Quantcast
Channel: Backup – Windows and Windows Server forum
Viewing all 274 articles
Browse latest View live

Windows Server 2012 R2 Shadow Copy Issues

$
0
0

Hi Everybody,

I seem to be having an issue with a Windows 2012 R2 Server we installed back in January of 2014. This is a simple using the File Services Role & running American Contractor. When we got to run any Backup we get the following Errors in the Events under Application:
Event 12293 VSS: 

Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {89300202-3cec-4981-9171-19f59559e0f2}. Routine details Error calling Query(). [0x80042302] [hr = 0x80042302, A Volume Shadow Copy Service component encountered an unexpected error.
Check the Application event log for more information.
]. 

Operation:
   Query Shadow Copies

Context:
   Execution Context: Coordinator

Event 517 Backup:

The backup operation that started at '‎2014‎-‎07‎-‎25T13:46:51.470000000Z' has failed with following error code '0x8078006B' (Windows Backup failed to create the shared protection point on the source volumes.). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Events under Backup:

Event 5 Backup:

The backup operation that started at '‎2014‎-‎07‎-‎25T13:46:51.470000000Z' has failed with following error code '0x8078006B' (Windows Backup failed to create the shared protection point on the source volumes.). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Details of Event 5

- System 

  - Provider 

   [ Name]  Microsoft-Windows-Backup 
   [ Guid]  {1DB28F2E-8F80-4027-8C5A-A11F7F10F62D} 
 
   EventID 5 
 
   Version 3 
 
   Level 2 
 
   Task 0 
 
   Opcode 0 
 
   Keywords 0x4000000000000000 
 
  - TimeCreated 

   [ SystemTime]  2014-07-25T13:54:26.459960500Z 
 
   EventRecordID 555 
 
   Correlation 
 
  - Execution 

   [ ProcessID]  3172 
   [ ThreadID]  3148 
 
   Channel Microsoft-Windows-Backup 
 
   Computer ####.##.local 
 
  - Security 

   [ UserID]  S-1-5-18 
 

- EventData 

  BackupTemplateID {E9CC1D08-0636-4EDA-AE97-0085AE093871} 
  HRESULT 0x8078006b 
  DetailedHRESULT 0x8004230f 
  ErrorMessage %%2155348075 
  BackupState 12 
  BackupTime 2014-07-25T13:53:32.668000000Z 
  BackupTarget \\#####\Server_Backups\ 
  NumOfVolumes 5 
  VolumesInfo <VolumeInfo><VolumeInfoItem Name="System Reserved" OriginalAccessPath="" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="1" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="1" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="554" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="C:" OriginalAccessPath="C:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="1" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="1" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="1576" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="E:" OriginalAccessPath="E:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="0" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="8" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="F:" OriginalAccessPath="F:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="0" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="8" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="G:" OriginalAccessPath="G:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="0" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="8" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /></VolumeInfo> 
  SourceSnapStartTime 2014-07-25T13:53:32.694095700Z 
  SourceSnapEndTime 1601-01-01T00:00:00.000000000Z 
  PrepareBackupStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  PrepareBackupEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  BackupWriteStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  BackupWriteEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  TargetSnapStartTime 1601-01-01T00:00:00.000000000Z 
  TargetSnapEndTime 1601-01-01T00:00:00.000000000Z 
  DVDFormatStartTime <TimesList></TimesList> 
  DVDFormatEndTime <TimesList></TimesList> 
  MediaVerifyStartTime <TimesList></TimesList> 
  MediaVerifyEndTime <TimesList></TimesList> 
  BackupPreviousState 2 
  ComponentStatus <ComponentStatus></ComponentStatus> 
  ComponentInfo <ComponentInfo></ComponentInfo> 
  SSBEnumerateStartTime 1601-01-01T00:00:00.000000000Z 
  SSBEnumerateEndTime 1601-01-01T00:00:00.000000000Z 
  SSBVhdCreationStartTime 1601-01-01T00:00:00.000000000Z 
  SSBVhdCreationEndTime 1601-01-01T00:00:00.000000000Z 
  SSBBackupStartTime 1601-01-01T00:00:00.000000000Z 
  SSBBackupEndTime 1601-01-01T00:00:00.000000000Z 
  SystemStateBackup <SystemState IsPresent="1" HResult="-2139619299" DetailedHResult="-2147212529" /> 
  BMR <BMR IsPresent="1" HResult="-2139619228" DetailedHResult="0" /> 
  VssFullBackup false 
  UserInputBMR true 
  UserInputSSB true 
  BackupSuccessLogPath  
  BackupFailureLogPath  
  EnumerateBackupStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  EnumerateBackupEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  PruneBackupStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  PruneBackupEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList> 
  BackupFlags 0x9 
  ComponentInfoSummary <ComponentInfoSummary ComponentInfoArrayPresent="1" TotalComponents="0" SucceededComponents="0" /> 

Our VSSAdmin Writers after a backup:

vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2013 Microsoft Corp.

Writer name: 'Task Scheduler Writer'
   Writer Id: {d61d61c8-d73a-4eee-8cdd-f6f9786b7124}
   Writer Instance Id: {1bddd48e-5052-49db-9b07-b96f96727e6b}
   State: [1] Stable
   Last error: No error

Writer name: 'VSS Metadata Store Writer'
   Writer Id: {75dfb225-e2e4-4d39-9ac9-ffaff65ddf06}
   Writer Instance Id: {088e7a7d-09a8-4cc6-a609-ad90e75ddc93}
   State: [1] Stable
   Last error: No error

Writer name: 'Performance Counters Writer'
   Writer Id: {0bada1de-01a9-4625-8278-69e735f39dd2}
   Writer Instance Id: {f0086dda-9efc-47c5-8eb6-a944c3d09381}
   State: [1] Stable
   Last error: No error

Writer name: 'System Writer'
   Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Instance Id: {ec6cb111-fafe-49fb-8b87-edf2e5445226}
   State: [5] Waiting for completion
   Last error: No error

Writer name: 'ASR Writer'
   Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
   Writer Instance Id: {ad70bb46-b270-4963-a88d-f3b4d56ecc5b}
   State: [1] Stable
   Last error: No error

Writer name: 'COM+ REGDB Writer'
   Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
   Writer Instance Id: {a264053a-aa55-4fdc-9575-89ae26caaa30}
   State: [1] Stable
   Last error: No error

Writer name: 'Shadow Copy Optimization Writer'
   Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Instance Id: {4f3e1a45-61c0-49f2-9db0-2f4dc724e357}
   State: [1] Stable
   Last error: No error

Writer name: 'Registry Writer'
   Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Instance Id: {aef6ca03-ea93-403e-a01c-72763738c077}
   State: [1] Stable
   Last error: No error

Writer name: 'WMI Writer'
   Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
   Writer Instance Id: {9149705d-e232-4339-a0b3-3c871832ff42}
   State: [5] Waiting for completion
   Last error: No error


I have struggled with this for awhile and I would appreciate any help possible. Thank You. 




7z is not supported archive

$
0
0

Dear All please help

i am trying a backup  full and differential backup using the following command

to full backup

7za a c:\archive.7z  c:\folder_to_archive

Then for the differential:

7za u c:\archive.7z  c:\folder_to_archive  -ms=off -mx=9 -t7z -u- -up0q3r2x2y2z0w2!c:\diff1.7z

but i am having an error when executing the differential says:

Backup.7z is not supported archive

my backup is 50Gb and i tried the command with a small file size the differential works fine but with the bigger archive I got the error message

please help

thanks

Modify Windows Server Backup Schedule - label syntax incorrect

$
0
0

Hi. I have recently discovered that when you use the Windows Server Backup wizard and select "full" backup, you don't actually get a full backup i.e. no Baremetal or System State (nice one Microsoft!!).

Thus, I have been trying to modify the schedule via wbadmin in powershell. When I try and add BareMetal to the schedule via add-WBBareMetalRecovery I get the error "The filename, directory name, or volume label syntax is incorrect".

I was familiar with this error when trying to add disks through the GUI when not all the backup destinations were present, but I had no idea that this occurred when trying to modify the schedule in any way shape or form?

Please could you confirm as to whether this is the case or not please? If so I really do find this truly shocking!!!

Many thanks,

Dug.

 

W2K8R2 VM-Guest or host-backups failing: VSS issue

$
0
0

Host: W2K12R2 fully patched (Hyper-V Role)

After adding a third IDE-disk to a running W2K8R2 (NTDS role) Guest Backups are failing (during backup for each disk there's a scsi disk mounted, vss-snapshot, that cannot be recognized, question to format this disk).

To narrow it I installed windows backup onto the guest trying to backup systemstate. After cleaning all vss isues, e.g. restarting the server all writers are stable.

