Quantcast
Channel: Backup – Windows and Windows Server forum
Viewing all 3323 articles
Browse latest View live

Can Windows Backup or some other Data Backup Software recover a file by date

$
0
0

Hi,

Can anyone recommend Data Backup Software that has the ability to enter a date, and will allow you to browse a directory structure for that date, and allow you to view/recover files which existed at that date?

 

Can Windows Backup do this?

By this I mean…

the Data Backup Software makes periodic (or real time) backups of all your files and folders within My Documents… to an external hard drive.

 

And let’s say that you want to recover a file which was deleted at some stage… or even a version of a file that was deleted.

 

That one can enter any date (in the past since the backup software was running), and search back for the file version that existed on that date… ideally by being able to view a directory structure for that date showing all the files that existed back then.  And recover any file on an individual rather than having to recover a large zipped file of some date.



Ideally so that one could enter the date without specifying what file one is looking for... and just browse the directory structure and files that existed at that date. 



For many of the Data Backup Software application, I often see good descriptions about all the setting one can use to run the backups… but very little description on how to go about searching for deleted files and how to recover a file that one is searching for.

 

Any suggestions?

 

Thanks in Advance.

Dave


Server 2019 - Backup Completes With Errors - Volume Backup Failed

$
0
0

When doing a bare metal backup of Windows Server 2019 Standard, I get a completed with warnings status. When looking at the "View list of all failed files", I see the following: "Backup of volume\\?\Volume{20912232-1c6d-4233-a28d-16211a55924b}\ has failed. The volume contains system data but is not included in the backup configuration." In Disk Management, the partition shows healthy. This volume is the OEM partition on Disk 0. This error just started after upgrading the server from 2012R2.

Any suggestions as to how to resolve this error so that the back can complete normally?

JKS

Why do all my backup copies disappear when the disk reaches capacity?

$
0
0

Windows Server 2016 running Exchange 2016.  Windows Server Backup does a Full backup every night.

I check the backups every Thursday.  Last week it had 20-copies and this week it has 1-copy.  This has happened 3-times now.  It resets back to one instead of deleting older copies to make room.

What's going on?

Thank you in advance!

Event ID 55 - A corruption was discovered in the file system structure on volume

$
0
0

Hi guys, 

I have two failover clusters with three nodes (based on Windows Server 2019) in each cluster. 

Virtual machines are protected by means of Altaro Backup. 

After continuous period of warnings generated by Altaro Backup it has been found in both Windows System log and Altaro backup log that some volume (which obviously Altaro backup refers to) MFT contains corrupted file record.

A corruption was discovered in the file system structure on volume \\?\Volume{8a4d749a-3081-4ba5-a001-c70bb335c2de}.

The Master File Table (MFT) contains a corrupted file record.  The file reference number is 0x1000000029104.  The name of the file is "<unable to determine file name>".

