Windows Server

Bob Genestet · Guest

This is an old issue that I could never resolve. Bkprunner.exe will not run.
Double clicking on it only causes a brief curser hour glass display. When a
scheduled backup runs I receive the email alert "Windows Small Business
Server Backup failed (Event ID: 5634) Alert on SERVER". Everything else
about ntbackup is working correctly including running the default .bks
script manually. I can also run a scheduled ntbackup without using the
wizard so this is more of an annoyance than a critical issue but I would
like to use the backup wizard. I don't remember if the backup runner ever
worked but very early after installing the server I did add a domain use to
the backup operators group so she could initiate a backup earlier than the
scheduled backup for the times the office would close early. I have since
removed her from the group. I have verified NTFS security setings,
membership and user permissions for "backup user" and "backup operators"
against a working server. I have even replaced bkprunner.exe with a known
working one. It seems that bkprunner.exe has lost the required permissions
to execute.

The exact error from the event log is:

Event Type: Error
Event Source: SmallBusinessServer
Event Category: SBS Backup
Event ID: 5634
Date: 10/31/2005
Time: 11:00:00 PM
User: N/A
Computer: SERVER
Description:
One or more components of Small Business Server Backup failed. For more
information, click Backup in Server Management, and view the log files.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The errors from the backup log:

10/31/2005 11:00 PM
-------------------------------
Date: 10/31/2005
Time: 11:00 PM
User: SYSTEM
-------------------------------

Backup Runner started.
LogonUser failed. (0x80070569)
NTBackup finished the backup with errors.

For more information about failed backups, see the article on
troubleshooting your backup at the following Web page:
http://go.microsoft.com/fwlink/?LinkId=18414

Backup ended at Monday, October 31, 2005 11:00 PM
Backup error finished with error code 0X80070569.

Backup error finished with error code 0X80070569.

Brandy Nee [MSFT] · Guest

Hello Bob,

Thank you for posting to the SBS Newsgroup.

I understand that you cannot run Backup Wizard on the SBS Server. If I have
misunderstood your issue, please let me know.

First of all, I need to confirm with you what exact Operation System you
are running, SBS 2K or SBS 2K3? I assume it is SBS 2K3 Server.

From the Backup Log you applied, I notice error ID 0x80070569. 0x80070569
means ERROR_LOGON_TYPE_NOT_GRANTED. I understand that you have already
compared permissions with a known good machine. However, as you mentioned,
you can manually run NTBackup, I wonder the Backup Wizard may be still run
under the account you deleted. So we need to double check these settings:

===============

Suggestion 1.

Please reconfigure SBS backup in Server Management.

1. Log on SBS Server as Administrator.

2. Open Server Management. Expand to Standard Management\Backup.

3. Click Configure Backup in the left pane.

4. Run the Windows Small Business Server Backup Configuration Wizard.

================

Suggestion 2.

1. Go to Start -> Run "dsa.msc", open .

2. Expand to MyBusiness/Users/SBSUsers.

3. Double click Backup User in the right pane.

4. Double click Backup User, make sure the Backup user is a member of:
Domain Admins; Backup Operators; Domain Users and Internet Users.

=================

Suggestion 3.

1. Open Domain Controller Security Policy in Administrative Tools.

2. Go to Local Policies/User Rights Assignment.

3. Make sure the Backup User is not in the following list:

- Deny log on locally.
- Deny log on as a service.
- Deny log on as a batch job.

4. Make sure the Backup User is in the following list:

- Allow log on locally.
- Log on as a batch jog.
- Log on as a service.

5. Run the following command:

gpupdate /force

6. Reboot the server and check whether the problem persists.

=================

If the issue persists after you check all the settings above, please help
to gather following error information for further analysis:

a. The Backupxx.log files in the folder 'C:\Documents and Settings\SBS
Backup User\Local Settings\Application Data\Microsoft\Windows
NT\NTBackup\data'.

b. The Sbsbackuplog0x.log files which can be located under the folder
'%sbsprogramdir%\Support\Backup Logs'.

Please zip all the files and send it as attachment to my mailbox:
v-branee@microsoft.com.

c. Please explain in detail "Double clicking on it only causes a brief
curser hour glass display". I need to know where you double click and
whether you met any error messages. If yes, please type the error message
word by word to the Newsgroup for us to analysis.

