MS Windows – Scheduler – Error – “An account failed to log on” – NULL SID

Preface

On a MS Window box, a scheduled Task is failing with the error messages stated in the Error Messages section.

Scheduled Task

Here is the scheduled task

Command File


robocopy \\DBPROD\f$\SQLBackups\csLogins F:\Microsoft\SQLServer\Restore *.bak /ZB /ETA

Output


D:\Scripts\RestoreDB\Lab>robocopy \\DBPROD\f$\SQLBackups\csLogins F:\Microsoft\SQLServer\Restore *.bak 	     /ZB 		 /ETA  

-------------------------------------------------------------------------------
   ROBOCOPY     ::     Robust File Copy for Windows     ::     Version XP010
-------------------------------------------------------------------------------

  Started : Mon May 30 18:34:35 2016

   Source : \\DBPROD\f$\SQLBackups\csLogins\
     Dest : F:\Microsoft\SQLServer\Restore\

    Files : *.bak
	    
  Options : /COPY:DAT /ZB /ETA /R:1000000 /W:30 

------------------------------------------------------------------------------

ERROR: You do not have the Backup and Restore Files user rights.
*****  You need these to perform Backup copies (/B or /ZB).

 

Explanation

Btw, Robocopy is coming back with the error message stating “You do not have the Backup and Restore Files user rights“.

 

Error Messages

Detailed Error Messages

Error Messages – Logon Type – 2

An account failed to log on.

Subject:
	Security ID:		SYSTEM
	Account Name:		HRDB$
	Account Domain:		LABDOMAIN
	Logon ID:		0x3e7

Logon Type:			2

Account For Which Logon Failed:
	Security ID:		NULL SID
	Account Name:		daniel
	Account Domain:		LABDOMAIN

Failure Information:
	Failure Reason:		Unknown user name or bad password.
	Status:			0xc000006d
	Sub Status:		0xc000006a

Process Information:
	Caller Process ID:	0x434
	Caller Process Name:	C:\Windows\System32\svchost.exe

Network Information:
	Workstation Name:	HRDB
	Source Network Address:	-
	Source Port:		-


Error Messages – Logon Type – 4


An account failed to log on.

Subject:
	Security ID:		SYSTEM
	Account Name:		HDRB$
	Account Domain:		DOMAIN
	Logon ID:		0x3e7

Logon Type:			4

Account For Which Logon Failed:
	Security ID:		NULL SID
	Account Name:		daniel
	Account Domain:		LABDOMAIN

Failure Information:
	Failure Reason:		Unknown user name or bad password.
	Status:			0xc000006d
	Sub Status:		0xc000006a

Process Information:
	Caller Process ID:	0x434
	Caller Process Name:	C:\Windows\System32\svchost.exe

Network Information:
	Workstation Name:	HRDB
	Source Network Address:	-
	Source Port:		-

Detailed Authentication Information:
	Logon Process:		Advapi  
	Authentication Package:	Negotiate
	Transited Services:	-
	Package Name (NTLM only):	-
	Key Length:		0


Error Messages – Review

  1. Subject
    • Account Name & Account Domain
      • Scheduled User
  2. Logon Type
    • 2 – Interactive User ( A user logged on to this computer )
    • 4 – Batch ( Batch logon type is used by batch servers, where processes may be executing on behalf of a user without their direct intervention )
  3. Security ID
    • Account For Which Logon Failed
      • NULL SID
  4. Failure Information
    • Failure Reason
      • Unknown user name or bad password.

 


Remediate

We made sure of the following:

  1. Run whether user is logged on or not” is chosen
  2. Do not store password. The task will only have access to local computer resources.” is unchecked

 

The one fix we found is edit the Scheduled Task and enable the “Run with highest privileges” check-box.

TaskScheduler-General

 

Competing Products

These other products suffered same fate:

  1. EMC / EMCOPY

 

Summary

Btw, copy and xcopy do not fail.

And, so it is likely that robocopy needs a bit more permission than the native OS tools.

 

References

  1. Caleb – Exploring the Wonder – Robocopy and Server 2008 Script Error
    http://calebs71.blogspot.com/2009/12/robocopy-and-server-2008-script-error.html
  2. Robocopy: “You do not have the Backup and Restore Files user rights” [Field Notes]
    http://seankilleen.com/2011/10/robocopy-you-do-not-have-the-backup-and-restore-files-user-rights-field-notes/

One thought on “MS Windows – Scheduler – Error – “An account failed to log on” – NULL SID

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s