"Access is denied" when attempting to select a remote PC

[David_Berry]

The media server is Windows 2003 Server. The client I am trying to select for backup is WinXP Pro, SP2. The remote agent is successfully installed locally. When I attempt to select the PC for backup, I get the famous "access is denied" message. Apparently, the system logon account does not have sufficient permissions. I don't understand this, because the system logon account is a member of the Domain Admins group, and is also a member of the local admins group on the client PC. I've tried using alternate accounts, but no luck. I've tried the Domain Admin, the PC's local admin. Please help. Thank you.

[Renuka_-]

Hello,
ws xp with Service Pack 2 has a firewall enabled (by default) on it. The firewall blocks external programs from attaching to the machine.

Kindly verify that the Remote Agent is up and running with the Local system account on the windows xp workstation.
Perform the following steps to resolve this issue :
1. Keep the firewall enabled .
2. Add the beremote.exe in the exception lists of the firewall.
3. Run the backup and it should be successful


To add Backup Exec to the list of exceptions:
1. Open the properties of My Network Places
2. Open the properties of Local Area Connection

3. Go to the Advanced tab and select Settings


4. In the General tab ensure that the option Don't allow Exceptions is not selected

5. Go to the Exceptions tab and click Add Program


6. Click Browse, select C:\Program Files\VERITAS\Backup Exec\RANT, and select BEREMOTE.EXE

7.Click OK to apply the Windows Firewall Settings and the Local Area Connection properties


Now Backup Exec should be able to perform a backup of remote systems.

NOTE : If we do not receive your intimation within two business days, this post would be marked assumed answered and would be moved to the ‘answered threads’ pool.

[David_Berry]

Thanks for the quick response.

I performed your suggestions, but still no luck. I cannot select the PC without getting the "access is denied" message. At one point I completely turned off the firewall, but no luck. I'm not sure what else to try.

[Renuka_-]

Hello,

Have you tried the angle regarding rights, for this refer the foll technotes, do get back with the results:


1. Troubleshooting basic "access denied" and "access is denied" messages in Backup Exec 9.x
http://support.veritas.com/docs/266075


2. "Access denied" is reported when selecting a remote selection in Backup Exec 9.x and 10.0 for Windows Servers
http://support.veritas.com/docs/265086


3. "Access is denied" (a0008488 HEX or e0008488 HEX) is reported when a job fails
http://support.veritas.com/docs/266178

NOTE : If we do not receive your intimation within two business days, this post would be marked assumed answered and would be moved to the ‘answered threads’ pool.

[David_Berry]

Thanks for the suggestions. I tried them all, but still no luck. I can't believe how much time I'm having to spend on this. Any other suggestions?

[Ken_Putnam]

Have you tried connecting as the Local Admin account on the XP machine

From the BackupSelections pane, drill down to the XP machine, right click and give it the id in the format

"MachineName\Admin-ID" and the appropriate password


Also see http://seer.support.veritas.com/docs/241557.htm for specifics about using Backup Exec to remotely backup XP machines

[tejashree_Bhate]

Hello,

If you have not tried connecting using user defined solutions please follow the technote given below and verify results.

(title) How to create a user-defined selection in Backup Exec 9.x and 10.0 for Windows Servers

http://support.veritas.com/docs/254193

On the remote machine -go to the properties of user and verify if its member of Administrators group


Thanks.

NOTE : If we do not receive your intimation within two business days, this post would be marked assumed answered and would be moved to answered questions pool.

[David_Berry]

Ken,
Thanks. I created an alternate logon account using the local admin of the PC. It worked. I am puzzled, though... will I have to do this for every PC? On previous versions of BE, I only use 1 account: a service account called 'backupexec' which is a member of the Domain Admins group. I've never had any problems with it before. I'm not sure why I can't continue to use it.

[Ken_Putnam]

Verify the the domain account is in the local admin group on the XP machine

Do the services on your media server start with the Domain\BackupExec id?

[Renuka_-]

Hello,

Here is an extract from the technote :

1. Troubleshooting basic "access denied" and "access is denied" messages in Backup Exec 9.x
http://support.veritas.com/docs/266075

that we had recommended that you ' READ' :

#Tips and Tricks:
# Add the Backup Exec service account to the local administrators group on the resource
# Change the Backup Exec service account to match the Administrative account or service account for the resource (for example, changing the Backup Exec service account to use the same account that a Microsoft Exchange server is currently using as it's service account)
# Change the Backup Exec service account from a commonly used account name (such as Administrator) to a unique account. This prevents scenarios where account names are identical but passwords vary from resource to resource.
# Change the Backup Exec service account to a non-user account that will not be affected by regular password changes


NOTE : If we do not receive your intimation within two business days, this post would be marked assumed answered and would be moved to the ‘answered threads’ pool.

[Sheetal_Risbood]

As per our previous reply, marking the case as assumed answered and moving it to answered questions pool