Please take your time to perform the steps above and collect the
information for us to troubleshoot your issue. If anything is unclear,
please feel free to let me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

Brandy Nee [MSFT] · Guest

Hello Bob,

Thank you for posting back!

Due to complicated of the issue, I need some more time to perform research
on your issue.

By the way, please go to the SBS 2K3 Server, run "eventvwr" (without
quotation marks). Double click error ID, click the Copy button and paste
the full content to the Newsgroup. Please do not edit or delete any
information. we need the exact result for accurate research.

Also, in your reply, you mentioned "mouse pointer briefly change to an hour
glass", I need to know whether there is any error message pop out. If yes,
please type the error message word by word to me.

I greatly appreciated your time and understanding, and am looking forward
to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

Bob Genestet · Guest

Brandy,

Here are all the error type events. There is no pop up error message of any
sorts when I double click on bkprunner.exe. Once again, there is no need to
spend excessive time on this issue although I do appreciate your trying to
help with this. Scheduled NTBackups are running successfully. It is not
crucial that the Backup runner is functional. The server otherwise seems
very healthy.

Event Type: Error
Event Source: SmallBusinessServer
Event Category: SBS Backup
Event ID: 5634
Date: 11/4/2005
Time: 11:00:00 PM
User: N/A
Computer: SERVER
Description:
One or more components of Small Business Server Backup failed. For more
information, click Backup in Server Management, and view the log files.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Information
Event Source: SmallBusinessServer
Event Category: SBS Backup
Event ID: 5632
Date: 11/4/2005
Time: 11:00:00 PM
User: N/A
Computer: SERVER
Description:
Small Business Server Backup has started.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: 11/4/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: SBS Backup User
Domain: antoon
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: SERVER
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 5324
Transited Services: -
Source Network Address: -
Source Port: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Thanks,
Bob

""Brandy Nee [MSFT]"" <v-branee@online.microsoft.com> wrote in message
news:e0Qha3U4FHA.1172@TK2MSFTNGXA01.phx.gbl...

Brandy Nee [MSFT] · Guest

Hello Bob,

Thank you for posting back!

I have received the event log. However, we still need more detail log files
for research. Please take your time to read through all my information
first and then gather the detail error information for further research.

1. Security log: On the server, run "eventvwr" (without quotation marks),
check whether there is any error in Security. If yes, double click it,
click the Copy button and paste the full content to the Newsgroup.

2. Group policy result (use GPMC):

Log on SBS Server as the account you run Backup. Open Group Policy
Management. Expand to Forest\Group Policy Results. Right click Group Policy
Results, select Group Policy Results Wizard. Run the Group Policy Results
Wizard.

a. Computer Selection: This computer.

b. User Selection: Current User.

c. Right click the report and Save Report. Send the file to my
mailbox:v-branee@microsoft.com.

3. The dump of Backup User:

A. Click Start, click Run, type "ldp" and press ENTER.

B. Press Ctrl+B and click OK.

C. Press Ctrl+T and click OK.

D. Expand DC=<domainname>\OU=MyBusiness...\OU=Users...\OU=SBSUsers...,
double-click CN=Backup User...
E. Click Save As from the Connection menu and save to a text file.

NOTE: Ldp.exe is included in Windows support tools which can be installed
by running Support\Tools\Setup.exe on the SBS 2003 CD#2.

4. Get the group membership of Backup User by using the script below:

Note: replace <domain> with your actual domain name.

List the Active Directory Groups a User Belongs To
http://www.microsoft.com/technet/scriptcenter/scripts/ad/groups/adgpvb17.msp
x

On Error Resume Next
Const E_ADS_PROPERTY_NOT_FOUND = &h8000500D

Set objUser = GetObject _
("LDAP://cn=Backup
User,ou=SBSUsers,ou=Users,ou=MyBusiness,dc=<domain>,dc=local")

intPrimaryGroupID = objUser.Get("primaryGroupID")
arrMemberOf = objUser.GetEx("memberOf")

If Err.Number = E_ADS_PROPERTY_NOT_FOUND Then
WScript.Echo "The memberOf attribute is not set."
Else
WScript.Echo "Member of: "
For Each Group in arrMemberOf
WScript.Echo Group
Next
End If

Set objConnection = CreateObject("ADODB.Connection")
objConnection.Open "Provider=ADsDSOObject;"

