backup fails with VDI error 1000

• 
  Could you please try stopping the SQL Backup Agent service, change the SQL Backup Agent service startup account to the one used by the related SQL Server service, restart the service, run a test backup, and let me know if the same error still occurs?
  
  Thanks.

  petey November 19, 2008 02:01

  - 0 +
• 
  The account that SQL Server is running under has elevated permissions so it will most certainly work. That's what I'm trying to get away from.

  brosato December 01, 2008 11:58

  - 0 +
• 
  Could you please download this app:
  
  http://www.sqlbackuprestore.com/downloa ... Reader.zip
  
  Run it on the server where SQL Server is running, and check if the ACEs' for the SQL Server service are adequate to allow the SQL Backup Agent service startup account read access.

  petey December 03, 2008 03:14

  - 0 +
• 

  petey wrote:

  Could you please download this app:
  
  http://www.sqlbackuprestore.com/downloa ... Reader.zip
  
  Run it on the server where SQL Server is running, and check if the ACEs' for the SQL Server service are adequate to allow the SQL Backup Agent service startup account read access.

  
  
  Here's what the DACL reader says for the account and it still doesn't work. Same error. I gave it the same permissions as local admin. Do I have to reboot or something?
  
  Account : COSMO\sqlbackup (user)
  Type : ACCESS_ALLOWED
  Rights : Query Configuration
  : Change Configuration
  : Query State
  : Enumerate Dependencies
  : Start
  : Stop
  : Pause
  : Interrogate
  : User Defined
  : Delete
  : Read Control
  : Change Permissions
  : Change Owner

  brosato December 03, 2008 16:23

  - 0 +
• 
  Your configuration looks fine. The only permission that the SQL Backup Agent service startup account needs to have is 'Query configuration' (CC), on the SQL Server service.
  
  I would suggest turning on auditing for the 'Object Access' category (e.g. using secpol.msc), run a backup, and check using the Event Viewer which object accesses are being denied.

  petey December 04, 2008 00:40

  - 0 +
• 

  petey wrote:

  Your configuration looks fine. The only permission that the SQL Backup Agent service startup account needs to have is 'Query configuration' (CC), on the SQL Server service.
  
  I would suggest turning on auditing for the 'Object Access' category (e.g. using secpol.msc), run a backup, and check using the Event Viewer which object accesses are being denied.

  
  I just gave it everything to remove all doubt. Well, auditing doesn't show any failure on object access. Matter of fact, it doesn't show any success for object access either. There are no log entries for the SQL Backup service account at all.

  brosato December 04, 2008 08:03

  - 0 +

Add comment

Please sign in to leave a comment.