locked
Backup plan - SQL Service Account Permission error

    Question

  • Hi all,

    I have a strange error when using the PowerTools to create a backup plan. When validating, there is an error:

    [Error  @09:07:23.334] MSSQL Server service account acc-bgc\sqlsvc does not have the required permissions to create backups on the backup path \\xxxxx.acc-bgc.net\TfsBackup

    As you can see, the SQL server service account has full access to this folder. From within SQL server itself, I can create a backup from a database and save it to this network location. So it does have access..

    Some side information: TFS app tier is running from domain1, the backup-plan uses a domain1 user who has access on SQL server (on the account tab of the backup wizard). The SQL Server itself, and the SQL Serverservice account is on domain2. (there is domain trust btw)

    This is the full log (from where it's going wrong)


    [Info   @09:07:23.131] "Verify: Grant Backup Plan Permissions\Root\VerifySqlDatabasesPermissionsGrantedSuccessfully(VerifySqlDatabasesPermissionsGrantedSuccessfully): Exiting Verification with state Completed and result Success"

    [Info   @09:07:23.131] Verify: Grant Backup Plan Permissions\Root\VerifyBackupPathPermissionsGrantedSuccessfully(VerifyBackupPathPermissionsGrantedSuccessfully): Starting Verification

    [Info   @09:07:23.131] Verify backup path Permissions Granted Successfully

    [Info   @09:07:23.287] System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.

       at System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess)

       at System.Security.Principal.NTAccount.Translate(Type targetType)

       at Microsoft.TeamFoundation.PowerTools.Admin.Helpers.FileHelper.GrantFolderPermission(String account, String path)

    [Info   @09:07:23.303] Granting account domain1\user1 permission on folder \\xxxx.acc-bgc.net\TfsBackup

    [Error  @09:07:23.334] Granting permission to account acc-bgc\sqlsvc on path \\xxxx.acc-bgc.net\TfsBackup failed

    [Error  @09:07:23.334] MSSQL Server service account acc-bgc\sqlsvc does not have the required permissions to create backups on the backup path \\aa2042.acc-bgc.net\TfsBackup

    [Error  @09:07:23.334] !Verify Error!: MSSQL Server service account acc-bgc\sqlsvc does not have the required permissions to create backups on the backup path \\aa2042.acc-bgc.net\TfsBackup

    [Info   @09:07:23.334] "Verify: Grant Backup Plan Permissions\Root\VerifyBackupPathPermissionsGrantedSuccessfully(VerifyBackupPathPermissionsGrantedSuccessfully): Exiting Verification with state Completed and result Error"

    [Info   @09:07:23.334] Verify: Grant Backup Plan Permissions\Root\VerifyDummyBackupCreation(VerifyTestBackupCreatedSuccessfully): Starting Verification

    Anyone?

     

    Friday, April 13, 2012 9:41 AM

All replies

  • Hi Alexander, 

    Thanks for your post. 

    What’s the version of your TFS and Power Tools?

    If the backup path \\xxxx.acc-bgc.net\TfsBackup in domain1, try to create a backup path in domian2, and specify this domian2 path in Power Tools, can create the Backup Plan correctly?    


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us

    Monday, April 16, 2012 9:42 AM
    Moderator
  • Hi John,

    I'm running TFS2010 SP1 and the Power Tools December 2011 release.

    The backup path \\xxxx.acc-bgc.net\TfsBackup is on domain2 (same domain as SQL Server is running, so also the SQL Service Account). The TFSAPP is running in domain 1.

    It's not possible to create a backup path in domain1, because there is no trust from domain2 (where SQL Server is running) to domain1. There's only trust in the way of domain1 to domain 2.

    Thanks!

    Alexander

    Monday, April 16, 2012 12:44 PM
  • Hi Alexander, 

    Thanks for your reply.

    According your description, you provided the domain1\user1 in Backup Plan Wizard>>Account tab, where you used this acc-bgc\sqlsvc account in Backup Plan?   

    If you install the AT in domain1 and DT in domain2, the domain2 need to trust domain1. Please try to create the trust relationship from domain2 to domain1.

    Or as your said, you can create the backup from TFS databases.   


