Challenge
Jobs fail with an error message indicating incorrect user name or password. An account associated with Veeam is being locked out in Active Directory.
Cause
User account may be subject to policies requiring a periodic update in password, or may need to be changed in Active Directory for security concerns. Some services that Veeam depends on have a user account specified for them; these credentials must be updated.Other credentials are defined within the Veeam GUI, whether for infrastructure access or for job settings.
All of these should be reviewed and updated as necessary to include the new correct password in the event of a change.
Solution
Run services.msc in order to access details of services on the Veeam Backup & Replication and/or Backup Enterprise Manager servers. Sort by service name, and scroll down to find the Veeam services.
Key services (highlighted below) should have administrator credentials entered. This frequently is done with a Veeam service account, but can be any administrator account. If the logged-in user is an administrator, “Local System” can suffice, but in environments with multiple backup operator users, it is recommended to use a service account.
To change the account of a service, right-click the service and select Properties, then the Log On tab. You can enter the account or browse for it in AD, then provide the password.
Credentials are also specified in Veeam for:
- Any Managed Server (aside from “This Server”):
- Credentials for CIFS shares
- Credentials for EMC Data Domain and HPE StoreOnce deduplicating appliance repositories
- Guest credentials for Application Aware processing