none
DPM 2016 agent Fail dopo il demoting RRS feed

  • Domanda

  • Salve,

    ho un server DPM 2016 aggiornato su windows 2012R2 che fa backup dei server.

    Due dei server 2008 che erano DOMAIN CONTROLLER e sono stati demotati non si collegano più all'agent DPM.

    Provate instllazioni manuali e setdpmserver ma nessun esito positivo.

    C'è una procedura per ricollegare o reinstallare e far comunicare il DPM con l'agent?

    Saluti.

    giovedì 7 novembre 2019 15:20

Risposte

  • il server con dpm agent è quello che era domain controller su cui hai fatto il demoting ?

    ed era un domain controller multihomed con più di una scheda di rete e con molti indirizzi ip ?

    inoltre se il server non è più dc è inutile che punti a se stesso come dns

     IPv4 Address. . . . . . . . . . . : 200.200.6.13(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

                                           200.200.6.13

    qui va pulito un po' tutto, la configurazione di rete non va affatto bene.


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    venerdì 15 novembre 2019 08:29
    Moderatore

Tutte le risposte

  • Quali errori hai in eventlog?

    - Daniele
    Microsoft MVP System Center Cloud and Datacenter Management

    Unisciti alla community italiana per System Center http://www.ugisystemcenter.org

    http://nocentdocent.wordpress.com
    This posting is provided “AS IS” with no warranties, and confers no rights.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    venerdì 8 novembre 2019 16:10
    Moderatore
  • Creation of recovery points for Initial Store on SERVERFQDN have failed. The last recovery point creation failed for the following reason: (ID: 3114)
    DPM failed to communicate with the protection agent on SERVERFQDN because access is denied. (ID: 42)
    lunedì 11 novembre 2019 07:37
  • http://www.buchatech.com/tag/dpm-id-42-access-is-denied-0x80070005/

    dopo il demote, i due server sono rimasti almeno membri del dominio ?


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    lunedì 11 novembre 2019 10:01
    Moderatore
  • Si

    martedì 12 novembre 2019 07:35
  • Salve,

    cortesemente avete qualche soluzione al problema?

    Grazie.

    giovedì 14 novembre 2019 07:28
  • puoi postare un ipconfig /all di questo server e del domain controller ?

    ed anche il risultato del comando

    echo %logonserver%


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    giovedì 14 novembre 2019 07:45
    Moderatore
  • Server con DPM AGENT

    Microsoft Windows [Version 6.0.6002]

    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

    echo %logonserver%

    \\SRVDC1

    ipconfig /all

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : B2

       Primary Dns Suffix  . . . . . . . : MYDOMAIN.it

       Node Type . . . . . . . . . . . . : Hybrid

       IP Routing Enabled. . . . . . . . : No

       WINS Proxy Enabled. . . . . . . . : No

       DNS Suffix Search List. . . . . . : MYDOMAIN.it

    Ethernet adapter iSCSI:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft Virtual Network Switch Adapter

    #3

       Physical Address. . . . . . . . . : 00-23-7D-3C-F3-22

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 10.0.1.2(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.255.0

       Default Gateway . . . . . . . . . :

       NetBIOS over Tcpip. . . . . . . . : Disabled

    Ethernet adapter LAN:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft Virtual Network Switch Adapter

    #2

       Physical Address. . . . . . . . . : 00-23-7D-3C-E6-AB

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 200.200.6.13(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

                                           200.200.6.13

                                           200.200.6.10

                                           200.200.6.11

                                           200.200.3.2

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Ethernet adapter LAN_1_Porta_3__IP_200.200.6.12:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : HP NC326i PCIe Dual Port Gigabit Server A

    dapter

       Physical Address. . . . . . . . . : 00-23-7D-3C-E6-AA

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 200.200.6.12(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . : 200.200.3.3

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.10

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Ethernet adapter iSCSI_1_Porta_7_IP_10.0.0.2:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit Server Ad

    apter #2

       Physical Address. . . . . . . . . : 00-23-7D-3C-F3-24

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 10.0.0.2(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.255.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 127.0.0.1

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter Local Area Connection* 8:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{01EFD2C9-C3CF-43F9-B62C-92F51B7F1

    90D}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 9:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : 6TO4 Adapter

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv6 Address. . . . . . . . . . . : 2002:c8c8:60c::c8c8:60c(Preferred)

       IPv6 Address. . . . . . . . . . . : 2002:c8c8:60d::c8c8:60d(Preferred)

       Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.10

       NetBIOS over Tcpip. . . . . . . . : Disabled

    Tunnel adapter Local Area Connection* 14:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

       Physical Address. . . . . . . . . : 02-00-54-55-4E-01

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 15:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{BC5FB890-576D-45D7-BB25-19BFDE92A

    FF8}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 16:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{AFA34B79-DAD5-4C73-8842-B508B12AF

    3FC}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 17:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{51641683-138A-4F5F-92A7-F67B97E11

    61D}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    SERVER CON DPM SERVER

    Microsoft Windows [Version 6.3.9600]

    (c) 2013 Microsoft Corporation. All rights reserved.

    echo %logonserver%

    \\SRVDC2

    IPCONFIG /ALL

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : DPM

       Primary Dns Suffix  . . . . . . . : MYDOMAIN.it

       Node Type . . . . . . . . . . . . : Hybrid

       IP Routing Enabled. . . . . . . . : No

       WINS Proxy Enabled. . . . . . . . : No

       DNS Suffix Search List. . . . . . : MYDOMAIN.it

    Ethernet adapter Ethernet:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet

       Physical Address. . . . . . . . . : 6C-C2-17-85-04-F0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 200.200.6.25(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . : 200.200.3.3

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter 6TO4 Adapter:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft 6to4 Adapter