Then doing the systemstate backup:
Errorcode 2155347997

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System><Provider Name="Microsoft-Windows-Backup" Guid="{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}" /> <EventID>5</EventID> <Version>2</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x4000000000000000</Keywords> <TimeCreated SystemTime="2014-08-20T15:53:37.620830700Z" /> <EventRecordID>34</EventRecordID> <Correlation /> <Execution ProcessID="5836" ThreadID="5448" /> <Channel>Microsoft-Windows-Backup</Channel> <Computer>EPHDB01.eph.lokal</Computer> <Security UserID="S-1-5-18" /> </System>
- <EventData><Data Name="BackupTemplateID">{282BD563-28CE-4300-9491-8486A49A4018}</Data> <Data Name="HRESULT">2155347997</Data> <Data Name="BackupState">12</Data> <Data Name="BackupTarget">\\eph-server\eph-backup\ephdb01</Data> <Data Name="NumOfVolumes">3</Data> <Data Name="BackupTime">2014-08-20T15:53:16.428587900Z</Data> <Data Name="HRESULT2">2155347997</Data> <Data Name="VolumesInfo"><VolumeInfo><VolumeInfoItem Name="Z:" OriginalAccessPath="Z:" State="7" HResult="-2139619299" DetailedHResult="0" PreviousState="15" IsCritical="1" IsIncremental="0" BlockLevel="0" HasFiles="0" HasSystemState="1" IsCompacted="0" IsPruned="1" IsRecreateVhd="0" FullBackupReason="2" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="550" BackupTypeDetermined="1" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="F:" OriginalAccessPath="F:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="1" IsIncremental="0" BlockLevel="0" HasFiles="0" HasSystemState="1" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="2" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="548" BackupTypeDetermined="1" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="C:" OriginalAccessPath="C:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="1" IsIncremental="0" BlockLevel="0" HasFiles="0" HasSystemState="1" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="2" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="1572" BackupTypeDetermined="1" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /></VolumeInfo></Data> <Data Name="DetailedHRESULT">3225026565</Data> <Data Name="SourceSnapStartTime">2014-08-20T15:53:16.397337900Z</Data> <Data Name="SourceSnapEndTime">2014-08-20T15:53:32.666187700Z</Data> <Data Name="PrepareBackupStartTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> <Data Name="PrepareBackupEndTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> <Data Name="BackupWriteStartTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> <Data Name="BackupWriteEndTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> <Data Name="TargetSnapStartTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="TargetSnapEndTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="DVDFormatStartTime"><TimesList></TimesList></Data> <Data Name="DVDFormatEndTime"><TimesList></TimesList></Data> <Data Name="MediaVerifyStartTime"><TimesList></TimesList></Data> <Data Name="MediaVerifyEndTime"><TimesList></TimesList></Data> <Data Name="BackupPreviousState">16</Data> <Data Name="ComponentStatus"><ComponentStatus></ComponentStatus></Data> <Data Name="SSBEnumerateStartTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="SSBEnumerateEndTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="SSBVhdCreationStartTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="SSBVhdCreationEndTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="SSBBackupStartTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="SSBBackupEndTime">1601-01-01T00:00:00.000000000Z</Data> <Data Name="SystemStateBackup"><SystemState IsPresent="1" HResult="-2139619299" DetailedHResult="-1069940731" /></Data> <Data Name="BMR">false</Data> <Data Name="VssFullBackup">true</Data> <Data Name="UserInputBMR">false</Data> <Data Name="UserInputSSB">true</Data> <Data Name="BackupSuccessLogPath" /> <Data Name="BackupFailureLogPath" /> <Data Name="EnumerateBackupStartTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> <Data Name="EnumerateBackupEndTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> <Data Name="PruneBackupStartTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> <Data Name="PruneBackupEndTime"><TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList></Data> </EventData></Event>

thx for any reply,

Ralf


Windows Server Backup Failed error code 2155348129 ; Operation PostSnapshot Event

$
0
0

I have a fresh server with Windows Server 2008 R2 x64 installed. Right after I installed the OS, I installed Windows Server Backup and ran one back up successfully. Since then, I've promoted the server to an Active Directory Domain controller. I'm no longer able to run Windows Server Backup successfully. 

  • I've installed all available "Update for Windows Server 2008 R2 x64" updates (not any of the security ones)
  • In device manager all the attached hardware have drivers set up successfully
  • The secondary hard drive where I am trying to store the backup has 580 GB free space. The server's entire primary partition is only 460 GB.
  • The server's system partition status (where the OS is installed) is showing "System, Boot, Page File, Active, Crash Dump, Primary Partition"
  • I've uninstalled and re-installed Windows Server Backup
  • I have rebooted the server, and restarted the VSS service multiple times
  • When running Windows Server Backup, I choose only "Bare Metal Recovery"
  • I've tried both "VSS full backup" and "VSS copy backup" with no success
  • When I try to backup a single 1kb file, that fails with the same error

In the Windows Application logs I see the following errors when I attempt to do a backup:

  • lsass (508) Unable to read the header of logfile \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy7\Windows\NTDS\edb.log. Error -546.
  • lsass (508) Unable to read the header of logfile \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy7\Windows\NTDS\edb.log. Error -546.
  • A VSS writer has rejected an event with error 0x800423f4, The writer experienced a non-transient error.  If the backup process is retried,
    the error is likely to reoccur.
    . Changes that the writer made to the writer components while handling the event will not be available to the requester. Check the event log for related events from the application hosting the VSS writer. 

    Operation:
       PostSnapshot Event

    Context:
       Execution Context: Writer
       Writer Class Id: {b2014c9e-8711-4c5c-a5a9-3cf384484757}
       Writer Name: NTDS
       Writer Instance ID: {87905f79-f053-4e86-be8f-3de48ca8c45a}
       Command Line: C:\Windows\system32\lsass.exe
       Process ID: 508

  • Ran out of time while deleting files. 

    Operation:
       OnPostSnapshot event
       PostSnapshot Event

    Context:
       Execution Context: Shadow Copy Optimization Writer
       Execution Context: Writer
       Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
       Writer Name: Shadow Copy Optimization Writer
       Writer Instance ID: {74ae0f52-b772-41ab-8c76-a1b6e88d2ea2}

  • The backup operation that started at '‎2014‎-‎08‎-‎22T03:02:33.924000000Z' has failed because the Volume Shadow Copy Service operation to create a shadow copy of the volumes being backed up failed with following error code '2155348129'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

When I go to command prompt (as Administrator) and run "vssadmin list writers" I get the following:

  • C:\Windows\system32>vssadmin list writers
    vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
    (C) Copyright 2001-2005 Microsoft Corp.

    Writer name: 'Task Scheduler Writer'
       Writer Id: {d61d61c8-d73a-4eee-8cdd-f6f9786b7124}
       Writer Instance Id: {1bddd48e-5052-49db-9b07-b96f96727e6b}
       State: [1] Stable
       Last error: No error

    Writer name: 'VSS Metadata Store Writer'
       Writer Id: {75dfb225-e2e4-4d39-9ac9-ffaff65ddf06}
       Writer Instance Id: {088e7a7d-09a8-4cc6-a609-ad90e75ddc93}
       State: [1] Stable
       Last error: No error

    Writer name: 'Performance Counters Writer'
       Writer Id: {0bada1de-01a9-4625-8278-69e735f39dd2}
       Writer Instance Id: {f0086dda-9efc-47c5-8eb6-a944c3d09381}
       State: [1] Stable
       Last error: No error

    Writer name: 'System Writer'
       Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
       Writer Instance Id: {2d3499e5-9673-4180-87f7-acc961121da9}
       State: [5] Waiting for completion
       Last error: No error

    Writer name: 'ASR Writer'
       Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
       Writer Instance Id: {dbc3ada5-4daa-4d35-8657-8048d2685d94}
       State: [1] Stable
       Last error: No error

    Writer name: 'COM+ REGDB Writer'
       Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
       Writer Instance Id: {0eda058c-e7bf-4671-8b41-0fe4b9ff4f81}
       State: [1] Stable
       Last error: No error

    Writer name: 'Registry Writer'
       Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
       Writer Instance Id: {f9d3c5dd-4cb3-44fd-bdc1-21677e22020b}
       State: [1] Stable
       Last error: No error

    Writer name: 'Shadow Copy Optimization Writer'
       Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
       Writer Instance Id: {8fa5f71f-53d7-48d0-b69d-17e3c8427063}
       State: [1] Stable
       Last error: No error

    Writer name: 'WMI Writer'
       Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
       Writer Instance Id: {1d745cdc-7de1-47f9-84d7-38369e695fe2}
       State: [5] Waiting for completion
       Last error: No error

    Writer name: 'DFS Replication service writer'
       Writer Id: {2707761b-2324-473d-88eb-eb007a359533}
       Writer Instance Id: {29bbb620-1922-4f68-9ed5-6b7005f0f3b3}
       State: [5] Waiting for completion
       Last error: No error

    Writer name: 'NTDS'
       Writer Id: {b2014c9e-8711-4c5c-a5a9-3cf384484757}
       Writer Instance Id: {87905f79-f053-4e86-be8f-3de48ca8c45a}
       State: [11] Failed
       Last error: Non-retryable error

Server information:

  • Processor: i5-3570k
  • RAM: 16 GB
  • System type: 64-bit
  • Active Directory Domain Services role installed
  • DNS Server role installed

Scheduled Backup not Running

$
0
0

Using Windows Server Backup I setup a scheduled backup on Server 2008 R2 running Exchange 2010.  It ran as scheduled until 5 days ago.

