Backing up Domain Controller in another AD domain issue ?

Availability for the Always-On Enterprise

Backing up Domain Controller in another AD domain issue ?

Veeam Logoby albertwt » Mon Dec 05, 2016 6:03 am

Hi People,

I have the existing AD Domain controllers VMs backed up with Veeam Backup 9.0U1 with no issue so far since the service account is using DOMAIN\SVC-BKP account same AD domain as the Veeam server as well DOMAIN.com

DC01.domain.com
DC02.domain.com

However, when I add the new AD Domain controller from another AD domain DOMAIN2 it is failed with:
Failed to prepare guest for hot backup.
Error: Failed to connect to guest agent.
Errors: 'Cannot connect to the host's administrative share. Host: [DC1.domain2.com IP]. Account: [DOMAIN\SVC-BKP].
Win32 error:Access is denied. Code: 5 '
Error: Failed to connect to guest agent.
Errors: 'Cannot connect to the host's administrative share.
Host: [DC1.domain2.com IP]. Account: [DOMAIN\SVC-BKP]. Win32 error:Access is denied. Code: 5 '


Of course I cannot add DOMAIN\SVC-BKP to the Local administrator groups of the new DC01.domain2.com

How can I ensure the backup can be successful ?

Between AD domain1.com and domain2.com, there is no AD trust configured.

Thanks in advance,
--
/* Veeam software enthusiast user & supporter ! */
albertwt
Expert
 
Posts: 607
Liked: 19 times
Joined: Thu Nov 05, 2009 12:24 pm
Location: Sydney, NSW

Re: Backing up Domain Controller in another AD domain issue

Veeam Logoby DaveWatkins » Mon Dec 05, 2016 6:37 am 1 person likes this post

You just create a backup service account on domain2 and assign that to the VM's specifically. Under Guest Processing -> Guest OS Credentials press the Credentials button and add some credentials from the other domain and assign them to the VM's on domain2
DaveWatkins
Expert
 
Posts: 252
Liked: 61 times
Joined: Sun Dec 13, 2015 11:33 pm

Re: Backing up Domain Controller in another AD domain issue

Veeam Logoby albertwt » Mon Dec 05, 2016 6:52 am

Dave,
Thanks for the suggestion, at the moment I have selected the new account just for the additional DC1.domain2.com, but it is still failed ?

is it because of the Virtual Machine type to backup is based on the VM folder isntead of individual VM one by one ?
--
/* Veeam software enthusiast user & supporter ! */
albertwt
Expert
 
Posts: 607
Liked: 19 times
Joined: Thu Nov 05, 2009 12:24 pm
Location: Sydney, NSW

Re: Backing up Domain Controller in another AD domain issue

Veeam Logoby foggy » Mon Dec 05, 2016 12:20 pm 1 person likes this post

albertwt wrote:is it because of the Virtual Machine type to backup is based on the VM folder isntead of individual VM one by one ?

This doesn't matter, explicitly specified credentials should override the account specified for all VMs in the job. I suggest contacting support to review whether everything is configured correctly.
foggy
Veeam Software
 
Posts: 14742
Liked: 1079 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: Bing [Bot], Exabot [Bot], Google [Bot], Google Feedfetcher and 24 guests