none
DPM 2016 agent Fail dopo il demoting RRS feed

  • 質問

  • Salve,

    ho un server DPM 2016 aggiornato su windows 2012R2 che fa backup dei server.

    Due dei server 2008 che erano DOMAIN CONTROLLER e sono stati demotati non si collegano più all'agent DPM.

    Provate instllazioni manuali e setdpmserver ma nessun esito positivo.

    C'è una procedura per ricollegare o reinstallare e far comunicare il DPM con l'agent?

    Saluti.

    2019年11月7日 15:20

回答

  • il server con dpm agent è quello che era domain controller su cui hai fatto il demoting ?

    ed era un domain controller multihomed con più di una scheda di rete e con molti indirizzi ip ?

    inoltre se il server non è più dc è inutile che punti a se stesso come dns

     IPv4 Address. . . . . . . . . . . : 200.200.6.13(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

                                           200.200.6.13

    qui va pulito un po' tutto, la configurazione di rete non va affatto bene.


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    2019年11月15日 8:29
    モデレータ

すべての返信

  • Quali errori hai in eventlog?

    - Daniele
    Microsoft MVP System Center Cloud and Datacenter Management

    Unisciti alla community italiana per System Center http://www.ugisystemcenter.org

    http://nocentdocent.wordpress.com
    This posting is provided “AS IS” with no warranties, and confers no rights.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    2019年11月8日 16:10
    モデレータ
  • Creation of recovery points for Initial Store on SERVERFQDN have failed. The last recovery point creation failed for the following reason: (ID: 3114)
    DPM failed to communicate with the protection agent on SERVERFQDN because access is denied. (ID: 42)
    2019年11月11日 7:37
  • http://www.buchatech.com/tag/dpm-id-42-access-is-denied-0x80070005/

    dopo il demote, i due server sono rimasti almeno membri del dominio ?


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    2019年11月11日 10:01
    モデレータ
  • Salve,

    cortesemente avete qualche soluzione al problema?

    Grazie.

    2019年11月14日 7:28
  • puoi postare un ipconfig /all di questo server e del domain controller ?

    ed anche il risultato del comando

    echo %logonserver%


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    2019年11月14日 7:45
    モデレータ
  • Server con DPM AGENT

    Microsoft Windows [Version 6.0.6002]

    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

    echo %logonserver%

    \\SRVDC1

    ipconfig /all

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : B2

       Primary Dns Suffix  . . . . . . . : MYDOMAIN.it

       Node Type . . . . . . . . . . . . : Hybrid

       IP Routing Enabled. . . . . . . . : No

       WINS Proxy Enabled. . . . . . . . : No

       DNS Suffix Search List. . . . . . : MYDOMAIN.it

    Ethernet adapter iSCSI:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft Virtual Network Switch Adapter

    #3

       Physical Address. . . . . . . . . : 00-23-7D-3C-F3-22

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 10.0.1.2(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.255.0

       Default Gateway . . . . . . . . . :

       NetBIOS over Tcpip. . . . . . . . : Disabled

    Ethernet adapter LAN:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft Virtual Network Switch Adapter

    #2

       Physical Address. . . . . . . . . : 00-23-7D-3C-E6-AB

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 200.200.6.13(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

                                           200.200.6.13

                                           200.200.6.10

                                           200.200.6.11

                                           200.200.3.2

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Ethernet adapter LAN_1_Porta_3__IP_200.200.6.12:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : HP NC326i PCIe Dual Port Gigabit Server A

    dapter

       Physical Address. . . . . . . . . : 00-23-7D-3C-E6-AA

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 200.200.6.12(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . : 200.200.3.3

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.10

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Ethernet adapter iSCSI_1_Porta_7_IP_10.0.0.2:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : HP NC373i Multifunction Gigabit Server Ad

    apter #2

       Physical Address. . . . . . . . . : 00-23-7D-3C-F3-24

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 10.0.0.2(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.255.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 127.0.0.1

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter Local Area Connection* 8:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{01EFD2C9-C3CF-43F9-B62C-92F51B7F1