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us

    Tuesday, April 17, 2012 7:56 AM
    Moderator
  • Hi John,

    In the backup plan Wizard, I supplied the TFS_Service account (from domain 1).. This account has access on the \\xxxx.acc-bgc.net\TfsBackup path (on domain 2), so domain2 does trust domain1 (but not the other way, I told you the wrong things in my previous post, sorry about that)

    To conclude: AT in Domain 1, DT in Domain 2 .. Domain 2 does trust Domain 1

    Any way to solve the issue?

    Thanks!

    Tuesday, April 17, 2012 9:38 AM
  • Hi Alexander, 

    Thanks for your reply.

    In order to resolve this issue, I need more information. Please execute the Tfssecurity acc-bgc\sqlsvc /imx /collection:url command line to check this acc-bgc\sqlsvc belong to which TFS groups, share the result here.

    And please share the full Readiness log here.


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us

    Wednesday, April 18, 2012 8:37 AM
    Moderator
  • Hi John,

    acc-bgc\sqlsvc is not a member of any group on TFS, and has actually nothing to do with TFS. It's the account who is running the SQL Server.

    Below the (long) log:

    - ap3779 = the TFS AP tier (on domain 1)
    - xCLIENTx\ID972926 = AD Account (on domain 1)
    - ci-sql-tfs.acc-bgc.net\tfsi = the SQL Server instance (on domain 2)
    -  \\aa2042.acc-bgc.net\TfsBackup = backup path (on domain 2)

