locked
System State Backup on Windows 2008 RRS feed

  • Question

  •  

    Greetings,

     

    I am attempting to run a system state backup of my fresh install of Windows 2008 WEB Edition RTM. However, it is not successful - anyone run into this issue, I am not able to find any info on the web:

     

    C:\>wbadmin start systemstatebackup -backupTarget:E:
    wbadmin 1.0 - Backup command-line tool
    (C) Copyright 2004 Microsoft Corp.

    Starting System State Backup [2/12/2008 1:00 PM]
    Retrieving volume information...

    This would backup the system state from volume(s) Local Disk(CSmile to E:.
    Do you want to start the backup operation?
    Yes Yes No No y

    Creating the shadow copy of volumes requested for backup.

    Summary of backup:
    ------------------

    Backup of system state failed [2/12/2008 1:00 PM]

    Log of files successfully backed up
    'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup 12-02-2008 13-00-03.log'

    Log of files for which backup failed
    'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup_Error 12-02-2008 13-00-03
    .log'

    System writer is not found in the backup.

    C:\>

     

    The log files created above are empty.

     

    Event logs state the same error - System Writer is not found in the backup:

    Log Name:      Application
    Source:        Microsoft-Windows-Backup
    Date:          2/12/2008 12:46:03 PM
    Event ID:      517
    Task Category: None
    Level:         Error
    Keywords:     
    User:          SYSTEM
    Computer:      XXXXXXXXXXXXXXXXX
    Description:
    Backup started at '2/12/2008 5:45:54 PM' failed with following error code '2155348226' (System writer is not found in the backup.). Please rerun backup once issue is resolved.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Backup" Guid="{1db28f2e-8f80-4027-8c5a-a11f7f10f62d}" />
        <EventID>517</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2008-02-12T17:46:03.036Z" />
        <EventRecordID>315</EventRecordID>
        <Correlation />
        <Execution ProcessID="7328" ThreadID="11184" />
        <Channel>Application</Channel>
        <Computer>XXXXXXXXXXX</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="BackupTime">2008-02-12T17:45:54.939Z</Data>
        <Data Name="ErrorCode">2155348226</Data>
        <Data Name="ErrorMessage">%%2155348226</Data>
      </EventData>
    </Event>

    Tuesday, February 12, 2008 6:12 PM

Answers

  • Hello,

     

    I can't reproduce the same situation. The following is an article on how to get detailed information about this error. Please refer to the following link and follow the "Resolve" steps.

     

    Event ID 517 — Backup Operations:

    http://technet2.microsoft.com/windowsserver2008/en/library/812d148b-72a7-49c6-9f66-57f570a85a131033.mspx?mfr=true

     

    Besides, you can use vssadmin command-line tool to check if anything was wrong with the "System Writer".

     

    You can use vssadmin as this: type "vssadmin list writers" in a command prompt.

     

    If possible, reinstall the Windows Server Backup Feature and rerun wbadmin with another backup target location to see if the same error remains.

     

    Please let me know the results.

     

    Here are some information about the limitations when you use wbadmin to backup the system state:

     

    1.       The backup target cannot be a tape device or a mapped drive.

     

    2.       Ensure that the target volume does not contain any shadow copy prior to backup starting.

     

    I look forward to your reply.

     

    Best regards,

    Chang Yin

    Microsoft Online Community Support

    Wednesday, February 13, 2008 1:43 PM

All replies

  • Hello,

     

    I can't reproduce the same situation. The following is an article on how to get detailed information about this error. Please refer to the following link and follow the "Resolve" steps.

     

    Event ID 517 — Backup Operations:

    http://technet2.microsoft.com/windowsserver2008/en/library/812d148b-72a7-49c6-9f66-57f570a85a131033.mspx?mfr=true

     

    Besides, you can use vssadmin command-line tool to check if anything was wrong with the "System Writer".

     

    You can use vssadmin as this: type "vssadmin list writers" in a command prompt.

     

    If possible, reinstall the Windows Server Backup Feature and rerun wbadmin with another backup target location to see if the same error remains.

     

    Please let me know the results.

     

    Here are some information about the limitations when you use wbadmin to backup the system state:

     

    1.       The backup target cannot be a tape device or a mapped drive.

     

    2.       Ensure that the target volume does not contain any shadow copy prior to backup starting.

     

    I look forward to your reply.

     

    Best regards,

    Chang Yin

    Microsoft Online Community Support

    Wednesday, February 13, 2008 1:43 PM
  •  

    Hi Chang,

     

    I re-installed the windows backup server feature and all started to work fine.

     

    Thanks

    Derek

    Thursday, February 28, 2008 1:23 AM
  • Hello, we have the same problem in our DC running server 2008 standard.

     

    C:\Windows\system32>wbadmin start systemstatebackup -backupTarget:E:
    wbadmin 1.0 - Backup command-line tool
    (C) Copyright 2004 Microsoft Corp.

    Starting System State Backup [22.4.2008 17:49]
    Retrieving volume information...

    This would backup the system state from volume(s) Local Disk(CSmile to E:.
    Do you want to start the backup operation?
    Yes Yes No No y

    Creating the shadow copy of volumes requested for backup.
    Creating the shadow copy of volumes requested for backup.
    Identifying system state files to backup (This may take a few minutes)...

    Summary of backup:
    ------------------

    Backup of system state failed [22.4.2008 17:49]

    Log of files successfully backed up
    'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup 22-04-2008 17-49-14.log'

    Log of files for which backup failed
    'C:\Windows\Logs\WindowsServerBackup\SystemStateBackup_Error 22-04-2008 17-49-14.log'

    System writer is not found in the backup.

