Comprehensive data protection for all workloads
Post Reply
albertwt
Veeam Legend
Posts: 879
Liked: 46 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

Backing up Domain Controller in another AD domain issue ?

Post by albertwt »

Hi People,

I have the existing AD Domain controllers VMs backed up with Veeam Backup 9.0U1 with no issue so far since the service account is using DOMAIN\SVC-BKP account same AD domain as the Veeam server as well DOMAIN.com

DC01.domain.com
DC02.domain.com

However, when I add the new AD Domain controller from another AD domain DOMAIN2 it is failed with:
Failed to prepare guest for hot backup.
Error: Failed to connect to guest agent.
Errors: 'Cannot connect to the host's administrative share. Host: [DC1.domain2.com IP]. Account: [DOMAIN\SVC-BKP].
Win32 error:Access is denied. Code: 5 '
Error: Failed to connect to guest agent.
Errors: 'Cannot connect to the host's administrative share.
Host: [DC1.domain2.com IP]. Account: [DOMAIN\SVC-BKP]. Win32 error:Access is denied. Code: 5 '
Of course I cannot add DOMAIN\SVC-BKP to the Local administrator groups of the new DC01.domain2.com

How can I ensure the backup can be successful ?

Between AD domain1.com and domain2.com, there is no AD trust configured.

Thanks in advance,
--
/* Veeam software enthusiast user & supporter ! */
DaveWatkins
Veteran
Posts: 370
Liked: 97 times
Joined: Dec 13, 2015 11:33 pm
Contact:

Re: Backing up Domain Controller in another AD domain issue

Post by DaveWatkins » 1 person likes this post

You just create a backup service account on domain2 and assign that to the VM's specifically. Under Guest Processing -> Guest OS Credentials press the Credentials button and add some credentials from the other domain and assign them to the VM's on domain2
albertwt
Veeam Legend
Posts: 879
Liked: 46 times
Joined: Nov 05, 2009 12:24 pm
Location: Sydney, NSW
Contact:

Re: Backing up Domain Controller in another AD domain issue

Post by albertwt »

Dave,
Thanks for the suggestion, at the moment I have selected the new account just for the additional DC1.domain2.com, but it is still failed ?

is it because of the Virtual Machine type to backup is based on the VM folder isntead of individual VM one by one ?
--
/* Veeam software enthusiast user & supporter ! */
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Backing up Domain Controller in another AD domain issue

Post by foggy » 1 person likes this post

albertwt wrote:is it because of the Virtual Machine type to backup is based on the VM folder isntead of individual VM one by one ?
This doesn't matter, explicitly specified credentials should override the account specified for all VMs in the job. I suggest contacting support to review whether everything is configured correctly.
Post Reply

Who is online

Users browsing this forum: Semrush [Bot] and 188 guests