    [Info   @09:04:24.394] Tfs alerts is enabled...
    [Info   @09:04:25.113] GetToolsPath C:\Program Files\Microsoft Team Foundation Server 2010\Tools\
    [Info   @09:04:25.191] Process starting: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments=
    [Info   @09:04:28.363] Process finished: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments= exitCode=0 in 3166 ms
    [Info   @09:04:28.363] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:14.006] 
    [Info   @09:07:14.006] +-+-+-+-+-| Starting Verification |+-+-+-+-+-
    [Info   @09:07:14.021] 
    [Info   @09:07:14.021] +-+-+-+-+-| Review Settings |+-+-+-+-+-
    [Info   @09:07:14.021] Backup Plan Details
    [Info   @09:07:14.021]      Backup Path                             : \\aa2042.acc-bgc.net\TfsBackup
    [Info   @09:07:14.021]      Retention Days                          : 30
    [Info   @09:07:14.021]      Full Backup Extension                   : bak
    [Info   @09:07:14.021]      Transactional Extension                 : trn
    [Info   @09:07:14.021]      SMTP Host                               : None
    [Info   @09:07:14.021] External Databases
    [Info   @09:07:14.021]      Include Reporting Databases             : False
    [Info   @09:07:14.021]      Include SharePoint Databases            : True
    [Info   @09:07:14.021]      SharePoint Products SQL Server Instance : ci-sql-tfs.acc-bgc.net\tfsi
    [Info   @09:07:14.021]      SharePoint Configuration Database Name  : SharePoint_Config
    [Info   @09:07:14.021] Backup Plan Schedules
    [Info   @09:07:14.021]      Full Backup Schedule                    : at 02:00  on  Sunday,  Monday,  Tuesday,  Wednesday,  Thursday,  Friday,  Saturday
    [Info   @09:07:14.021]      Transactional Backup Schedule           : Repeats every 15 Minutes
    [Info   @09:07:14.021] Account Information
    [Info   @09:07:14.021]      Account                                 : xCLIENTx\ID972926
    [Info   @09:07:14.021] 
    [Info   @09:07:14.209] Process starting: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments=
    [Info   @09:07:15.881] Process finished: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments= exitCode=0 in 1663 ms
    [Info   @09:07:15.881] AdminPTHelperLog:Open the farm for Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True
    [Info   @09:07:15.881] AdminPTHelperLog:Success!
    [Info   @09:07:15.881] AdminPTHelperLog:validating tfsapp http://ap3779:23111/
    [Info   @09:07:15.881] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=Bdc_Service_DB_ba293f16a79d47058dfb1475de477f5d;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:15.881] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:15.881] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_AdminContent_1d40d734-deb8-46a3-80d5-f7d5e5bede45;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:15.881] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Content;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:15.881] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Logging;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:15.881] AdminPTHelperLog:Open the farm for Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True
    [Info   @09:07:15.881] AdminPTHelperLog:Success!
    [Info   @09:07:15.881] AdminPTHelperLog:validating tfsapp http://ap3779:23111/
    [Info   @09:07:16.131] Process starting: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments=
    [Info   @09:07:19.177] Process finished: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments= exitCode=0 in 3031 ms
    [Info   @09:07:19.177] AdminPTHelperLog:Open the farm for Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True
    [Info   @09:07:19.177] AdminPTHelperLog:Success!
    [Info   @09:07:19.177] AdminPTHelperLog:validating tfsapp http://ap3779:23111/
    [Info   @09:07:19.177] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=Bdc_Service_DB_ba293f16a79d47058dfb1475de477f5d;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:19.177] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:19.177] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_AdminContent_1d40d734-deb8-46a3-80d5-f7d5e5bede45;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:19.177] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Content;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:19.177] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Logging;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:19.177] AdminPTHelperLog:Open the farm for Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True
    [Info   @09:07:19.177] AdminPTHelperLog:Success!
    [Info   @09:07:19.177] AdminPTHelperLog:validating tfsapp http://ap3779:23111/
    [Info   @09:07:19.224] Verify: System Checks(VCONTAINER): Starting Verification
    [Info   @09:07:19.224] A generic container node that does not contribute to results
    [Info   @09:07:19.224] "Verify: System Checks(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:19.224] Verify: System Checks\Root(VCONTAINER): Starting Verification
    [Info   @09:07:19.224] A generic container node that does not contribute to results
    [Info   @09:07:19.224] "Verify: System Checks\Root(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:19.224] Verify: System Checks\Root\WmiWorks(VWMIWORKS): Starting Verification
    [Info   @09:07:19.224] Wmi Works Verification
    [Info   @09:07:19.271] Verifying that WMI works on the local machine.
    [Info   @09:07:19.381] WMI working on local machine.