Set objCommand = CreateObject("ADODB.Command")
objCommand.ActiveConnection = objConnection
objCommand.CommandText = _
"<LDAP://dc=NA,dc=fabrikam,dc=com>;(objectCategory=Group);" & _
"distinguishedName,primaryGroupToken;subtree"
Set objRecordSet = objCommand.Execute

Do Until objRecordset.EOF
If objRecordset.Fields("primaryGroupToken") = intPrimaryGroupID Then
WScript.Echo "Primary group:"
WScript.Echo objRecordset.Fields("distinguishedName") & _
" (primaryGroupID: " & intPrimaryGroupID & ")"
End If
objRecordset.MoveNext
Loop

objConnection.Close

I appreciate your time and cooperation. If anything is unclear, please feel
free to let me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

Bob Genestet · Guest

Hi Brandy,

I was not able to install the support tools remotely. I will need to travel
to the site to run "ldp" to gather your other diagnostic information. Below
are the events written to the security log when bkprunner attempts to run.

I have attached the GP results file.

The results of the script to gather group membership are:
CN=Domain Admins, CN=Users, DC=antoon, DC=local
CN=Backup Operators, CN=Builtin, DC=antoon, DC=local
No primary groups existed

Thank you for your time. I know you have others you are assisting. My
problem is not critical and there is no burden if it is not resolved. The
server is running very well otherwise and I feel this issue does not warrant
the time allocated to perform extensive repairs. I know it could be repaired
within a few hours with a reinstallation of the server but the benefit does
not exceed the cost at this time.

Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 628
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
User Account password set:
Target Account Name: SBS Backup User
Target Domain: antoon
Target Account ID: antoon\SBS Backup User
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 642
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
User Account Changed:
Target Account Name: SBS Backup User
Target Domain: antoon
Target Account ID: antoon\SBS Backup User
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)
Privileges: -
Changed Attributes:
Sam Account Name: -
Display Name: -
User Principal Name: -
Home Directory: -
Home Drive: -
Script Path: -
Profile Path: -
User Workstations: -
Password Last Set: 11/8/2005 11:00:00 PM
Account Expires: -
Primary Group ID: -
AllowedToDelegateTo: -
Old UAC Value: -
New UAC Value: -
User Account Control: -
User Parameters: -
Sid History: -
Logon Hours: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 626
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
User Account Enabled:
Target Account Name: SBS Backup User
Target Domain: antoon
Target Account ID: antoon\SBS Backup User
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 642
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
User Account Changed:
Target Account Name: SBS Backup User
Target Domain: antoon
Target Account ID: antoon\SBS Backup User
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)
Privileges: -
Changed Attributes:
Sam Account Name: -
Display Name: -
User Principal Name: -
Home Directory: <value not set>
Home Drive: -
Script Path: <value not set>
Profile Path: -
User Workstations: -
Password Last Set: -
Account Expires: -
Primary Group ID: -
AllowedToDelegateTo: -
Old UAC Value: 0x11
New UAC Value: 0x10
User Account Control:
Account Enabled
User Parameters: -
Sid History: -
Logon Hours: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 672
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Authentication Ticket Request:
User Name: SBS Backup User
Supplied Realm Name: antoon
User ID: antoon\SBS Backup User
Service Name: krbtgt
Service ID: antoon\krbtgt
Ticket Options: 0x40810010
Result Code: -
Ticket Encryption Type: 0x17
Pre-Authentication Type: 2
Client Address: 127.0.0.1
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 673
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Service Ticket Request:
User Name: SBS Backup User@ANTOON.LOCAL
User Domain: ANTOON.LOCAL
Service Name: SERVER$
Service ID: antoon\SERVER$
Ticket Options: 0x40810000
Ticket Encryption Type: 0x17
Client Address: 127.0.0.1
Failure Code: -
Logon GUID: {29ef3484-404a-6be1-9be2-fd4a9a87c128}
Transited Services: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 534
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: SBS Backup User
Domain: antoon
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: SERVER
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 4944
Transited Services: -
Source Network Address: -
Source Port: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 629
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
User Account Disabled:
Target Account Name: SBS Backup User
Target Domain: antoon
Target Account ID: antoon\SBS Backup User
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 642
Date: 11/8/2005
Time: 11:00:00 PM
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
User Account Changed:
Target Account Name: SBS Backup User
Target Domain: antoon
Target Account ID: antoon\SBS Backup User
Caller User Name: SERVER$
Caller Domain: antoon
Caller Logon ID: (0x0,0x3E7)
Privileges: -
Changed Attributes:
Sam Account Name: -
Display Name: -
User Principal Name: -
Home Directory: <value not set>
Home Drive: -
Script Path: <value not set>
Profile Path: -
User Workstations: -
Password Last Set: -
Account Expires: -
Primary Group ID: -
AllowedToDelegateTo: -
Old UAC Value: 0x10
New UAC Value: 0x11
User Account Control:
Account Disabled
User Parameters: -
Sid History: -
Logon Hours: -

