<h1 id="warningoneormorebackuppathsdonotexist">Warning. One or more backup paths do not exist</h1> <hr /> <h2 id="1problem">1. Problem</h2> <p>After running a backup plan you see the error: <strong>“Warning. One or more backup paths don’t exist”</strong>. Or sometimes it could be <strong>"ERROR: Warning. Access to one or more backup paths is denied"</strong>.</p> <p><img src="/content/images/f4ef368c-59ce-4b4b-8ac8-167c7405047f.png" alt="" /></p> <hr /> <h2 id="2introduction">2. Introduction</h2> <p>Let's start with the description of services and privileges required for this to work.</p> <p><strong>How it works</strong></p> <p>Cloudberry Backup (or online backup, in case of Cloudberry Managed Backup) works as a Windows Service and starts up under Local System account.</p> <p>At the same time Cloudberry Backup agent (UI) works under user's privileges who ran the application.</p> <p><strong>Why does that matter?</strong></p> <p>This approach has both, upsides and downsides.</p> <p>Upside: Backup schedule start backup job/plan even if no users are currently logged on the server.</p> <p>Downside: When configuring a backup plan in the application currently logged on users' privileges will be used to browse folders/drives/network shares. Backup agent might not have permissions to access all of the paths specified in the job/plan.</p> <p><strong>What is Local System account?</strong></p> <p><a href="https://msdn.microsoft.com/en-us/library/windows/desktop/ms684190(v=vs.85).aspx"><img src="/content/images/751519f2-4e33-4af8-be7b-38165a863057.png" alt="" /></a></p> <p>According to the article: </p> <blockquote> <p>"It has extensive privileges on the local computer, and acts as the computer on the network. Its token includes the NT AUTHORITY\SYSTEM and BUILTIN\Administrators SIDs; these accounts have access to most system objects." </p> </blockquote> <p>And considering the fact that most companies have password rotation policy that requires to change passwords every 2-3 months, changing the password and leaving our backup agent using the previous password may interrupt backup routine. Now imagine you need to change this password on 100+ machines at any given time. Thus, it's a bad practice to change Local System account to any other account with Administrator's privileges.</p> <p>By default, Local System account has access to all files on a local computer/server, but often when a server's role is a file-server the permissions for shared folders are being adjusted and System can be deleted from accounts who are granted to read the data.</p> <p>To make sure that the backup service is running under Local System account you can go to <strong>C:\Windows\System32</strong> and locate the file <strong>services.msc</strong> and double click on it, locate the service and see the account that is used there.</p> <hr /> <h2 id="3whichfileshaventbeenbackedup">3. Which files haven't been backed up?</h2> <ul> <li><p>Check your diagnostic information (log files). Tools -&gt; Options -&gt; Diagnostic -&gt; Open in Folder and check log-file with some (almost random) id. You will find which files/folder backup plan couldn't access.</p></li> <li><p>In the agent, on tab “History”, filter by “files” and in the list you’ll find which files have been skipped.</p></li> </ul> <hr /> <h2 id="4whatdotheseerrorsmean">4. What do these errors mean?</h2> <ul> <li><strong>ERROR: Warning. Access to one or more backup paths is denied.</strong></li> </ul> <p>Check permissions. Please refer to 5.2.1</p> <ul> <li><strong>Warning. One or more backup paths don’t exist.</strong></li> </ul> <p>The resource is not accessible via the network, you need to configure sharing properly. Please refer to 5.2.2</p> <hr /> <h2 id="5suggestionsandresolution">5. Suggestions and Resolution</h2> <p>There are 2 ways to provide permissions to access data</p> <p>5.1 Provide account credentials that have access to the resource. The easiest way is to provide credential in the backup wizard:</p> <p><img src="/content/images/80824a9e-d52f-490d-8eed-fbf10d6af533.png" alt="" /></p> <p><img src="/content/images/9f8c17fe-6beb-4bfe-9a60-fadfcac7891d.png" alt="" /></p> <p>Please note that if there's a password rotation policy requiring passwords change it may affect backup process.</p> <p>5.2 The best way to provide access to allow backup app to back up data is to properly configure permissions on the destination.</p> <p>5.2.1 Let's first configure permissions:</p> <p><img src="/content/images/bea47565-84b3-4dca-86cb-a4ad8804e7f0.png" alt="" /></p> <p><img src="/content/images/a2c61ed1-6b45-4f15-a5b1-be0927cfe6d0.png" alt="" /></p> <p><img src="/content/images/fa2d5d50-4fe5-4073-943a-b07ff5890605.png" alt="" /></p> <p><img src="/content/images/cea0cd02-687f-4b8a-b65f-dd437762c4eb.png" alt="" /></p> <p><img src="/content/images/3f6635b5-1e61-4d44-833e-1f6eff22c2ab.png" alt="" /></p> <p>5.2.2 Now we need to configure sharing:</p> <p><img src="/content/images/1da32ad0-bb71-4edc-8c40-0e30d4074158.png" alt="" /></p> <p><img src="/content/images/82ac12eb-c222-4529-a016-9d0eab3110b2.png" alt="" /></p> <p><img src="/content/images/0068bfab-5b66-4482-938e-a68a79f5d1fb.png" alt="" /></p> <p><img src="/content/images/972c9a99-7908-4e1a-ad6b-8b9c5bc74267.png" alt="" /></p> <p><img src="/content/images/f26adf60-91e1-4cb7-9d13-db387426b0e4.png" alt="" /></p> <p><img src="/content/images/78f79e21-e8d6-4b6f-95b5-5614072b0496.png" alt="" /></p> <p><img src="/content/images/0b2980c9-7942-4486-8f44-3f23ad3c7883.png" alt="" /></p>