2019-11-05 02:39:30.037 0059 BackupMilestoneProvider.ScanEventLog    : Suspicious record: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Ntfs' Guid='{dd70bc80-ef44-421b-8ac3-cd31da613a4e}'/><EventID>55</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2019-11-04T13:41:03.583214500Z'/><EventRecordID>491689</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='25808'/><Channel>System</Channel><Computer>hvhost01.company.com</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DriveName'>\\?\Volume{8a4d749a-3081-4ba5-a001-c70bb335c2de}</Data><Data Name='DeviceName'>\Device\HarddiskVolume9415</Data><Data Name='CorruptionState'>0x0</Data><Data Name='HeaderFlags'>0x922</Data><Data Name='Severity'>Critical</Data><Data Name='Origin'>File System Driver</Data><Data Name='Verb'>Bad FRS</Data><Data Name='Description'>The Master File Table (MFT) contains a corrupted file record.  The file reference number is 0x1000000029104.  The name of the file is "&lt;unable to determine file name&gt;".
</Data><Data Name='Signature'>0x504df163</Data><Data Name='Outcome'>Read Only Volume</Data><Data Name='SampleLength'>0</Data><Data Name='SampleData'></Data><Data Name='SourceFile'>0x1</Data><Data Name='SourceLine'>1250</Data><Data Name='SourceTag'>203</Data><Data Name='AdditionalInfo'>0xd00000a2</Data><Data Name='CallStack'>Ntfs+0x11e86, Ntfs+0x1710f4, Ntfs+0x15374f, Ntfs+0x15fec1, Ntfs+0xf3d56, Ntfs+0x19a5e, ntoskrnl+0x5d11a, ntoskrnl+0x1216c5, ntoskrnl+0x1b849c</Data></EventData></Event>
2019-11-05 02:39:30.037 0059 BackupMilestoneProvider.ScanEventLog    : Suspicious record: <Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'><System><Provider Name='Ntfs' Guid='{dd70bc80-ef44-421b-8ac3-cd31da613a4e}'/><EventID>55</EventID><Version>0</Version><Level>2</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime='2019-11-04T13:41:16.366578900Z'/><EventRecordID>491714</EventRecordID><Correlation/><Execution ProcessID='4' ThreadID='26308'/><Channel>System</Channel><Computer>hvhost01.company.com</Computer><Security UserID='S-1-5-18'/></System><EventData><Data Name='DriveName'>\\?\Volume{8a4d749a-3081-4ba5-a001-c70bb335c2de}</Data><Data Name='DeviceName'>\Device\HarddiskVolume9420</Data><Data Name='CorruptionState'>0x0</Data><Data Name='HeaderFlags'>0x922</Data><Data Name='Severity'>Critical</Data><Data Name='Origin'>File System Driver</Data><Data Name='Verb'>Bad FRS</Data><Data Name='Description'>The Master File Table (MFT) contains a corrupted file record.  The file reference number is 0x1000000029104.  The name of the file is "&lt;unable to determine file name&gt;".

I went through the thread below:

https://social.technet.microsoft.com/Forums/ie/en-US/510db7df-35cf-4e20-a1fd-23bdb934712c/event-55-ntfs-the-file-system-structure-on-the-disk-is-corrupt-and-unusable?forum=winservergen

https://social.technet.microsoft.com/Forums/windowsserver/en-US/5cbed1b1-63e3-4c15-8fff-b48746d5ba44/2008r2-backup-causing-event-55-ntfs-errors?forum=windowsbackup

Found no shadow copies. Also, not sure if chkdsk would shed some light if I run it. 

Is there anything else worth to try?

Error in backup of C:\windows\\systemroot\ during enumerate: Error [0x8007007b] The filename, directory name, or volume label syntax is incorrect

$
0
0

Error received when attempting to run system state backup with WBAdmin utility:  Error in backup of C:\windows\\systemroot\ during enumerate:  Error [0x8007007b] The filename, directory name, or volume label syntax is incorrect.

Windows Server 2016 Standard running on VMware ESXi 6.5.0 build-8935087 (VMKernel Release 6.5.0) which runs on a Dell PowerEdge R740.  I have tried using the VMware PowerCLI to set the vsock registry image path, but it is already selected correctly it reports.  Please assist!

كيفية اعاده ملفات النسخه السابقه من ويندوز 10

$
0
0

نحن شركة جولد ماستر 

لدينا مشكلة في الكمبيوتر الخاص بالشركة تم عمل نسخه جديده من ميكروسوفت ويندوز 10 وتم حذف ملفات هامه نريد حل لإرجاع الملفات مره اخري 