The backup stopped running nightly.  Each day the backup management screen shows that a backup is scheduled for that night, but the scheduled backup does not run.  When I check each day, the next scheduled backup is shown as the backup for the evening to come; the last scheduled backup that ran successfully was shown as the last backup.

Even though backups are not running, there are no unsuccessful backup attempts listed in the recent backups list at the top of the utility.  There are also not any failed backups in the event logs.

Any help would be greatly appreciated!

VSS issue, event ID 22, 12289, 12293, error 0x8004230f Failed to retrieve volumes that are eligible for shadow copies

$
0
0

I have a new Dell R710 that I have 2008 Server R2 64-bit installed. It's role is file server. I first noticed there were VSS initialization issues in BackupExec and that the system state wasn't getting backed up.
 
Then I would run "vssadmin list writers" from CMD and system writer would be timing out....
 
Writer name: 'System Writer'
    Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
    Writer Instance Id: {18370018-3454-46cf-a352-db13b2536aa6}
    State: [7] Failed
    Last error: Timed out
 
I would also get Event ID 12289 Volume Shadow Copy Service error: Unexpected error DeviceIoControl(\\?\Volume{caaccaea-2a96-11e1-b14b-806e6f6e6963} - 0000000000000140,0x0053c020,00000000003BDFD0,0,00000000003BBFA0,4096,[0]).  hr = 0x80070057, The parameter is incorrect.
 
I would also get Event ID 12293 Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine details IVssSnapshotProvider::IsVolumeSupported() failed with 0x8000ffff [hr = 0x8000ffff, Catastrophic failure
 
Also event ID 22 for volsnap The shadow copy storage volume specified for shadow copies on volume\\?\Volume{caaccaea-2a96-11e1-b14b-806e6f6e6963} could not be added.
 
Also I can't configure shadow copies due to error 0x8004230f "Failed to retrieve volumes that are eligible for shadow copies.

PLEASE HELP!

Server 2008 Std R2 Backup warnings

$
0
0
Hello,
I'm having a problem for a while now with Windows Server Backup (with VSS). I don't really know when this started.
The thing is 3 of 5 partitions are backing up with warnings. Process can't backup some of the files which are:
Błąd podczas zapisu przy tworzeniu kopii zapasowej pliku F:\System Volume Information\SRM\quota.md: błąd [0x80070020] Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces.
Błąd podczas zapisu przy tworzeniu kopii zapasowej pliku G:\System Volume Information\SRM\quota.md: błąd [0x80070020] Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces.
Błąd podczas zapisu przy tworzeniu kopii zapasowej pliku E:\System Volume Information\SRM\datascrn.md: błąd [0x80070020] Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces.
Błąd podczas zapisu przy tworzeniu kopii zapasowej pliku E:\System Volume Information\SRM\quota.md: błąd [0x80070020] Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces.

Process can't access these files because they are being used by other process. As I found out these files are disk quota files. I also read that I may backup them manually but I don't like that idea.
I tried disabling Antivirus software, deleting excludes from backup, changing time of backup. Nothing works.
I got 2 questions.

1. Will these errors make restoring backup impossible?
2. How I can fix this?

Unexpected BSOD results in Crash dump

$
0
0

Hello Everyone,

I have recently had a crash dump file appear in C:\windows\minidump. I have output the results from one of the online debugging site and results are pasted here, for anyone if you wish to review it. I have had 10 servers crashed and the results i have pasted belongs to 2 of the server's mini dump.

Server1:

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://www.osronline.com for more information Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (8 procs) Free x64 Product: Server, suite: TerminalServer SingleUserTS Built by: 6002.18005.amd64fre.lh_sp2rtm.090410-1830 Machine Name: Kernel base = 0xfffff800`0161e000 PsLoadedModuleList = 0xfffff800`017e2dd0 Debug session time: Thu Apr 11 22:32:27.364 2013 (UTC - 4:00) System Uptime: 0 days 6:27:36.834 ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* MEMORY_MANAGEMENT (1a) # Any other values for parameter 1 must be individually examined. Arguments: Arg1: 0000000000041790, The subtype of the bugcheck. Arg2: fffffa80005f9640 Arg3: 000000000000ffff Arg4: 0000000000000000 Debugging Details: ------------------ TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2 BUGCHECK_STR: 0x1a_41790 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT_SERVER PROCESS_NAME: svchost.exe CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff8000162dbd8 to fffff80001678450 STACK_TEXT: fffffa60`05307868 fffff800`0162dbd8 : 00000000`0000001a 00000000`00041790 fffffa80`005f9640 00000000`0000ffff : nt!KeBugCheckEx fffffa60`05307870 fffff800`016a1e72 : 00000000`00000011 000007fe`f2b3ffff fffffa80`00000000 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x1c42e fffffa60`05307a00 fffff800`018eb17e : 000007fe`f2990000 0007ffff`00000000 00000000`00000000 fffffa80`1aac7a30 : nt!MiRemoveMappedView+0xd2 fffffa60`05307b20 fffff800`018f0f13 : 00000000`00000000 000007fe`f2990000 fffffa80`00000001 fffffa80`1a416910 : nt!MiUnmapViewOfSection+0x18e fffffa60`05307be0 fffff800`01677ef3 : ffffffff`ffffffff fffffa80`1a87abb0 fffffa80`1aac7a30 00000000`00008000 : nt!NtUnmapViewOfSection+0x57 fffffa60`05307c20 00000000`77736fba : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000000`0247e888 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x77736fba STACK_COMMAND: kb FOLLOWUP_IP: nt! ?? ::FNODOBFM::`string'+1c42e fffff800`0162dbd8 cc int 3 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt! ?? ::FNODOBFM::`string'+1c42e FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 49e0237f FAILURE_BUCKET_ID: X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+1c42e BUCKET_ID: X64_0x1a_41790_nt!_??_::FNODOBFM::_string_+1c42e Followup: MachineOwner ---------

This free analysis is provided by OSR Open Systems Resources, Inc.
Want a deeper understanding of crash dump analysis? Check out our Windows Kernel Debugging and Crash Dump Analysis Seminar (opens in new tab/window)