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv6 Address. . . . . . . . . . . : 2002:c8c8:619::c8c8:619(Preferred)

       Default Gateway . . . . . . . . . :

       DHCPv6 IAID . . . . . . . . . . . : 503316480

       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-C7-58-0D-6C-C2-17-85-04-F0

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

       NetBIOS over Tcpip. . . . . . . . : Disabled

    Tunnel adapter isatap.{517620E6-1EDC-4859-95D8-EF4F7168B287}:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    giovedì 14 novembre 2019 09:22
  • Se questo può aiutare, in DCOM ci sono permessi 

    • DPMRADCOMTrustedMachines
    • DPMRADmTrustedMachines
    • Ho aggiunto anche ADMINISTRATOR DEL DOMINIO

    Con l'installazione manuale SETDPMSERVER ora restituisce questo errore:

    C:\Program Files\Microsoft Data Protection Manager\DPM\bin>setdpmserver -dpmserv
    ername dpm.MYDOMAIN.it
    Configuring dpm server settings and firewall settings for dpm server =[dpm. MYDOMAIN
    .it]
    Configuring dpm server settings and firewall settings for dpm server =[ MYDOMAIN.it\
    DPM]
    SetDpmServer failed with errorcode =0x80070534, error says: No mapping between a
    ccount names and security IDs was done.

    To further troubleshoot failures with SetDpmServer, go to  http://go.microsoft.c
    om/fwlink/?LinkId=169142

    giovedì 14 novembre 2019 09:28
  • il server con dpm agent è quello che era domain controller su cui hai fatto il demoting ?

    ed era un domain controller multihomed con più di una scheda di rete e con molti indirizzi ip ?

    inoltre se il server non è più dc è inutile che punti a se stesso come dns

     IPv4 Address. . . . . . . . . . . : 200.200.6.13(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

                                           200.200.6.13

    qui va pulito un po' tutto, la configurazione di rete non va affatto bene.


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    venerdì 15 novembre 2019 08:29
    Moderatore
  • Access denied è la parola chiave. Verosimilmente hai un problema di join al dominio dei server in questione oppure hai SID duplicati.

    - Daniele
    Microsoft MVP System Center Cloud and Datacenter Management

    Unisciti alla community italiana per System Center http://www.ugisystemcenter.org

    http://nocentdocent.wordpress.com
    This posting is provided “AS IS” with no warranties, and confers no rights.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    venerdì 15 novembre 2019 11:27
    Moderatore
  • I Servers sono due erano DC 2008 sono stati "demotati" e su cui l'agent funzionava benissimo,

    Ora ho fatto pulizia alla configurazione IP ma rimane multihomed

    Ho provato allora nuovamente a rimuovere tutto ed a far reinstallare l'agent da DPM e Manualmente ma senza successo.

    Riguarda comunque qualcosa che è successo a causa del demoting anche se tutta la migrazione a Server 2016 (nuovi DC con tutti i ruoli) ha avuto pienamente successo.

    L'unica cosa che non posso fare, ma non credo influisca visto il comportamento avuto su altri servers, è il riavvio.

    l'NTP è sincronizzato.

    Alla fine trovo installato solo Agent Coordinator sul server di destinazione se installo dal DPM.

    L'errore installando l'agent è:

    Install protection agent on B2.mydomain.it failed:
    Error 337: You cannot install the protection agent on B2.mydomain.it because access to the computer has been denied.
    Recommended action: Do the following to troubleshoot this issue: 
    1) If another DPM server is currently protecting B2.mydomain.it use that DPM server to uninstall the protection agent from B2.mydomain.it. Then, use this DPM server to install the protection agent on B2.mydomain.it.
    2) Verify that the time on the DPM server and the selected computer is synchronized with the domain controller. At a command prompt, type "net time /set" to synchronize the time with the domain controller.
    3) If the computer is a domain controller, verify that the primary domain controller (the PDC Emulator) is running Windows Server 2003 with Service Pack 1 (SP1), and that Active Directory has completed replication between the domain controllers since the Windows Server 2003 SP1 installation.

    venerdì 22 novembre 2019 07:36
  • scusa, non so se ho capito bene, ma vuoi dire che dopo il demoting non hai mai riavviato quei due server ?

    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    venerdì 22 novembre 2019 07:58
    Moderatore
  • No, certo che l'ho riavviato e anche più volte, ma essendo in produzione non è possibile farlo se non pianificando.

    Piero

    MCSE-MCSA-MCT

    lunedì 25 novembre 2019 07:28
  • Ciao,

    scusa ma non ho avuto risposte.

    Rimango in attesa

    martedì 3 dicembre 2019 08:23
  • focalizziamoci su questo:

    Install protection agent on B2.mydomain.it failed:
    Error 337: You cannot install the protection agent on B2.mydomain.it because access to the computer has been denied.
    Recommended action: Do the following to troubleshoot this issue: 
    1) If another DPM server is currently protecting B2.mydomain.it use that DPM server to uninstall the protection agent from B2.mydomain.it. Then, use this DPM server to install the protection agent on B2.mydomain.it.
    2) Verify that the time on the DPM server and the selected computer is synchronized with the domain controller. At a command prompt, type "net time /set" to synchronize the time with the domain controller.
    3) If the computer is a domain controller, verify that the primary domain controller (the PDC Emulator) is running Windows Server 2003 with Service Pack 1 (SP1), and that Active Directory has completed replication between the domain controllers since the Windows Server 2003 SP1 installation.

    hai provato a verificare i tre suggerimenti dati dal messaggio d'errore ?

    i domain controllers attuali si replicano correttamente?

    il login sui server demotati avviene regolarmente con gli account di dominio ?

    con quale account gira il servizio DPM ?


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    martedì 3 dicembre 2019 08:36
    Moderatore