VDP - File Level Restore - UAC Issue

[frentsch]

Hi @all!

I've installed VDP-Appliance as documented and have successful made backups for all VM's in my Cluster (3 ESXi-Hosts).

Today I tried to use the feature "file level recovery" for some Windows-Clients (here: Win7).

https://<ip of vdp-apliance>:8543/flr/

When I put the credentials of a LOCAL ADMIN from this Win7-Client; I get following error-message:

Anmeldung fehlgeschlagen. The username supplied is not a local administrator

This message is misleading, because by looking into the logfiles (/ usr/local/avamarclient/bin/logs/VmMgr.log) of vdp-appliance it seems that the vdp-client try to put some files in C:\ of the Win7-Client to check if the login-credentials are valid:

[VM - DEBUG] 2013/08/02 13:28:31 TID=5799 MID=40477: sHostFullFilename = /usr/local/avamarclient/bin/LocalAdminChecker.exe

[VM - DEBUG] 2013/08/02 13:28:31 TID=5799 MID=40478: sGuestFullFilename = c:\Users\testvdp\My Documents\1a1f3584-f966-46ba-adac-d55d79cf8b32.exe

...

[VM - DEBUG] 2013/08/02 13:28:35 TID=5799 MID=40502: Retrieved VMware Error Code. Ret: 4, Error: A file was not found

[VM - FUNC] 2013/08/02 13:28:35 TID=5799 MID=40503: VF_GetErrorDescription LEAVE

[VM - ERROR] 2013/08/02 13:28:35 TID=5799 MID=40504: VixVM_CopyFileFromHostToGuest Failed. Ret: 4, Reason: A file was not found

[VM - FUNC] 2013/08/02 13:28:35 TID=5799 MID=40505: VirtualMachine::CopyFileFromHostToGuest LEAVE

[VM - WARN] 2013/08/02 13:28:35 TID=5799 MID=40506: CopyFileFromHostToGuest Failed. Ret: 4

[VM - ERROR] 2013/08/02 13:28:35 TID=5799 MID=40507: User IS NOT a local admin!

...

[VM - DEBUG] 2013/08/02 13:28:35 TID=5799 MID=40519: VirtualMachine->LoginGuest Failed. Ret: 2097166, Reason: The username supplied is not a local administrator

I noticed when I was disabled UAC (Windows User Access Control) on Win7-Client then I can login to vdp-client successful (and files in C:\ can be created)

Then

But disabeling UAC by Domain-GPO-Rules or rather for whole Win7-Client are not allowed by my Windows-Admin.

So there 're any solution to disabeling UAC only for the VDP-Restore-Client?

Greetings from Germany.

Frank

[snekkalapudi]

Hi,

This is interesting. An issue, first of this kind.

I am not really sure about the solution, but stepping into your shoe's only thing i could think of is disable UAC on just 1 windows client and use this as a single point restore-client for all file recoveries by logging into flr-client through advanced login.

But however, you may have to log a SR to get permanent solution.

[frentsch]

Good morning,

well, that's possible, but also only a workaround.

I can't imagine that I'm the first person who has the problem

I'll open a SR.

Thx.