Win 10 Pro 64 Backup fails 10/10

Hi,

just look into the Eventlog.

I assume that there are entries with event ID 513.

This is a well known problem dealing with CAPI2 (see link: http://justworks.ca/blog/fix-event-513-capi2-errors-during-windows-back…).

Now it depends on the version of Win10 you installed:

a) Pre Anniversary
Execute the following command in a CMD with admin privileges:

sc sdset MSLLDP D:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BG)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SO)(A;;LCRPWP;;;S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

b) Anniversary

Execute the following command in a CMD with admin privileges:

SC SDSET MSLLDP D:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BG)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SO)(A;;LCRPWP;;;S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453)(A;;CC;;;S-1-5-80-242729624-280608522-2219052887-3187409060-2225943459)

Both commands are a single command in one line !!

In both cases you should receive a

SetServiceObjectSecurity SUCCESS

Hope this helps you.

Greets out of the cold Stuttgart

Hi Sven,

cheers down south :-)

Good call! Eventlog says (and timestamp fits to the failing backup) Source: CAPI2 --> ID 513.

Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

I have Windows 1607 but i am a bit afraid sending that giant string into my CMD :-) Is this solution tested? Acronis come on, what do you come up with?

I have to admit, that backup on this machine worked ONCE as a full image, and worked twice for backup of certain folders. I don't get it why it refuses to work since days at all. I reboot before i start the backup and such. nothing.

anyhow, thanks for the good hint!

Hey,

It is important that this is all on one line (I created a textfile in which I placed the commandlines).

Yes I tried this string and it worked for me on all my machines (more than 10 Win10 machines in Win2012R2 domain).
This is a tested workaraund since Win7 because this problem reoccurs since several years!
It´s not an issue that Acronis can handle as this is an OS issue and Microsoft doesn´t solve this since years.
Even if you fix it with the mentioned command line...it might come up with oe of the next monthly updates.

So this might also be the reason why it came up even if it worked before.
Was there an update of windows after which it stopped working?

S.

I turn off Win 10 update service and only enable it once a month, so no, it was working before with no updates. But as you say, it's a MS issue, i agree.

Thanks again, i go for the string and update the post here.

After executing the string in CMD too bad, it's still failing.

anymore ideas? woth openin a acronis supportcall? it'S a business product and i am a business customer. thanks

here is all the log i get.

No ID 513 in Eventlog, but

Child-Prozess endete mit dem Code '0'.

Unbekannter Fehler beim Backup.
Zusätzliche Info:
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ba19e88dc5fea141
Felder:  $module : disk_bundle_vs_50058
Nachricht: Unbekannter Fehler beim Backup.
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ce542e14da203bfa
Felder:  $module : disk_bundle_vs_50058
Nachricht: Fehler beim Backup.
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da203bb0
Felder:  $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da2039cf
Felder:  Path : C:/Users/fxxx/Anwendungsdaten/Microsoft/Windows/Recent/F-M-kes-lat-13001-8B1D4C2587BEAA35EF3DF2E24413EE7C.lnk, $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da203a41
Felder:  Path : C:/Users/fxxx/Anwendungsdaten/Microsoft/Windows/Recent/F-M-kes-lat-13001-8B1D4C2587BEAA35EF3DF2E24413EE7C.lnk, $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ce542e14da203b16
Felder:  $module : disk_bundle_vs_50058
Nachricht: Fehler beim Backup.
--------------------
Fehlercode: 15
Module: 4
Zeileninfo: a8a1022bd18ae3d6
Felder:  $module : disk_bundle_vs_50058
Nachricht: Abgebrochen.
--------------------

