Cannot connect to cifs share to store backups (locks out AD account)

Thread needs solution
truwrikodrorowrelupicugojestutroclulachosaswunuhospikigawakijosaswenomaruclojeueclikaspedrubewidebrisubrohutrurifruuagothunugekedrumucisiuobrobrecrupeslapuswosluprothethibakaslechurathikucli
Regular Poster
Posts: 71
Comments: 162

We had an issue in a recent vulnerability scan that required us to change the LAN Manager Authentication Level to 5: Send NTLMv2 response only\refuse LM & NTLM (info here: http://technet.microsoft.com/en-us/library/cc738867(v=ws.10).aspx ).

We have an EMC Celerra NX4 SAN with a CIFS share called backups. It is presented as a Windows 2003 R2/2008 server. Now all of a sudden Acronis vmProtect 7 won't connect to it. Instead it locks out our domain account and I have to go in Active Directory Users and Computers and unlock the account.

I tried connecting as username and also domain\username.

The SAN itself fully supports NTLMv2 only authentication level and there are no problems at all connecting to the share from any windows machine.

Any idea?

Code: 27066484 (0x019D0074)
Line: 836463A653DED97C
Message: An error has occurred while executing command 'get_detailed_location_info'.
============

Code: 27066470 (0x019D0066)
Line: 61285094B77DACEA
Message: Access to location '\\san1-pottstown\backup\' is denied. Unknown user name or invalid password.
============

Code: 262164 (0x00040014)
Line: 9A79F20828BC7DB
Message: Access is denied.
============

Code: 10092570 (0x009A001A)
Line: 9A79F20828BCB80
Message: Failed to get the root directory of location 'avfs:/smb?//san1-pottstown/backup/'.
============

Code: 262164 (0x00040014)
Line: 72BD8F1A411BE0DA
Message: Access to the file is denied.

Fri, 05/18/2012 - 13:41
0 Users found this helpful
truwrikodrorowrelupicugojestutroclulachosaswunuhospikigawakijosaswenomaruclojeueclikaspedrubewidebrisubrohutrurifruuagothunugekedrumucisiuobrobrecrupeslapuswosluprothethibakaslechurathikucli
Regular Poster
Posts: 71
Comments: 162

I got it to work.

How, do this (if you have EMC stuff).
Be a domain admin.
Start > run mmc
File > Add snap in
Add computer managment, click "Another Computer". Type in your EMC simulated domain computer name. Click finish.

Now expand Local Users and Groups. Expand Users. Create a new user (ie BackupAccess). Make a strong password for it and make it never disable not changeable (we will manage the pw here from now on).
Now expand groups. Go to Administrators. Add the new user in this group. Make sure when adding you are serching the SAN's name not the domain name.

Now in Acronis vmProtect, go to a job that has a destination of this san appliance. Change the credentials to the new Backup user and password you created locally on the san. Voila it works.

Fri, 05/18/2012 - 14:35
truwrikodrorowrelupicugojestutroclulachosaswunuhospikigawakijosaswenomaruclojeueclikaspedrubewidebrisubrohutrurifruuagothunugekedrumucisiuobrobrecrupeslapuswosluprothethibakaslechurathikucli
Regular Poster
Posts: 71
Comments: 162

The only problem is after editing 5 or 6 jobs, you can't edit them anymore. It never lets you past step 1 (selecting a vm to backup). None of the vm's will expand. An alert for "Virtual machine memory usage" gets put on the VM and it has to be rebooted in order to edit more jobs and clear the condition.

Fri, 05/18/2012 - 14:55