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

End of SBS Backup User related security
events ---------------------------------
Thanks,
Bob

"Bob Genestet" <bob_genestet@computernetorkservice.com> wrote in message
news:uASINyh4FHA.268@TK2MSFTNGP10.phx.gbl...

Brandy Nee [MSFT] · Guest

Hello Bob,

Thank you for posting back!

Thanks a lot for your very detailed information gathering. I have read
through all the information you applied, and I have following suggestions:

1. Can you successfully rerun Backup Wizard? To do so,

a. Open Server Management\Standard Management\Backup.

b. On the right pane, click Configure Backup.

c. Can you successfully run the Backup Wizard?

d. If you can, afterwards, click Backup Now.

e. Can you Backup Now?

If there is any steps fail, please capture a screen shot for each error
message so we can perform further research on it.

2. Export System Event Log to me. To do so, on the server, run "eventvwr"
(without quotation marks), right click System, select Save as, please save
as .evt file, and send the file to me.

Thanks a lot for your time and co-operation, I am looking forward to
hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

Bob Genestet · Guest

Hello Brandy,

I am impressed by your tenacity in this matter. Yes, I can run the
configuration wizard to configure or unconfigure SBS Backup. After SBS
Backup is configured and you click "backup now", the results are the same as
when I double click directly on C:\Program Files\Microsoft Windows Small
Business Server\Backup\bkprunner.exe directly. Nothing happens and no error
message pops up but a new backup log is immediately displayed in server
management as noted in the beginning of this thread.

As a test, I right clicked on bkrunner.exe and chose to "run as"
administrator and I did get a pop up error message containing the same
verbiage as the event log "The user has not been granted the requested logon
type at this machine."

I have emailed a screen shot and corresponding security log events to and
system event log file to you.

Thanks,
Bob

""Brandy Nee [MSFT]"" <v-branee@online.microsoft.com> wrote in message
news:9ETTQTd5FHA.832@TK2MSFTNGXA02.phx.gbl...

Brandy Nee [MSFT] · Guest

Hello Bob,

Thank you for posting back!

I am read through all the information you applied, I found the following
information:

In my 1st Nov reply, I asked to you check:

Make sure the Backup User is in the following list:

- Allow log on locally.
- Log on as a batch jog.
- Log on as a service.

However, in the Group Policy Result, I notice:

Log on as a batch job: NETWORK SERVICE, LOCAL SERVICE,
antoon\SUPPORT_388945a0, antoon\IWAM_DELL-OFV7446Y6N,
antoon\IUSR_DELL-OFV7446Y6N, antoon\IIS_WPG, antoon\IIS_WPG,
antoon\Administrator, Administrators

Log on as a service: Administrators, antoon\Administrator, NETWORK SERVICE

I cannot find Backup User account listed inside. So please check again.

Thanks a lot for your time and if you have any updates, please feel free to
let me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

Bob Genestet · Guest

ISSUE RESOLVED:

Hi Brandy,

After a closer comparison of security group memberships on the problem
server to a know working server, I found that "Domain Users" was wrongly a
member of "Remote Operators Security Group". Removing "Domain Users" form
"Remote Operators Security Group" fix the problem.

"Remote Operators Security Group", by design, can log on remotely but cannot
log on directly. "Domain Users" was inadvertently added as a member of
"Remote Operators Security Group". Because "Backup User" is a member of
"Domain Users", and "Domain Users" was wrongly a member of "Remote Operators
Security Group", any direct logon attempt by "Backup User" would fail.

Thank you for your time and persistence in this matter.

Bob Genestet

""Brandy Nee [MSFT]"" <v-branee@online.microsoft.com> wrote in message
news:tm0%23zDq5FHA.1236@TK2MSFTNGXA02.phx.gbl...

	Windows Server Forum Index -> Small Business Server 2003	All times are GMT
Page 1 of 1