Log in
::
Register
::
Not logged in
Home
Tags
Articles
Editorials
Stairways
Forums
Scripts
Videos
Blogs
QotD
Books
Ask SSC
SQL Jobs
Training
Authors
About us
Contact us
Newsletters
Write for us
Recent Posts
Recent Posts
Popular Topics
Popular Topics
Home
Search
Members
Calendar
Who's On
Home
»
SQL Server 2005
»
Backups
»
Backup on network fails
Backup on network fails
Rate Topic
Display Mode
Topic Options
Author
Message
josephitesonali
josephitesonali
Posted Thursday, January 03, 2013 7:34 AM
Forum Newbie
Group: General Forum Members
Last Login: Monday, June 17, 2013 3:02 PM
Points: 2,
Visits: 23
Hi,
I am trying to configure SQL server 2005 backup to a another server drive \\server2\folder. The folder on second server is shared, shared permission and security permission are set fine.
SQL server runs with NT Authority\Network service and SQL agent runs with a domain account which is given full permission on folder.
Still the backup from SQL job fails with below error:
"Cannot open backup device '\\server2\folder\master.bak'. Operating system error 5(Access is denied.). BACKUP DATABASE is terminating abnormally.".
Please let me know what might be the issue?
Thanks
Post #1402373
anthony.green
anthony.green
Posted Thursday, January 03, 2013 11:45 AM
SSCertifiable
Group: General Forum Members
Last Login: Wednesday, June 05, 2013 2:40 AM
Points: 5,075,
Visits: 4,833
The account which actually rights the backup is the engine, not the agent.
You will need to make the SQL Engine service run as a domain account.
You could try adding the computer account in on the share permission, but never tested that so cannot confirm if it works or not.
I would consider first backing up to local disk then using something like robocopy to copy the files to the network share, for added safety and doesnt stop the backup completing if there is a network blip.
Want an answer fast? Try here
How to post data/code for the best help - Jeff Moden
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
CrossTabs-Part1
&
Part2 - Jeff Moden
SQL Server Backup, Integrity Check, and Index and Statistics Maintenance - Ola Hallengren
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger
Post #1402490
paul.knibbs
paul.knibbs
Posted Friday, January 04, 2013 4:18 AM
Ten Centuries
Group: General Forum Members
Last Login: Yesterday @ 8:24 AM
Points: 1,272,
Visits: 4,309
anthony.green (1/3/2013)
You could try adding the computer account in on the share permission, but never tested that so cannot confirm if it works or not.
I can confirm it *does* work, but it's not a configuration I would recommend--it gives any service running as Local System or Network Service on the SQL server machine access to the share, which is a potential security issue.
Post #1402795
anthony.green
anthony.green
Posted Friday, January 04, 2013 4:19 AM
SSCertifiable
Group: General Forum Members
Last Login: Wednesday, June 05, 2013 2:40 AM
Points: 5,075,
Visits: 4,833
paul.knibbs (1/4/2013)
anthony.green (1/3/2013)
You could try adding the computer account in on the share permission, but never tested that so cannot confirm if it works or not.
I can confirm it *does* work, but it's not a configuration I would recommend--it gives any service running as Local System or Network Service on the SQL server machine access to the share, which is a potential security issue.
Thanks for the clarification Paul, always run everything under a domain account so never had to test that particular scenario, but agreed with its a massive security flaw.
Want an answer fast? Try here
How to post data/code for the best help - Jeff Moden
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
CrossTabs-Part1
&
Part2 - Jeff Moden
SQL Server Backup, Integrity Check, and Index and Statistics Maintenance - Ola Hallengren
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger
Post #1402800
faisalfarouqi
faisalfarouqi
Posted Monday, January 21, 2013 5:12 AM
Valued Member
Group: General Forum Members
Last Login: Monday, June 17, 2013 11:36 PM
Points: 74,
Visits: 481
I believe read/write permission should go well with the account that you're using to back those db's of your's onto a shared path. If you know how to configure the security part then fair enough, otherwise ask your administrator to look into it. Pls. use "sa" account to run all your jobs unless there is a specific need to drift away from best practice.
I would also agree what other experts have mentioned over here, instead of backing it up on the share...try backing up on local disk, and then by using robocopy you can actually dump that file to the specific shared path. This way your backup will not be interrupted, and you'll be safe
Regards,
Faisal
Post #1409499
« Prev Topic
|
Next Topic »
Permissions
You
cannot
post new topics.
You
cannot
post topic replies.
You
cannot
post new polls.
You
cannot
post replies to polls.
You
cannot
edit your own topics.
You
cannot
delete your own topics.
You
cannot
edit other topics.
You
cannot
delete other topics.
You
cannot
edit your own posts.
You
cannot
edit other posts.
You
cannot
delete your own posts.
You
cannot
delete other posts.
You
cannot
post events.
You
cannot
edit your own events.
You
cannot
edit other events.
You
cannot
delete your own events.
You
cannot
delete other events.
You
cannot
send private messages.
You
cannot
send emails.
You
may
read topics.
You
cannot
rate topics.
You
cannot
vote within polls.
You
cannot
upload attachments.
You
may
download attachments.
You
cannot
post HTML code.
You
cannot
edit HTML code.
You
cannot
post IFCode.
You
cannot
post JavaScript.
You
cannot
post EmotIcons.
You
cannot
post or upload images.
Copyright © 2002-2013 Simple Talk Publishing. All Rights Reserved.
Privacy Policy.
Terms of Use.
Report Abuse.