andyhines
asked on
Backup Exec 8.5-failure to backup shared drive on another server
backup exec 8.5 is currently running on server1(windows server 2000)
It is responsible for backing up all the network folders which are directly attached to that server.
It is also used to backup certain network shared folders
server2(windows server 2003) is our lotus notes server
the files that need to be backed up on this server are on a drive that is a hidden network share.
We are not using any agents to back this up
The backup was working fine until last friday when I updated the servers using the windows automatic updates.
After I did this the backup of all the files on server2 refuses to work
Backup exec is reporting in the log ""Unable to attach to \\server2\shareName$"
All the other backup locations are being backed up
server2s security log is reporting error 529 at the time the backup starts roughly stating that
server cannot connect
Backupexec is running with full admin rights on all its services on server1
I am guessing that this might be a security issue but I'm not sure
All help greatly appreciated
It is responsible for backing up all the network folders which are directly attached to that server.
It is also used to backup certain network shared folders
server2(windows server 2003) is our lotus notes server
the files that need to be backed up on this server are on a drive that is a hidden network share.
We are not using any agents to back this up
The backup was working fine until last friday when I updated the servers using the windows automatic updates.
After I did this the backup of all the files on server2 refuses to work
Backup exec is reporting in the log ""Unable to attach to \\server2\shareName$"
All the other backup locations are being backed up
server2s security log is reporting error 529 at the time the backup starts roughly stating that
server cannot connect
Backupexec is running with full admin rights on all its services on server1
I am guessing that this might be a security issue but I'm not sure
All help greatly appreciated
ASKER
backup exec is running as the domain admin on server1.
I can also browse to the files on the hidden share on server2 from server1
the whole drive on server2 (d$) is the hidden share and we backup folders within this drive
when I click on properties on the files on the shared drive the domain admin has full control
the only strange thing that I have never seen before is that when i go to the sharing tab
on the drive properties(w2k3) and click on permissions button i get the following message
"This has been shared for administrative purposes. The permissions cannot be set" - is this normal when the share is at the whole drive level
anybody got any ideas- am pretty stuck
should i close this and repost it in a security area????
I can also browse to the files on the hidden share on server2 from server1
the whole drive on server2 (d$) is the hidden share and we backup folders within this drive
when I click on properties on the files on the shared drive the domain admin has full control
the only strange thing that I have never seen before is that when i go to the sharing tab
on the drive properties(w2k3) and click on permissions button i get the following message
"This has been shared for administrative purposes. The permissions cannot be set" - is this normal when the share is at the whole drive level
anybody got any ideas- am pretty stuck
should i close this and repost it in a security area????
Ok, you made it sound as if you were backing up a different hiddent share than the admin share.
Yes, that "permissions" error is standard on the admin share.
ok.. easy way around this (maybe) is to create another share for the root of D:\
give everyone full rights and see if you can kick off a backup.
That should determine if its a security issue or not.
if it works, you have some kind of problem accessing D$ via backup exec.
if it doesnt work, you may have a networking issue of some kind.
-al
Yes, that "permissions" error is standard on the admin share.
ok.. easy way around this (maybe) is to create another share for the root of D:\
give everyone full rights and see if you can kick off a backup.
That should determine if its a security issue or not.
if it works, you have some kind of problem accessing D$ via backup exec.
if it doesnt work, you may have a networking issue of some kind.
-al
ASKER
Just created a new share on the D: drive and
gave full permissions to the administrator and to everyone and to the PC where backup exec is running from.
Tried to run a test backup of a folder on the new share but no luck
Am getting the following error on the server2 security log
__________________________
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 24/08/2005
Time: 13:10:58
User: NT AUTHORITY\SYSTEM
Computer: "server2"
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: "mydomain"
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: "server1"
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: "server1 ip address"
Source Port: 0
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
__________________________
gave full permissions to the administrator and to everyone and to the PC where backup exec is running from.
Tried to run a test backup of a folder on the new share but no luck
Am getting the following error on the server2 security log
__________________________
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 24/08/2005
Time: 13:10:58
User: NT AUTHORITY\SYSTEM
Computer: "server2"
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: "mydomain"
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: "server1"
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: "server1 ip address"
Source Port: 0
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
__________________________
ok.
is it possible that backup exec is running on a LOCAL ADMIN account and not a domain admin account.
On the backup job (or a test job if u dont wanna mess with ur live job) check your resource credentials.
rather than use a SYSTEM LOGON ACCOUNT, change it to someone with dom admin rights.
Many times, network admins dont leave ADMINISTRATOR as an dom admin account, they use something different and leave administrator as a local admin account.
At worst if you dont want to change your jobs, you can give \\server1\administrator rights to \\server2\sharename
try that & see if it works for u
-al
is it possible that backup exec is running on a LOCAL ADMIN account and not a domain admin account.
On the backup job (or a test job if u dont wanna mess with ur live job) check your resource credentials.
rather than use a SYSTEM LOGON ACCOUNT, change it to someone with dom admin rights.
Many times, network admins dont leave ADMINISTRATOR as an dom admin account, they use something different and leave administrator as a local admin account.
At worst if you dont want to change your jobs, you can give \\server1\administrator rights to \\server2\sharename
try that & see if it works for u
-al
ASKER
Backup exec is definately running on the network admin user name and password.
I re-entered the user name and password into all 7 backup exec processes yesterday before I ran the test job on the new share.
I've also given the network admin and the backup exec server full permissions on the security tab and the permissions
area on the sharing tab on the properties for the drive i want to back up.
And still getting the same message in the security log on server2,
upping the points!
I re-entered the user name and password into all 7 backup exec processes yesterday before I ran the test job on the new share.
I've also given the network admin and the backup exec server full permissions on the security tab and the permissions
area on the sharing tab on the properties for the drive i want to back up.
And still getting the same message in the security log on server2,
upping the points!
No comment has been added to this question in more than 21 days, so it is now classified as abandoned..
I will leave the following recommendation for this question in the Cleanup topic area:
PAQ - Refund
Any objections should be posted here in the next 4 days. After that time, the question will be closed.
mcp_jon
EE Cleanup Volunteer
I will leave the following recommendation for this question in the Cleanup topic area:
PAQ - Refund
Any objections should be posted here in the next 4 days. After that time, the question will be closed.
mcp_jon
EE Cleanup Volunteer
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Just a guess. but this might still be security related.
Most hidden shares have enhanced security, usually on the share level and not the file.
You have two options if this is the problem
1) double check the share level permissions on \\server2\sharename$ and confirm that the account ur using to backup with has right on the share. (you should also check the file permissions for the hell of it)
2) rather than backup that 1 specific hidden share, you might be inclined to backup the whole drive in the form of \\server2\d$ or whatever that drive may be. Using the administrative share, as long as the backup account is an admin, you should have no problems.
let me know if this helps
-Al