Can I backup VMware guests as regular physical servers by Symantec Backup Exec?
Hallo Experts
as in title, can I backup VMware guests (VMs) as regular physical servers by Symantec Backup Exec?
I do not mean some kind of snapshot backup, or some kind of consolidated backup, I mean backup of files, system state, mainly exchange database and so on.
My scenario is
Backup server:
Windows Server 2003 R2
Symantec BackupExec 12.0 with Exchange agent
VMware guest - VM:
Windows Server 2008
Microsoft Exchange 2007
Symantec Remote agent for windows servers
When I want to backup anything on VM, I will get the error with Failed Access - Access is denied (with System Logon account). I tried to use "root" user, or any kind of Domain Admin, but I still have this error.
Its there problem with some permissions od VMware host, or guest, or I will not be able to backup anything without BackupExec agent for VMware Virtual Infrastructure ?
Thanks for help
as in title, can I backup VMware guests (VMs) as regular physical servers by Symantec Backup Exec?
I do not mean some kind of snapshot backup, or some kind of consolidated backup, I mean backup of files, system state, mainly exchange database and so on.
My scenario is
Backup server:
Windows Server 2003 R2
Symantec BackupExec 12.0 with Exchange agent
VMware guest - VM:
Windows Server 2008
Microsoft Exchange 2007
Symantec Remote agent for windows servers
When I want to backup anything on VM, I will get the error with Failed Access - Access is denied (with System Logon account). I tried to use "root" user, or any kind of Domain Admin, but I still have this error.
Its there problem with some permissions od VMware host, or guest, or I will not be able to backup anything without BackupExec agent for VMware Virtual Infrastructure ?
Thanks for help
Forgot to answer the second part of your question.
To actually backup the VM's you need to use a VMWare aware backup product.
To actually backup the VM's you need to use a VMWare aware backup product.
Make sure the backup exec service account has local admin permissions on the VM, just like a physical server. There is no difference in backing up the OS of a VM vs Physical.
If you want to do the vmware aware backups you can activate the 60 day eval of the AVVI agent (must be running version 12.5 of backup exec) and try it out. You will need to install VCB on the media server. You could also use VCB scritps to backup the VM itself.
If you want to do the vmware aware backups you can activate the 60 day eval of the AVVI agent (must be running version 12.5 of backup exec) and try it out. You will need to install VCB on the media server. You could also use VCB scritps to backup the VM itself.
Traditional backup method with agent installed on each VM is really no problem as the backup server will only need to communicate with the agent installed and it wont know its a physical or VM
There is no special configuration/permission need to set at vmware infrastructure
The error you get most likely due to insufficient service account permission on the guest OS, try to check policy settings
There is no special configuration/permission need to set at vmware infrastructure
The error you get most likely due to insufficient service account permission on the guest OS, try to check policy settings
ASKER
thanks Paul
can you pls advice me, how I could put the "local admin premission" on the VM? because VM is normally in Active Directory, so I tought, that Domain Admin account could be sufficient for this. Shall I also setup something with permissions on the VMware host?
What means first part of your answer, its very important for me, because my client decided to use VMware because of consolidation of some servers on one ESXi server. He is not planing to buy WMware sphere (for now) and also agent for VMware Virtual Infrastructure is very expensive, if you realize that he want have only 2-3 VMs on ESXi host. All agents needed for backup physical servers ha has already bought.
can you pls advice me, how I could put the "local admin premission" on the VM? because VM is normally in Active Directory, so I tought, that Domain Admin account could be sufficient for this. Shall I also setup something with permissions on the VMware host?
What means first part of your answer, its very important for me, because my client decided to use VMware because of consolidation of some servers on one ESXi server. He is not planing to buy WMware sphere (for now) and also agent for VMware Virtual Infrastructure is very expensive, if you realize that he want have only 2-3 VMs on ESXi host. All agents needed for backup physical servers ha has already bought.
If you're using a backup exec service account in backup exec I would recommend making it a domain admin as a test and see if you have access to the VM.
Are you using a domain admin account as a service account or are you using a designates backup exec service account? If you're using a dedicated accoun did you enter while Backup Exec was being installed so that it gave it the appropriate permissions?
