Solved

SBS 2003 Backup finished with error code 0X80070569

Posted on 2006-07-22
5
1,886 Views
Last Modified: 2012-08-13
Our SBS 2003 backup fails with the following message in the log:

Backup Runner started.
LogonUser failed. (0x80070569)
NTBackup finished the backup with errors.

For more information about failed backups, see the article on troubleshooting your backup at the following Web page: http://go.microsoft.com/fwlink/?LinkId=18414

Backup ended at Saturday, July 22, 2006 10:27 AM
Backup error finished with error code 0X80070569

I have several SBS 2003 installations that I have access to, and all work except this one.  My research has found that the user SYSTEM has to have "Log on as a service" and "Log on as a batch job" rights in Default Domain Controllers Security Settings | Local Policies | User Rights Assignments.  

On those that work, SYSTEM is NOT listed in these policies as having this right.  When I compare settings on those that work and the one where it does not, I cannot find a difference, yet the SBS 2003 backup will not run and will give the above message within a minute of starting, whether it is scheduled or started manually.

Also, I see where the user that runs the backup cannot be a member of the Mobile users or Remote Security Operators groups, since these groups deny log in as a service.  This is not the case on the SBS 2003 installation that can't start the SBS 2003 backup.

The NT Backup runs without difficulty.

Someone please give me something else to go on!
0
Comment
Question by:timinoldsmar
  • 2
5 Comments
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 100 total points
ID: 17162281
Generally, you wouldn't have to modify ANY permissions for this to work, so somewhere along the line someone HAS modified permissions.  The backup task is run by the SYSTEM account which uses the "Backup User" account as well.

Please make sure that all of your users are in the default OU of MyBusiness\Users\SBSUsers.  This should include the account for "Backup User" which should be set as "disabled". (the SYSTEM account will enable it as needed).  The Backup User account should be a member of the following groups:

Backup Operators
Domain Admins
Domain Users

None of these groups should be a member of either the Remote Operators or Power Users groups.

Regarding the "logon as a batch job" and "logon as a service", the SYSTEM account most definitely needs to be listed in the "logon as a service".  There should be NO accounts listed in either the "deny logon as a batch job" or "deny logon as a service".

If all of that is correct, then rerun the backup wizard to NOT USE SBS Backup.  When that completes run it again to reconfigure the backup once more.

Jeff
TechSoEasy

0
 
LVL 1

Author Comment

by:timinoldsmar
ID: 17167505
You are a genius, Jeff!  Wow, great troubleshooting!  Your assessment was right on the money, even the initial analysis of someone changing permissions, which is what we suspected.

To summarize, based upon your instructions, I added the SYSTEM account to "log on as a service", removed Domain users from the Remote Operators group, and reran the wizard to NOT use SBS backup and then again to use it, and it ran!

In my opinion, removing the Domain users group from being members of the Remote Operators group was the key!
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17169705
Well, only a genius according to EE's rules.  Otherwise, I just don't mess with any of those settings on my SBS installs so it was pretty easy to just look at one of them and tell you how it should be configured.  :-)

Jeff
TechSoEasy
0
 
LVL 5

Expert Comment

by:Ubertam
ID: 23407800
I had this same problem.  Using your information, I found that Domain Admins was a member of Remote Operators.  Backup User is a Domain Admin, and hence a Remote Operator.  Removing Domain Admins from Remote Operators, setting "Do not use SBS backup" and running the wizard again fixed it no problem.

Thanks for the help.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now