[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Can I backup VMware guests as regular physical servers by Symantec Backup Exec?

Posted on 2010-01-03
31
Medium Priority
?
894 Views
Last Modified: 2013-12-01
Hallo Experts

as in title, can I backup VMware guests (VMs) as regular physical servers by Symantec Backup Exec?

I do not mean some kind of snapshot backup, or some kind of consolidated backup, I mean backup of files, system state, mainly exchange database and so on.

My scenario is

Backup server:
Windows Server 2003 R2
Symantec BackupExec 12.0 with Exchange agent

VMware guest - VM:
Windows Server 2008
Microsoft Exchange 2007
Symantec Remote agent for windows servers

When I want to backup anything on VM, I will get the error with Failed Access - Access is denied (with System Logon account). I tried to use "root" user, or any kind of Domain Admin, but I still have this error.

Its there problem with some permissions od VMware host, or guest, or I will not be able to backup anything without BackupExec agent for VMware Virtual Infrastructure ?

Thanks for help
0
Comment
Question by:AndrejArdan
  • 13
  • 9
  • 4
  • +2
31 Comments
 
LVL 74

Expert Comment

by:Glen Knight
ID: 26165199
I do!
You don't have to do vMWare backups you can just use the normal agents to back them up the same way you do with any other server.
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 26165204
Forgot to answer the second part of your question.

To actually backup the VM's you need to use a VMWare aware backup product.
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26165237
Make sure the backup exec service account has local admin permissions on the VM, just like a physical server.  There is no difference in backing up the OS of a VM vs Physical.

If you want to do the vmware aware backups you can activate the 60 day eval of the AVVI agent (must be running version 12.5 of backup exec) and try it out. You will need to install VCB on the media server.  You could also use VCB scritps to backup the VM itself.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LVL 24

Expert Comment

by:ryder0707
ID: 26165247
Traditional backup method with agent installed on each VM is really no problem as the backup server will only need to communicate with the agent installed and it wont know its a physical or VM
There is no special configuration/permission need to set at vmware infrastructure
The error you get most likely due to insufficient service account permission on the guest OS, try to check policy settings
0
 

Author Comment

by:AndrejArdan
ID: 26165258
thanks Paul

can you pls advice me, how I could put the "local admin premission" on the VM? because VM is normally in Active Directory, so I tought, that Domain Admin account could be sufficient for this. Shall I also setup something with permissions on the VMware host?

What means first part of your answer, its very important for me, because my client decided to use VMware because of consolidation of some servers on one ESXi server. He is not planing to buy WMware sphere (for now) and also agent for VMware Virtual Infrastructure is very expensive, if you realize that he want have only 2-3 VMs on ESXi host. All agents needed for backup physical servers ha has already bought.
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26165277
If you're using a backup exec service account in backup exec I would recommend making it a domain admin as a test and see if you have access to the VM.  

Are you using a domain admin account as a service account or are you using a designates backup exec service account?  If you're using a dedicated accoun did you enter while Backup Exec was being installed so that it gave it the appropriate permissions?  

At this point I would work the issue as you would a physical server, there is no difference accessing a server that is virtual or physical using the agent inside the OS>
0
 

Author Comment

by:AndrejArdan
ID: 26165747
As System Logon account I use Domain Admin account (administrator), so it should have all the possible rights. On VM Win2008 I tried to turn off firewall and it does not help. Maybe can be some problem with configuration of my VM? I am not very experienced with VMware so far.

thanks
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26165962
First make sure you've installed the backup exec remote agent on the VM and ithat the service is running

As a baseline login as the domain admin and try to backup with ntbackup. If you have issues with ntbackup then it's an OS issue
0
 
LVL 24

Assisted Solution

by:ryder0707
ryder0707 earned 400 total points
ID: 26167811
Even if you are domain admin but if policy deny you from doing someting you will be still denied
That is why I ask you to check policy for any specific rule
0
 

Author Comment

by:AndrejArdan
ID: 26169938
Backup exec is installed corectly and is working. I tried to make backup of files of that VM by ntbackup from other computer trought network and it worked correctly. So the problem will be on Win2008, probably some security settings, unfortunatelly, thats my first Win2008 installation, so I am no experienced with new security settings.
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 26169967
have you installed the Backup Exec agent onto the server?
When yo do this through the backup Exec console it makes the necessary changes to the system.

Also if this is your first Windows 2008 server does that mean your DNS Servers are Windows 2003?
if so you need to do either one of 2 things, disable IPv6 on your Windows 2008 server: http://support.microsoft.com/kb/929852
Or configure your Windows 2003 DNS for coexistence: http://technet.microsoft.com/en-us/library/cc738372(WS.10).aspx
 
0
 

Author Comment

by:AndrejArdan
ID: 26170502
thanks for info

I disabled IPv6 according MS article (it looks it is disabled, because I do not see any IPv6 mentioned in network card config), but it still does not help :(

I installed test VM with Windows Server 2003 and try to make backup by remote agent and it works perfectly, so problem will be with permissions on the Win2008 server, unfortunatelly, I do know, how to do it.

0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 26170542
Have you restarted the VM since you disabled IPv6?