Robocopy performance to NAS CIFS with backup mode

$
0
0

I am using robocopy to replicate various data on multiple local storage devices to my home Synology DS218+ NAS. I noticed that throughput for large (multi GB) files was significantly slower than what is achieved through Windows explorer. With Explorer, reads and writes of large files would usually be around 113MB/s (~900Mbps) for the duration of the transfer. With robocopy, based on what I could see from Windows performance monitor, and verified with the NAS management console, reads and writes of large files (multi GB) would usually be around 40MB to 50MB/s (~300-400Mbps). The /mt option had no impact, as expected (since it would generally translate to improved performance with multiple smaller transfers) on throughput. Neither did the /j (unbuffered I/O) switch affect throughput. As the scripts and task schedule I had put in place were working well, I was about ready to give up on the performance discrepancy and say "Ah, it works. Good enough." but I just had to figure it out. After multiple trial-and-error runs, it turns out it's the /B switch. If I simple remove /B (which has the added benefit of not needing to be run with administrator privileges) performance is unleashed back to the full 900Mbps+ and even a little faster than Explorer. Any ideas why backup mode would negatively impact performance on large file transfers so much? Just for the additional info, this is effectively the cmd line I'm using, though not exactly because I am use job (rcj) files to keep things more tidy:

robocopy "E:\" "\\NAS\backup\E-Drive" /MIR /A-:SH /FFT /SL /XJD /R:1 /W:3 /LOG+:output.log /NDL /TEE /NP

Backup Fails intermittently and Causes DPC Watchdog Error BSOD

$
0
0
We're a small non profit and have an HP Proliant ML350 Gen9 that is running Windows 2016 Server and hosting two VMs also running Win 2016 Server.  For approximately 6 months Windows Server Backup was running a scheduled full backup every morning with no issues.  Following a Windows update the backups started to crash the host with a DPC Watchdog BSOD.  Initially I swapped out one of the two USB Drives I was using for the backup.  Success for a week or so and then the same problem returned. It would crash during the backup (and the backup would fail).  If I swap out drives (or apply updates) it then sometimes works again for a while but then usually starts the crashes again.

I then replaced both USB Drives which again solved the problem temporarily but then it returned.  In analyzing the Dump files as best I am able there does not appear to be any one driver or file that is causing the problem.  It appears to timeout at different times and crash with the dump files indicating different offending modules.  This is an example of two:

Error: DPC_TIMEOUT_TYPE:  SINGLE_DPC_TIMEOUT_EXCEEDED
Crashed: PROCESS_NAME:  System
Caused: 
MODULE_NAME: vmswitch
IMAGE_NAME:  vmswitch.sys

13th Crash:
Error: DPC_TIMEOUT_TYPE:  DPC_QUEUE_EXECUTION_TIMEOUT_EXCEEDED
Crashed: PROCESS_NAME:  svchost.exe
Caused: 
MODULE_NAME: nt
IMAGE_NAME:  ntkrnlmp.exe   

HP insists that it is not a hardware issue with the controller.  I believe I have gone through and updated all relevant drivers.

Recently I adjusted the backup to only include our data files and excluded the Hyper V machines as well as system State and Bare metal.  This backup completed.  

Any suggestions or ideas as to what I could try next?  Is there more information that would help in diagnosing the problem?

Thanks,
Byron

Looking to monitor Shadow Copy daily volume backups

$
0
0

This is weirdly trickier than it seems, or should be.

What I mean by this is:

We enable default Shadow Copy backup settings on server volumes, letting it run at the default 7am and 12pm.  Other backups on the servers are running, of course, but this is a first level convenience for when people accidentally delete a file/folder, and useful against a share getting crypto'd.

But occasionally I have seen it where the Shadow Copy volume setup just stops, for no apparent reason.  Over the years I've been checking in manually to confirm it's running and I can see twice-daily backups, but it would be much better to automate this in some way.

Unfortunately it doesn't look like Event IDs are anything to go with.  System logs mentioning the VSS service (7036) happen all the time.  And while I found a number of good Event IDs in the Application logs (between 2001 and 2006) showing starting and successful completion of Shadow copy instances, these trigger for things like Windows Server Backup, and don't trigger for the 7am/12pm automatic Shadow Copy saves.

I assume there is a way to make this happen with complex scripting, but that's outside my wheelhouse, and through searches I haven't been able to find exactly what I'm looking for.  Optimally something that can run as a scheduled task, check and log what "previous versions" exist, and send an email if it doesn't see any that should exist within the past 24-48 hours.

Does anyone have any ideas?  Or know of a software tool that does explicitly monitor and inform about this?

