How to Configure the maintenance server for delegation for use by the Desktop and Laptop Option (DLO).
Problem
How to Configure the maintenance server for delegation for use by the Desktop and Laptop Option (DLO).
Error Message
DLO Maintenance Server (SERVERNAME) is unavailable or unable to groom file (a security package specific error occurred)
Cause
The Delta File Transfer feature enables incremental transfer and storage of backup data. When this option is enabled, the initial backup requires the transfer of the entire file. Subsequent backups require only the transfer of the parts of the file that have changed, reducing the bandwidth required and improving backup speed. Delta File Transfer requires the use of the DLO maintenance server. The maintenance server manages the deletion of previous delta revisions from storage locations. The maintenance server is only required when the Delta File Transfer option is enabled, but it is installed by default when DLO is installed. Only one maintenance server is required, but in large installations it may be more efficient to have one maintenance server for each Storage Location host (i.e. File Server).The maintenance server is installed on the media server by default when DLO is installed.
Solution
1. Verify that the following conditions are met:
- Domains are Windows 2000 or later. NT 4 domains are not supported.
- Both the Desktop Agent user's account and the maintenance service's account must be in the same forest.
- Desktop Agent user and computer accounts must be in mutually trusted domains.
- Desktop and server operating systems must be Windows 2000 or later
2. Confirm that the desktop user account is configured for delegation.
3. Confirm that the server process account is trusted for delegation.
This process verifies that the desktop agent user's account can be delegated.
1. Log on to the domain controller using a domain administrator account.
2. Go to Start > Programs > Administrative Tools. Select "Active Directory Users and Computers"
3. Under the domain, click the Users folder.
4. Right-click the user account to be delegated and click Properties.
5. Click the Account tab.
6. In the Account options list, verify that the Account is sensitive and cannot be delegated is not selected (See Figure 1)
This process verifies that the account used to run the maintenance server process is allowed to delegate client accounts. If the DLO maintenance service is running under Local System Account , follow the procedure given below or the steps given for User's Account in the above procedure:
1. Log on to the domain controller using a domain administrator account.
2. Go to Start > Programs > Administrative Tools. Select "Active Directory Users and Computers"
3. Right-click the Computers folder and click Properties.
4. Right-click the computer on which the maintenance server runs and then click Properties.
5. On the General page, click Trust computer for delegation.(See figure 2)
6. Click OK.
Figure 2
Note: The above steps also need to be performed if Delta File Transfer is not enabled in backup selections and the following warnings appears in the job log: