Click here to monitor SSC
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Backup on network fails


Backup on network fails

Author
Message
josephitesonali
josephitesonali
Forum Newbie
Forum Newbie (4 reputation)Forum Newbie (4 reputation)Forum Newbie (4 reputation)Forum Newbie (4 reputation)Forum Newbie (4 reputation)Forum Newbie (4 reputation)Forum Newbie (4 reputation)Forum Newbie (4 reputation)

Group: General Forum Members
Points: 4 Visits: 87
Hi,

I am trying to configure SQL server 2005 backup to a another server drive \\server2\folder. The folder on second server is shared, shared permission and security permission are set fine.

SQL server runs with NT Authority\Network service and SQL agent runs with a domain account which is given full permission on folder.

Still the backup from SQL job fails with below error:
"Cannot open backup device '\\server2\folder\master.bak'. Operating system error 5(Access is denied.). BACKUP DATABASE is terminating abnormally.".

Please let me know what might be the issue?

Thanks
anthony.green
anthony.green
SSCertifiable
SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)

Group: General Forum Members
Points: 6102 Visits: 6078
The account which actually rights the backup is the engine, not the agent.

You will need to make the SQL Engine service run as a domain account.

You could try adding the computer account in on the share permission, but never tested that so cannot confirm if it works or not.

I would consider first backing up to local disk then using something like robocopy to copy the files to the network share, for added safety and doesnt stop the backup completing if there is a network blip.



Want an answer fast? Try here
How to post data/code for the best help - Jeff Moden
When a question, really isn't a question - Jeff Smith
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
CrossTabs-Part1 & Part2 - Jeff Moden
SQL Server Backup, Integrity Check, and Index and Statistics Maintenance - Ola Hallengren
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger


paul.knibbs
paul.knibbs
SSCommitted
SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)SSCommitted (2K reputation)

Group: General Forum Members
Points: 1990 Visits: 6214
anthony.green (1/3/2013)
You could try adding the computer account in on the share permission, but never tested that so cannot confirm if it works or not.


I can confirm it *does* work, but it's not a configuration I would recommend--it gives any service running as Local System or Network Service on the SQL server machine access to the share, which is a potential security issue.
anthony.green
anthony.green
SSCertifiable
SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)SSCertifiable (6.1K reputation)

Group: General Forum Members
Points: 6102 Visits: 6078
paul.knibbs (1/4/2013)
anthony.green (1/3/2013)
You could try adding the computer account in on the share permission, but never tested that so cannot confirm if it works or not.


I can confirm it *does* work, but it's not a configuration I would recommend--it gives any service running as Local System or Network Service on the SQL server machine access to the share, which is a potential security issue.


Thanks for the clarification Paul, always run everything under a domain account so never had to test that particular scenario, but agreed with its a massive security flaw.



Want an answer fast? Try here
How to post data/code for the best help - Jeff Moden
When a question, really isn't a question - Jeff Smith
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
CrossTabs-Part1 & Part2 - Jeff Moden
SQL Server Backup, Integrity Check, and Index and Statistics Maintenance - Ola Hallengren
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger


ffarouqi
ffarouqi
SSC Veteran
SSC Veteran (297 reputation)SSC Veteran (297 reputation)SSC Veteran (297 reputation)SSC Veteran (297 reputation)SSC Veteran (297 reputation)SSC Veteran (297 reputation)SSC Veteran (297 reputation)SSC Veteran (297 reputation)

Group: General Forum Members
Points: 297 Visits: 1243
I believe read/write permission should go well with the account that you're using to back those db's of your's onto a shared path. If you know how to configure the security part then fair enough, otherwise ask your administrator to look into it. Pls. use "sa" account to run all your jobs unless there is a specific need to drift away from best practice.

I would also agree what other experts have mentioned over here, instead of backing it up on the share...try backing up on local disk, and then by using robocopy you can actually dump that file to the specific shared path. This way your backup will not be interrupted, and you'll be safe :-P

Regards,
Faisal
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search