Windows Backup Not Able to Recover Redirected Folders

$
0
0

Hello,

I have been doing a full system backup on a SBS 2011 using the Windows 2008R2 backup and the backups show complete. Today I went to look for a file in a redirected folder and the restore is blank. Apparently due to permissions. My questions are:

1. Why does Windows backup Show completed and give a false sense of security if it's skipping the redirected folders instead of displaying a directory not accessible error?

2. Does Backup run under LocalSystem, Administrator, the user that created the backup? Who do I have to grant access to user's desktop and Documents so that backup will back them up?

3. If the backups run under SYSTEM and the files have been backed up, how do I recover a file from a user's desktop folder?


Miguel Fra | Falcon IT Services, Miami, FL
SharePoint Site | Joomla Site | Knowledgebase

 

Moving backups

$
0
0
I would like to move a Windows Server Backup files from an iSCSI drive, to a shared folder. Is it possible? I would like to have all of my servers backuped to one drive (for easier management and further replication of that driive).

Fail Start

$
0
0
Greetings,

After installing the latest 10 updates for windows 2008 Server R2, Windows only enters recovery mode, but has no restore image.

Any quick and urgent tips?

Thanks

VMware quiesced snapshot on Windows VM's generates NTFS events in the event logs

$
0
0

We have been trying to find out why a VMware quiesced snapshot generates event ID's 50, 137 and 150 on all windows 2008 R2 and 2012 R2 servers. The KB below from VMware shows this as an issue but offers no solution and said it is a Microsoft issue. Also the links for solutions from Microsoft are old and outdated.

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2006849

I need to find a fix to allow quiesced backup jobs to run on my VM's

Thank you

Chris


Chris A. DeFortuna Systems Solution, Inc

Volume Shadow Copy Service error: Unexpected error calling routine CreateFileW

$
0
0

I have a problem and i cant fixed it, anyone can help me ?

Microsoft Windows Server 2012 R2 Standard

This is the issue what i have:

Log Name:      Application
Source:        VSS
Date:          20-3-2019 06:44:56
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      xxxx.xxx.lan
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CreateFileW(\\.\PHYSICALDRIVE1) - BuildLunInfoForDrive.  hr = 0x80070020, The process cannot access the file because it is being used by another process.
.

How can i solve this issue.


Does Server 2012 R2 Windows Backup automatically deletes the oldest backup? What is the default behavior?

$
0
0

Hi,

I am running Windows Server 2012 R2 and Windows Native backup.  I have a dedicated drive that stores all backup. Let's call this Drive E.  See picture below on how my backup is setup.

I noticed that the Backup uses all available free space and delete the oldest backup only when the drive is full.  Is that the out of the box expectation? I don't see the option in Windows Server Backup that allows me to setup the overwrite protection.  In this case, I want to delete the backup automatically if it's 30 days old.  As you can see in the picture below, 12/25/19 is still available.  I can manually delete the backup, but I want to know if this is the expected behavior and how I can automate it using Windows native backup?

Thank you.


Agen Poker NegaraQQ

rebuild server then restore a system state backup ?

$
0
0

hello,

i have some storage constrantes so i'm trying to determine if i should be doing a system state or bare metal. 

if i lose say a SQL server and i have a system state backup does that mean i'm reinstalling windows server then doing the system state and i'm done or do i then need to restore the SQL databases?

same kind of question about my other applcations. we have some applicaitons that are web based for the user so the server has IBM web shere on it and configured with a applicaiton. if that server dies and i buy a new server install server 2014 then restore the system state backup will it just be plug in a back to good?

thanks for the help. 

Windows Server 2016 - stuck at "reading data; please wait

$
0
0

Hello,

I could definitely use some help.  I am running Windows Server 2016 standard.   Backup had been working fine but now when I open it it is stuck at reading data; please wait...