    90D}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 9:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : 6TO4 Adapter

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv6 Address. . . . . . . . . . . : 2002:c8c8:60c::c8c8:60c(Preferred)

       IPv6 Address. . . . . . . . . . . : 2002:c8c8:60d::c8c8:60d(Preferred)

       Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.10

       NetBIOS over Tcpip. . . . . . . . : Disabled

    Tunnel adapter Local Area Connection* 14:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

       Physical Address. . . . . . . . . : 02-00-54-55-4E-01

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 15:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{BC5FB890-576D-45D7-BB25-19BFDE92A

    FF8}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 16:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{AFA34B79-DAD5-4C73-8842-B508B12AF

    3FC}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Local Area Connection* 17:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : isatap.{51641683-138A-4F5F-92A7-F67B97E11

    61D}

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    SERVER CON DPM SERVER

    Microsoft Windows [Version 6.3.9600]

    (c) 2013 Microsoft Corporation. All rights reserved.

    echo %logonserver%

    \\SRVDC2

    IPCONFIG /ALL

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : DPM

       Primary Dns Suffix  . . . . . . . : MYDOMAIN.it

       Node Type . . . . . . . . . . . . : Hybrid

       IP Routing Enabled. . . . . . . . : No

       WINS Proxy Enabled. . . . . . . . : No

       DNS Suffix Search List. . . . . . : MYDOMAIN.it

    Ethernet adapter Ethernet:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet

       Physical Address. . . . . . . . . : 6C-C2-17-85-04-F0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv4 Address. . . . . . . . . . . : 200.200.6.25(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . : 200.200.3.3

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

       NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter 6TO4 Adapter:

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft 6to4 Adapter

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

       IPv6 Address. . . . . . . . . . . : 2002:c8c8:619::c8c8:619(Preferred)

       Default Gateway . . . . . . . . . :

       DHCPv6 IAID . . . . . . . . . . . : 503316480

       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1A-C7-58-0D-6C-C2-17-85-04-F0

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

       NetBIOS over Tcpip. . . . . . . . : Disabled

    Tunnel adapter isatap.{517620E6-1EDC-4859-95D8-EF4F7168B287}:

       Media State . . . . . . . . . . . : Media disconnected

       Connection-specific DNS Suffix  . :

       Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3

       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0

       DHCP Enabled. . . . . . . . . . . : No

       Autoconfiguration Enabled . . . . : Yes

    2019年11月14日 9:22
  • Se questo può aiutare, in DCOM ci sono permessi 

    • DPMRADCOMTrustedMachines
    • DPMRADmTrustedMachines
    • Ho aggiunto anche ADMINISTRATOR DEL DOMINIO

    Con l'installazione manuale SETDPMSERVER ora restituisce questo errore:

    C:\Program Files\Microsoft Data Protection Manager\DPM\bin>setdpmserver -dpmserv
    ername dpm.MYDOMAIN.it
    Configuring dpm server settings and firewall settings for dpm server =[dpm. MYDOMAIN
    .it]
    Configuring dpm server settings and firewall settings for dpm server =[ MYDOMAIN.it\
    DPM]
    SetDpmServer failed with errorcode =0x80070534, error says: No mapping between a
    ccount names and security IDs was done.

    To further troubleshoot failures with SetDpmServer, go to  http://go.microsoft.c
    om/fwlink/?LinkId=169142

    2019年11月14日 9:28
  • il server con dpm agent è quello che era domain controller su cui hai fatto il demoting ?

    ed era un domain controller multihomed con più di una scheda di rete e con molti indirizzi ip ?

    inoltre se il server non è più dc è inutile che punti a se stesso come dns

     IPv4 Address. . . . . . . . . . . : 200.200.6.13(Preferred)

       Subnet Mask . . . . . . . . . . . : 255.255.0.0

       Default Gateway . . . . . . . . . :

       DNS Servers . . . . . . . . . . . : 200.200.6.38

                                           200.200.6.37

                                           200.200.6.12

                                           200.200.6.13

    qui va pulito un po' tutto, la configurazione di rete non va affatto bene.


