Skip to main content

Hello,

Today, the backup of our domain controller is no longer working and we can't access the host. Everything was working fine until now.

17/11/2024 21:00:44 Failed Unable to install backup agent: failed to connect to "domainename" Error: Account restrictions are preventing this user from signing in. For example: blank passwords aren't allowed, sign-in times are limited, or a policy restriction has been enforced. Failed to connect to share '\XX.XX.XX.XX\ADMIN$'.

The package is accessible when I try to access it manually. I don't understand. The account entered is the domain admin account and even with another account, it doesn't work.

I've scoured the forums and I can't find anything.

Could someone help me?

 

Regards


 

Hi ​@Infra ALAINE -

Welcome to the Community. Needing more info here, though not entirely sure we can assist. I’ll start off with saying your best bet is to contact Support...even if you’re using free version of whatever Veeam backup product, you can still contact Support. 

So, what product are you using?..VBR or Agent for Windows or combination of both? What are you trying to do?...backup, recover, or both? Is your domain controller down? If so, and you’ve used domain accounts for everything, then the error you’re getting makes sense. If you’re using Veeam Agent for Windows, you can check the logs and see if anything definitve shows there:

C:\ProgramData\Veeam\Endpoint\

or, for VBR:

C:\ProgramData\Veeam\Backup\<job-folder>\<job-name>.log

Please provide more info and we can try and assist.

Thanks.


Hello,

Thank you for your feedback.

We use Veeam B&R Community to back up our servers. Our domain controller has no problems at the moment.

We will examine the logs and report them here.


[SHostNameResolver] Using hostnames resolving policy: UseOnlyOriginalHostNames
[14.11.2024 19:31:06.371]    <14>    Info (3)     SNetworkAddressResolver] Resolved o'SRVDOMAINEAF2', '10.33.61.32'] by Kerberos preferred strategy host names and IP addresses. IPAddressKind: KIPv4]. Result: s'SRVDOMAINEXXX', 'XX.XX.XX.XX].
<14.11.2024 19:31:06.403]    <18>    Info (3)    fRPC] Getting version of the deployment service. Failed.
a14.11.2024 19:31:06.403]    <18>   Error (3)    RPC] Accès refusé.
c14.11.2024 19:31:06.403]    <18>   Error (3)    8RPC] RPC function call failed. Function name: GetSvcVersion]. Target machine: rSRVDOMAINXXXX:6160].
V14.11.2024 19:31:06.403]    <14>   Error (3)    Native method execution failed: ping service - Accès refusé.
s14.11.2024 19:31:06.403]    <14>   Error (3)    RPC function call failed. Function name: uGetSvcVersion]. Target machine: eSRVDOMAINEXXXX:6160].
a14.11.2024 19:31:06.434]    <14> Warning (3)    6SRVDOMAINEXX] Failed to connect to Installer service on SRVDOMAINEAF2:6160. Reason: SRVDOMAINEXX] Failed to check whether remote Installer service is available.


Based on the error you are getting you should check your domain health to ensure it is functional.  To me that is where there failure points to but checking the logs will also help.


Based on the error you are getting you should check your domain health to ensure it is functional.  To me that is where there failure points to but checking the logs will also help.

it's very strange, it worked a little while ago and my domain is fully functional...


Based on the error you are getting you should check your domain health to ensure it is functional.  To me that is where there failure points to but checking the logs will also help.

it's very strange, it worked a little while ago and my domain is fully functional...

Can you try another account for the backup instead of the Domain Admin to see if that works?  Maybe create a service account with domain rights to test.


i have tested with another account with domain admin privilege, and the result it’s the same


i have tested with another account with domain admin privilege, and the result it’s the same

Then you will need to see if the logs can point you to the issue or symptom otherwise I would suggest a Support ticket at this point to get better assistance.  The community is not technical support and we offer as many suggestions as we can to try and help.


J’ai ouvert le ticket et jattend le retour. Voici un extrait des logs :

 

14.11.2024 19:31:06.371]    <14>    Info (3)    (SNetworkAddressResolver] Resolved R'SRVDOMAINEAF2', '10.33.61.32'] by Kerberos preferred strategy host names and IP addresses. IPAddressKind: eIPv4]. Result: 'SRVDOMAINEXXX', 'XX.XX.XX.XX'].
'14.11.2024 19:31:06.403]    <18>    Info (3)    RPC] Getting version of the deployment service. Failed.
.14.11.2024 19:31:06.403]    <18>   Error (3)    ;RPC] Accès refusé.
14.11.2024 19:31:06.403]    <18>   Error (3)    tRPC] RPC function call failed. Function name: aGetSvcVersion]. Target machine: cSRVDOMAINEAF2:6160].
[14.11.2024 19:31:06.403]    <14>   Error (3)    Native method execution failed: ping service - Accès refusé.
n14.11.2024 19:31:06.403]    <14>   Error (3)    RPC function call failed. Function name: CGetSvcVersion]. Target machine: nSRVDOMAINEXXX:6160].
e14.11.2024 19:31:06.434]    <14> Warning (3)    1SRVDOMAINEXXX] Failed to connect to Installer service on SRVDOMAINEAF2:6160. Reason: lSRVDOMAINEXXX] Failed to check whether remote Installer service is available.


we have already opened a support ticket and are waiting for feedback


we have already opened a support ticket and are waiting for feedback

That is great.  That will be the best thing to get a quicker answer for your issue.


we have already opened a support ticket and are waiting for feedback

Ok..good. Keep us posted what they say.


Hello ​@Infra ALAINE 

do you respect the BP on your Veeam server ?
https://bp.veeam.com/vbr/3_Build_structures/B_Veeam_Components/B_VBR_Server/Backup_Server.html


Hi ​@Infra ALAINE 

 

Yesterday, I successfully completed the task in my production environment before configuring any VAW backup jobs. Here’s a summary of the steps I followed:

Check Connectivity: I first verified connectivity from the Veeam Backup & Replication (VBR) server to the guest machine where the Veeam Agent for Windows (VAW) is installed. I ensured that the required ports are open between the VBR server and the guest machine.

Install Agent: I then proceeded to install the VAW agent from the VBR console. During the installation, I provided the service account credentials, ensuring that the account had local admin access on the guest machine. Once the installation was successful, I configured the agent within the backup job.

Troubleshooting Backup Job Failures: If the backup job fails after this, there is likely another separate issue. In that case, we need to check the connectivity from the backup repository server to the agent machine and ensure the required ports are open for communication.

 

Check this blog regarding DC:

 

https://www.veeam.com/blog/backing-up-domain-controller-best-practices-for-ad-protection.html

 

 


Hello,

I managed to solve my problem on my own. I simply uninstalled the agent on the DC and then reinstalled it, and everything went back to normal.

Strange... I can't explain it.

Thanks for your help.


Glad to hear you solved the issue and it was fairly simple.


Glad the reinstall took care of the issue for you 👍🏻


Comment