Hi, folks I was checking my system state backup from a Windows 2003 Server R2 Standard Edition and saw the bkf file was 2kb! The system state is backed up every 12 hours using NTBackup. The server is a Domain Controller. The destination for the backup is another Windows 2003 Server R2 Standard Edition that functions as a file server. The backup log shows the following information: Backup Status Operation: Backup Active backup destination: File Media name: "TitanSystemState.bkf created 12/03/2010 at 06:00" Volume shadow copy creation: Attempt 1. Error returned while creating the volume shadow copy:0x80042316. Error returned while creating the volume shadow copy:80042316 Aborting Backup. ---------------------- The operation did not successfully complete. ---------------------- Any ideas what may be causing this, please? The server has Sophos Enpoint Security & Control installed. OnAccess scanning is set to scan 'infectable files' only. Scheduled scans take place on a Sunday morning only. The server is multihomed as it also functions as a RADIUS server using IAS and RRAS. It also hosts the installation of the Sophos SQL database and IIS too. DNS, DHCP and WINS are also installed. Network size is 2 domain controllers, one file server and 30 Win2k/XP/Vista clients all on one network in one location on one domain. If anyone can provide assistance troubleshooting this I will be most grateful. Thanks!

Hello,do you use SP2 on the server and also the latest VSS updates:http://support.microsoft.com/kb/940349http://support.microsoft.com/kb/891957http://support.microsoft.com/kb/826936http://support.microsoft.com/kb/913648http://support.microsoft.com/kb/887827http://support.microsoft.com/kb/833167Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

Hi, Meinholf, thanks for your reply The server has SP2 installed. I installed 940349 successfully, but now have a new error that is preventing the system state from being backed up by NTBackup: Backup Status Operation: Backup Active backup destination: File Media name: "TitanState.bkf created 16/03/2010 at 04:00" Volume shadow copy creation: Attempt 1. Timeout before function completed Error returned while creating the volume shadow copy:0x80042319. Error returned while creating the volume shadow copy:80042319 Aborting Backup. ---------------------- The operation did not successfully complete. ---------------------- Do you have any further suggestions please? Thanks.

Hi, Above all, double confirm all needed hotfix are installed. Then pease try the following steps to stop services listed below: "COM+ event system""COM+ System Application""Microsoft Software Shadow Copy Provider""Volume Shadow Copy" You can input Services.msc in Search box to get it start. Then please export the key listed below as a backup and deleted the following sub-key.HKLM\Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscriptions Then let's re-registered the following dll files. Please run the following commands: 1. net stop vss2. regsvr32 ole32.dll3. regsvr32 vss_ps.dll4. Vssvc /Register5. regsvr32 /i swprv.dll6. regsvr32 /i eventcls.dll7. regsvr32 es.dll8. regsvr32 stdprov.dll9. regsvr32 vssui.dll10. regsvr32 msxml.dll11. regsvr32 msxml3.dll12. regsvr32 msxml4.dll after finish the steps above, let's restart the following services: "COM+ event system""COM+ System Application""Microsoft Software Shadow Copy Provider""Volume Shadow Copy" Now rebooted the server and tried taking the back up.

Hi, I had faced this issue once. I would like to share troubleshooting steps taken.. 1. Checked space on drive holding shadow copies. There should be enough space available for shadow copy to work. 2. Checked the status of 'volume shadow copy' service. It should be started 3. Checked whether is there any size limit set for Volume shadow copy. 4. Deleted old Shadow copies Regards.

Hi, I faced the same error recently.. The error was :- Error returned while creating the volume shadow copy:0xffffffff. Error returned while creating the volume shadow copy:ffffffff I followed these steps by refering link http://support.microsoft.com/kb/940032 Click Start, click Run, type cmd, and then click OK. Type the following commands at a command prompt. Press ENTER after you type each command. cd /d %windir%\system32 Net stop vss Net stop swprv regsvr32 ole32.dll regsvr32 oleaut32.dll regsvr32 vss_ps.dll vssvc /register regsvr32 /i swprv.dll regsvr32 /i eventcls.dll regsvr32 es.dll regsvr32 stdprov.dll regsvr32 vssui.dll regsvr32 msxml.dll regsvr32 msxml3.dll regsvr32 msxml4.dll I tried to take backup after this and this time i got different error. Error returned while creating the volume shadow copy:0x8007000e. Error returned while creating the volume shadow copy:Not enough storage is available to complete this operation. I deleted old Shadow Copies by acccessing <Drive> Properties --> Shaodow Copies --> Delete Now. Executed ntbackup again and tried to take backup. This time it worked. Hope this will also help you to get rid of the problem. Regards.....

Hello, Shoan I have read your reply, but will not be able to take these steps until no one is working on the network, which will be sometime this week. As soon as I have followed the steps and tested I will report back. @Sandip Pitale: Thanks for the extra information. It is always useful to see this as it helps understand the process much better. Cheers!