    [Info   @09:07:19.381] "Verify: System Checks\Root\WmiWorks(VWMIWORKS): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.381] Verify: System Checks\Root\ASLoads(VASLOADS): Starting Verification
    [Info   @09:07:19.381] Verifies whether the Analysis Services assembly can load
    [Info   @09:07:19.381] "Verify: System Checks\Root\ASLoads(VASLOADS): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.381] !Verify Result!: 2 Completed, 0 Skipped: 2 Success, 0 Errors, 0 Warnings
    [Info   @09:07:19.396] Verify: Input Verifications(VCONTAINER): Starting Verification
    [Info   @09:07:19.396] A generic container node that does not contribute to results
    [Info   @09:07:19.396] "Verify: Input Verifications(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:19.396] Verify: Input Verifications\Root(VCONTAINER): Starting Verification
    [Info   @09:07:19.396] A generic container node that does not contribute to results
    [Info   @09:07:19.396] "Verify: Input Verifications\Root(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:19.396] Verify: Input Verifications\Root\VerifyBackupPath(BackupPath): Starting Verification
    [Info   @09:07:19.396] Verifies that the backup path exists and the path is a network path
    [Info   @09:07:19.474] "Verify: Input Verifications\Root\VerifyBackupPath(BackupPath): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.474] Verify: Input Verifications\Root\VerifyRetentionDays(RetentionDays): Starting Verification
    [Info   @09:07:19.474] Verifies that the retention days is between 1 and 999 days
    [Info   @09:07:19.474] "Verify: Input Verifications\Root\VerifyRetentionDays(RetentionDays): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.474] Verify: Input Verifications\Root\VerifyBackupFileExtension(BackupFileExtension): Starting Verification
    [Info   @09:07:19.474] Verifies backup file extensions
    [Info   @09:07:19.474] "Verify: Input Verifications\Root\VerifyBackupFileExtension(BackupFileExtension): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.474] Verify: Input Verifications\Root\VerifyTaskSchedulerAccount(VerifyTaskSchedulerAccount): Starting Verification
    [Info   @09:07:19.474] Verify Task Scheduler Account
    [Info   @09:07:19.506] "Verify: Input Verifications\Root\VerifyTaskSchedulerAccount(VerifyTaskSchedulerAccount): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.506] Verify: Input Verifications\Root\VerifySupportedTaskSchedulerVersion(VerifySupportedTaskSchedulerVersion): Starting Verification
    [Info   @09:07:19.506] Verify Supported Task Scheduler Version
    [Info   @09:07:19.506] "Verify: Input Verifications\Root\VerifySupportedTaskSchedulerVersion(VerifySupportedTaskSchedulerVersion): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.506] !Verify Result!: 5 Completed, 0 Skipped: 5 Success, 0 Errors, 0 Warnings
    [Info   @09:07:19.506] Verify: Database Inspection Verifications(VCONTAINER): Starting Verification
    [Info   @09:07:19.506] A generic container node that does not contribute to results
    [Info   @09:07:19.506] "Verify: Database Inspection Verifications(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:19.506] Verify: Database Inspection Verifications\Root(VCONTAINER): Starting Verification
    [Info   @09:07:19.506] A generic container node that does not contribute to results
    [Info   @09:07:19.506] "Verify: Database Inspection Verifications\Root(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:19.506] Verify: Database Inspection Verifications\Root\VerifySuccessfullCollectionDataBasesInspection(DatabaseAccess): Starting Verification
    [Info   @09:07:19.506] Verify successfull database inspection.
    [Info   @09:07:19.584] Found collection database DefaultCollection
    [Info   @09:07:19.584] "Verify: Database Inspection Verifications\Root\VerifySuccessfullCollectionDataBasesInspection(DatabaseAccess): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.584] Verify: Database Inspection Verifications\Root\VerifySuccessfullReportingDataBasesInspection(DataBaseAccess): Starting Verification
    [Info   @09:07:19.584] Verify successfull database inspection.
    [Info   @09:07:19.599] "Verify: Database Inspection Verifications\Root\VerifySuccessfullReportingDataBasesInspection(DataBaseAccess): Exiting Verification with state Completed and result Success"
    [Info   @09:07:19.599] Verify: Database Inspection Verifications\Root\VerifySuccessfullSharepointDataBasesInspection(DataBaseAccess): Starting Verification
    [Info   @09:07:19.599] Verify successfull database inspection.
    [Info   @09:07:19.662] Process starting: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments=
    [Info   @09:07:21.506] Process finished: fileName=C:\Program Files (x86)\Microsoft Team Foundation Server 2010 Power Tools\Team Foundation Server Backup Plan\AdminPTHelper.exe arguments= exitCode=0 in 1831 ms
    [Info   @09:07:21.506] AdminPTHelperLog:Open the farm for Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True
    [Info   @09:07:21.506] AdminPTHelperLog:Success!
    [Info   @09:07:21.506] AdminPTHelperLog:validating tfsapp http://ap3779:23111/
    [Info   @09:07:21.506] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=Bdc_Service_DB_ba293f16a79d47058dfb1475de477f5d;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_AdminContent_1d40d734-deb8-46a3-80d5-f7d5e5bede45;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Content;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] AdminPTHelperOutput:Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Logging;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] AdminPTHelperLog:Open the farm for Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True
