Components:CA ARCSERVE D2D: 16.0
Document ID: TEC567721
Error while checking for D2D Updates, 'Updates: None of the configured servers are available. Please verify D2DUpdates.Log for more details.'. In the D2DUpdates.Log, the following error is seen 'FAILED: AFGetAdminAccountToken, Error'.
The following warning and error messages are seen in CA ARCserve D2D Activity Log, but the backups would be completing successfully. There would be problem while checking for D2D Updates, as it would not be able to connect to the download server.
Warning: The account[xxxxxx\xxxxxadmin] for D2D server is invalid.
Error: Updates: None of the configured servers are available. Please verify D2DUpdates.Log for more details.
Errors seen in the D2DUpdates.Log
[I] ***** CheckUpdate command starts *****
[I] Checking updates for product: CA ARCserve D2D
[C] FAILED: AFGetAdminAccountToken, Error
[E] None of the configured servers are available.
This problem occurs when there are insufficient privileges for the account used in ARCserve D2D.
-Make sure the account used in CA ARCserve D2D has Administrative Privileges.
-Verify if the password has changed and change it in the CA ARCserve D2D Backup Settings as well.
-Logon as a batch job Policy
If this is a Domain Controller, check if the user account or the group to which it belongs to is added to the Logon as a batch job Policy in the Windows Domain Controller Security Policy. If the user account or the group to which it belongs to does not have rights for this policy, please add the user account or the group to the Logon as a batch job Policy in Windows Domain Controller Security Policy.
By default this policy is applied to Administrators and the Backup Operators group. But there are scenarios where we see that no accounts or groups were added to this user policy in a Windows 2008 domain controller.
This user right is defined in the default Domain Controller's Group Policy object (GPO) and in the Local Security Policy of workstations & servers and it allows a user to be logged on by means of a batch-queue facility.
For more information on this user right, refer to:
-Deny logon as a batch job Policy
Also make sure that the account is not part of the Deny logon as a batch job policy in the Windows Domain Controller Security Policy. 'Deny logon as a batch job' determines which accounts are prevented from being able to log on as a batch job. This policy setting super cedes the Log on as a batch job policy setting if a user account is subject to both policies.
This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers. By default, there are no users denied logon as a batch job.
-After verifying the above and making the appropriate changes, try to login to the CA ARCserve D2D Web Console. Now CA ARCserve D2D should be able to check for D2D Updates.