/4/2005 8:04:26: unloading bedssmsp.dll
ae8 10/4/2005 8:04:26: unloading bedsnote.dll
ae8 10/4/2005 8:04:26: unloading bedsnt5.dll
ae8 10/4/2005 8:04:26: unloading bedsxese.dll
ae8 10/4/2005 8:04:26: unloading bedssql2.dll
ae8 10/4/2005 8:04:26: unloading bedsmdoc.dll
ae8 10/4/2005 8:04:26: unloading bedsshadow.dll
ae8 10/4/2005 8:04:26: unloading bedsupfs.dll
1 REPLY 1

Ajit_Kulkarni
Level 6
Hello,

I suggest you to create a new logon account that is equivalent to local administrator on the remote server.
Please refer to the following technotes:

http://seer.support.veritas.com/docs/266075.htm



http://seer.support.veritas.com/docs/265086.htm

Hope it helps you.

Regards

NOTE : If we do not receive your reply within two business days, this post would be marked "assumed answered" and would be moved to "answered questions" pool.