Hi, Shoan I ran through the steps you outlined. I tried a manual backup of the system state using NTBackup this morning and the backup failed: ============================================ Backup Status Operation: Backup Active backup destination: File Media name: "TitanState2.bkf created 25/03/2010 at 08:49" Volume shadow copy creation: Attempt 1. Timeout before function completed Error returned while creating the volume shadow copy:0xffffffff. Error returned while creating the volume shadow copy:ffffffff Aborting Backup. ---------------------- The operation did not successfully complete. ============================================ Do you have any further suggestions please? Thanks

I need to open my eyes... I followed the instructions that Sandip Patale posted from the link. I can now do manaul backups of the System State of the domain controller. Thanks :)

And finally, just to confirm that the scheduled backups of the system state using NTBackup.exe are working fine too. Many thanks to everyone for their help.

The solution appears to have been temporary. After returning from the Easter break, I checked the system state backup and the file was 2kb instead of 650MB. The NTBackup log showed the following error: ============================================== Backup Status Operation: Backup Active backup destination: File Media name: "TitanSystemState.bkf created 06/04/2010 at 06:00" Volume shadow copy creation: Attempt 1. Error returned while creating the volume shadow copy:0x80042316. Error returned while creating the volume shadow copy:80042316 Aborting Backup. ---------------------- The operation did not successfully complete. ---------------------- ============================================== I have checked the Event logs on the domain controller and have discovered that the error is intermittent. The task is scheduled to run every 12 hours at 6am and 6pm. The task successfully completed at 6pm yesterday, but not at 6am this morning. I have appended the backup logs for all the tasks that have been scheduled during the last couple of days - as you can see, results are varied. Looking at the Event Logs on the domain controller for the System, Application etc Logs, there are no correlations between backup failure and error/warning events. I have successfully run a manual backup of the system state this morning. I will try changing the scheduled time and see if this helps. If anyone has any further suggestions on what I can try I will be very grateful. Thanks. Backup logs from today and yesterday: Backup Status Operation: Backup Active backup destination: File Media name: "Titan-Logs.bkf created 05/04/2010 at 05:31" Volume shadow copy creation: Attempt 1. Error returned while creating the volume shadow copy:0x80042306. Volume shadow copy creation: Attempt 2. Backup (via shadow copy) of "C: " Backup set #63 on media #1 Backup description: "Set created 19/01/2010 at 14:34" Media name: "Titan-Logs.bkf created 20/01/2010 at 05:30" Backup Type: Normal Backup started on 05/04/2010 at 05:49. Backup completed on 05/04/2010 at 05:52. Directories: 15 Files: 1523 Bytes: 209,647,693 Time: 3 minutes and 5 seconds ---------------------- Verify Status Operation: Verify After Backup Active backup destination: File Active backup destination: \\orion\TitanSS\TitanLogfiles\Titan-Logs.bkf Verify of "C:" Backup set #63 on media #1 Backup description: "Set created 19/01/2010 at 14:34" Verify started on 05/04/2010 at 05:52. Verify completed on 05/04/2010 at 05:52. Directories: 15 Files: 1523 Different: 0 Bytes: 209,647,693 Time: 26 seconds ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "Titan-WINS.bkf created 05/04/2010 at 06:00" Volume shadow copy creation: Attempt 1. Error returned while creating the volume shadow copy:0x80042316. Error returned while creating the volume shadow copy:80042316 Aborting Backup. ---------------------- The operation did not successfully complete. ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "TitanSystemState.bkf created 05/04/2010 at 06:00" Volume shadow copy creation: Attempt 1. Backup (via shadow copy) of "System State" Backup set #1 on media #1 Backup description: "Set created 30/03/2010 at 10:26" Media name: "TitanSystemState.bkf created 05/04/2010 at 06:00" Backup Type: Copy Backup started on 05/04/2010 at 06:02. Backup completed on 05/04/2010 at 06:08. Directories: 321 Files: 3012 Bytes: 651,591,215 Time: 6 minutes and 5 seconds ---------------------- Verify Status Operation: Verify After Backup Active backup destination: File Active backup destination: \\orion\TitanSS\SS\TitanSystemState.bkf Verify of "System State" Backup set #1 on media #1 Backup description: "Set created 30/03/2010 at 10:26" Verify started on 05/04/2010 at 06:08. Verify completed on 05/04/2010 at 06:09. Directories: 321 Files: 3012 Different: 0 Bytes: 651,591,215 Time: 1 minute and 26 seconds ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "TitanSystemState.bkf created 05/04/2010 at 18:00" Volume shadow copy creation: Attempt 1. Backup (via shadow copy) of "System State" Backup set #1 on media #1 Backup description: "Set created 30/03/2010 at 10:26" Media name: "TitanSystemState.bkf created 05/04/2010 at 