Application Aware Backups - Case #07587740

[mpm@aramark]

I need guidance on the correct configuration/permissions for an MS SQL application aware backup. I've tested a number of scenarios, and it seems the only one that works is if the Guest OS credentials have RDP access into target system. We typically restrict RDP access on service accounts. TIA.

[david.domask]

Hi Martin,

Thanks for sharing the case number; just a few questions quick:

1. Is the service account for Guest Processing a local account or domain account?
2. Is it added to the Administrators group or another group with similar high privileges
3. How did you deny the RDP privileges? gpedit.msc and Deny Logon through Remote Desktop Services?

I did a very quick test and just disabled my service account RDP access with the policy from question 3, and I was able to do an application aware backup without incident, but this is just a fast test, so I suspect there's another permission missing somewhere.

[PetrM]

Hello,

Additionally, please check the requirements here.

Thanks!

[mpm@aramark]

Thanks for the reply. Worked with Veeam support. Determined the GPO that the service account I was using was in Deny logon as a batch job and Deny logon as a service. Working to create a new GPO with Allow logon as a service, Allow logon as a batch job, Deny RDP and add the services account, push to server, the add account to MS SQL DB with SA privileges.

[david.domask]

Wonderful, thanks for sharing the resolution and glad you and Support were able to identify the missing permissions.