Exchange 2013 DAG and NetBackup Restore Error 5

Problem

When you use Symantec NetBackup 7.x, you might encounter Error 5 when restoring an Exchange Server 2013 DAG mailbox database backup to a Recovery database or the original database.

The error message in Backup, Archive, and Restore Tool looks similar to this

Enabling NetBackup debug logging by using the mklogdir.bat file located in C:\Program Files\Veritas\NetBackup\logs does not necessarily provide additional input. The restore job fails before entering the job section for local restore activities. So no TAR log is being created.

Solution

When following the NetBackup Admin Guide and several Symantec HowTo’s, you have already configured the following two services to run using a dedicated Service Account

• NetBackup Client Service
• NetBackup Legacy Client Service

There are some circumstances (not clearly defined by Symantec) when an additional NetBackup Service performs Exchange PowerShell commands as part of a restore process. Therefore the following NetBackup service must be configured to run using the same Service Account as the other two NetBackup services.

• NetBackup Legacy Network Service

In addition, be aware that the Service Account requires Debug permission on the Exchange Server. It might be helpful to propagate the permissions for the Service Account using a GPO.

• Computer Configuration\Windows Settings\Security Settings\LocalPolicies
  • User Rights Assignment
    • Debug programs
    • Log on as a service
  • Restricted Groups
    • Administrators

Links

• Backing up an Exchange 2013 IP less DAG, https://support.symantec.com/en_US/article.TECH223843.html 
• NetBackup 7.0 – 7.6.x Database Agent Compatibility List, https://support.symantec.com/en_US/article.TECH126904.html 
• NetBackup for Microsoft Exchange restore of an Exchange 2013 database to a Recovery Database (RDB) fails if the restore is attempted from an image where the passive copy was backed up. If the active copy was backed up, the restore works properly., https://support.symantec.com/en_US/article.TECH222976.html 
• VIDEO: NetBackup Support Screencast Demo: Restoring Exchange 2010 Database Availability Group (DAG) Backups to a Recovery Database (RDB) using NetBackup 7.0, https://support.symantec.com/en_US/article.HOWTO41852.html 
• Enable NetBackup Debug Logging, http://systemmanager.ru/nbevagent.en/ch09s02s01.htmhttp://systemmanager.ru/nbevagent.en/ch09s02s01.htm