What exactly happens when you try to run a backup of the 2008 server?
90% of my machines are 2008 or 2008 R2 and they work perfectly well with BackupExec.
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26170791
what version of backup exec are you running?
0
 

Author Comment

by:AndrejArdan
ID: 26170844
to Demazter:

Yes, I restarted it

What exactly happen - when I try just to make selection and I choose this VM, I can see it between netwok normally, but when I click on it, I will get the error Failed Access. See image.

to Paul:
Symantec Backup Exec 12.0

sbe-failed-access.jpg
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26170894
In your job when you do a credentails check does it give you access denied on everything or partially such as Exchange Information Store?

You also mentioned that backup exec is installed correctly but how about the remote backup exec agent on the virtual machine?  You should also check to see if Backup Exec 12 support Windows 2008R2, I know that it supports regular Windows 2008 but you should check to see if there are any patches that need to be installed or an upgrade to 12.5 needs to be made.

Have you backed up any physical Win2008 R2 Servers with BE12?
0
 

Author Comment

by:AndrejArdan
ID: 26172064
Hallo Paul

I am trying backup normal standard version od Windows Server 2008, not R2 but its 64bit. I get that error exactly I choose any resource on it, just after the click on the resource - Windows Systems - ServerName.domain.com - after that I got error :(

thanks for all help
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26172083
Is the backup exec remote agent running on this windows 2008 x64 server?  Remember, you need to install the x64 backup exec remote agent.
0
 

Author Comment

by:AndrejArdan
ID: 26172446
Yes, its runing and it should be x64 installation, even tough in programs I see only: Symantec Remote Agent for Windows Servers but is installed in Program Files (not x86). Also I instaled it from RAWS64 folder of Symantec.
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26172646
that's what I was looking for.

With Windows 2008 make sure you shutdown the built in firewall that may be blocking the ports you need.

0
 

Author Comment

by:AndrejArdan
ID: 26173380
I turned off firewall before and it does not help. I also checked in Windows Firewall with Advaced Security, that Symantec Backup Exec agent has allowed everything, so it should not be problem of firewall.

For testing purpose, I installed another Windows 2008 Server (now 32bit) in VM, and the same error, Failed Access :(

So now, I can not use these servers in production environment, becuase I am not able to make backup :(
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26174655
Had some issues in the past with Backup Exec 12 and Windows 2008, especially x64.  As a test if you have space on the datastore try installing a VM with Backup Exec 12.5 trial and doing a disk to disk backup of the Windows 2008 Servers.  If you have template of windows 2003 or 2008 x64 it will work just fine and installation should take under an hour with OS and BE
0
 

Author Comment

by:AndrejArdan
ID: 26176653
I tried installed SBE 12.5 on VM (Windows Server 2008 32bit) and what is really strange, that I do not see any resources, so I can not backup anything. I will be trying it tomorrow, very tired now.

Also, I noticed, that error message I still get on the SBE 12.0 with "failed access" is the same like when I want to connect disconnected resource (I found resource that is not used yet but is in the list of user-defined resources and when I choose it, I got the same error)

0
 

Expert Comment

by:pinheiroa
ID: 26202346
Please check this requirements:
http://seer.support.veritas.com/docs/288777.htm

Hope this helps
0
 

Author Comment

by:AndrejArdan
ID: 26203994
thanks, unfortunatelly that topic regards problems with backup of exchange, I have problems with backing up all....

but it looks that something is wrong with my Windows Server 2008 policies, maybe some GPO on Windows 2003 domain. Windows 2008 Server are not domain controllers, so I did not make /adprep.
0
 
LVL 42

Expert Comment

by:Paul Solovyovsky
ID: 26205372
Have you disabled user access controls? (UAC).  Disable UAC and give it a shot
0
 

Accepted Solution

by:
AndrejArdan earned 0 total points
ID: 26279831
Problem solved by myself, it was regarding the fact, that domain admins group was not able to "log on as batch" :)

http://seer.entsupport.symantec.com/docs/316787.htm
http://seer.entsupport.symantec.com/docs/302352.htm

thanks all for help

0
 
LVL 24

Expert Comment

by:ryder0707
ID: 26279836
As i mentioned in my comments, its a policy issue :)
0
 

Author Comment

by:AndrejArdan
ID: 26279853
Yes, ryder, you mentioned it, for that I assaigned you some points. Unfortunatelly, as I said, I am not very good in security policy, and I had to find accurate solution (I am really curious, that I have not find it on Symantec forums before, because I was looking there for really long time).

sorry for that :)
0
 

Author Comment

by:AndrejArdan
ID: 26279862
I wanted say, that I wander why I did not find it before (sorry for bad english)
0
 
LVL 24

Expert Comment

by:ryder0707
ID: 26279864
Thanks for the points, since I'm not familiar with Symantec product i'm not able to directly guide you but in general you should be able to perform backup as you normally do on a physical machine, no special settings in vmware
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Windows Server 2003 introduced persistent Volume Shadow Copies and made 2003 a must-do upgrade.  Since then, it's been a must-implement feature for all servers doing any kind of file sharing.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This Micro Tutorial walks you through using a remote console to access a server and install ESXi 5.1. This example is showing remote access and installation using a Dell server. The hypervisor is the very first component of your virtual infrastructu…

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question