Hide DivCrash Code Links

Hide DivLoaded Module List

start             end                 module name
fffff800`0161e000 fffff800`01b36000   nt       ntkrnlmp.exe
fffff800`01b36000 fffff800`01b7c000   hal      hal.dll
fffff960`000a0000 fffff960`00351000   win32k   win32k.sys
fffff960`004b0000 fffff960`004ce000   dxg      dxg.sys
fffff960`00600000 fffff960`0060a000   TSDDD    TSDDD.dll
fffff960`008f0000 fffff960`008f9000   framebuf framebuf.dll
fffffa60`00603000 fffffa60`0060d000   kdcom    kdcom.dll
fffffa60`0060d000 fffffa60`00648000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll
fffffa60`00648000 fffffa60`0065c000   PSHED    PSHED.dll
fffffa60`0065c000 fffffa60`006b9000   CLFS     CLFS.SYS
fffffa60`006b9000 fffffa60`0076b000   CI       CI.dll
fffffa60`0076b000 fffffa60`00787000   sacdrv   sacdrv.sys
fffffa60`00787000 fffffa60`007d7000   msrpc    msrpc.sys
fffffa60`007d7000 fffffa60`007e8000   Npfs     Npfs.SYS
fffffa60`007f3000 fffffa60`007fe000   Msfs     Msfs.SYS
fffffa60`00801000 fffffa60`009c4000   NDIS     NDIS.SYS
fffffa60`009c4000 fffffa60`009d8000   volmgr   volmgr.sys
fffffa60`009d8000 fffffa60`009fb000   rasl2tp  rasl2tp.sys
fffffa60`00a08000 fffffa60`00a61000   NETIO    NETIO.SYS
fffffa60`00a61000 fffffa60`00b3b000   Wdf01000 Wdf01000.sys
fffffa60`00b3b000 fffffa60`00b49000   WDFLDR   WDFLDR.SYS
fffffa60`00b49000 fffffa60`00b9f000   acpi     acpi.sys
fffffa60`00b9f000 fffffa60`00ba8000   WMILIB   WMILIB.SYS
fffffa60`00ba8000 fffffa60`00bb2000   msisadrv msisadrv.sys
fffffa60`00bb2000 fffffa60`00be2000   pci      pci.sys
fffffa60`00be2000 fffffa60`00bf7000   partmgr  partmgr.sys
fffffa60`00bf7000 fffffa60`00c00000   rasacd   rasacd.sys
fffffa60`00c06000 fffffa60`00c6c000   volmgrx  volmgrx.sys
fffffa60`00c6c000 fffffa60`00c73000   pciide   pciide.sys
fffffa60`00c73000 fffffa60`00c83000   PCIIDEX  PCIIDEX.SYS
fffffa60`00c83000 fffffa60`00c96000   mountmgr mountmgr.sys
fffffa60`00c96000 fffffa60`00c9e000   atapi    atapi.sys
fffffa60`00c9e000 fffffa60`00cc2000   ataport  ataport.SYS
fffffa60`00cc2000 fffffa60`00ccc000   msahci   msahci.sys
fffffa60`00ccc000 fffffa60`00ce5000   arcsas   arcsas.sys
fffffa60`00ce5000 fffffa60`00d42000   storport storport.sys
fffffa60`00d42000 fffffa60`00d89000   fltmgr   fltmgr.sys
fffffa60`00d89000 fffffa60`00d97000   vga      vga.sys
fffffa60`00d97000 fffffa60`00da0000   RDPCDD   RDPCDD.sys
fffffa60`00da1000 fffffa60`00dda000   msiscsi  msiscsi.sys
fffffa60`00dda000 fffffa60`00de7000   TDI      TDI.SYS
fffffa60`00de7000 fffffa60`00df3000   ndistapi ndistapi.sys
fffffa60`00df3000 fffffa60`00dfc000   rdpencdd rdpencdd.sys
fffffa60`00e08000 fffffa60`00e8e000   ksecdd   ksecdd.sys
fffffa60`00e8e000 fffffa60`00ea7000   dump_arcsas dump_arcsas.sys
fffffa60`00ea7000 fffffa60`00eb3000   tunnel   tunnel.sys
fffffa60`00eb3000 fffffa60`00ec6000   intelppm intelppm.sys
fffffa60`00ec6000 fffffa60`00f19000   e1e6032e e1e6032e.sys
fffffa60`00f19000 fffffa60`00f25000   usbuhci  usbuhci.sys
fffffa60`00f25000 fffffa60`00f6b000   USBPORT  USBPORT.SYS
fffffa60`00f6b000 fffffa60`00f7c000   usbehci  usbehci.sys
fffffa60`00f7c000 fffffa60`00f8a000   vgapnp   vgapnp.sys
fffffa60`00f8a000 fffffa60`00faf000   VIDEOPRT VIDEOPRT.SYS
fffffa60`00faf000 fffffa60`00fbf000   watchdog watchdog.sys
fffffa60`00fbf000 fffffa60`00fdc000   serial   serial.sys
fffffa60`00fdc000 fffffa60`00fe8000   serenum  serenum.sys
fffffa60`00fe8000 fffffa60`00ff8000   tpm      tpm.sys
fffffa60`0100c000 fffffa60`01181000   tcpip    tcpip.sys
fffffa60`01181000 fffffa60`011ad000   fwpkclnt fwpkclnt.sys
fffffa60`011ad000 fffffa60`011ba000   storflt  storflt.sys
fffffa60`011ba000 fffffa60`011e6000   CLASSPNP CLASSPNP.SYS
fffffa60`011e6000 fffffa60`011f0000   crcdisk  crcdisk.sys
fffffa60`01200000 fffffa60`01207b80   HIDPARSE HIDPARSE.SYS
fffffa60`01208000 fffffa60`01388000   Ntfs     Ntfs.sys
fffffa60`01388000 fffffa60`013cc000   volsnap  volsnap.sys
fffffa60`013cc000 fffffa60`013d4000   spldr    spldr.sys
fffffa60`013d4000 fffffa60`013e6000   mup      mup.sys
fffffa60`013e6000 fffffa60`013fa000   disk     disk.sys
fffffa60`02c00000 fffffa60`02c09000   Null     Null.SYS
fffffa60`02c09000 fffffa60`02c3a000   ndiswan  ndiswan.sys
fffffa60`02c3a000 fffffa60`02c4a000   raspppoe raspppoe.sys
fffffa60`02c4a000 fffffa60`02c68000   raspptp  raspptp.sys
fffffa60`02c68000 fffffa60`02c80000   rassstp  rassstp.sys
fffffa60`02c80000 fffffa60`02d1a000   rdpdr    rdpdr.sys
fffffa60`02d1a000 fffffa60`02d2d000   termdd   termdd.sys
fffffa60`02d2d000 fffffa60`02d3b000   kbdclass kbdclass.sys
fffffa60`02d3b000 fffffa60`02d47000   mouclass mouclass.sys
fffffa60`02d47000 fffffa60`02d48480   swenum   swenum.sys
fffffa60`02d49000 fffffa60`02d7d000   ks       ks.sys
fffffa60`02d7d000 fffffa60`02d88000   mssmbios mssmbios.sys
fffffa60`02d88000 fffffa60`02d98000   umbus    umbus.sys
fffffa60`02d98000 fffffa60`02de0000   usbhub   usbhub.sys
fffffa60`02de0000 fffffa60`02df4000   NDProxy  NDProxy.SYS
fffffa60`02df4000 fffffa60`02dfe000   Fs_Rec   Fs_Rec.SYS
fffffa60`03400000 fffffa60`03409000   hidusb   hidusb.sys
fffffa60`03409000 fffffa60`03426000   tdx      tdx.sys
fffffa60`03426000 fffffa60`03441000   smb      smb.sys
fffffa60`03441000 fffffa60`034ac000   afd      afd.sys
fffffa60`034ac000 fffffa60`034f0000   netbt    netbt.sys
fffffa60`034f0000 fffffa60`0350e000   pacer    pacer.sys
fffffa60`0350e000 fffffa60`0351d000   netbios  netbios.sys
fffffa60`0351d000 fffffa60`03538000   wanarp   wanarp.sys
fffffa60`03538000 fffffa60`03585000   rdbss    rdbss.sys
fffffa60`03585000 fffffa60`03591000   nsiproxy nsiproxy.sys
fffffa60`03591000 fffffa60`035ae000   dfsc     dfsc.sys
fffffa60`035ae000 fffffa60`035c6000   USBSTOR  USBSTOR.SYS
fffffa60`035c6000 fffffa60`035c7e00   USBD     USBD.SYS
fffffa60`035c8000 fffffa60`035e4000   cdrom    cdrom.sys
fffffa60`035e4000 fffffa60`035f2000   crashdmp crashdmp.sys
fffffa60`035f2000 fffffa60`035fc000   dump_diskdump dump_diskdump.sys
fffffa60`03800000 fffffa60`03812000   HIDCLASS HIDCLASS.SYS
fffffa60`03812000 fffffa60`0382e000   usbccgp  usbccgp.sys
fffffa60`0382e000 fffffa60`03839000   kbdhid   kbdhid.sys
fffffa60`03839000 fffffa60`03844000   mouhid   mouhid.sys
fffffa60`03844000 fffffa60`03850000   Dxapi    Dxapi.sys
fffffa60`03850000 fffffa60`03863000   monitor  monitor.sys
fffffa60`03863000 fffffa60`03885000   luafv    luafv.sys
fffffa60`03885000 fffffa60`03899000   lltdio   lltdio.sys
fffffa60`03899000 fffffa60`038b1000   rspndr   rspndr.sys
fffffa60`038b1000 fffffa60`038cf000   bowser   bowser.sys
fffffa60`038cf000 fffffa60`038e9000   mpsdrv   mpsdrv.sys
fffffa60`038e9000 fffffa60`03912000   mrxsmb   mrxsmb.sys
fffffa60`03912000 fffffa60`0395b000   mrxsmb10 mrxsmb10.sys
fffffa60`0395b000 fffffa60`0397a000   mrxsmb20 mrxsmb20.sys
fffffa60`0397a000 fffffa60`039a3000   srvnet   srvnet.sys
fffffa60`039a3000 fffffa60`039b3000   tcpipreg tcpipreg.sys
fffffa60`039b3000 fffffa60`039e5000   srv2     srv2.sys
fffffa60`04400000 fffffa60`0440b000   secdrv   secdrv.SYS
fffffa60`0440e000 fffffa60`044a8000   spsys    spsys.sys
fffffa60`044a8000 fffffa60`04547000   HTTP     HTTP.sys
fffffa60`04547000 fffffa60`045fd000   peauth   peauth.sys
fffffa60`04803000 fffffa60`04894000   srv      srv.sys
fffffa60`04894000 fffffa60`048b0000   cdfs     cdfs.sys