Befehl 'Backup-Plan 'KES-Dell-fxxxOhneVM' wird ausgeführt' wurde mit Warnungen abgeschlossen.
Zusätzliche Info:
--------------------
Fehlercode: 60
Module: 309
Zeileninfo: 4a8728dc8a1c950c
Felder:  $module : mms_vs_50058
Nachricht: Befehl 'Backup-Plan 'KES-Dell-fxxxOhneVM' wird ausgeführt' wurde mit Warnungen abgeschlossen.
--------------------
Fehlercode: 41
Module: 307
Zeileninfo: e6792a5ee190de98
Felder:  $module : agent_protection_addon_vs_50058
Nachricht: Ausführen des Befehls fehlgeschlagen.
--------------------
Fehlercode: 70
Module: 309
Zeileninfo: 4a8728dc8a1c9669
Felder:  $module : mms_vs_50058
Nachricht: Die Aktivität wurde vom Benutzer abgebrochen.
--------------------
Fehlercode: 2
Module: 329
Zeileninfo: 8edc81ea38faba0a
Felder:  TraceLevel : 1, $module : gtob_backup_command_addon_vs_50058
Nachricht: Schritt 'Backup' ist fehlgeschlagen.
--------------------
Fehlercode: 70
Module: 309
Zeileninfo: 4a8728dc8a1c9669
Felder:  $module : mms_vs_50058
Nachricht: Die Aktivität wurde vom Benutzer abgebrochen.
--------------------
Fehlercode: 70
Module: 309
Zeileninfo: 4a8728dc8a1c9669
Felder:  $module : service_process_vs_50058
Nachricht: Die Aktivität wurde vom Benutzer abgebrochen.
--------------------
Fehlercode: 50
Module: 309
Zeileninfo: 8d165e86fb819582
Felder:  $module : service_process_vs_50058
Nachricht: Die Aktivität wurde abgebrochen.
--------------------
Fehlercode: 22
Module: 309
Zeileninfo: 8d165e86fb819666
Felder:  TraceLevel : 1, $module : gtob_backup_command_addon_vs_50058
Nachricht: TOL: Failed to execute the command. Der Befehl 'Backup' sichert spezifizierte Daten zu einem spezifiziertem Ziel.
--------------------
Fehlercode: 3
Module: 143
Zeileninfo: 7cf04a8000b8adf
Felder:  IsReturnCode : 1, $module : disk_bundle_vs_50058
Nachricht: Der laufende Task wurde abgebrochen.
--------------------
Fehlercode: 3
Module: 329
Zeileninfo: 1cd98aae889424f9
Felder:  $module : disk_bundle_vs_50058
Nachricht: Backup ist fehlgeschlagen.
--------------------
Fehlercode: 1060
Module: 1
Zeileninfo: ba19e88dc5fea143
Felder:  $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ba19e88dc5fea141
Felder:  $module : disk_bundle_vs_50058
Nachricht: Unbekannter Fehler beim Backup.
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ce542e14da203bfa
Felder:  $module : disk_bundle_vs_50058
Nachricht: Fehler beim Backup.
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da203bb0
Felder:  $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da2039cf
Felder:  Path : C:/Users/fxxx/Anwendungsdaten/Microsoft/Windows/Recent/F-M-kes-lat-13001-8B1D4C2587BEAA35EF3DF2E24413EE7C.lnk, $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da203a41
Felder:  Path : C:/Users/fxxx/Anwendungsdaten/Microsoft/Windows/Recent/F-M-kes-lat-13001-8B1D4C2587BEAA35EF3DF2E24413EE7C.lnk, $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ce542e14da203b16
Felder:  $module : disk_bundle_vs_50058
Nachricht: Fehler beim Backup.
--------------------
Fehlercode: 15
Module: 4
Zeileninfo: a8a1022bd18ae3d6
Felder:  $module : disk_bundle_vs_50058
Nachricht: Abgebrochen.
--------------------