I have rebooted the server - no improvement

I have tried net stop “System Event Notification Service”
net stop “Background Intelligent Transfer Service”
net stop “COM+ Event System”
net stop “Microsoft Software Shadow Copy Provider”
net stop “Volume Shadow Copy”
net stop VSS
net stop SWPRV

regsvr32 /s ATL.DLL
regsvr32 /s comsvcs.DLL
regsvr32 /s credui.DLL
regsvr32 /s CRYPTNET.DLL
regsvr32 /s CRYPTUI.DLL
regsvr32 /s dhcpqec.DLL
regsvr32 /s dssenh.DLL
regsvr32 /s eapqec.DLL
regsvr32 /s esscli.DLL
regsvr32 /s FastProx.DLL
regsvr32 /s FirewallAPI.DLL
regsvr32 /s kmsvc.DLL
regsvr32 /s lsmproxy.DLL
regsvr32 /s MSCTF.DLL
regsvr32 /s msi.DLL
regsvr32 /s msxml3.DLL
regsvr32 /s ncprov.DLL
regsvr32 /s ole32.DLL
regsvr32 /s OLEACC.DLL
regsvr32 /s OLEAUT32.DLL
regsvr32 /s PROPSYS.DLL
regsvr32 /s QAgent.DLL
regsvr32 /s qagentrt.DLL
regsvr32 /s QUtil.DLL
regsvr32 /s raschap.DLL
regsvr32 /s RASQEC.DLL
regsvr32 /s rastls.DLL
regsvr32 /s repdrvfs.DLL
regsvr32 /s RPCRT4.DLL
regsvr32 /s rsaenh.DLL
regsvr32 /s SHELL32.DLL
regsvr32 /s shsvcs.DLL
regsvr32 /s /i swprv.DLL
regsvr32 /s tschannel.DLL
regsvr32 /s USERENV.DLL
regsvr32 /s vss_ps.DLL
regsvr32 /s wbemcons.DLL
regsvr32 /s wbemcore.DLL
regsvr32 /s wbemess.DLL
regsvr32 /s wbemsvc.DLL
regsvr32 /s WINHTTP.DLL
regsvr32 /s WINTRUST.DLL
regsvr32 /s wmiprvsd.DLL
regsvr32 /s wmisvc.DLL
regsvr32 /s wmiutils.DLL
regsvr32 /s wuaueng.DLL

Step 3 – Scan these DLL’s

Next, we will check the integrity of the following three DLLs

sfc /SCANFILE=%windir%\system32\catsrv.DLL
sfc /SCANFILE=%windir%\system32\catsrvut.DLL
sfc /SCANFILE=%windir%\system32\CLBCatQ.DLL

Step 4 – Restart Services

Finally, let’s restart the services we stopped

net start “COM+ Event System”
net start “System Event Notification Service”
net start “Background Intelligent Transfer Service”
net start “Microsoft Software Shadow Copy Provider”
net start “Volume Shadow Copy”

Step 5 – Rerun VSSADMIN

Go ahead and try to rerun the vssadmin list writers command and see if it works.

No luck

REBOOTED - no luck

I have tried reformatting the destination backup folder - no luck

Rebooted - No Luck

I have uninstalled and reinstalled Windows server backup - rebooted - no luck

I have run chkdsk /f

I have tried sfc /scannow

Rebooted - NO LUCK.

How to recover partitions accidentally formatted by Windows Server Backup?

$
0
0

I am using Windows Server 2008 R2. I have two hard disks attached. The second hard disk contained two partitions (E and F). While running the Windows Server Backup I gave the path to backup the primary partition (C) on a schedule to one of the above partitions.

The backup schedule was running successfully until today I manually run the scheduled backup. I was shocked to see the message "Formatting..". Suddenly both the partitions of the other drive were lost. I could see Windows Server Backup merged the two partitions and created a dedicated backup partition.

Is there a way to recover those lost partitions?

backup will not run on schedule

$
0
0

2016 essentials

Backup was configured and running

Now it does not run on schedule but will run manually

Tried disabling and re configuring backup, shows as configured in Windows server backup but not in the essentials dashboard

If I check this against another server of the same type I see registry entries missing

How do I reset the backup part of this server so it starts working correctly again?

Viewing all 3323 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>