Unloaded modules:
fffffa60`011f0000 fffffa60`011fe000   crashdmp.sys
fffffa60`01000000 fffffa60`0100a000   dump_storpor
fffffa60`00e8e000 fffffa60`00ea7000   dump_arcsas.
fffffa60`00df3000 fffffa60`00dfe000   kbdhid.sys
fffffa60`007d7000 fffffa60`007f3000   cdrom.sys
fffffa60`00d89000 fffffa60`00da1000   IPMIDrv.sys

Show DivRaw Stack Contents

Show DivDump Header Information

Show DivStrings

Server 2:

Show DivPrimary Analysis

Crash Dump Analysis provided by OSR Open Systems Resources, Inc. (http://www.osr.com) Online Crash Dump Analysis Service See http://www.osronline.com for more information Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (8 procs) Free x64 Product: Server, suite: TerminalServer SingleUserTS Built by: 6002.18881.amd64fre.vistasp2_gdr.130707-1535 Machine Name: Kernel base = 0xfffff800`01817000 PsLoadedModuleList = 0xfffff800`019dbe30 Debug session time: Sat May 24 23:07:22.700 2014 (UTC - 4:00) System Uptime: 29 days 14:05:21.534 ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e) This is a very common bugcheck. Usually the exception address pinpoints the driver/function that caused the problem. Always note this address as well as the link date of the driver/image that contains this address. Some common problems are exception code 0x80000003. This means a hard coded breakpoint or assertion was hit, but this system was booted /NODEBUG. This is not supposed to happen as developers should never have hardcoded breakpoints in retail code, but ... If this happens, make sure a debugger gets connected, and the system is booted /DEBUG. This will let us see why this breakpoint is happening. Arguments: Arg1: ffffffffc0000005, The exception code that was not handled Arg2: fffffa6004f56188, The address that the exception occurred at Arg3: fffffa6004c7f9e8, Exception Record Address Arg4: fffffa6004c7f3c0, Context Record Address Debugging Details: ------------------ TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2 EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s". FAULTING_IP: dserverdriver+1188 fffffa60`04f56188 48894808 mov qword ptr [rax+8],rcx EXCEPTION_RECORD: fffffa6004c7f9e8 -- (.exr 0xfffffa6004c7f9e8) ExceptionAddress: fffffa6004f56188 (dserverdriver+0x0000000000001188) ExceptionCode: c0000005 (Access violation) ExceptionFlags: 00000000 NumberParameters: 2 Parameter[0]: 0000000000000000 Parameter[1]: ffffffffffffffff Attempt to read from address ffffffffffffffff CONTEXT: fffffa6004c7f3c0 -- (.cxr 0xfffffa6004c7f3c0) rax=0061006600720065 rbx=fffffa80057b2690 rcx=fffffa80057e0460 rdx=00000000000003a1 rsi=fffffa80057dca58 rdi=fffffa6004c7fd30 rip=fffffa6004f56188 rsp=fffffa6004c7fc20 rbp=0000000000000080 r8=000000000d7d0e05 r9=0000000000013393 r10=0000000000000000 r11=0000000000000000 r12=fffffa6004f780a0 r13=0000000000000000 r14=fffffa800368a690 r15=fffffa60019d5cc0 iopl=0 nv up ei ng nz na pe nc cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282 dserverdriver+0x1188: fffffa60`04f56188 48894808 mov qword ptr [rax+8],rcx ds:002b:00610066`0072006d=???????????????? Resetting default scope CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT_SERVER PROCESS_NAME: System CURRENT_IRQL: 2 ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced memory at "0x%08lx". The memory could not be "%s". EXCEPTION_PARAMETER1: 0000000000000000 EXCEPTION_PARAMETER2: ffffffffffffffff READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001a3e080 GetUlongFromAddress: unable to read from fffff80001a3e160 ffffffffffffffff FOLLOWUP_IP: dserverdriver+1188 fffffa60`04f56188 48894808 mov qword ptr [rax+8],rcx BUGCHECK_STR: 0x7E LAST_CONTROL_TRANSFER: from fffffa8038376868 to fffffa6004f56188 STACK_TEXT: fffffa60`04c7fc20 fffffa80`38376868 : 00610066`00720065 fffffa80`057b2690 fffffa60`04f77e6b fffffa80`057e0460 : dserverdriver+0x1188 fffffa60`04c7fc28 00610066`00720065 : fffffa80`057b2690 fffffa60`04f77e6b fffffa80`057e0460 fffffa80`057dca58 : 0xfffffa80`38376868 fffffa60`04c7fc30 fffffa80`057b2690 : fffffa60`04f77e6b fffffa80`057e0460 fffffa80`057dca58 0000173f`e65eb47c : 0x610066`00720065 fffffa60`04c7fc38 fffffa60`04f77e6b : fffffa80`057e0460 fffffa80`057dca58 0000173f`e65eb47c fffff800`0186505b : 0xfffffa80`057b2690 fffffa60`04c7fc40 fffffa80`057e0460 : fffffa80`057dca58 0000173f`e65eb47c fffff800`0186505b 0000173f`00000003 : dserverdriver+0x22e6b fffffa60`04c7fc48 fffffa80`057dca58 : 0000173f`e65eb47c fffff800`0186505b 0000173f`00000003 fffffa80`057b2690 : 0xfffffa80`057e0460 fffffa60`04c7fc50 0000173f`e65eb47c : fffff800`0186505b 0000173f`00000003 fffffa80`057b2690 fffffa80`00000000 : 0xfffffa80`057dca58 fffffa60`04c7fc58 fffff800`0186505b : 0000173f`00000003 fffffa80`057b2690 fffffa80`00000000 fffffa80`057dca58 : 0x173f`e65eb47c fffffa60`04c7fc60 fffffa60`04f78111 : fffffa80`057dca58 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KeWaitForSingleObject+0x2cb fffffa60`04c7fcf0 fffffa80`057dca58 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa60`04c7fd28 : dserverdriver+0x23111 fffffa60`04c7fcf8 00000000`00000000 : 00000000`00000000 00000000`00000000 fffffa60`04c7fd28 00000000`00000000 : 0xfffffa80`057dca58 SYMBOL_STACK_INDEX: 0 SYMBOL_NAME: dserverdriver+1188 FOLLOWUP_NAME: MachineOwner MODULE_NAME: dserverdriver IMAGE_NAME: dserverdriver.sys DEBUG_FLR_IMAGE_TIMESTAMP: 51b03210 STACK_COMMAND: .cxr 0xfffffa6004c7f3c0 ; kb FAILURE_BUCKET_ID: X64_0x7E_dserverdriver+1188 BUCKET_ID: X64_0x7E_dserverdriver+1188 Followup: MachineOwner ---------

Thanks in Advance!!!


Uttam

User Logged on Computer

$
0
0

Hi All,

Hope ur all doing well, is there any way to find which user is currently logged on to which computer? please tell me if there exists any simple solution in AD


Virgo

Windows Server 2008 R2 - System State Backup - Application Log: CAPI2 513

$
0
0

When performing a system state backup from wbadmin, I get...

Creating a shadow copy of the volumes specified for backup...
Creating a shadow copy of the volumes specified for backup...
Please wait while system state files to back up are identified.
This might take several minutes...
Summary of the backup operation:
------------------

The backup of the system state failed [12/15/2011 6:38 PM].
Log of files successfully backed up:
C:\windows\Logs\WindowsServerBackup\Backup-15-12-2011_18-38-05.log

Log of files for which backup failed:
C:\windows\Logs\WindowsServerBackup\Backup_Error-15-12-2011_18-38-05.log

The operation ended before completion.
The system writer is not found in the backup.

In the event log, I get...

Log Name:      Application
Source:        Microsoft-Windows-CAPI2
Date:          12/15/2011 6:38:24 PM
Event ID:      513
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      Server1.domain.com
Description: Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System Error: The parameter is incorrect. . Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" /><EventID Qualifiers="0">513</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime="2011-12-15T23:38:24.430498600Z" /><EventRecordID>144157</EventRecordID><Correlation ActivityID="{0450BC50-F800-0002-8457-553A80BBCC01}" /><Execution ProcessID="1240" ThreadID="4360" /><Channel>Application</Channel><Computer>Server1.domain.com</Computer><Security /></System><EventData><Data> Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System Error: The parameter is incorrect. </Data></EventData></Event>

The System Writer is not showing up when I view vssadmin list writers.

I have already tried every tip in the following links:

http://technet.microsoft.com/en-us/library/cc734021(WS.10).aspx

http://social.technet.microsoft.com/Forums/en-US/windowsbackup/thread/bb760434-de80-4cb6-ae9e-bd253e4b037c/

I have also run sfc /scannow and rebooted.  No luck.

I think the reason none of the tips at the above links work for me is that the System Error is NOT access denied like many others are getting, but is insteadThe parameter is incorrect.  I think that's the key.

Any ideas why I am getting this error and why my System Writer is nowhere to be found?