    [Info   @09:07:21.506] AdminPTHelperLog:Success!
    [Info   @09:07:21.506] AdminPTHelperLog:validating tfsapp http://ap3779:23111/
    [Info   @09:07:21.506] Found sharepoint database Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=Bdc_Service_DB_ba293f16a79d47058dfb1475de477f5d;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] Found sharepoint database Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_Config;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] Found sharepoint database Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=SharePoint_AdminContent_1d40d734-deb8-46a3-80d5-f7d5e5bede45;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] Found sharepoint database Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Content;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] Found sharepoint database Data Source=ci-sql-tfs.acc-bgc.net\tfsi;Initial Catalog=WSS_Logging;Integrated Security=True;Enlist=False;Connect Timeout=15
    [Info   @09:07:21.506] "Verify: Database Inspection Verifications\Root\VerifySuccessfullSharepointDataBasesInspection(DataBaseAccess): Exiting Verification with state Completed and result Success"
    [Info   @09:07:21.506] !Verify Result!: 3 Completed, 0 Skipped: 3 Success, 0 Errors, 0 Warnings
    [Info   @09:07:21.740] Verify: Backup Plan Verifications(VCONTAINER): Starting Verification
    [Info   @09:07:21.740] A generic container node that does not contribute to results
    [Info   @09:07:21.740] "Verify: Backup Plan Verifications(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:21.740] Verify: Backup Plan Verifications\Root(VCONTAINER): Starting Verification
    [Info   @09:07:21.740] A generic container node that does not contribute to results
    [Info   @09:07:21.740] "Verify: Backup Plan Verifications\Root(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:21.740] Verify: Backup Plan Verifications\Root\VerifyConfigIsNotBeingServiced(VerifyConfigIsNotBeingServiced): Starting Verification
    [Info   @09:07:21.740] Verify configuration is not currently being serviced
    [Info   @09:07:21.740] "Verify: Backup Plan Verifications\Root\VerifyConfigIsNotBeingServiced(VerifyConfigIsNotBeingServiced): Exiting Verification with state Completed and result Success"
    [Info   @09:07:21.740] Verify: Backup Plan Verifications\Root\OnePlanPerConfiguration(OnePlanPerConfiguration): Starting Verification
    [Info   @09:07:21.740] One Plan Per Configuration
    [Info   @09:07:21.740] "Verify: Backup Plan Verifications\Root\OnePlanPerConfiguration(OnePlanPerConfiguration): Exiting Verification with state Completed and result Success"
    [Info   @09:07:21.740] Verify: Backup Plan Verifications\Root\VerifyNoTasksAlreadyExist(VerifyNoTasksAlreadyExist): Starting Verification
    [Info   @09:07:21.740] Verify No Tasks Already Exist
    [Info   @09:07:21.787] "Verify: Backup Plan Verifications\Root\VerifyNoTasksAlreadyExist(VerifyNoTasksAlreadyExist): Exiting Verification with state Completed and result Success"
    [Info   @09:07:21.787] Verify: Backup Plan Verifications\Root\VerifySqlServiceAccountCanBeGrantedPermission(VerifySqlServiceAccountCanBeGrantedPermission): Starting Verification
    [Info   @09:07:21.787] Verify Sql Service Account Can be Granted Permission
    [Info   @09:07:22.209] comparing acc-bgc\sqlsvc to NT AUTHORITY\SYSTEM, NT AUTHORITY\LOCAL SERVICE and LocalSystem
    [Info   @09:07:22.209] "Verify: Backup Plan Verifications\Root\VerifySqlServiceAccountCanBeGrantedPermission(VerifySqlServiceAccountCanBeGrantedPermission): Exiting Verification with state Completed and result Success"
    [Info   @09:07:22.209] !Verify Result!: 4 Completed, 0 Skipped: 4 Success, 0 Errors, 0 Warnings
    [Info   @09:07:22.240] Verify: Grant Backup Plan Permissions(VCONTAINER): Starting Verification
    [Info   @09:07:22.240] A generic container node that does not contribute to results
    [Info   @09:07:22.240] "Verify: Grant Backup Plan Permissions(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:22.240] Verify: Grant Backup Plan Permissions\Root(VCONTAINER): Starting Verification
    [Info   @09:07:22.240] A generic container node that does not contribute to results
    [Info   @09:07:22.240] "Verify: Grant Backup Plan Permissions\Root(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:07:22.240] Verify: Grant Backup Plan Permissions\Root\VerifyLogOnAsBatchJobPermissionGrantedSuccessfully(VerifyLogOnAsBatchJobPermissionGrantedSuccessfully): Starting Verification
    [Info   @09:07:22.240] Verify Logon as batch job Permission Granted Successfully
    [Info   @09:07:22.334] "Verify: Grant Backup Plan Permissions\Root\VerifyLogOnAsBatchJobPermissionGrantedSuccessfully(VerifyLogOnAsBatchJobPermissionGrantedSuccessfully): Exiting Verification with state Completed and result Success"
    [Info   @09:07:22.334] Verify: Grant Backup Plan Permissions\Root\VerifySqlServerPermissionsGrantedSuccessfully(VerifySqlServerPermissionsGrantedSuccessfully): Starting Verification
    [Info   @09:07:22.334] Verify Sql server Permissions Granted Successfully
    [Info   @09:07:22.443] Granting account xCLIENTx\id972926 permissions on server ci-sql-tfs.acc-bgc.net\tfsi