18:00" Backup Type: Copy Backup started on 05/04/2010 at 18:01. Backup completed on 05/04/2010 at 18:05. Directories: 321 Files: 3012 Bytes: 651,591,215 Time: 4 minutes and 12 seconds ---------------------- Verify Status Operation: Verify After Backup Active backup destination: File Active backup destination: \\orion\TitanSS\SS\TitanSystemState.bkf Verify of "System State" Backup set #1 on media #1 Backup description: "Set created 30/03/2010 at 10:26" Verify started on 05/04/2010 at 18:05. Verify completed on 05/04/2010 at 18:07. Directories: 321 Files: 3012 Different: 0 Bytes: 651,591,215 Time: 1 minute and 26 seconds ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "DHCP.bkf created 05/04/2010 at 19:30" Volume shadow copy creation: Attempt 1. Backup (via shadow copy) of "C: " Backup set #1 on media #1 Backup description: "Set created 05/08/2008 at 14:35" Media name: "DHCP.bkf created 05/04/2010 at 19:30" Backup Type: Copy Backup started on 05/04/2010 at 19:31. Backup completed on 05/04/2010 at 19:31. Directories: 6 Files: 20 Bytes: 9,564,986 Time: 1 second ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "Personnel.bkf created 06/04/2010 at 03:00" Volume shadow copy creation: Attempt 1. Backup of "Personnel" Backup set #1 on media #1 Backup description: "Set created 19/03/2008 at 10:31" Media name: "Personnel.bkf created 06/04/2010 at 03:00" Backup Type: Copy Backup started on 06/04/2010 at 03:00. Backup completed on 06/04/2010 at 03:19. Directories: 2 Files: 129 Bytes: 1,871,750,712 Time: 18 minutes and 53 seconds ---------------------- Verify Status Operation: Verify After Backup Active backup destination: File Active backup destination: C:\Personnel\Personnel.bkf Verify of "\\Orion\Personnel" Backup set #1 on media #1 Backup description: "Set created 19/03/2008 at 10:31" Verify started on 06/04/2010 at 03:19. Verify completed on 06/04/2010 at 03:45. Directories: 2 Files: 129 Different: 0 Bytes: 1,871,750,712 Time: 26 minutes and 34 seconds ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "TitanSystemState.bkf created 06/04/2010 at 06:00" Volume shadow copy creation: Attempt 1. Error returned while creating the volume shadow copy:0x80042316. Error returned while creating the volume shadow copy:80042316 Aborting Backup. ---------------------- The operation did not successfully complete. ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "Titan-WINS.bkf created 06/04/2010 at 06:00" Volume shadow copy creation: Attempt 1. Error returned while creating the volume shadow copy:0x80042316. Error returned while creating the volume shadow copy:80042316 Aborting Backup. ---------------------- The operation did not successfully complete. ---------------------- Backup Status Operation: Backup Active backup destination: File Media name: "Titan-Logs.bkf created 06/04/2010 at 05:31" Volume shadow copy creation: Attempt 1. Error returned while creating the volume shadow copy:0x80042306. Volume shadow copy creation: Attempt 2. Error returned while creating the volume shadow copy:0x80042306. Volume shadow copy creation: Attempt 3. Backup (via shadow copy) of "C: " Backup set #64 on media #1 Backup description: "Set created 19/01/2010 at 14:34" Media name: "Titan-Logs.bkf created 20/01/2010 at 05:30" Backup Type: Normal Backup started on 06/04/2010 at 06:01. Backup completed on 06/04/2010 at 06:04. Directories: 15 Files: 1524 Bytes: 209,889,946 Time: 2 minutes and 56 seconds ---------------------- Verify Status Operation: Verify After Backup Active backup destination: File Active backup destination: \\orion\TitanSS\TitanLogfiles\Titan-Logs.bkf Verify of "C:" Backup set #64 on media #1 Backup description: "Set created 19/01/2010 at 14:34" Verify started on 06/04/2010 at 06:04. Verify completed on 06/04/2010 at 06:05. Directories: 15 Files: 1524 Different: 0 Bytes: 209,889,946 Time: 29 seconds ----------------------

Hi, In addition to steps specied earlier, I had performed chkdsk on drive. Can you try this and follow the steps mentiones earlier. In our case, the issue has not occured again yet. Regards..

Hi, One more thing I observed today. This problem occured on server different than that specified earlier. The error was... Error returned while creating the volume shadow copy:0x8007000e First of all tried the steps that are mentioned earlier as those steps helped me to solve problem of my previous server. This time it didnt helped. I deployed following hotfix and problem got solved.. http://support.microsoft.com/kb/940239 There is one more article.. http://support.microsoft.com/kb/907875 I dint try this as KB940239 solved the problem. Regards..

After receiving the last error I changed the times of the scheduled backup from 6am/6pm to 8am/8pm and although the backup is not successfull every time, it is better than it was. I'll just keep an eye on it. Thanks again for the help.

As there was further activity on this I have decided to update the thread. Although the system state backups were again working, it did not last for long. NTBackup reported exactly the same errors. After opening another thread on this and having tried all the solutions offered here and in the new thread I decided to reformat and reinstall.