Problems using STSADM or Central Admin to back things up? Permissions are very sensitive it seems….
SharePoint farm consisting of 1 WFE/SSP/Everything and one sql 2005 database server serving it.
account1:
App Pool Service Account
local admin WFE
DBO on the farms databases ( but not SA )
account2:
Server Farm Service Account
local admin on WFE
SA on database server
Doing backups to a shared directory on the WFE server, I got 3 failures when the account2 was not explicitly granted permissions to the shared directory.
I used the account1 to run the stsadm backup command.
2 of the errors were:
The Execute method of job definition
Microsoft.Office.Server.Search.Administration.SearchBackupRestoreTimerJob (ID
661d7ca0-c239-4264-bf5d-decd65f99770) threw an exception. More information is
included below.
Access to the path
‘\\myserver\FarmBackups\difftest\spbr0001\aef97462-1968-4b1c-9f9d-10ae3fdb2ff4′
is denied.
1 of the errors is a SQL Exception
[8/9/2007 2:45:08 PM]: Verbose: [SharePoint_AdminContent_d1fc9b9c-7b47-41e2-a82f-c11e0d76dbff] SQL Server Command: BACKUP DATABASE [SharePoint_AdminContent_d1fc9b9c-7b47-41e2-a82f-c11e0d76dbff] TO DISK=@db_loc WITH NAME=@db_name, STATS=5, NOINIT, NOSKIP, NOFORMAT, NOREWIND @db_name=SharePoint_AdminContent_d1fc9b9c-7b47-41e2-a82f-c11e0d76dbff, @db_loc=\\server\FarmBackups\difftest\spbr0002\00000021.bak
[8/9/2007 2:45:08 PM]: Error: Object SharePoint_AdminContent_d1fc9b9c-7b47-41e2-a82f-c11e0d76dbff failed in event OnBackup. For more information, see the error log located in the backup directory. SqlException: BACKUP DATABASE permission denied in database ‘SharePoint_AdminContent_d1fc9b9c-7b47-41e2-a82f-c11e0d76dbff’.BACKUP DATABASE is terminating abnormally.
[8/9/2007 2:45:08 PM]: Debug: at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection) at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection) at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj) at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj) at System.Data.SqlClient.SqlDataReader.ConsumeMetaData() at System.Data.SqlClient.SqlDataReader.get_MetaData() at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString) at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async) at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result) at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method) at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method) at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior) at Microsoft.SharePoint.Administration.Backup.SPSqlBackupRestoreHelper.RunCommand(SPBackupRestoreInformation args, Boolean& restart, SPSqlBackupRestoreConnection connection) at Microsoft.SharePoint.Administration.Backup.SPSqlBackupRestoreHelper.Run(SPBackupRestoreInformation args) at Microsoft.SharePoint.Administration.Backup.SPSqlBackupHelper.Run(SPBackupRestoreInformation args) at Microsoft.SharePoint.Administration.SPDatabase.OnBackup(Object sender, SPBackupInformation info)
When i gave the account2 explicit write rights to the backup directory, the 2 “access denied” errors went away, but i still cant backup the admincontent database.
Hrrmmmm. Seems to me, if you arnt going to allow the backup of the admin content database ( see reference below ) you shouldnt report it as an error when you back up the whole farm.
MS Reference Link