RPC client is not mem of admins (but it is)

VMware specific discussions

RPC client is not mem of admins (but it is)

Veeam Logoby pkelly_sts » Tue Feb 25, 2014 9:22 am

Sorry for the cryptic title, couldn't fit enough in the subject. Actual error is: "Error: Access is denied. RPC client is not a member of built-in Administrators group."

Since adding a VCSA to a domain (previously used for around a year without being a domain member) we've been getting the following error daily on a random pattern of VMs during backup. The thing is, the Veeam service account /is/ in the Admins group on these VMS and, more curiously, it generally gets the failures ok during the retries, which also seems to confirm credentials must be ok.

What, related to domain-changing I guess, could be causing these daily failures & successful retries?

Interestingly I've had to reboot the VCSA today as it became unresponsive so am manually retrying the failed jobs this time but, as per the nightly runs, I'm having to retry multiple times to get all the VMs as a decreasing number of them fail with this error each time the job is run.

Currently on vanilla v7, not updated to patch 1 or 2 yet (but currently planning to)

Paul
[New Sig: PLEASE get GFS tape support for incrementals!!!]
pkelly_sts
Expert
 
Posts: 504
Liked: 55 times
Joined: Thu Jun 13, 2013 10:08 am
Full Name: Paul Kelly

Re: RPC client is not mem of admins (but it is)

Veeam Logoby foggy » Tue Feb 25, 2014 9:51 am

Paul, have you already contacted support with this (as it is always recommended to do with all technical issues)?
foggy
Veeam Software
 
Posts: 14742
Liked: 1080 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson

Re: RPC client is not mem of admins (but it is)

Veeam Logoby pkelly_sts » Tue Feb 25, 2014 10:47 am

I haven't yet, thought I'd try here first in case it was a known issue but will log one today if I don't hear anything back from here by this afternoon.

Thanks.
[New Sig: PLEASE get GFS tape support for incrementals!!!]
pkelly_sts
Expert
 
Posts: 504
Liked: 55 times
Joined: Thu Jun 13, 2013 10:08 am
Full Name: Paul Kelly

Re: RPC client is not mem of admins (but it is)

Veeam Logoby foggy » Tue Feb 25, 2014 10:49 am

I wasn't able to find anything similar to your issue reported before, so it is worth opening a case for more effective troubleshooting. It would be appreciated if you then post the case ID here for further reference. Thanks!
foggy
Veeam Software
 
Posts: 14742
Liked: 1080 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson

Re: RPC client is not mem of admins (but it is)

Veeam Logoby veedeewallace » Tue May 20, 2014 11:18 am

Was there a solution found for this problem? We're getting the same error with failures on all of our backups.
veedeewallace
Lurker
 
Posts: 1
Liked: never
Joined: Tue May 20, 2014 11:07 am
Full Name: Valencia Wallace

Re: RPC client is not mem of admins (but it is)

Veeam Logoby foggy » Tue May 20, 2014 2:32 pm

Since Paul has not provided his support case ID, we cannot check for solution. Please contact support directly for details, and include your support case ID here if you could.
foggy
Veeam Software
 
Posts: 14742
Liked: 1080 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson

Re: RPC client is not mem of admins (but it is)

Veeam Logoby DavorS » Wed Jul 09, 2014 11:49 am 2 people like this post

I've had the same problem today.

We had a specific issue, where we wanted to make use of our Veeam B&R physical server as a backup domain controler.

After we installed the DC role, we've encountered the "Error: Access is denied. RPC client is not a member of built-in Administrators group."

The problem was in group membership. After we installed the DC role, Veeam service account was no longer a member of local administrators group (even though it a domain admin member). Seeing it as we can't access the Local users and groups console on a DC, we've had to use command prompt.

Open administrative command prompt and type: net localgroup Administrators

This will list all members of the built-in local administrators group, if you want to add an account in type in the following:

net localgroup Administrators /add domain\username

and you're done. Restart your server and all should be fine.
DavorS
Veeam ProPartner
 
Posts: 16
Liked: 8 times
Joined: Wed Jul 09, 2014 11:42 am
Full Name: Davor Stanec

Re: RPC client is not mem of admins (but it is)

Veeam Logoby peske » Tue Sep 30, 2014 10:36 am

This error does not says that the account is not member of Administrators role of guest VM, but Administrators role of host machine. So you should check if the account that Veeam Backup and Replication is running under is in Administrators role on host machine and backup repository machine.

I hope it was helpful...
peske
Novice
 
Posts: 4
Liked: never
Joined: Wed Nov 28, 2012 6:25 pm
Full Name: Aleksandar Pesic

Re: RPC client is not mem of admins (but it is)

Veeam Logoby aviken » Wed Mar 30, 2016 12:20 pm 1 person likes this post

I had this problem, and it was the the backup user not having admin rights in the Veeam proxy server.
aviken
Lurker
 
Posts: 2
Liked: 1 time
Joined: Tue Apr 15, 2014 8:48 pm
Full Name: Audun Viken

Re: RPC client is not mem of admins (but it is)

Veeam Logoby MrMegaVadim » Tue Jan 10, 2017 4:37 pm

I my case my service account I was using in my company for VEEAM backups was a domain admin. The problem appeared whet I removed domain admin rigths.

BEST ANSWER aviken !!!
Thank YOU aviken for your comment. This is the portion i missed

Problem solved:
1. veeam backup service account - local admin on veeam B&R server
2. veeam backup service account - vmware admin (vcenter administration - roles - Administrator)
3. veeam backup service account - local admin on all backup proxies
Option
4. veeam backup service account - database admin on THIS servers or local admin - IF you Enabled Application-aware processing for THIS backup job

THIS IS ALL you need
MrMegaVadim
Novice
 
Posts: 4
Liked: never
Joined: Mon Jun 27, 2016 1:48 pm
Full Name: Vadim

Re: RPC client is not mem of admins (but it is)

Veeam Logoby MrMegaVadim » Wed Jan 11, 2017 3:17 pm

If you backup DC you need also to give to your veeam backup service use account - Build-in administrator and Build-in Backup operator rights in you AD
MrMegaVadim
Novice
 
Posts: 4
Liked: never
Joined: Mon Jun 27, 2016 1:48 pm
Full Name: Vadim


Return to VMware vSphere



Who is online

Users browsing this forum: Yahoo [Bot] and 10 guests