Logon account failed while trying to backup data from local media server. Same account is used for remote server backups.

book

Article ID: 100024275

calendar_today

Updated On:

Description

Error Message

Error code: V-79-57344-3977. Final error:0XE0009b61 - The logon account that was provided does not have valid credentials.

Cause

The user account could have blocked access on the local server via group policy, application security policy, local security settings, or by some other third party security application.

Resolution

Try a different account which is a member of Local Administrators Group on BE Media Server for the job credentials.

If this account also fails then refer to the related articles section for more information.

If this account is able to complete the backup from the local media server then

1. Check the Local Security Policy > Local Policies > User Rights Assignment on the media server.
Ensure the account been used has the following permissions:

  • Act as part of the operating system (For Windows 2000 only)
  • Backup files and directories
  • Create a token object
  • Logon as a batch job (For Windows 2008 only)
  • Logon as a service
  • Manage auditing and security log
  • Restore files and directories
  • Take ownership of files and other objects

Also make sure the account is not added under:

  • Deny logon as a service
  • Deny logon as a batch

This is important because the DENY takes precedence over allow.
Ensure that any active and applied group policy has nothing enabled and defined for the local security user rights assignments.

2. If the issue continues then capture a SGMON log with all verbose selected (Execute SGMON to capture the log when the job is tried to complete)

The following errors might be logged

BEREMOTE: [Time] [3656]   [ndmp\ndmpsrvr]      - Username for Logon:
BEREMOTE: [Time]     - BELogonUser: beclass::IsThisMe() returned error: 87
BEREMOTE: [Time] [3656]     - LogonType set = [LOGON32_LOGON_INTERACTIVE][0x2]
BEREMOTE: [Time] [3656]     - LogonUser failed: Logon failure: unknown user name or bad password.
BEREMOTE: [Time] [3656]     [ndmp\ndmpsrvr]      - LogonuserError: 1326
BEREMOTE: [Time] [3656]     [ndmp\ndmpsrvr]      - LogonUser failed for user:
BENGINE:  [Time] [0736]     [ndmp\ndmpcomm]      -

Workaround:

3. The domain authentication on the local Media server is not passed for the account been used. Ensure client has no custom Group policies that have been edited for that account in the media server. Try disabling the security application on the server (like Symantec Endpoint Protection)

4. Ensure the System Logon Account is with the same account used in the backup job.
    Select in Backup Exec > Network > Logon Accounts

5. Apply the same account to Backup Exec services
    Select in Backup Exec > Tools > Backup Exec services > Services Credentials

6. Logout and Login to the server with the same account been used in the backup. Retry the backup job.

 

 

Issue/Introduction

The backup job will fail to authenticate the account provided in the backup job when the resource is on the local Backup Exec Media server. The same account could be the Backup exec System Logon Account(SLA) used to connect with remote servers. Other backups with data on remote servers and the same SLA will be completed without errors.