[Minor] From: VBDA@clienthostname "CONFIGURATION:" Time: 17/07/2015 09:26:43
[81:141] \ClusterDatabase
Cannot export configuration object: ([5] Access is denied. ) => backup incomplete.
Many warnings are shown in the log then the above minor error during the Configuration object backup.
Cluster configuration backups were successful prior to changing the user account that the DP Inet service was running as from system to a specific backup user. We needed to do this so that we could back up SQL DBs as a specified user.
After watching a backup job fail, I noticed that Windows creates an "Export" folder on the Cluster Quorum drive in the cluster folder. The Export folder cannot be written to by the backup process since it's running as my backup user account which doesn't have permissions.
Running the following commands gave my backup user access to the folder and backups are now completing successfully. You'll need to download psexec from here
psexec.exe /i /s cmd.exe
CACLS Q:\Cluster /T /C /E /G DOMAIN\DPUser:F
Replace Q:\Cluster with the location of your cluster quorum drive. You may need to assign a drive letter in Failover Cluster Manager.
The psexec command starts a command prompt window running as the SYSTEM user which is the owner of the cluster Quorum files and therefore has permissions to alter the permissions of the cluster folder. The CACLS command gives full control of the folder to your Data Protector backup user.
Remember that you should not do anything with the files in the cluster folder since they are required for the cluster to run correctly. Adjusting the permissions like this will mean that your backup user is now able to make changes to core cluster files which could cause problems if not carefully managed.
