Recovery Point/Consistency Check fails when protecting file server containg encrypted folders RRS feed

  • Question

  • We are running DPM2016 (UR4) installed on windows server 2016, protecting a Windows 2016 file server (item level backup using agent installed on the file server).

    We were having difficulties getting the backup working successfully, and after some troubleshooting we discovered that there are folders on the file server, where in the properties of the folder, under Advanced, the "Encrypt Contents to secure data" option was selected.

    Looking further through the agent log file, we found the following lines:

    2E38    0170    03/20    05:47:42.033    18    efshelper.cpp(790)    [000002003C9371E0]        WARNING    Failed: Hr: = [0x80070001] : ReadEncryptedFileRaw failed to Read encrypted stream: lVal : hr
    2E38    26A0    03/20    05:47:42.049    18    filereader.cpp(142)    [000002003C7FFBE0]    EDC15A93-A4F3-4616-9CE1-1111E9A20E40    WARNING    CFileReaderBase Debug Information Start ----------------------------------------------------
    2E38    26A0    03/20    05:47:42.049    18    filereader.cpp(143)    [000002003C7FFBE0]    EDC15A93-A4F3-4616-9CE1-1111E9A20E40    WARNING    Failed on file \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy237\FolderName\SubFolderName\SubfolderName\EncryptedFolderName\ (handle: 0x0, OwnHandle: true, IsDir: true, FileSize: 0 bytes)

    Since it was unclear why the encryption was enabled for these folders, removing this setting enabled a successfull consistency check to run.

    Tried to research support for encrypted files/folders, but was unable to find much on this. Has anybody come across this? Is it a bug or a feature? 

    Thanx for any input!

    Tuesday, March 20, 2018 12:40 PM


  • Housekeeping - closing old post.

    DPM does support protecting NTFS Encrypted files, however it could be they also contained another attribute that isn't supported when used in combination. 

    Files with any of the following combinations of attributes cannot be protected.

    Encryption and reparse
    Encryption and Single Instance Storage (SIS)
    Encryption and case-sensitivity
    Encryption and sparse
    Case-sensitivity and SIS
    Compression and SIS

    Mike Jacquet

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights.

    Monday, January 6, 2020 8:43 PM