Volsnap Event ID: 25 and Loss of Previous Backups

$
0
0
I have a Windows Small Business Server 2008 machine being backed up using the Windows Server Backup utility.  The backups are being made to two external USB attached 1TB drives.  Each drive is rotated out weekly, meaning that one drive is attached one week, then the other drive is swapped in the following week, ad infinitum for the best part of a year.  Two backups were being made each day to the attached drive, one at 12pm and one at 9pm.

About two weeks ago it appears that one of the two drives reached capacity and began shedding the oldest backups, as confirmed by the VOLSNAP Event ID: 33 entries in the System Event log.  On the second day, however, ALL shadow copies on the attached backup driver (volume) were deleted, as confirmed by a single VOLSNAP Event ID: 25.  (See below for both Event ID message contents.)  Unfortuneately, neither events were noted until the drive was swapped out with the other drive and some how the problem was propagated to the second drive, resulting in the deletion of all shadow copies on the second drive, too. 

The end result... BOTH drives lost ALL previous backups leaving only the most recent full backup and no clue as to why it happened or how to prevent it from happening again.  Virtually no older backup file versions could be recovered.

I was under the impression that, by design, the WSB utility would only start deleting the oldest backups (on a full drive) in order to make room for the newer backups.  Granted, had I been keeping attention, I would have actually swapped out the full drives before the actually got full, so that NO data was deleted.

If I'm to continue using the Windows Server Backup utility, I need to know what happened and how to absolutely prevent it from happening again.  I never expected to loose BOTH backups at the same time, and due to budget restraints, two rotating backup drives seemed a logical solution.

Here is text from the two VOLSNAP Event ID messages found in the System Log:

Event ID: 25
Source:  volsnap
Level: Error
Description:  The shadow copies of volume \\?\Volume{93896cfc-d904-11dd-8cb5-001ec9ef572e} were deleted because the shadow copy storage could not grow in time.  Consider reducing the IO load on the system or choose a shadow copy storage volume that is not being shadow copied.

Event ID: 33
Source: volsnap
Level: Information
Description: The oldest shadow copy of volume \\?\Volume{93896cfc-d904-11dd-8cb5-001ec9ef572e} was deleted to keep disk space usage for shadow copies of volume \\?\Volume{93896cfc-d904-11dd-8cb5-001ec9ef572e} below the user defined limit.


NOTE:  Though I'm not sure if this has any bearing on the situation, the server is configured to make two snapshots a day of two volumes on the server, however, when I looked at the Shadow Copy settings I couldn't quite be sure if the VSS wasn't somehow also making snapshots on the two external drives, even though I haven't specified VSS to do so.  None show up on the two replacement drives I'm now using, so I'd say not.


Information on how to prevent this from happening again would greatly be appreciated.  (I'll be making sure no backup drive gets even close to being full from now on, that's for sure!)


Thanks,



Joseph.

wbadmin start backup -templateId:{...

$
0
0
Hi,
when I schedule a full backup on windows 2008 I find in the task scheduler following Action:

... wbadmin.exe start backup -templateId:{...GUID...} -quiet

I wonder what the option -templateId means. I tried on another machine and got a different GUID.
I wolud like to start the backup with a batch command and wanted to know if I have to use the -templateId option or not.

Thanks Franco

The Windows Server Backup services has stopped

$
0
0

Hi, my system is windows 2008 R2, I'm trying to find, but still cannot success the soltuin. Please help.

A fatal error occurred during a windows server backup snap-in (Wbadmin.msc) operation.

Error detail:

The windows server backup service has stopped.

Close Wbadmin.msc and then restart it.

RESOLVED - Backup failing on Server 2008 R2 - system writer missing

$
0
0

 

System is non production, running server 2008 enterprise (localized in Dutch).

"Bare Metal Recovery" selected, backups scheduled daily using Windows server back-up.

Backup destination is a local disk, with plenty of disk space still free.

backups running fine up and until 6 june.

At that date we installed SQL server 2008 R2 and Advantage ADS (other database server).

I recently noticed that the backups have been failing since 6/6.

Investigation performed so far :

-> error message in backup wizard : "the system writer is not found in the backup"

-> confirmed that system writer is not in the writer list when doing vssadmin list writers in a cmd box.

-> found a gazillion articles on google indicating wrong permissions on %windir%\winsxs\Filemaps\*

reference article : http://support.microsoft.com/kb/2009272

most of these also mention problems with CAPI2 (cryptographic provider) but I see no evidence of that in my application log, only event ID 517 is present, indicating error 2155347997.

I follow the article instructions anyway and update file permissions but system writer is still not listed.

Then the article mentions that Event ID 8213, indicating permission issues, might be showing, but it's NOT.

registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl is already on 1

 

-> NO log is created under C:\Windows\Logs\WindowsServerBackup\ during the backup attempt.

-> I was able to restore the winsxs\filemaps folder from the last successfull backup without any problem.
log file was created during that restore.

-> I'm not a big hero with process monitor but quickly comparing outputs to a working machine yields no obvious culprit. It's too verbose to really dig in without advanced knowledge of what you're looking for

-> using vsstrace.exe I get this output repeating over and over.
There are error messages in there but I have no idea what they mean and searching the net doesn't give me anything :

ERROR 1 CONTEXT (repeaded approx 300 times)

 

[10:14:23.075 P:150C T:1388 INCTYPEH(0256) GEN] ENTER[CVssAutomaticLock2::CVssAutomaticLock2]
[10:14:23.075 P:150C T:1388 INCTYPEH(0197) GEN] ENTER[CVssCriticalSection::Lock]
[10:14:23.075 P:150C T:1388 INCTYPEH(0197) GEN] EXIT[CVssCriticalSection::Lock] Time spent: 00:00:00-0000; total: 0; HRESULT: 0
[10:14:23.075 P:150C T:1388 INCTYPEH(0256) GEN] EXIT[CVssAutomaticLock2::CVssAutomaticLock2] Time spent: 00:00:00-0000; total: 0; HRESULT: 0
[10:14:23.075 P:150C T:1388 CORPRVMC(0363) COORD] ENTER[CVssProviderManager::GetProviderItfArrayInternal]
[10:14:23.075 P:150C T:1388 CORPRVMC(0363) COORD] EXIT[CVssProviderManager::GetProviderItfArrayInternal] Time spent: 00:00:00-0000; total: 0; HRESULT: 0
[10:14:23.075 P:150C T:1388 CORPRVMC(0468) COORD] ENTER[CVssProviderManager::GetProviderInterfaceInternal]
[10:14:23.075 P:150C T:1388 CORPRVMC(0470) COORD] CONTEXT[CVssProviderManager::GetProviderInterfaceInternal] Adding context: 'Aanroepbare interface voor deze provider verkrijgen' (0)
[10:14:23.075 P:150C T:1388 CORPRVMC(0471) COORD] CONTEXT[CVssProviderManager::GetProviderInterfaceInternal] Adding context: 'Provider-id' = '{b5946137-7b9f-4925-af80-51abd60b20d5}' (2)
[10:14:23.076 P:150C T:1388 CORPRVMC(0472) COORD] CONTEXT[CVssProviderManager::GetProviderInterfaceInternal] Adding context: 'Klasse-id' = '{00000000-0000-0000-0000-000000000000}' (2)
[10:14:23.076 P:150C T:1388 CORPRVMC(0473) COORD] CONTEXT[CVssProviderManager::GetProviderInterfaceInternal] Adding context: 'Context van snapshot' = '-1' (2)
[10:14:23.076 P:150C T:1388 CORSOFTC(0155) COORD] ENTER[CVssSoftwareProviderWrapper::AddRef]
[10:14:23.076 P:150C T:1388 CORSOFTC(0156) COORD] Provider Wrapper AddRef(00000000004006D0) 2 --> 3
[10:14:23.076 P:150C T:1388 CORSOFTC(0155) COORD] EXIT[CVssSoftwareProviderWrapper::AddRef] Time spent: 00:00:00-0000; total: 0; HRESULT: 0
[10:14:23.076 P:150C T:1388 CORSOFTC(0163) COORD] ENTER[CVssSoftwareProviderWrapper::Release]
[10:14:23.076 P:150C T:1388 CORSOFTC(0164) COORD] Provider Wrapper Release(00000000004006D0) 3 --> 2
[10:14:23.076 P:150C T:1388 CORSOFTC(0163) COORD] EXIT[CVssSoftwareProviderWrapper::Release] Time spent: 00:00:00-0000; total: 0; HRESULT: 0
[10:14:23.076 P:150C T:1388 CORSOFTC(0123) COORD] ENTER[CVssSoftwareProviderWrapper::QueryInternalInterface]
[10:14:23.076 P:150C T:1388 CORSOFTC(0128) COORD] Error while obtaining an interface interface 0x80004002
[10:14:23.076 P:150C T:1388 CORSOFTC(0123) COORD] EXIT[CVssSoftwareProviderWrapper::QueryInternalInterface] Time spent: 00:00:00-0000; total: 0; HRESULT: 0x80004002
[10:14:23.076 P:150C T:1388 CORSOFTC(0155) COORD] ENTER[CVssSoftwareProviderWrapper::AddRef]
[10:14:23.076 P:150C T:1388 CORSOFTC(0156) COORD] Provider Wrapper AddRef(00000000004006D0) 2 --> 3
[10:14:23.076 P:150C T:1388 CORSOFTC(0155) COORD] EXIT[CVssSoftwareProviderWrapper::AddRef] Time spent: 00:00:00-0000; total: 0; HRESULT: 0
[10:14:23.076 P:150C T:1388 CORPRVMC(0468) COORD] EXIT[CVssProviderManager::GetProviderInterfaceInternal] Time spent: 00:00:00-0000; total: 0; HRESULT: 0x80004002

