Isolated Network VM backupable?

VMware specific discussions

Re: Isolated Network VM backupable?

Veeam Logoby B.F. » Thu Dec 29, 2016 6:39 pm 1 person likes this post

Got it figured out! Somehow UAC was re-enabled which caused VIX to stop working. Perhaps one of those MS Patches re-enabled it on us? We are happily backing that isolated VM again!

Thanks!
B.F.
Expert
 
Posts: 107
Liked: 6 times
Joined: Tue Jan 28, 2014 5:41 pm

Re: Isolated Network VM backupable?

Veeam Logoby Vitaliy S. » Fri Dec 30, 2016 5:59 pm

For future readers: even if UAC is enabled, you can still use built-in administrator account for VSS quiescence.
Vitaliy S.
Veeam Software
 
Posts: 19546
Liked: 1100 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Isolated Network VM backupable?

Veeam Logoby B.F. » Fri Dec 30, 2016 7:59 pm

Vitaliy, are you referring to this?


Image
B.F.
Expert
 
Posts: 107
Liked: 6 times
Joined: Tue Jan 28, 2014 5:41 pm

Re: Isolated Network VM backupable?

Veeam Logoby jmmarton » Fri Dec 30, 2016 8:30 pm

No, that's a setting used when you aren't using AAIP and then typically just with Linux VMs. Vitaliy is talking about the local administrator account within the Windows VMs in order to do networkless AAIP via VIX. Here's some info.

https://www.veeam.com/kb1788

Joe
jmmarton
Veeam Software
 
Posts: 816
Liked: 89 times
Joined: Tue Nov 17, 2015 2:38 am
Location: Chicago, IL
Full Name: Joe Marton

Re: Isolated Network VM backupable?

Veeam Logoby Vitaliy S. » Fri Dec 30, 2016 8:33 pm

Yes, Joe is correct. I'm saying that in order to make VIX work, you need to use built-in administrator account in AAP settings over here > Application-Aware Processing
Vitaliy S.
Veeam Software
 
Posts: 19546
Liked: 1100 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Isolated Network VM backupable?

Veeam Logoby B.F. » Fri Dec 30, 2016 8:40 pm

Per KB1788:
If the account being used is not named “Administrator”, you must disable UAC on the Guest OS of the VM to be backed up.


Guess that's why we had to disable UAC, we don't have an account named "Administrator" on that VM. Good to know though, thanks!
B.F.
Expert
 
Posts: 107
Liked: 6 times
Joined: Tue Jan 28, 2014 5:41 pm

Re: Isolated Network VM backupable?

Veeam Logoby Mike Resseler » Mon Jan 02, 2017 8:19 am

B.F.

Any news on this? Error 53 as you showed above is in most cases indeed related to this ADMIN$ not being accessible anymore. Can you use the console and check if all necessary services are running on that VM? There might be some services that went gaga after the reboot...
Mike Resseler
Veeam Software
 
Posts: 3150
Liked: 362 times
Joined: Fri Feb 08, 2013 3:08 pm
Location: Belgium, the land of the fries, the beer, the chocolate and the diamonds...
Full Name: Mike Resseler

Re: Isolated Network VM backupable?

Veeam Logoby B.F. » Wed Jan 04, 2017 5:55 pm

Mike,

In an isolated scenario, no shares (including ADMIN$) are accessible since that range is unreachable via the network. We had been using VIX with Veeam but one has to disable UAC on the VM in order to make it work. One of the MS updates must have reset this bit and we were no longer able to backup the VM. Reset the UAC in Regedit and we are now back in business.
B.F.
Expert
 
Posts: 107
Liked: 6 times
Joined: Tue Jan 28, 2014 5:41 pm

Re: Isolated Network VM backupable?

Veeam Logoby Mike Resseler » Thu Jan 05, 2017 6:39 am

B.F.,

Sorry, 2 things went wrong:

1. There were 2 pages to this thread which I missed so I didn't noticed that you already solved it
2. I actually wanted to know if you already figured out which update caused the problem and failed to ask the right question :-). Many times after an update and reboot services hang and it is always good to know which one is the problematic one for other people

Again, sorry :-)
Mike Resseler
Veeam Software
 
Posts: 3150
Liked: 362 times
Joined: Fri Feb 08, 2013 3:08 pm
Location: Belgium, the land of the fries, the beer, the chocolate and the diamonds...
Full Name: Mike Resseler

Re: Isolated Network VM backupable?

Veeam Logoby B.F. » Thu Jan 05, 2017 2:19 pm

No worries Mike,

I never attempted to figure out which update could have been the culprit. There were only 2 patches applied that seemed to occur right before the backups stopped failing.

KB3197875 November 2016 Preview of Monthly Quality Roll-up for Windows Server 2012 R2
KB3197874 November 2016 Security Monthly Quality Roll-up for Windows Server 2012 R2

I guess I can't be 100% certain that one of those was the cause since this VM is also available to a 3rd party vendor as well. It's possible they could have made the change but it just seemed a bit too coincidental that the backups stopped right after these patches were applied.
B.F.
Expert
 
Posts: 107
Liked: 6 times
Joined: Tue Jan 28, 2014 5:41 pm

Re: Isolated Network VM backupable?

Veeam Logoby Vitaliy S. » Fri Jan 06, 2017 11:43 am

B.F., is there any reason not to use built-in local administrator with UAC enabled in your scenario?
Vitaliy S.
Veeam Software
 
Posts: 19546
Liked: 1100 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Isolated Network VM backupable?

Veeam Logoby B.F. » Fri Jan 06, 2017 1:51 pm

It is a practice (before I got here) to always rename the built in Admin account. I'm assuming the thought is it would be a security measure?
B.F.
Expert
 
Posts: 107
Liked: 6 times
Joined: Tue Jan 28, 2014 5:41 pm

Re: Isolated Network VM backupable?

Veeam Logoby Vitaliy S. » Fri Jan 06, 2017 2:01 pm

Yes, that could be the case. Thanks for the info.
Vitaliy S.
Veeam Software
 
Posts: 19546
Liked: 1100 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Isolated Network VM backupable?

Veeam Logoby RubinCompServ » Tue Jan 17, 2017 3:45 pm

FYI, I believe that, if you've renamed the built-in Administrator account, you can still use that account to bypass the UAC issues. It's not about the name of the account but the GUID of the account, and that doesn't change when the account is renamed.
RubinCompServ
Service Provider
 
Posts: 28
Liked: 5 times
Joined: Mon Mar 16, 2015 4:00 pm
Full Name: David Rubin

Re: Isolated Network VM backupable?

Veeam Logoby B.F. » Tue Jan 17, 2017 4:00 pm

That would make sense. Looking deeper at the backup configuration in Credential Manager, I see that the local admin is not added but has a Backup account. That would explain why it started to fail after UAC got flipped on.

Thanks
B.F.
Expert
 
Posts: 107
Liked: 6 times
Joined: Tue Jan 28, 2014 5:41 pm

PreviousNext

Return to VMware vSphere



Who is online

Users browsing this forum: ilya.konopak and 22 guests