Veeam Logon failure: the user has not been granted the requested logon type at this computer

Reading Time: 2 minutes

The new Veeam Backup & Replication 9.5 Update 3a patch may introduce some warnings backing up Microsoft SQL Server VMs after installing the update.

It does not happen in all cases, and seems more limited for SQL Express instances.

But Veeam has described the issues in KB2689 (//www.veeam.com/kb2689) with also the required fix!

After upgrading Veeam Backup & Replication 9.5 to Update 3a, you may notice  warning or failures on the following operations:

  • Back up of SQL Server transaction logs;
  • Truncation of SQL Server transaction logs;
  • Collection of SQL instances metadata for Veeam Explorer for SQL (VESQL)

While the error message varies depending on the actual operation, there is a common error thrown in the job sessions:

"Logon failure: the user has not been granted the requested logon type at this computer. Code: 1385"

The first issue is due to a change in the required rights of account used for Application-Aware Processing.

Update 3a requires that this account has the following user right assigned:

  • Logon as a batch job granted.
  • Deny logon as a batch job not set.

The second issue is caused by changes in the permission error handling the logic of Veeam Backup & Replication.

There are different ways to fix this problem (is existing) but the faster is to apply a hotfix which changes the application processing logic for SQL Servers.

To install the hotfix:

  1. Stop Veeam jobs and Veeam services
  2. Make a backup copy of the following files, from the backup server and all guest interaction proxies:
    • C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.Core.dll
    • C:\Program Files\Veeam\Backup and Replication\Backup\Veeam.Backup.VssProvider.dll
    • C:\Program Files\Veeam\Backup and Replication\Backup\VSS\sql\VeeamLogShipper_X64.exe
    • C:\Program Files\Veeam\Backup and Replication\Backup\VSS\sql\VeeamLogShipper_X86.exe
    • C:\Program Files (x86)\Veeam\Backup Transport\GuestInteraction\VSS\sql\VeeamLogShipper_X64.exe
    • C:\Program Files (x86)\Veeam\Backup Transport\GuestInteraction\VSS\sql\VeeamLogShipper_X86.exe
    • C:\Program Files\Veeam\Backup and Replication\Backup\VSS\VeeamGuestHelpers\VeeamVssSupport2008R2_X64.dll
    • C:\Program Files\Veeam\Backup and Replication\Backup\VSS\VeeamGuestHelpers\VeeamVssSupport2003_X64.dll
    • C:\Program Files\Veeam\Backup and Replication\Backup\VSS\VeeamGuestHelpers\VeeamVssSupport2003_X86.dll
    • C:\Program Files\Veeam\Backup and Replication\Backup\VSS\VeeamGuestHelpers\VeeamVssSupportXP_X86.dll
    • C:\Program Files (x86)\Veeam\Backup Transport\GuestInteraction\VSS\VeeamGuestHelpers\VeeamVssSupport2008R2_X64.dll
    • C:\Program Files (x86)\Veeam\Backup Transport\GuestInteraction\VSS\VeeamGuestHelpers\VeeamVssSupport2003_X64.dll
    • C:\Program Files (x86)\Veeam\Backup Transport\GuestInteraction\VSS\VeeamGuestHelpers\VeeamVssSupport2003_X86.dll
    • C:\Program Files (x86)\Veeam\Backup Transport\GuestInteraction\VSS\VeeamGuestHelpers\VeeamVssSupportXP_X86.dll
  3. Replace the files listed in the previous step with those found in the hotfix package
  4. Start Veeam services on server

But the best (and long-term solution) is to adjust permissions and rights of the account specified with for use with Application-Aware Processing within the Veeam Backup & Replication jobs. More information can be found in the updated system requirements.

Virtualization, Cloud and Storage Architect. Tech Field delegate. VMUG IT Co-Founder and board member. VMware VMTN Moderator and vExpert 2010-20 and vExpert Pro. Dell TechCenter Rockstar 2014-15. Microsoft MVP 2014-16. Veeam Vanguard 2015-19. Nutanix NTC 2014-20. Several certifications including: VCDX-DCV, VCP-DCV/DT/Cloud, VCAP-DCA/DCD/CIA/CID/DTA/DTD, MCSA, MCSE, MCITP, CCA, NPP.

Trying to install Veeam Backup and FasctSCP on Windows 2008 Server and getting error message while configuring service account.

LogonUser: (0x569): Logon failure: the user has not been granted the requested logon type at this computer.

To solve this you will need to change the Local Security Policy of the server.

Open Local Security Policy or run secpol.msc. Navigate to Security Settigns>Local Policies>User Right Assiggment and add the account to allow 'Log on as a service' rights.


Problem

Feedback code 1385 - Logon failure: the user has not been granted the requested logon type at this computer. (SCI61957)

Symptom

Feedback code 1385 - Logon failure: the user has not been granted the requested logon type at this computer.
LSMG244I
Administrative users authenticate OK.
Standard users get the authentication error.

Cause

The 'Users' windows user group is not assigned 'Log on locally' as a privilege.

Resolving The Problem

Assign the 'Users' windows user group 'Log on locally' permissions.

[{"Product":{"code":"SSRRVY","label":"IBM Sterling Connect:Direct for Microsoft Windows"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Not Applicable","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All","Edition":"","Line of Business":{"code":"LOB02","label":"AI Applications"}}]

Historical Number

PRI1259

Product Synonym

[<p><b>]Fact[</b><p>];Connect:Direct Windows Server;Release 4.1.00 [<br/>] Authentication is via ;Secure Point Of Entry (SPOE) proxy. [<br/>] SCI61957

What has not been granted the requested logon type?

To solve “The user has not been granted the requested logon type at this computer” error, you should make sure that the login user and all groups that belong to are allowed to log on locally to this computer.

What permissions does Veeam service account need?

The account used to run the Veeam Backup Service must be a LocalSystem account or must have the local Administrator permissions on the backup server.

What is logon failure?

A user sees the error “Logon failure: the user has not been granted the requested logon type at this computer” when attempting to log in through Duo Authentication for Windows Logon (RDP). Alternatively, a user may see the error "To sign in remotely, you need the right to sign in through Remote Desktop Services.

Toplist

Neuester Beitrag

Stichworte