Backing up Domain Controller in another AD domain issue ?

[albertwt]

Hi People,

I have the existing AD Domain controllers VMs backed up with Veeam Backup 9.0U1 with no issue so far since the service account is using DOMAIN\SVC-BKP account same AD domain as the Veeam server as well DOMAIN.com

DC01.domain.com
DC02.domain.com

However, when I add the new AD Domain controller from another AD domain DOMAIN2 it is failed with:

Failed to prepare guest for hot backup.
Error: Failed to connect to guest agent.
Errors: 'Cannot connect to the host's administrative share. Host: [DC1.domain2.com IP]. Account: [DOMAIN\SVC-BKP].
Win32 error:Access is denied. Code: 5 '
Error: Failed to connect to guest agent.
Errors: 'Cannot connect to the host's administrative share.
Host: [DC1.domain2.com IP]. Account: [DOMAIN\SVC-BKP]. Win32 error:Access is denied. Code: 5 '

Of course I cannot add DOMAIN\SVC-BKP to the Local administrator groups of the new DC01.domain2.com

How can I ensure the backup can be successful ?

Between AD domain1.com and domain2.com, there is no AD trust configured.

Thanks in advance,

[DaveWatkins]

You just create a backup service account on domain2 and assign that to the VM's specifically. Under Guest Processing -> Guest OS Credentials press the Credentials button and add some credentials from the other domain and assign them to the VM's on domain2

[albertwt]

Dave,
Thanks for the suggestion, at the moment I have selected the new account just for the additional DC1.domain2.com, but it is still failed ?

is it because of the Virtual Machine type to backup is based on the VM folder isntead of individual VM one by one ?

[foggy]

is it because of the Virtual Machine type to backup is based on the VM folder isntead of individual VM one by one ?

This doesn't matter, explicitly specified credentials should override the account specified for all VMs in the job. I suggest contacting support to review whether everything is configured correctly.