Link to home
Start Free TrialLog in
Avatar of SpiderPig
SpiderPigFlag for United States of America

asked on

Backup Exec 12.5 System State Security Error?!

Hi Folks,
I am getting the following error:

Error category    : Security Errors
Error             : e000fe7d - Access is denied.
To back up or restore System State, administrator privileges are required.
For additional information regarding this error refer to link V-79-57344-65149

I could not find any info on Symantec website. Anyone here encountered this before? If so any solutions?

Thanks,
SP.
Avatar of rhandels
rhandels
Flag of Netherlands image

Euhm.. I might be a bit of a dumb ass on this one, but are you using domain admin credentials to back up the system state?? And is this a subdomain of an entire forest or just a single domain/forest config? You are able to give up a specific user for the job, also make sure the password is typed in correctly..
Make sure the "Backup Exec Remote Agent" service on the system you're trying to back up is started using the "LocalSystem" account. Make sure the Backup Exec logon account defined in your backup job is part of the domain admins group and the backup operators group on the server you're trying to back up.

Do you see any "Failure Audit" events in the Security event log of the server you're trying to back up at the exact time of the backup failure? If so, please post it.
Avatar of SpiderPig

ASKER

Hi All,
Its a single SBS domain with no sub domains or anything like that. I am using the administrator account. I did notice it wasnt a member of the backup operators so I added it. Other than that, no failure audit in event viewer, and remote agent is localsystem. I am going to run another backup job right now to check. The funny thing is when I do a single backup test and I am backing up only the system state it works great. When its part of the regular incremental backup procedure it gives me the error.

Here is the event viewer app error:
Event Type:      Error
Event Source:      Backup Exec
Event Category:      None
Event ID:      34113
Date:            12/23/2009
Time:            11:23:16 PM
User:            N/A
Computer:      SRV
Description:
Backup Exec Alert: Job Failed
(Server: "SRV") (Job: "Main Backup - Daily Incremental") Main Backup - Daily Incremental -- The job failed with the following error: Access is denied.
To back up or restore System State, administrator privileges are required.
 

 For more information, click the following link:
http://eventlookup.veritas.com/eventlookup/EventLookup.jhtml

Thanks for your help.
What happens if you try to do a full backup of the System State (as a different job)? Normally it shouldn;t give you this error but it might be that it generates this because it's not possible to do an incremental backup of the system state.. I thought it was only possible to do a full backup of system state..
If the error only happens during the incremental backup job, I would also suggest unchecking the System State from the selections list. Also make sure there is no "System State" selected in the "View selection details" tab. Then submit the job and open the job again to reselect the System State.
Avatar of Iamthecreator
Ensure that the the BESA or the Backup Exec Service Account has LOG ON AS A BATCH JOB rights in the DOMAIN SECURITY POLICY.
When I run the backup as an independent separate backup job it works fine. It happened with both the Inc and full  backups. I am going to try iamthecreator solution. the funny thing is that it used to work fine up until i ran a SP3 update or the latest update from symantec.

By the way I just got another error on this.

I will keep you posted.

thanks all.
Avatar of PernC2006
PernC2006

Do you have BackupExec 12.5 SP3 installed along with the latest hot fixes (327039 & 334837)?

Since installing those hot fixes last week on a domain controller we have not been able to backup the system state, we are getting the same error code you have.
We have a call opened with Symantec but so far do not have a fix for the problem.

This seems to be a common issue after installing those hot fixes...  http://www.symantec.com/connect/forums/access-denied-errors-and-faliure-messages
The fix in our case was to add the BackupExec service account to the Domain Admins global group (it was a member of the builtin "domain local" administrators group).

Hotfix 334837 exposed the "Active Directory" object under System State which had not been available before the hot fix (using the permissions we had set) but the service account did not have access to the object and the backup failed.
This also means that we were not getting a complete backup of the active directory before the hot fix so at least some good came from installing the latest patches.
Since adding the service account to the Domain Admins global group the backup is running correctly for us.
That's very good to know Pern! I "solved" it by disabling the system state backup. But I am going to try your recommendation for sure. Thank you very much for that.

By the way, yes I did installed the latest patches that's what caused it to stop working in the first place.
I am having this same issue and only since the Symantec updates were run on the 19th which applied the Symantec patches.
It was the hotfix that caused the problem.  However it seems  that you can fix it by making the user account that is running the backup to the "Backup Operators" group. That account still needs to be in the "Administrators" and "Domain Admins" groups.
Thanks!

I have been having the same issue with a client of our that is running Backup Exec 12.5 rev. 1364 (SP4 installed).

The system state backup would fail with "access denied" after backing up only a couple hundred MBs.

The backup credentials I was using was a domain administrator.  Adding the user to the backup operators group solved the problem!
ASKER CERTIFIED SOLUTION
Avatar of ggilmour
ggilmour

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Removed System State backup and it worked. Kind of sucks though because I wanted to use it. Not sure if I consider this a real solution...

Thanks for the help all.
I have solved this by creating a new Backup user account on the domain, making it a member of the domain Admins and setting this as the account to use.