Troubleshooting CA ARCserve Central Host-Based VM Backup › Access Denied Errors Occur when Updating Nodes

Access Denied Errors Occur when Updating Nodes

Valid on all Windows operating systems that support User Account Control (UAC).

Note: Windows Vista, Windows Server 2008, Windows Server 2008 R2, and Windows 7 support UAC.

Symptom 1:

When you provide a Windows user account that is a member of the administrators group, the following messages displays when applying the password on the Node Credentials dialog of the Import Virtual Machines from vCenter/ESX dialog:

Administrator Privileges are required.

The result is that you cannot apply the node credentials.

Symptom 2:

When you import nodes but do not provide node credentials during the import operation, the following message displays when you try to perform the Update Node operation using a Windows user account that is a member of the administrators group:

Access is denied. Verify user has administrator privilege and the remote registry access is not restricted by local security policy of the added machine.

The result is that you cannot update the node.

Solution:

You can expect this behavior when UAC is enabled on computers running a Windows operating system that supports UAC. UAC is a Windows feature that allows only the Administrator account to log in to the computer from a remote location. The solution to this behavior is to complete the following steps:

Follow these steps:

1. Log in to the computer using the Administrator account.
2. Open Windows Control Panel.
3. Open User Accounts.
4. From the Make changes to your user account screen, click Change User Account Control Settings and then do one of the following:
   • Windows Vista and Windows Server 2008: On the Make changes to you user account screen, click Turn User Account Control on or off. Then on the Turn on User Account Control (UAC) to make your computer more secure screen, clear the check box next to Use User Account Control (UAC) to help protect your computer, and click OK.

     Restart your computer to apply the changes to UAC.

   • Windows Server 2008 r2 and Windows 7: On the Choose when to be notified about changes to your computer screen, move the slider from Always notify to Never notify. Click OK, close Windows Control Panel.

     Restart your computer to apply the changes to UAC.

5. After the computer restarts, verify that the following configurations are applied to the guest operating system on the virtual machine:
   • The Windows Server service is running.
   • The File and Printer Sharing service is allowed to communicate through the Windows firewall.
   • When the node is not required to join a domain, the Netlogon Service is allowed to communicate through the Windows firewall.
   • The value of Local Security Policy, Local Policies, Security Options, Network access: Sharing and security model for local accounts is Classic.
6. Verify the following configuration is applied on the Host-Based VM Backup server:
   • The value of Local Security Policy, Local Policies, Security Options, Network security: LAN Manager authentication level is Send LM & NTLM - use NTLMv2 session security if negotiated.