Anyone successful using NBAC enabled clients with GRT Exchange/Active Directory backups?

[_MBR_]

Hi,

Does anyone successfull make GRT backups of Exchange/Active Directory from clients with NBAC enabled?

My backups work like a charm until i enable NBAC on the client. After enabling the GRT portion fails (normal backup succeeds)

The errors i recieve:

7-10-2014 15:16:03 - Info bpbrm(pid=3800) from client EXMBXTEST.xxx.local: TRV - Starting granular backup processing for (Microsoft Information Store:\BackupTest\). This may take a while... 

7-10-2014 15:16:04 - Error bpbrm(pid=3800) from client EXMBXTEST.xxx.local: ERR - Unable to obtain image list. Confirm this client has access to images on server 'bs03.xxx.local' for client 'EXMBXTEST.xxx.local'
7-10-2014 15:16:04 - Error bpbrm(pid=3800) from client EXMBXTEST.xxx.local: ERR - Refer to the 'Configuring the hosts for backups that use Granular Recovery Technology (GRT) in virtual environments' section of the Exchange Administrator's Guide for more information
7-10-2014 15:16:04 - Info bpbrm(pid=3800) from client EXMBXTEST.xxx.local: TRV - Granular processing failed!     
7-10-2014 15:16:04 - Error bpbrm(pid=3800) from client EXMBXTEST.xxx.local: ERR - Error encountered while attempting to get additional files for Microsoft Information Store:\BackupTest\Logs_1412687643\
7-10-2014 15:16:04 - Error bpbrm(pid=3800) from client EXMBXTEST.xxx.local: ERR - Exchange granular restore from this image may not work.

Tried running the client under LOCAL SYSTEM account and a domain account. No difference..

I need NBAC enabled on clients to restrict all administrators on those clients from using the backup/restore client without having been provided these rights specifically

Thanks in advance.

Marcel

[V4]

try creating No.Restrictions on master server

http://www.symantec.com/docs/TECH148408

http://www.symantec.com/docs/TECH164569

About Exchange GRT everything to know http://www.symantec.com/docs/HOWTO73076

Similar posts as yours

https://www-secure.symantec.com/connect/forums/exchange-2010-backup-w-grt-fails-unable-obtain-image-list

Also ensure Distribute application mappings are correct

http://sysarticles.com/sharepoint-granular-backup-err-unable-to-obtain-image-list-confirm-this-client-has-access-to-images/

[_MBR_]

Hi CJS,

No.Restrictions does not fix the problem.

The backup is working correctly without NBAC so it is no mapping or restiction issue.

I even tried running the netbackup client services on the client using the same user as configured in the Exchange credentials but also no luck.

Any more ideas anyone?

thanks.

MBR

[V4]

GRT from NBU is something to do with NFS mounts. 

http://www.symantec.com/docs/TECH124810

[_MBR_]

Hi CJS,

Performed the NFS tests and all are succesfull as i expected bacause because backups runs fine without NBAC. It seems to me NBAC is not compatible with GRT backups out of the box.

Best Regards,

MBR

[_MBR_]

Hi All,

I finally have an "answer" from symantec support.

The NBAC team states NBAC isn't supported with any type op database backups.
So NBAC isn't supported for Active Directory, Exchange, MS SQL server and more.

So basically you can only use it for plain fileserver backups. :(

Seems to me NBAC is completely useless because which company doesn't have one of those.

I'm very disappointed hearing this. I expected much more from the #1 backup product regarding security.

In my opinion the following issues should be fixed in NBAC to be usefull:

1) Support for database oriented backups (AD,Exchange,SQL etc)
2) More granualar security model. Not only roles but also object based. For example rights to backup/restore for a particular client/group of clients etc.

[Marianne]

Not sure why anyone would want Access Control on NBU clients?

NBU logon and any kind of NBU GUI access on clients will automaitically be limited by the local admin rights at OS level on these servers.

[_MBR_]

Hi Marianne,

In our enviroment local administrators don´t neccesary have rights in the installed products.