 

Error message 1 :

[10:14:23.076 P:150C T:1388 CORSOFTC(0123) COORD] ENTER[CVssSoftwareProviderWrapper::QueryInternalInterface]
[10:14:23.076 P:150C T:1388 CORSOFTC(0128) COORD] Error while obtaining an interface interface 0x80004002

 

 

ERROR 2 CONTEXT (repeaded 7 times) :

 

[10:14:33.503 P:04A0 T:14E4 WRTWRTIC(2274) WRITER] EXIT[CVssWriterImpl::RequestWriterInfoInternal] Time spent: 00:00:00-0015; total: 0xf; HRESULT: 0
[10:14:33.505 P:150C T:1388 WRTASRWC(0183) WRITER] EXIT[CVssAsrWriterBackup::_AddComponents] Time spent: 00:00:00-0015; total: 0xf; HRESULT: 0
[10:14:33.505 P:150C T:1388 WRTASRWC(0627) WRITER] ENTER[CVssAsrWriterBackup::TranslateWriterError]
[10:14:33.505 P:150C T:1388 WRTASRWC(0628) WRITER] TranslateWriterError - 0x00000000
[10:14:33.505 P:150C T:1388 WRTASRWC(0633) WRITER] TranslateWriterError - 0x00000000
[10:14:33.505 P:150C T:1388 WRTASRWC(0627) WRITER] EXIT[CVssAsrWriterBackup::TranslateWriterError] Time spent: 00:00:00-0000; total: 0; HRESULT: 0
[10:14:33.505 P:150C T:1388 WRTASRWC(0146) WRITER] EXIT[CVssAsrWriterBackup::OnIdentify] Time spent: 00:00:00-0015; total: 0xf; HRESULT: 0

 

-> vssadmin list writers output :
vssadmin 1.1 - Opdrachtregelbeheerprogramma voor Volume Shadow Copy-service
(C) Copyright 2001-2005 Microsoft Corp.

Naam schrijver: 'Task Scheduler Writer'
 Schrijver-id: {d61d61c8-d73a-4eee-8cdd-f6f9786b7124}
 Id van schrijverinstantie: {1bddd48e-5052-49db-9b07-b96f96727e6b}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'VSS Metadata Store Writer'
 Schrijver-id: {75dfb225-e2e4-4d39-9ac9-ffaff65ddf06}
 Id van schrijverinstantie: {088e7a7d-09a8-4cc6-a609-ad90e75ddc93}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'Performance Counters Writer'
 Schrijver-id: {0bada1de-01a9-4625-8278-69e735f39dd2}
 Id van schrijverinstantie: {f0086dda-9efc-47c5-8eb6-a944c3d09381}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'ASR Writer'
 Schrijver-id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
 Id van schrijverinstantie: {7ddb5279-28d6-4f25-af34-535b05c33460}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'Shadow Copy Optimization Writer'
 Schrijver-id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
 Id van schrijverinstantie: {5c4742bd-a15c-4769-9e11-7422623c4f35}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'SqlServerWriter'
 Schrijver-id: {a65faa63-5ea8-4ebc-9dbd-a0c4db26912a}
 Id van schrijverinstantie: {6b99c086-1f34-4cb8-bea5-887846f86a75}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'Registry Writer'
 Schrijver-id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
 Id van schrijverinstantie: {7a76da99-a6f1-4b4b-85f4-5040079f6487}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'COM+ REGDB Writer'
 Schrijver-id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
 Id van schrijverinstantie: {93839243-d67d-49d2-856e-49a1ec4dc87b}
 Status: [1] Stabiel
 Laatste fout: Geen fout

Naam schrijver: 'WMI Writer'
 Schrijver-id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
 Id van schrijverinstantie: {2ae99e39-7c2c-4fbb-809a-9d42b4aba1ff}
 Status: [1] Stabiel
 Laatste fout: Geen fout

 

notice that also the BITS writer is missing, but the others seem just fine ...

-> followed instructions in this article : http://briandrab.spaces.live.com/blog/cns!B69C8C4D664E3F01!252.entry?sa=609120164

moved all files under filemaps to a different folder but that didn't work either so i just restored them.

-> I probably could restore the backup from 6/6 completely and reinstall sql + ads, but I want to find out what is happening before I do that, I find not much info on the web over what mechanism makes the writers visible exactly.
This would be a lot of work with no guarantee that things don't break again.

At this point I welcome any suggestion, but i'd like to see some arguments as to why it would be a good idea, not just try this or try that, as I'm trying to understand the whole vss setup a little better.

UPDATE : BITS writer came back in stable state after reboot, so only system writer is still missing.


Windows Server 2012 R2 Shadow Copy Issues

$
0
0

Hi Everybody,

I seem to be having an issue with a Windows 2012 R2 Server we installed back in January of 2014. This is a simple using the File Services Role & running American Contractor. When we got to run any Backup we get the following Errors in the Events under Application:
Event 12293 VSS: 

Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {89300202-3cec-4981-9171-19f59559e0f2}. Routine details Error calling Query(). [0x80042302] [hr = 0x80042302, A Volume Shadow Copy Service component encountered an unexpected error.
Check the Application event log for more information.
].

Operation:
   Query Shadow Copies

Context:
   Execution Context: Coordinator

Event 517 Backup:

The backup operation that started at '‎2014‎-‎07‎-‎25T13:46:51.470000000Z' has failed with following error code '0x8078006B' (Windows Backup failed to create the shared protection point on the source volumes.). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Events under Backup:

Event 5 Backup:

The backup operation that started at '‎2014‎-‎07‎-‎25T13:46:51.470000000Z' has failed with following error code '0x8078006B' (Windows Backup failed to create the shared protection point on the source volumes.). Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.

Details of Event 5

- System

  - Provider

   [ Name]  Microsoft-Windows-Backup
   [ Guid]  {1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}

   EventID 5

   Version 3

   Level 2

   Task 0

   Opcode 0

   Keywords 0x4000000000000000

  - TimeCreated

   [ SystemTime]  2014-07-25T13:54:26.459960500Z

   EventRecordID 555

   Correlation

  - Execution

   [ ProcessID]  3172
   [ ThreadID]  3148

   Channel Microsoft-Windows-Backup

   Computer ####.##.local

  - Security

   [ UserID]  S-1-5-18


- EventData

  BackupTemplateID {E9CC1D08-0636-4EDA-AE97-0085AE093871}
  HRESULT 0x8078006b
  DetailedHRESULT 0x8004230f
  ErrorMessage %%2155348075
  BackupState 12
  BackupTime 2014-07-25T13:53:32.668000000Z
  BackupTarget \\#####\Server_Backups\
  NumOfVolumes 5
  VolumesInfo <VolumeInfo><VolumeInfoItem Name="System Reserved" OriginalAccessPath="" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="1" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="1" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="554" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="C:" OriginalAccessPath="C:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="1" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="1" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="1576" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="E:" OriginalAccessPath="E:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="0" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="8" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="F:" OriginalAccessPath="F:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="0" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="8" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /><VolumeInfoItem Name="G:" OriginalAccessPath="G:" State="15" HResult="-2139619228" DetailedHResult="0" PreviousState="0" IsCritical="0" IsIncremental="0" BlockLevel="1" HasFiles="0" HasSystemState="0" IsCompacted="0" IsPruned="0" IsRecreateVhd="0" FullBackupReason="0" DataTransferred="0" NumUnreadableBytes="0" TotalSize="0" TotalNoOfFiles="0" Flags="8" BackupTypeDetermined="0" SSBTotalNoOfFiles="0" SSBTotalSizeOnDisk="0" /></VolumeInfo>
  SourceSnapStartTime 2014-07-25T13:53:32.694095700Z
  SourceSnapEndTime 1601-01-01T00:00:00.000000000Z
  PrepareBackupStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  PrepareBackupEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  BackupWriteStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  BackupWriteEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  TargetSnapStartTime 1601-01-01T00:00:00.000000000Z
  TargetSnapEndTime 1601-01-01T00:00:00.000000000Z
  DVDFormatStartTime <TimesList></TimesList>
  DVDFormatEndTime <TimesList></TimesList>
  MediaVerifyStartTime <TimesList></TimesList>
  MediaVerifyEndTime <TimesList></TimesList>
  BackupPreviousState 2
  ComponentStatus <ComponentStatus></ComponentStatus>
  ComponentInfo <ComponentInfo></ComponentInfo>
  SSBEnumerateStartTime 1601-01-01T00:00:00.000000000Z
  SSBEnumerateEndTime 1601-01-01T00:00:00.000000000Z
  SSBVhdCreationStartTime 1601-01-01T00:00:00.000000000Z
  SSBVhdCreationEndTime 1601-01-01T00:00:00.000000000Z
  SSBBackupStartTime 1601-01-01T00:00:00.000000000Z
  SSBBackupEndTime 1601-01-01T00:00:00.000000000Z
  SystemStateBackup <SystemState IsPresent="1" HResult="-2139619299" DetailedHResult="-2147212529" />
  BMR <BMR IsPresent="1" HResult="-2139619228" DetailedHResult="0" />
  VssFullBackup false
  UserInputBMR true
  UserInputSSB true
  BackupSuccessLogPath
  BackupFailureLogPath
  EnumerateBackupStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  EnumerateBackupEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  PruneBackupStartTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  PruneBackupEndTime <TimesList><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /><Time Time="1601-01-01T00:00:00.000Z" /></TimesList>
  BackupFlags 0x9
  ComponentInfoSummary <ComponentInfoSummary ComponentInfoArrayPresent="1" TotalComponents="0" SucceededComponents="0" /> 