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    2019年11月15日 8:29
    モデレータ
  • Access denied è la parola chiave. Verosimilmente hai un problema di join al dominio dei server in questione oppure hai SID duplicati.

    - Daniele
    Microsoft MVP System Center Cloud and Datacenter Management

    Unisciti alla community italiana per System Center http://www.ugisystemcenter.org

    http://nocentdocent.wordpress.com
    This posting is provided “AS IS” with no warranties, and confers no rights.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    2019年11月15日 11:27
    モデレータ
  • I Servers sono due erano DC 2008 sono stati "demotati" e su cui l'agent funzionava benissimo,

    Ora ho fatto pulizia alla configurazione IP ma rimane multihomed

    Ho provato allora nuovamente a rimuovere tutto ed a far reinstallare l'agent da DPM e Manualmente ma senza successo.

    Riguarda comunque qualcosa che è successo a causa del demoting anche se tutta la migrazione a Server 2016 (nuovi DC con tutti i ruoli) ha avuto pienamente successo.

    L'unica cosa che non posso fare, ma non credo influisca visto il comportamento avuto su altri servers, è il riavvio.

    l'NTP è sincronizzato.

    Alla fine trovo installato solo Agent Coordinator sul server di destinazione se installo dal DPM.

    L'errore installando l'agent è:

    Install protection agent on B2.mydomain.it failed:
    Error 337: You cannot install the protection agent on B2.mydomain.it because access to the computer has been denied.
    Recommended action: Do the following to troubleshoot this issue: 
    1) If another DPM server is currently protecting B2.mydomain.it use that DPM server to uninstall the protection agent from B2.mydomain.it. Then, use this DPM server to install the protection agent on B2.mydomain.it.
    2) Verify that the time on the DPM server and the selected computer is synchronized with the domain controller. At a command prompt, type "net time /set" to synchronize the time with the domain controller.
    3) If the computer is a domain controller, verify that the primary domain controller (the PDC Emulator) is running Windows Server 2003 with Service Pack 1 (SP1), and that Active Directory has completed replication between the domain controllers since the Windows Server 2003 SP1 installation.

    2019年11月22日 7:36
  • scusa, non so se ho capito bene, ma vuoi dire che dopo il demoting non hai mai riavviato quei due server ?

    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    2019年11月22日 7:58
    モデレータ
  • No, certo che l'ho riavviato e anche più volte, ma essendo in produzione non è possibile farlo se non pianificando.

    Piero

    MCSE-MCSA-MCT

    2019年11月25日 7:28
  • Ciao,

    scusa ma non ho avuto risposte.

    Rimango in attesa

    2019年12月3日 8:23
  • focalizziamoci su questo:

    Install protection agent on B2.mydomain.it failed:
    Error 337: You cannot install the protection agent on B2.mydomain.it because access to the computer has been denied.
    Recommended action: Do the following to troubleshoot this issue: 
    1) If another DPM server is currently protecting B2.mydomain.it use that DPM server to uninstall the protection agent from B2.mydomain.it. Then, use this DPM server to install the protection agent on B2.mydomain.it.
    2) Verify that the time on the DPM server and the selected computer is synchronized with the domain controller. At a command prompt, type "net time /set" to synchronize the time with the domain controller.
    3) If the computer is a domain controller, verify that the primary domain controller (the PDC Emulator) is running Windows Server 2003 with Service Pack 1 (SP1), and that Active Directory has completed replication between the domain controllers since the Windows Server 2003 SP1 installation.

    hai provato a verificare i tre suggerimenti dati dal messaggio d'errore ?

    i domain controllers attuali si replicano correttamente?

    il login sui server demotati avviene regolarmente con gli account di dominio ?

    con quale account gira il servizio DPM ?


    Edoardo Benussi
    Microsoft MVP - Cloud and Datacenter Management
    e[dot]benussi[at]outlook[dot]it

    2019年12月3日 8:36
    モデレータ