     

     

    C:\Windows\system32>vssadmin list writers
    vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
    (C) Copyright 2001-2005 Microsoft Corp.

    Writer name: 'FRS Writer'
       Writer Id: {d76f5a28-3092-4589-ba48-2958fb88ce29}
       Writer Instance Id: {70cf204e-e6ce-4b0c-967e-ce5c1c0094a8}
       State: [1] Stable
       Last error: No error

    Writer name: 'ASR Writer'
       Writer Id: {be000cbe-11fe-4426-9c58-531aa6355fc4}
       Writer Instance Id: {926230f7-2260-4960-8343-f458093b71f5}
       State: [1] Stable
       Last error: No error

    Writer name: 'Registry Writer'
       Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
       Writer Instance Id: {217ff076-e02a-4e99-8694-75173765c212}
       State: [1] Stable
       Last error: No error

    Writer name: 'Shadow Copy Optimization Writer'
       Writer Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
       Writer Instance Id: {c16b0845-90da-479b-8e15-9f48bd23a181}
       State: [1] Stable
       Last error: No error

    Writer name: 'COM+ REGDB Writer'
       Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
       Writer Instance Id: {b1c9dd4e-4651-4b48-bd53-10734ecc1467}
       State: [1] Stable
       Last error: No error

    Writer name: 'NTDS'
       Writer Id: {b2014c9e-8711-4c5c-a5a9-3cf384484757}
       Writer Instance Id: {a79ba514-d62a-4a62-89ef-f21c098d4764}
       State: [1] Stable
       Last error: No error

    Writer name: 'WMI Writer'
       Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
       Writer Instance Id: {0e4973c4-6334-423d-a655-d1f00eec9be3}
       State: [1] Stable
       Last error: No error

    Writer name: 'BITS Writer'
       Writer Id: {4969d978-be47-48b0-b100-f328f07ac1e0}
       Writer Instance Id: {ffeec840-552f-469d-81f5-22a53432e70e}
       State: [1] Stable
       Last error: No error


    C:\Windows\system32>

     

    All this after I reinstall server backup feature.

     

    Any ideas?

     

    I thin maybe bad security wizard, but I have server backup allowed.

    Shadow copies - I have 3 primary partitions on 1 physical HDD, shadow copies are on the same volumes.

     

    EDIT:

    I found these errors in application event log:
    ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
    Log Name:      Application
    Source:        VSS
    Date:          28.4.2008 16:17:03
    Event ID:      12289
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      *
    Description:
    Volume Shadow Copy Service error: Unexpected error NetGroupGetUsers().  hr = 0x80070005.

    Operation:
       Initializing Writer

    Context:
       Writer Class Id:

    {e8132975-6f93-4464-a53e-1050253ae220}
       Writer Name: System Writer
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="VSS" />
        <EventID Qualifiers="0">12289</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2008-04-28T14:17:03.000Z" />
        <EventRecordID>1017</EventRecordID>
        <Channel>Application</Channel>
        <Computer>*</Computer>
        <Security />
      </System>
      <EventData>
        <Data>NetGroupGetUsers()</Data>
        <Data>0x80070005</Data>
        <Data>

    Operation:
       Initializing Writer

    Context:
       Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
       Writer Name: System Writer</Data>
       

    <Binary>2D20436F64653A20534543534543524330303030323433392D2043616C6C3A20534543534543524330303030323333302D205049443A202030303030313232342D205

    449443A202030303030313735362D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E657865202D6B204E6574776F726B53657276696365

    202020202020202D20557365723A204E5420415554484F524954595C4E4554574F524B2053455256494345202020202D205369643A2020532D312D352D32302D204572726F72

    3A4E657447726F757047657455736572732829202020202020</Binary>
      </EventData>
    </Event>


    Log Name:      Application
    Source:        Microsoft-Windows-CAPI2
    Date:          28.4.2008 16:17:03
    Event ID:      512
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      *
    Description:
    The Cryptographic Services service failed to initialize the VSS backup "System Writer" object.

    Details:
    System Writer object failed to initialize VSS.

    System Error:
    Catastrophic failure
    .
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
        <EventID Qualifiers="49154">512</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2008-04-28T14:17:03.000Z" />
        <EventRecordID>1018</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>Application</Channel>
        <Computer>*</Computer>
        <Security />
      </System>
      <EventData>
        <Data>

    Details:
    System Writer object failed to initialize VSS.

    System Error:
    Catastrophic failure
    </Data>
      </EventData>
    </Event>

     

    Can I be sure, when backup Domain Controller by using the GUI

    (http://technet2.microsoft.com/windowsserver2008/en/library/320d7bbd-2b4d-4a4f-8e54-17918f383f231033.mspx?mfr=true) will be active directory really backed up?

     

    Thanks!

    Tuesday, April 22, 2008 4:08 PM
  • Hi Lukval,

    I had the same situation, with the backup. In my case the problem was an incorrect permission on the windows\winsxs\filemaps folder.
    So, correct permissions for %windir%\winsxs\filemaps folder:

    I gave to the domain administrators + trustedinstaller +system a full controll permission plus I replaced the inheritable permissions, so all the files inherited this settings from the filemaps folder. After the wsbackup correctly worked...
    I hope I could help!

    Regards,
                Balazs Seprenyi (MCSE, MCSA,....)

    • Proposed as answer by Jbadge Saturday, February 19, 2011 7:30 PM
    Sunday, October 25, 2009 9:32 AM
  • open cmd in run as Administrator mode and run the following command

     VSSADMIN LIST WRITERS

    you will be one step near to find the issue.
    Thursday, February 11, 2010 3:36 PM