Our VSSAdmin Writers after a backup:

vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2013 Microsoft Corp.

Writer name: 'Task Scheduler Writer'
   Writer Id: {d61d61c8-d73a-4eee-8cdd-f6f9786b7124}
   Writer Instance Id: {1bddd48e-5052-49db-9b07-b96f96727e6b}
   State: [1] Stable
   Last error: No error

Writer name: 'VSS Metadata Store Writer'
   Writer Id: {75dfb225-e2e4-4d39-9ac9-ffaff65ddf06}
   Writer Instance Id: {088e7a7d-09a8-4cc6-a609-ad90e75ddc93}
   State: [1] Stable
   Last error: No error

Writer name: 'Performance Counters Writer'
   Writer Id: {0bada1de-01a9-4625-8278-69e735f39dd2}
   Writer Instance Id: {f0086dda-9efc-47c5-8eb6-a944c3d09381}
   State: [1] Stable
   Last error: No error

Writer name: 'System Writer'
   Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Instance Id: {ec6cb111-fafe-49fb-8b87-edf2e5445226}
   State: [5] Waiting for completion
   Last error: No error

Writer name: 'ASR Writer'
   Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
   Writer Instance Id: {ad70bb46-b270-4963-a88d-f3b4d56ecc5b}
   State: [1] Stable
   Last error: No error

Writer name: 'COM+ REGDB Writer'
   Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
   Writer Instance Id: {a264053a-aa55-4fdc-9575-89ae26caaa30}
   State: [1] Stable
   Last error: No error

Writer name: 'Shadow Copy Optimization Writer'
   Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Instance Id: {4f3e1a45-61c0-49f2-9db0-2f4dc724e357}
   State: [1] Stable
   Last error: No error

Writer name: 'Registry Writer'
   Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Instance Id: {aef6ca03-ea93-403e-a01c-72763738c077}
   State: [1] Stable
   Last error: No error

Writer name: 'WMI Writer'
   Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
   Writer Instance Id: {9149705d-e232-4339-a0b3-3c871832ff42}
   State: [5] Waiting for completion
   Last error: No error


I have struggled with this for awhile and I would appreciate any help possible. Thank You. 



WSB on Server 2012 - ID 517 error 0x80070001 on system state

$
0
0

Hi,

i've setup Windows server Backup on a Windows server 2012 standard (which is a Domain Controler) to do a complete backup on a external hard drive.

During the backup, all go well until system state backup. It fail with the following error in the event log (event id 517) : 0x80070001 (invalid function)

after some research, i found that log :

Version=1
EventType=Windows Server Backup Error
EventTime=130475424208827903
Consent=1
ReportIdentifier=3d8a7e6a-f6a8-11e3-941f-d6db6bcd8e80
Response.type=4
Sig[0].Name=Backup Target Type
Sig[0].Value=3
Sig[1].Name=Operation Type
Sig[1].Value=1
Sig[2].Name=Overall hr
Sig[2].Value=0x80070001
Sig[3].Name=Overall Detailed hr
Sig[3].Value=0x00000000
Sig[4].Name=BMR hr
Sig[4].Value=0x00000000
Sig[5].Name=SSB hr
Sig[5].Value=0x8078001d
Sig[6].Name=Volume Backup hr
Sig[6].Value=0x00000000
Sig[7].Name=Application Backup hr
Sig[7].Value=0x00000000
DynamicSig[1].Name=Version du système
DynamicSig[1].Value=6.2.9200.2.0.0.272.7
DynamicSig[2].Name=Identificateur de paramètres régionaux
DynamicSig[2].Value=3084
FriendlyEventName=Windows Server Backup Error
ConsentKey=Windows Server Backup Error
AppName=Exécutable du service de moteur de sauvegarde en mode bloc Microsoft®
AppPath=C:\Windows\System32\wbengine.exe
ReportDescription=Windows Server Backup Error Report

System State Backup return error 0x8078001d. 

I've google a lot about these errors but nothing concerning Windows Server 2012.

VSS Writers does not show any errors (using vssadmi nlist writers)

No disk error anywhere in the event viewer.

I've also check the "JUNCTION" issue (mostly known in Win 7 and Win server 2008 r2) but none of them are "mounted drive" so ...

I'm really runing out of idea ...

EDIT : 

No updates are applyed to the machine.

will try with updates ...

EDIT :

even with the last Windows updates, i keep get the same error

Windows Server Backup Fails - "The system cannot find the file specified"

$
0
0
I am using Server 2008 Enterprise on a PowerEdge 2900.  I have used Windows Server Backup since March to take care of data backups for both the system and storage drives.

The system drive completes at 100% (around 17GB) but the storage drive receives an error of "The system cannot find the file specified" with the following information in the Event Log:

Log Name:      Application
Source:        Microsoft-Windows-Backup
Date:          7/22/2009 10:47:53 AM
Event ID:      519
Task Category: None
Level:         Error
Keywords:
User:          SYSTEM
Computer:      FCSERVER2.Fellowship.local
Description:
The description for Event ID 519 from source Microsoft-Windows-Backup cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

EV_RenderedValue_0.00
F:
2147942402
%%2147942402

The locale specific resource for the desired message is not present

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><System><Provider Name="Microsoft-Windows-Backup" Guid="{1db28f2e-8f80-4027-8c5a-a11f7f10f62d}" /><EventID>519</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime="2009-07-22T14:47:53.948Z" /><EventRecordID>31560</EventRecordID><Correlation /><Execution ProcessID="1260" ThreadID="4248" /><Channel>Application</Channel><Computer>FCSERVER2.Fellowship.local</Computer><Security UserID="S-1-5-18" /></System><EventData><Data Name="BackupTime">2009-07-22T14:32:35.872Z</Data><Data Name="FailedVolumeNames">F:</Data><Data Name="ErrorCode">2147942402</Data><Data Name="ErrorMessage">%%2147942402</Data></EventData></Event>
The backup has failed after as little as 7.13GB or as much as 128GB out of 375GB total.

It seems that the only information I can obtain is the simply "The system cannot find the file specified".

Thanks,
Matthew Dillon

7z is not supported archive

$
0
0

Dear All please help

i am trying a backup  full and differential backup using the following command

to full backup

7za a c:\archive.7z  c:\folder_to_archive

Then for the differential:

7za u c:\archive.7z  c:\folder_to_archive  -ms=off -mx=9 -t7z -u- -up0q3r2x2y2z0w2!c:\diff1.7z

but i am having an error when executing the differential says:

Backup.7z is not supported archive

my backup is 50Gb and i tried the command with a small file size the differential works fine but with the bigger archive I got the error message

please help

thanks

Modify Windows Server Backup Schedule - label syntax incorrect

$
0
0

Hi. I have recently discovered that when you use the Windows Server Backup wizard and select "full" backup, you don't actually get a full backup i.e. no Baremetal or System State (nice one Microsoft!!).

Thus, I have been trying to modify the schedule via wbadmin in powershell. When I try and add BareMetal to the schedule via add-WBBareMetalRecovery I get the error "The filename, directory name, or volume label syntax is incorrect".

I was familiar with this error when trying to add disks through the GUI when not all the backup destinations were present, but I had no idea that this occurred when trying to modify the schedule in any way shape or form?

Please could you confirm as to whether this is the case or not please? If so I really do find this truly shocking!!!

Many thanks,

Dug.

 
Viewing all 274 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>