Befehl 'Backup' wurde mit Warnungen abgeschlossen.
Zusätzliche Info:
--------------------
Fehlercode: 60
Module: 309
Zeileninfo: 4a8728dc8a1c950c
Felder:  $module : service_process_vs_50058
Nachricht: Befehl 'Backup' wurde mit Warnungen abgeschlossen.
--------------------
Fehlercode: 70
Module: 309
Zeileninfo: 4a8728dc8a1c9669
Felder:  $module : service_process_vs_50058
Nachricht: Die Aktivität wurde vom Benutzer abgebrochen.
--------------------
Fehlercode: 50
Module: 309
Zeileninfo: 8d165e86fb819582
Felder:  $module : service_process_vs_50058
Nachricht: Die Aktivität wurde abgebrochen.
--------------------
Fehlercode: 22
Module: 309
Zeileninfo: 8d165e86fb819666
Felder:  TraceLevel : 1, $module : gtob_backup_command_addon_vs_50058
Nachricht: TOL: Failed to execute the command. Der Befehl 'Backup' sichert spezifizierte Daten zu einem spezifiziertem Ziel.
--------------------
Fehlercode: 3
Module: 143
Zeileninfo: 7cf04a8000b8adf
Felder:  IsReturnCode : 1, $module : disk_bundle_vs_50058
Nachricht: Der laufende Task wurde abgebrochen.
--------------------
Fehlercode: 3
Module: 329
Zeileninfo: 1cd98aae889424f9
Felder:  $module : disk_bundle_vs_50058
Nachricht: Backup ist fehlgeschlagen.
--------------------
Fehlercode: 1060
Module: 1
Zeileninfo: ba19e88dc5fea143
Felder:  $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ba19e88dc5fea141
Felder:  $module : disk_bundle_vs_50058
Nachricht: Unbekannter Fehler beim Backup.
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ce542e14da203bfa
Felder:  $module : disk_bundle_vs_50058
Nachricht: Fehler beim Backup.
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da203bb0
Felder:  $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da2039cf
Felder:  Path : C:/Users/fxxx/Anwendungsdaten/Microsoft/Windows/Recent/F-M-kes-lat-13001-8B1D4C2587BEAA35EF3DF2E24413EE7C.lnk, $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 3
Module: 4
Zeileninfo: ce542e14da203a41
Felder:  Path : C:/Users/fxxx/Anwendungsdaten/Microsoft/Windows/Recent/F-M-kes-lat-13001-8B1D4C2587BEAA35EF3DF2E24413EE7C.lnk, $module : disk_bundle_vs_50058
Nachricht:
--------------------
Fehlercode: 25
Module: 4
Zeileninfo: ce542e14da203b16
Felder:  $module : disk_bundle_vs_50058
Nachricht: Fehler beim Backup.
--------------------
Fehlercode: 15
Module: 4
Zeileninfo: a8a1022bd18ae3d6
Felder:  $module : disk_bundle_vs_50058
Nachricht: Abgebrochen.
--------------------

Hello again,
so the CAPI issue is done.

I do not know exactly what the messages mean - here Acronis should be able to help you.

I think error 3 in module 4 means "cannot write file"....
Error 15 in module 4 is "network disconnected" I think....

Are there any changes in the network...different storage nodes or something like that ?

What I´m wondering:
You use the most recent build 50058. When did you install this or do you use it since the beginning?

S.

I use to use Paragon and I am testing Acronis for the first time on my *productive* business laptop :) Well, i did a robocopy backup last night in order to have any.
Is there a know issue with Bitlocker and Acronis by the way? It's the only thing i can imagine that separates my installation of a "normal client" windows 10.

Yes, I used the lastet version of Acronis since the beginning (4 Weeks?).

I'm currently in the live chat of acronis, keep you guys posted.

Wow, Support Chat is willing but no idea for solution, too.

what currently is the biggest problem: i did IN THE PAST a Options> Standardtoptions for Backup and Recovery > Commands before / after data collection (my translation correct?, german issue) a "shutdown -s -t 0" command to be executed after a succesful backup. i deleted this shutdown command. i cerated really 50 more new taks with that disabled option. the machine is still shutting down after each backup! this is super fun when you try to solve a problem and doing like 10 backup taks per hour in order to find a solution - and the machine shitus down 10 sekonds after you execute the backup!

I stick with robocopy. thanks for your help Sven.

Oh okay...an additional chunk of information ;-)

The "command after shutdown" is quite a strange thing.

First of all:
If you setup a task, is it a plannd one or a manual one?
I assume it is a planned task and you manage it with the central management console right?
If you change a plan in the MMC and the client is offline, the job is deployed the next time the client starts.
Do you use a storage node ?

Second:
If your machine still shuts down this is a config problem.
So check whether there are any remaining jobs....