    [Info   @09:07:22.490] "Verify: Grant Backup Plan Permissions\Root\VerifySqlServerPermissionsGrantedSuccessfully(VerifySqlServerPermissionsGrantedSuccessfully): Exiting Verification with state Completed and result Success"
    [Info   @09:07:22.490] Verify: Grant Backup Plan Permissions\Root\VerifySqlDatabasesPermissionsGrantedSuccessfully(VerifySqlDatabasesPermissionsGrantedSuccessfully): Starting Verification
    [Info   @09:07:22.490] Verify Sql databases Permissions Granted Successfully
    [Info   @09:07:22.756] ModifyExecRole: Add:xCLIENTx\id972926
    [Info   @09:07:22.834] result: Noop
    [Info   @09:07:22.849] ModifyExecRole: Add:xCLIENTx\id972926
    [Info   @09:07:22.912] result: Noop
    [Info   @09:07:22.928] ModifyExecRole: Add:xCLIENTx\id972926
    [Info   @09:07:23.006] result: Noop
    [Info   @09:07:23.021] Granting account xCLIENTx\id972926 permissions on database [Bdc_Service_DB_ba293f16a79d47058dfb1475de477f5d]
    [Info   @09:07:23.037] Granting account xCLIENTx\id972926 permissions on database [SharePoint_Config]
    [Info   @09:07:23.068] Granting account xCLIENTx\id972926 permissions on database [SharePoint_AdminContent_1d40d734-deb8-46a3-80d5-f7d5e5bede45]
    [Info   @09:07:23.099] Granting account xCLIENTx\id972926 permissions on database [WSS_Content]
    [Info   @09:07:23.115] Granting account xCLIENTx\id972926 permissions on database [WSS_Logging]
    [Info   @09:07:23.131] "Verify: Grant Backup Plan Permissions\Root\VerifySqlDatabasesPermissionsGrantedSuccessfully(VerifySqlDatabasesPermissionsGrantedSuccessfully): Exiting Verification with state Completed and result Success"
    [Info   @09:07:23.131] Verify: Grant Backup Plan Permissions\Root\VerifyBackupPathPermissionsGrantedSuccessfully(VerifyBackupPathPermissionsGrantedSuccessfully): Starting Verification
    [Info   @09:07:23.131] Verify backup path Permissions Granted Successfully
    [Info   @09:07:23.287] System.Security.Principal.IdentityNotMappedException: Some or all identity references could not be translated.
       at System.Security.Principal.NTAccount.Translate(IdentityReferenceCollection sourceAccounts, Type targetType, Boolean forceSuccess)
       at System.Security.Principal.NTAccount.Translate(Type targetType)
       at Microsoft.TeamFoundation.PowerTools.Admin.Helpers.FileHelper.GrantFolderPermission(String account, String path)
    [Info   @09:07:23.303] Granting account xCLIENTx\id972926 permission on folder \\aa2042.acc-bgc.net\TfsBackup
    [Error  @09:07:23.334] Granting permission to account acc-bgc\sqlsvc on path \\aa2042.acc-bgc.net\TfsBackup failed
    [Error  @09:07:23.334] MSSQL Server service account acc-bgc\sqlsvc does not have the required permissions to create backups on the backup path \\aa2042.acc-bgc.net\TfsBackup
    [Error  @09:07:23.334] !Verify Error!: MSSQL Server service account acc-bgc\sqlsvc does not have the required permissions to create backups on the backup path \\aa2042.acc-bgc.net\TfsBackup
    [Info   @09:07:23.334] "Verify: Grant Backup Plan Permissions\Root\VerifyBackupPathPermissionsGrantedSuccessfully(VerifyBackupPathPermissionsGrantedSuccessfully): Exiting Verification with state Completed and result Error"
    [Info   @09:07:23.334] Verify: Grant Backup Plan Permissions\Root\VerifyDummyBackupCreation(VerifyTestBackupCreatedSuccessfully): Starting Verification
    [Info   @09:07:23.334] Verify Test Backup Created Successfully
    [Info   @09:07:23.349] Starting creating backup test validation
    [Info   @09:08:04.163] Create Test backup task returned 0
    [Info   @09:08:04.225] "Verify: Grant Backup Plan Permissions\Root\VerifyDummyBackupCreation(VerifyTestBackupCreatedSuccessfully): Exiting Verification with state Completed and result Success"
    [Info   @09:08:04.225] !Verify Result!: 5 Completed, 0 Skipped: 4 Success, 1 Errors, 0 Warnings
    [Info   @09:08:04.288] Verify: Backup Tasks Verifications(VCONTAINER): Starting Verification
    [Info   @09:08:04.288] A generic container node that does not contribute to results
    [Info   @09:08:04.288] "Verify: Backup Tasks Verifications(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:08:04.288] Verify: Backup Tasks Verifications\Root(VCONTAINER): Starting Verification
    [Info   @09:08:04.288] A generic container node that does not contribute to results
    [Info   @09:08:04.288] "Verify: Backup Tasks Verifications\Root(VCONTAINER): Exiting Verification with state Ignore and result Ignore"
    [Info   @09:08:04.288] Verify: Backup Tasks Verifications\Root\VerifyDummyBackupCreation(VerifyTestBackupCreatedSuccessfully): Starting Verification
    [Info   @09:08:04.288] Verify Test Backup Created Successfully
    [Info   @09:08:04.288] Starting creating backup test validation
    [Info   @09:08:22.522] Create Test backup task returned 0
    [Info   @09:08:22.569] "Verify: Backup Tasks Verifications\Root\VerifyDummyBackupCreation(VerifyTestBackupCreatedSuccessfully): Exiting Verification with state Completed and result Success"
    [Info   @09:08:22.569] !Verify Result!: 1 Completed, 0 Skipped: 1 Success, 0 Errors, 0 Warnings
    [Info   @09:08:22.585] 
    [Info   @09:08:22.585] -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    [Info   @09:08:22.585] Verify Summary
    [Info   @09:08:22.585] -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    [Info   @09:08:22.585] 1 errors, 0 warnings, 0 skipped, 0 informational
    [Info   @09:08:22.585] 
    [Info   @09:08:22.585] +-+-+-+-+-| Verify Complete. |+-+-+-+-+-