At this point I would work the issue as you would a physical server, there is no difference accessing a server that is virtual or physical using the agent inside the OS>
Are you using a domain admin account as a service account or are you using a designates backup exec service account? If you're using a dedicated accoun did you enter while Backup Exec was being installed so that it gave it the appropriate permissions?
At this point I would work the issue as you would a physical server, there is no difference accessing a server that is virtual or physical using the agent inside the OS>
ASKER
As System Logon account I use Domain Admin account (administrator), so it should have all the possible rights. On VM Win2008 I tried to turn off firewall and it does not help. Maybe can be some problem with configuration of my VM? I am not very experienced with VMware so far.
thanks
thanks
First make sure you've installed the backup exec remote agent on the VM and ithat the service is running
As a baseline login as the domain admin and try to backup with ntbackup. If you have issues with ntbackup then it's an OS issue
As a baseline login as the domain admin and try to backup with ntbackup. If you have issues with ntbackup then it's an OS issue
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Backup exec is installed corectly and is working. I tried to make backup of files of that VM by ntbackup from other computer trought network and it worked correctly. So the problem will be on Win2008, probably some security settings, unfortunatelly, thats my first Win2008 installation, so I am no experienced with new security settings.
have you installed the Backup Exec agent onto the server?
When yo do this through the backup Exec console it makes the necessary changes to the system.
Also if this is your first Windows 2008 server does that mean your DNS Servers are Windows 2003?
if so you need to do either one of 2 things, disable IPv6 on your Windows 2008 server: http://support.microsoft.com/kb/929852
Or configure your Windows 2003 DNS for coexistence: http://technet.microsoft.com/en-us/library/cc738372(WS.10).aspx
When yo do this through the backup Exec console it makes the necessary changes to the system.
Also if this is your first Windows 2008 server does that mean your DNS Servers are Windows 2003?
if so you need to do either one of 2 things, disable IPv6 on your Windows 2008 server: http://support.microsoft.com/kb/929852
Or configure your Windows 2003 DNS for coexistence: http://technet.microsoft.com/en-us/library/cc738372(WS.10).aspx
ASKER
thanks for info
I disabled IPv6 according MS article (it looks it is disabled, because I do not see any IPv6 mentioned in network card config), but it still does not help :(
I installed test VM with Windows Server 2003 and try to make backup by remote agent and it works perfectly, so problem will be with permissions on the Win2008 server, unfortunatelly, I do know, how to do it.
I disabled IPv6 according MS article (it looks it is disabled, because I do not see any IPv6 mentioned in network card config), but it still does not help :(
I installed test VM with Windows Server 2003 and try to make backup by remote agent and it works perfectly, so problem will be with permissions on the Win2008 server, unfortunatelly, I do know, how to do it.
Have you restarted the VM since you disabled IPv6?
What exactly happens when you try to run a backup of the 2008 server?
90% of my machines are 2008 or 2008 R2 and they work perfectly well with BackupExec.
What exactly happens when you try to run a backup of the 2008 server?
90% of my machines are 2008 or 2008 R2 and they work perfectly well with BackupExec.
what version of backup exec are you running?
ASKER
to Demazter:
Yes, I restarted it
What exactly happen - when I try just to make selection and I choose this VM, I can see it between netwok normally, but when I click on it, I will get the error Failed Access. See image.
to Paul:
Symantec Backup Exec 12.0
sbe-failed-access.jpg
Yes, I restarted it
What exactly happen - when I try just to make selection and I choose this VM, I can see it between netwok normally, but when I click on it, I will get the error Failed Access. See image.
to Paul:
Symantec Backup Exec 12.0
sbe-failed-access.jpg
In your job when you do a credentails check does it give you access denied on everything or partially such as Exchange Information Store?
You also mentioned that backup exec is installed correctly but how about the remote backup exec agent on the virtual machine? You should also check to see if Backup Exec 12 support Windows 2008R2, I know that it supports regular Windows 2008 but you should check to see if there are any patches that need to be installed or an upgrade to 12.5 needs to be made.