Third:
The shutdown starts in the moment when the backup task is finished.
BUT: if the machine shutdown starts to early, the agent might has not finished all sync messages with the management server.
So I suggest:
Setup the tasks that no shutdown is executed and then go on.
 

Acronis is a good tool, but one must understand the ideas the developpers had ;-)

S.

PS: You can contact me by message to have the discussion in german ;-)

Oh okay...an additional chunk of information ;-)

Yes, and i keep it going, see below :)

The "command after shutdown" is quite a strange thing.

First of all:
If you setup a task, is it a plannd one or a manual one?
I assume it is a planned task and you manage it with the central management console right?
If you change a plan in the MMC and the client is offline, the job is deployed the next time the client starts.
Do you use a storage node ?

All my tasks are "Backup-Plans" which i set tp run once. Then i right-click it and execute it. It is on the client where the Management Console and the agend is installed.

Second:
If your machine still shuts down this is a config problem.
So check whether there are any remaining jobs....

I deleted all jobs 50 times. I checked all settings in "Machine-Options" or "Standardoptions for... " I believe Acronis remembers the shutdown command from that one time i edited it that way.

Third:
The shutdown starts in the moment when the backup task is finished.
BUT: if the machine shutdown starts to early, the agent might has not finished all sync messages with the management server.
So I suggest:
Setup the tasks that no shutdown is executed and then go on.

I have absolutely no task set where it should shutdown after ending :) I dont know why it is still shutting down.

Acronis is a good tool, but one must understand the ideas the developpers had ;-)

I was thinking that too, originally :)

(Guys i will keep posting my experiences from a first-user point of view. maybe someone finds this somewhen useful, maybe here will solution be found to any of those problems)

Acronis on my machine also stops pretty often with this message:

Backup von Datei oder Verzeichnis '10.11.' fehlgeschlagen.
Fehler beim Backup.

    Fehlercode: 0x40019
    $module = "disk_bundle_vs_50058"
    Tag: 0xCE542E14DA203B16
Die spezifizierte Datei existiert nicht.

    Fehlercode: 0x40011
    function = "GetFileAttributesExW",
    path = "\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy34\Users\fxxx\Desktop\IMPORTANT\160127_lenny-desktop\10.11",
    $module = "disk_bundle_vs_50058"
    Tag: 0xA8A1022BD18AE37B
Das System kann die angegebene Datei nicht finden

The file "10.11." was indeed in a streange state, not to be deleted as admin through windows explorer or CMD. With the help of CMD and the command "dir /X" I was able to access the so called "non-8dot3 " name of the file, something like "10.11.~1". Deleting that particular file finally worked, it's gone. Now it's still in the ShadowCopy and i do not know if windows is not getting, that the file is wiped or acronis wants to still process the backup. As a result the backup stopes and wants me to decide what to do (user interaction). But, that file is no longer on the disk,

thanks

Hi pfc,

It looks like the weird file is still in some shadow copies, you are right. You can remove shadow copies (howto from sevenforums) but unfortunately not single files out of it.

Have you tried running chkdisk (43803: Acronis Software: File Backup Fails with "The System Cannot Find the Specified Path"), it may solve you previous "unknown" erros too.

Regarding "shutdown" in post commands, please check if this command still exists in global default options (Optionen -> Standardoptionen für Backup und Recovery). [I'd better read carefully, you had already done this.]

You can also try to re-create the desired backup plan and see if it's getting better. Have you just unchecked "Nach Backup ausführen"? Please try to set another command instead, something indestructive like "echo 0".

Hi Raphael,

thx. Do you know if and when a shadow copy will create a new "index" or so. I wonder if the shadow copy will get updated somehow since i wiped that file.

I did run chekdsk, no errors found. I try to backup tonight again.

Again guys, 1. i havo absolutely no backup-plan / taks in the list 2. in the console options and console standard options no commands pre - after bacjkup are selected 3 i create a blank backup-plan from scratch. when i execute this, the machine shuts down.

i did a export of the backup-plan as xml.

here it is

<post>
                    <command>
                        shutdown
                    </command>
                    <arguments>
                        -T 0 -S
                    </arguments>
                    <working_directory>
                        C:\Windows\System32\
                    </working_directory>
                    <wait_complete>
                        true
                    </wait_complete>
                    <continue_on_error>
                        false
                    </continue_on_error>
</post>

So Acronis remembers this input i did two weeks in the past. That's weird.

