User Rights Assignment Backup Exec 2014

Problem

"Failed to log on to Microsoft Windows. Ensure that your logon credentials are correctly entered and that they meet the following minimum requirements to log on to a Windows computer"

Also:

The logon account that was provided does not have valid credentials. Ensure that the user name and password are correct, and then try again.

 

Error Message

Final error: 0xe0000383 - Failed to log on to Microsoft Windows. Ensure that your logon credentials are correctly entered and that they meet the following minimum requirements to log on to a Windows computer:

Also:

Final error: 0xe0009b61 - The logon account that was provided does not have valid credentials. Ensure that the user name and password are correct, and then try again.

Cause

This error occurs when Backup Exec Service Account or logon account doesn't have sufficient privileges to run a backup or restore job.

Solution

Check that the Backup Exec Service Account or logon account which is used for backups or restore is added in Backup Operators Group. Members of this group can back up and restore all files on domain controllers in the domain, regardless of their own individual permissions on those files. This group has no default members. Because this group has significant power on domain controllers, add users with caution per the following steps: 

-Check whether the services are running under a domain admin account or not.

-Check whether he is using the same account to restore which he used to backup the data.

-check whether the customer is trying to refirect the file.
 

1. Log on to Windows as Administrator/Domain Admin

2. Go to Start | Programs | Administrative Tools, select Active directory User and computers for Domains or Computer management| Local Users and groups

3. Double-click the user that has the insufficient rights, and click Groups

4. Add the user to either the Administrators/Domain Admin or Backup Operators group .

5. Click OK

 6. Log out of Windows .


For Windows Vista/2008 and later, check that the Backup Exec Logon Account which is used for backups or restores has the right to  "Logon as a batch job". By default, this policy is applied to Administrators and the Backup Operators group. This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers and it allows a user to be logged on by means of a batch-queue facility.
 

In a Workgroup Environment, edit Local Security Policy 

 

1. Start |  Administrative Tools | Local Security Policy  | User Rights Assignments
 

2.In the details pane, double-click Log on as batch job.
 

  
 

3. Click Add User or Group, and then add the appropriate BESA account.
 

4. Make sure the account does NOT appear under Deny Logon as a batch Job
 

  
 

In a Domain Environment, edit Default Domain Security Policy.
 

1. Start |  Administrative Tools | Domain Security Policy  | Local Policies| User Rights Assignments
 

2. In the details pane, double-click Log on as batch job.
 

3. Click Add User or Group, and then add the appropriate BESA account.
 

4. On windows 2008 server click start | run and type in gpupdate /force (this will update the group policy).
 

5. Restart Backup Exec services on Media server( Click on Tools | Backup exec services | Restart all services).
 


 

For more information, refer to the following Microsoft Articles:
 


 

Default groups
 

  https://technet.microsoft.com/en-us/library/cc756898(WS.10).aspx


 

Add the Log on as a service right to an account
 

  https://technet.microsoft.com/en-us/library/cc739424(WS.10).aspx     For Windows Server 2003 R2
 

 

https://technet.microsoft.com/en-us/library/cc731654(WS.10).aspx      For Windows Server 2008, Windows Server 2008 R2

 

Note:
 

1. If Windows 2008 server is a domain controller then the same right needs to be assigned to Backup Exec logon account under Domain Controller security policy.
 

2. If Windows 2008 server is not part of a domain then the logon account used in Backup Exec to backup the Windows 2008 server needs to be assigned the same right under Local Security policy on Windows 2008 server.





 

 

 

 

Related Articles

How to define/grant the required user rights/permissions for a Backup Exec Service Account (BESA)

When attempting to install Backup Exec the error "Unable to authenticate with the user and password information given for server_name\user_name appears when entering the service account information

Requirements for the Backup Exec Service Account (BESA).

Attempt to browse a Windows 2008 server in Backup Selections, from Backup Exec installed on a Windows 2003 server, fails with the error "Access is Denied"

How to resynchronize the Backup Exec for Windows Servers System Logon/Service Account (BESA) and installation to potentially resolve functional issues with the application

Understanding Logon Accounts and required User Rights Assignment to resolve connection, backup or restore failures

Problem

Requirements for the Backup Exec Service Account (BESA).

Solution

All Backup Exec Services on a media server, with the exception of the Backup Exec Remote Agent, run in the context of a user account configured for the Backup Exec services.
 

The Backup Exec Service Account (BESA) requires the following User Rights in group policy and group memberships:


User rights requirements:

  • Act as a part of Operating System ( Only for Windows Server 2000 ).
  • Create a token object.
  • Log on as a service.
  • Logon as a batch job.
  • Manage auditing and security log.
  • Backup files and directories.
  • Restore files and directories.

Group Memberships or equivalent access:

  • Domain Admins or Administrators.
  • Backup Operators.

Due to security implementations in Microsoft Small Business Server, the service account must be " DomainName\Administrator " account.

Refreshes local and Active Directory-based Group Policy settings, including security settings by executing "gpupdate" command.

 

For a complete list of User Rights and their descriptions, please see : msdn.microsoft.com/en-us/library/ms878695


Related Articles

How to define/grant the required user rights/permissions for a Backup Exec Service Account (BESA)

When attempting to install Backup Exec the error "Unable to authenticate with the user and password information given for server_name\user_name appears when entering the service account information

Backup or a restore job fails with the following error "Failed to log on to Microsoft Windows. Ensure that your logon credentials are correctly entered."

How to resynchronize the Backup Exec for Windows Servers System Logon/Service Account (BESA) and installation to potentially resolve functional issues with the application

Local and remote resources are not displayed for backup selection

A backup job fails with error: 0xe0009b61 - The logon account that was provided does not have valid credentials.

One thought on “User Rights Assignment Backup Exec 2014

Leave a Reply

Your email address will not be published. Required fields are marked *