    Wednesday, April 18, 2012 8:49 AM
  • Hi Alexander, 

    Thanks for your reply.

    Have you executed the Tfssecurity acc-bgc\sqlsvc /imx /collection:url command line? If not, please execute that, and share the result here.  


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us

    Wednesday, April 18, 2012 9:05 AM
    Moderator
  • Hi John,

    Yes I did, the result is 'Error: The identity cannot be resolved.' Which is normal, because TFS is running on Domain 1, and the acc-bgc\sqlsvc is on domain 2.. TFS cannot access the account on Domain 2, because there is no trust.

    Thanks,

    Alexander

    Wednesday, April 18, 2012 9:13 AM
  • Hi Alexander, 

    Thanks for your reply.

    Ok, please launch your TFS Admin Console>>Application Tier>>Group Membership, open the [TEAM FOUNDATION]\Team Foundation Administrators and [TEAM FOUNDATION]\Team Foundation Service Accounts groups, check if there has something relate to this acc-bgc\sqlsvc account. 


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us

    Wednesday, April 18, 2012 9:20 AM
    Moderator
  • Hi John,

    No, there is nothing related to the acc-bgc\sqlsvc account.

    Thanks!

    Alexander

    Wednesday, April 18, 2012 10:55 AM
  • Hi Alexander, 

    Thanks for your reply.

    Could you try to add the acc-bgc\sqlsvc as the Administrator in your SQL Server, then test again?  


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us

    Friday, April 20, 2012 6:37 AM
    Moderator