arcs2000 no information store backup at all

[fabio9]

Product: arcserve 2000 7.0 build 1100;installed option: san, tlo, backup agent for exchange, all with arcserve sp4.

Os: windows 2000 advanced server sp2 1gbram Microsoft exchange 2000 sp3 on an active/passive cluster, 50 gb of inf. store Microsoft active directory, mixed mode

Nav for exchange 2.x (ms exchange directory excluded from scanning/protecting)

Nav antivirus corporate edition 7.6.960 (often disabled in some backup test job)


The problem:
The agent for exchange can't backup the infomation store, it only works for the brick level, any mailbox can be backupped.

The situation:
We have some servers linked with the arcseve san option, one primary and some distributed, all with the sp4. We have installed a new exchange 2000 server on an active/passive windows 2000 cluster (the inf. store is on 3 different disks) and we want to backup both the information store and few critical mailboxes.
Righ now we can't.
The error for the information store is: Error 8604, faild to start backup. (dbname=dbaexch, ec=backup agent error --(331) "insufficient privilege. Please check user privileges) in the arcserve manager activity log, but it's not the "standard" 331 error, because the single mailbox CAN be backupped.
The dbaexch.log reports:

09/19/02 08:55 Connect Exchange Backup Agent
09/19/02 08:55 Disconnect Exchange Backup Agent
09/19/02 08:55 Connect Exchange Backup Agent
09/19/02 08:55 Disconnect Exchange Backup Agent
09/19/02 08:55 Connect Exchange Backup Agent
09/19/02 08:55 Disconnect Exchange Backup Agent
09/19/02 08:55 Connect Exchange Backup Agent
09/19/02 08:55 Disconnect Exchange Backup Agent
09/19/02 09:05 Connect Exchange Backup Agent
09/19/02 09:05 Disconnect Exchange Backup Agent
09/19/02 09:05 Connect Exchange Backup Agent
09/19/02 09:05 Disconnect Exchange Backup Agent
09/19/02 10:56 Connect Exchange Backup Agent
09/19/02 10:56 Disconnect Exchange Backup Agent
09/19/02 11:00 Connect Exchange Backup Agent
09/19/02 11:00 Backup Agent Error -- (331) "Insufficient privilege. Please check user privileges".
09/19/02 11:00 Disconnect Exchange Backup Agent





the dbaxhchg.log (for brick level) reports:


<09/19/02 11:41 PID:4012 TID:1564> Connect Exchange Backup Agent

<09/19/02 11:41 PID:4012 TID:3964>
--------------------------- EXCHANGE Agent Session Begin ---<09/19/02 11:41 PID:4012 TID:3964> Connected to Microsoft Exchange Backup Agent
<09/19/02 11:41 PID:4012 TID:2056> Disconnect Exchange Backup Agent
<09/19/02 11:41 PID:4012 TID:1564> Connect Exchange Backup Agent
<09/19/02 11:41 PID:4012 TID:1564> Disconnect Exchange Backup Agent
<09/19/02 11:41 PID:4012 TID:1564> Connect Exchange Backup Agent
<09/19/02 11:41 PID:4012 TID:1564> Disconnect Exchange Backup Agent
<09/19/02 11:41 PID:4012 TID:1564> Connect Exchange Backup Agent
<09/19/02 11:41 PID:4012 TID:1564> Disconnect Exchange Backup Agent
<09/19/02 11:44 PID:2428 TID:724> Connect Exchange Backup Agent
<09/19/02 11:44 PID:2428 TID:3728>

--------------------------- EXCHANGE Agent Session Begin ---<09/19/02 11:44 PID:2428 TID:3728> Connected to Microsoft Exchange Backup Agent
<09/19/02 11:44 PID:2428 TID:3728> <Individual Mailboxes\Estcedfs> in Full Backup Mode
<09/19/02 11:44 PID:2428 TID:3728> <Individual Mailboxes\Estcedfs> removed from Backup Mode
<09/19/02 11:44 PID:2428 TID:3728> Disconnected from Microsoft Exchange Backup Agent
<09/19/02 11:44 PID:2428 TID:3728>
----------------------------- EXCHANGE Agent Session End ---<09/19/02 11:44 PID:2428 TID:724> Disconnect Exchange Backup Agent


And one single maibox is backupped

The user used for the agent is the exchange system account with th following grants:

Logon locally
Act as a part of the op. system
Logon as a service
Domain admins (primary group)
Backup operator

The policy are both enforced on local exchange server and in the domain controller (that in any case overrides other policies).
The user used for the exchange agent can be the same of the arcserve user system account or not, no variation in the error, and the user rights are applied in the domanin and in the single (local) machine too...just in case....

If we try to prepare a backup with the agent stopped we can see an error if we select the brick level (error: agent not started) but NO ERROR if we select &quot;microsoft exchange server&quot;. In any case the i.s. icon has no subfolder, in any condition.


The sp4 was applied just after teh standard cd installation, no tests made without it, because of the comunication problmes of the san option if not all servers are patched with sp4


Any minimal idea ??

 

[speshalyst]

Fabio,

The user used for the agent is the exchange system account with th following grants:

Logon locally
Act as a part of the op. system
Logon as a service
Domain admins (primary group)
Backup operator

Guess u missed the &quot;administrators&quot;group...
add the account u r using to this group..if this doesn;t help...
If u are using a specific account to start the IS service, use that account,if it is set to Local System account,..
Use the account that was used to install exchange.
use domain\username when providing security...


Cheers
Speshalyst

So it Shall be Written!
So it Shall be Done!!

 

[fabio9]

I miss to post it, sorry, but the user used to backup the i.s. is in the administrators group.

The problem -seems- to be the sp4.
Few seconds ago we have tried to install arcserve 2000 from scratch, the sp3 THEN the sp4.
All the oter installations were made by arcserve 2000 (no sp) and the sp4 ONLY, because the documentation for the sp4 says &quot;NO PREREQUISITES&quot; !, and -just in case- a new exchange user administrator, trying to avoid some &quot;legacy&quot; from the 5.5 system account .
Now I can see the informatios store on 3 disks, according to the exchange 2000 configuration.
Right now there is a job running, I'll write something in a few days, 'cause I want to submit a &quot;regular&quot; job, with all the stuffs I need to backup (registry, system state, some mailboxes..) before to ask to CA about &quot;no prerequisites&quot;.

Thanks for your help.

 

[fabio9]

That's it.
Installing the sp3 AND THEN sp4 works fine.
Now I can backup all exchange system, no exclusion.


Bah.