In other news, my backup is currently working. All i did i have had acronis execute one single folder with 1 txt file to the exact same NAS storage.

Since that i gave him the same folder I tried all the time with, the Users\USERNAME folder, and now it works. It asks me to ignore the shadows copy error "10.11." file, it shutsdown after the finished backup even though i did not say so in the acronis console. but i have a valid .tib. :)

Hmm

Glad i found the shutdown issue:

In Options / Standardoptions there are "commands before / after data"collection" " AND on the very bottom "before / after" commands.
i am pretty sure I always did edit the "commands before / after data"collection", but you know it. now i deleted both entries and i believe there will be no shutdown. great that the .xml is that clear! one problem solved :)

This might be one issue that causes also other problems:

Acronis splits the backup in several tasks. One is data collection and one is the backup itself.

The onlien help shows:

1. Cleanup (if configured Before backup) and validation (if cleanup has been performed and validation is configured to run After the retention rules are applied).

   If a backup was moved to a different location during the cleanup, all the operations configured for the subsequent locations are performed before continuing to the following steps in the primary location.

2. Pre-backup command execution.
3. Backup:
   1. Pre-data capture command execution
   2. Snapshot creation
   3. Post-data capture command execution
   4. Backup process
4. Start of backup cataloging.

   Backup cataloging can be a time-consuming process. It is performed in parallel with the following steps.

5. Post-backup command execution.
6. Disaster Recovery Plan (DRP) creation.
7. Conversion to a virtual machine.
8. Backup replication.
9. Cleanup.

   If the replication took place, or a backup was moved to a different location during the cleanup, all the operations configured for the subsequent locations are performed before continuing to the following steps in the primary location.

10. Validation.
11. Tape media ejection.
12. Sending e-mail notification.

See step 3.3.
Here the command after data capture is done...in your case : SHUTDOWN ;-)

See the problem?

You shutdown the machine in the middle (!!) of the complete sequence.....

Hi Sven, yes here you are right :) Thanks. But, however, yes i did enable the shutdown command after the data collection section but disabled shortly after. The 5. Post -backup command execution is still a biggy, since the backup has had status "completed with errors" - but there was no valid backup written :) But good to point out this behaviour, hehe.

I got another one:

Fehler beim Backup der Datei.

    Fehlercode: 0x170027
    Path = "\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy34\Users\fxxx\AppData\Local\Temp\Temp1_much.zip\much\Unser Gespräch",
    $module = "disk_bundle_vs_50058"
    Tag: 0xCE542E14DA203B45
Die spezifizierte Datei existiert nicht.

    Fehlercode: 0x40011
    function = "GetFileAttributesExW",
    path = "\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy34\Users\fxxx\AppData\Local\Temp\Temp1_much.zip\much\Unser Gespräch",
    $module = "disk_bundle_vs_50058"
    Tag: 0xA8A1022BD18AE37B
Das System kann die angegebene Datei nicht finden

Whatever that symbol is, acronis does naturally not like it. Is there a way to not force acronis to handle it, but to ignore issues like this? i get a email with "user interaction required". Can i set this global? Is this "Handling of errors" "silent mode" to enable?

Thanks

The Section "Handling of errors" --> "silent mode" is only to prevent acronis to do the popup, if it can not read a file. You still have to decide in the Concole, to ignore, retry etc. that particular file.

Where can i set, that a job ignores warnings like this, write it into log but proceed with the backup`? like robocopy with three retry to access a file and if locked, than skip it.

FYI
concerning the error, that a shadowcopy file can not be accessed, here is a solution. (thanks to acronis support)

You have to have the file or folder excluded from the snapshot, so acronis gets along with it finally again. regedit and exclude it under that key:

HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToSnapshot.

https://msdn.microsoft.com/en-us/library/windows/desktop/aa819132(v=vs.85).aspx