Domain Trust Relationships and SureBackup

Availability for the Always-On Enterprise

Domain Trust Relationships and SureBackup

Veeam Logoby bg.ranken » Tue Nov 15, 2016 9:11 pm 1 person likes this post

Does anyone have any experience dealing with domain trust relationships and SureBackup? My issue that I'm seeing now is that occasionally a computer on a domain decides to reset it's computer password some time in-between when it is backed up and when a domain controller is backed up. This means that during the SureBackup job the machine has a trust relationship problem since the password the domain controller has is different from the computer.

It's really annoying and so far I haven't been able to find any fixes. Has anyone else ran into this same problem and perhaps has some recommendations to fix this during the SureBackup job or prevent it overall without disabling the automatic computer password change for domain members?
bg.ranken
Enthusiast
 
Posts: 55
Liked: 10 times
Joined: Wed Feb 18, 2015 8:13 pm
Full Name: Randall Kender

Re: Domain Trust Relationships and SureBackup

Veeam Logoby foggy » Wed Nov 16, 2016 3:56 pm

Hi Randall, I recommend to make sure computer account password change doesn't occur within the "unwanted" period when backups run (not sure how it is controlled within AD though). Besides SureBackup, this might also affect ability to quickly restore and actually SureBackup has done its work showing that there's an issue with the backup.
foggy
Veeam Software
 
Posts: 14752
Liked: 1083 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson

Re: Domain Trust Relationships and SureBackup

Veeam Logoby oliverL » Wed Nov 16, 2016 4:43 pm

This technet-page says every 30 days the machine account password gets reseted automatically:
https://technet.microsoft.com/en-us/lib ... 52(v=ws.11).aspx

Reading this part, it might help you to get your restored VMs to talk again with the Active Directory:
https://blogs.msdn.microsoft.com/sudhak ... snapshots/

Greetings!
oliverL
Influencer
 
Posts: 22
Liked: 3 times
Joined: Fri Nov 11, 2016 8:56 am
Full Name: Oliver

Re: Domain Trust Relationships and SureBackup

Veeam Logoby bg.ranken » Thu Nov 17, 2016 6:44 pm

foggy wrote:Hi Randall, I recommend to make sure computer account password change doesn't occur within the "unwanted" period when backups run (not sure how it is controlled within AD though). Besides SureBackup, this might also affect ability to quickly restore and actually SureBackup has done its work showing that there's an issue with the backup.


Yeah, that's why I was asking around. From all my research there doesn't appear to be a way to control what time of day it resets the password so it is stuck being completely random. I was hoping with all the other Veeam users someone might have found a fix, but at this point my only solution appears to be disabling the password reset altogether. It's annoying for SureBackup jobs but even worse in the event we needed to do a quick restore or instant recovery of a server. While not hard to fix if it does occur it's basically a random increase in RTO which might end up hurting us down the road.
bg.ranken
Enthusiast
 
Posts: 55
Liked: 10 times
Joined: Wed Feb 18, 2015 8:13 pm
Full Name: Randall Kender

Re: Domain Trust Relationships and SureBackup

Veeam Logoby foggy » Fri Nov 18, 2016 11:30 am

You can also extend the MaximumPasswordAge to lower the probability of such issues.
foggy
Veeam Software
 
Posts: 14752
Liked: 1083 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: Google [Bot], kjm1979 and 52 guests