Solved

Unable to restore from Backup Exec 2010 R2 to Exchange 2010

Posted on 2010-11-16
3
2,826 Views
Last Modified: 2012-06-27
Since we have upgraded to exchange 2010 sp1 I've been unable to restore from Symantec Backup Exec 2010 R2.

After spending a good 3 hours on the phone to symantec support we've narrowed it down to this potentially orphaned record in AD.

CN=SymantecEWSImpersonationRole\0ADEL:689c4dcc-adcc-4e6c-b596-1b107cee7467,CN=ApplicationImpersonation,CN=Roles,CN=RBAC,CN=Centrestone,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=local

If I recreate the role which is needed and is created by default when a restore job is run from BE 2010 it will create the role but we are still unable to restore.

Further information: Error from BE2010 is "e0000389 - The resource credentials for the restore job were unable to create a role assignment for ApplicationImpersonation. Review the credentials to ensure that it has the rights that are required for ApplicationImpersonation."

A search of the Symantec support website leads you to the following technotes: http://www.symantec.com/business/support/index?page=content&id=TECH125119 and http://www.symantec.com/business/support/index?page=content&id=TECH124615 which I've followed through, without any joy.

The jobs are being run under the domain administrator account, which has the Exchange Organisation, Server, Hygeine Management roles assigned. Just to be double sure I've assigned the Application Impersonation role to both the Organisation and Server Management roles in exchange, so that shouldn't be the issue.

I've confirmed that this record is no longer needed and have tried using ADSIedit to delete the record, but it doesn't appear in ADSIedit.

PS > I used ADExplorer from sysinternals to find the record.
0
Comment
Question by:Dextertronic
  • 2
3 Comments
 
LVL 11

Expert Comment

by:louisreeves
ID: 34152184

Did you try Rebuilding the EWS virtual directories? it is Just two steps from:

http://technet.microsoft.com/en-us/library/dd767439(WS.10).aspx

      Get-WebServicesVirtualDirectory | Remove-WebServicesVirtualDirectory  -Confirm:$false

      New-WebServicesVirtualDirectory -WebsiteName "SBS Web Applications" -InternalUrl "https://Sites/EWS/Exchange.asmx" -basicauthentication 1 -windowsauthentication 1

I am thinkin the role would  be deleted when you remove and add.
0
 
LVL 10

Accepted Solution

by:
Dextertronic earned 0 total points
ID: 34170709
Thanks for your comment, I've actually now resolved the problem.

Issue was Time sync issue between the backup media server and the exchange server, the Role Assignment actually had nothing to do with it.

Thanks,
NL

0
 
LVL 10

Author Closing Comment

by:Dextertronic
ID: 34195179
I ran net time \\dc /set /yes and the problem was resolved.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
NTP Servers 4 42
need assistance with a VBscript 3 31
exchange 13 17
PowerShell: ForEach-Object Export to CSV 4 22
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question