Have you backed up any physical Win2008 R2 Servers with BE12?
You also mentioned that backup exec is installed correctly but how about the remote backup exec agent on the virtual machine? You should also check to see if Backup Exec 12 support Windows 2008R2, I know that it supports regular Windows 2008 but you should check to see if there are any patches that need to be installed or an upgrade to 12.5 needs to be made.
Have you backed up any physical Win2008 R2 Servers with BE12?
ASKER
Hallo Paul
I am trying backup normal standard version od Windows Server 2008, not R2 but its 64bit. I get that error exactly I choose any resource on it, just after the click on the resource - Windows Systems - ServerName.domain.com - after that I got error :(
thanks for all help
I am trying backup normal standard version od Windows Server 2008, not R2 but its 64bit. I get that error exactly I choose any resource on it, just after the click on the resource - Windows Systems - ServerName.domain.com - after that I got error :(
thanks for all help
Is the backup exec remote agent running on this windows 2008 x64 server? Remember, you need to install the x64 backup exec remote agent.
ASKER
Yes, its runing and it should be x64 installation, even tough in programs I see only: Symantec Remote Agent for Windows Servers but is installed in Program Files (not x86). Also I instaled it from RAWS64 folder of Symantec.
that's what I was looking for.
With Windows 2008 make sure you shutdown the built in firewall that may be blocking the ports you need.
With Windows 2008 make sure you shutdown the built in firewall that may be blocking the ports you need.
ASKER
I turned off firewall before and it does not help. I also checked in Windows Firewall with Advaced Security, that Symantec Backup Exec agent has allowed everything, so it should not be problem of firewall.
For testing purpose, I installed another Windows 2008 Server (now 32bit) in VM, and the same error, Failed Access :(
So now, I can not use these servers in production environment, becuase I am not able to make backup :(
For testing purpose, I installed another Windows 2008 Server (now 32bit) in VM, and the same error, Failed Access :(
So now, I can not use these servers in production environment, becuase I am not able to make backup :(
Had some issues in the past with Backup Exec 12 and Windows 2008, especially x64. As a test if you have space on the datastore try installing a VM with Backup Exec 12.5 trial and doing a disk to disk backup of the Windows 2008 Servers. If you have template of windows 2003 or 2008 x64 it will work just fine and installation should take under an hour with OS and BE
ASKER
I tried installed SBE 12.5 on VM (Windows Server 2008 32bit) and what is really strange, that I do not see any resources, so I can not backup anything. I will be trying it tomorrow, very tired now.
Also, I noticed, that error message I still get on the SBE 12.0 with "failed access" is the same like when I want to connect disconnected resource (I found resource that is not used yet but is in the list of user-defined resources and when I choose it, I got the same error)
Also, I noticed, that error message I still get on the SBE 12.0 with "failed access" is the same like when I want to connect disconnected resource (I found resource that is not used yet but is in the list of user-defined resources and when I choose it, I got the same error)
ASKER
thanks, unfortunatelly that topic regards problems with backup of exchange, I have problems with backing up all....
but it looks that something is wrong with my Windows Server 2008 policies, maybe some GPO on Windows 2003 domain. Windows 2008 Server are not domain controllers, so I did not make /adprep.
but it looks that something is wrong with my Windows Server 2008 policies, maybe some GPO on Windows 2003 domain. Windows 2008 Server are not domain controllers, so I did not make /adprep.
Have you disabled user access controls? (UAC). Disable UAC and give it a shot
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
As i mentioned in my comments, its a policy issue :)
ASKER
Yes, ryder, you mentioned it, for that I assaigned you some points. Unfortunatelly, as I said, I am not very good in security policy, and I had to find accurate solution (I am really curious, that I have not find it on Symantec forums before, because I was looking there for really long time).
sorry for that :)
sorry for that :)
ASKER
I wanted say, that I wander why I did not find it before (sorry for bad english)
Thanks for the points, since I'm not familiar with Symantec product i'm not able to directly guide you but in general you should be able to perform backup as you normally do on a physical machine, no special settings in vmware
You don't have to do vMWare backups you can just use the normal agents to back them up the same way you do with any other server.