NTBackup failing on Exchange (SBS2003 R2)

Hi,
Our backups (using NTBackup) are failing on Exchange. The storage media is
Sony TAIT2-80N (80 GB / 208 GB).

Our Exchange databases and streaming files are 32GB in size.

This initially appears to be an issue of too much data for the tape. But
even if I backup to an external hard drive (with over 200GB free space) I get
the same result, so it something other than space.

The backup log is as follows:
Backup Status
Operation: Backup
Active backup destination: 8mm AIT
Media name: "Fri-06-11-2009"

Volume shadow copy creation: Attempt 1.
Backup (via shadow copy) of "D: "
Backup set #1 on media #1
Backup description: "Fri-06-11-2009"
Media name: "Fri-06-11-2009"

Backup Type: Normal

Backup started on 6/11/2009 at 11:03 PM.
Backup completed on 7/11/2009 at 3:07 AM.
Directories: 7876
Files: 50681
Bytes: 47,345,474,153
Time: 4 hours, 4 minutes, and 2 seconds
Backup of "SERVER-01\Microsoft Information Store\First Storage Group"
Backup set #2 on media #1
Backup description: "Fri-06-11-2009"
Media name: "Fri-06-11-2009"

Backup Type: Normal

Backup started on 7/11/2009 at 3:07 AM.
The 'Microsoft Information Store' returned 'Error returned from an ESE
function call (d).

' from a call to 'HrESEBackupRead()' additional data '-'The 'Microsoft
Information Store' returned 'Error returned from an ESE function call (d).

' from a call to 'HrESEBackupRead()' additional data '-'
The operation was ended.
Backup completed on 7/11/2009 at 5:48 AM.
Directories: 0
Files: 2
Bytes: 31,879,803,754
Time: 2 hours, 41 minutes, and 0 seconds
----------------------
The operation did not successfully complete.
----------------------


The only events in the event logs around this time are:
---
Event Type: Information
Event Source: NTBackup
Event Category: None
Event ID: 8001
Date: 7/11/2009
Time: 3:07:47 AM
User: N/A
Computer: SERVER-01
Description:
End Backup of 'D:' '
The operation was successfully completed.'
Verify: On
Mode: Replace
Type: Normal
Consult the backup report for more details.

---
Event Type: Information
Event Source: NTBackup
Event Category: None
Event ID: 8000
Date: 7/11/2009
Time: 3:07:47 AM
User: N/A
Computer: SERVER-01
Description:
Begin Backup of 'SERVER-01\Microsoft Information Store\First Storage Group'
Verify: On
Mode: Append
Type: Normal

---
Event Type: Information
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 210
Date: 7/11/2009
Time: 3:07:52 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: A full backup is starting.

---
Event Type: Information
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 220
Date: 7/11/2009
Time: 3:07:52 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: Beginning the backup of the
file D:\Program Files\Exchsrvr\MDBDATA\priv1.edb (size 30205 Mb).

---
Event Type: Information
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 221
Date: 7/11/2009
Time: 5:47:46 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: Ending the backup of the file
D:\Program Files\Exchsrvr\MDBDATA\priv1.edb.

---
Event Type: Information
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 220
Date: 7/11/2009
Time: 5:47:46 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: Beginning the backup of the
file D:\Program Files\Exchsrvr\MDBDATA\priv1.stm (size 1012 Mb).

---
Event Type: Error
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 217
Date: 7/11/2009
Time: 5:48:47 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: Error (-2226) during backup of
a database (file D:\Program Files\Exchsrvr\MDBDATA\priv1.stm). The database
will be unable to restore.

---
Event Type: Information
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 222
Date: 7/11/2009
Time: 5:48:47 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: Ending the backup of the file
D:\Program Files\Exchsrvr\MDBDATA\priv1.stm. Not all data in the file has
been read (read 207421440 bytes out of 1061167104 bytes).

---
Event Type: Error
Event Source: NTBackup
Event Category: None
Event ID: 8001
Date: 7/11/2009
Time: 5:48:47 AM
User: N/A
Computer: SERVER-01
Description:
End Backup of 'CAP-SERVER-01\Microsoft Information Store\First Storage
Group' 'Warnings or errors were encountered.'
Verify: On
Mode: Append
Type: Normal
Consult the backup report for more details.

---
Event Type: Information
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 225
Date: 7/11/2009
Time: 5:48:47 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: No log files can be truncated.


Help would be much appreciated. Exchange store hasn't been backed up
properly in weeks.

"thedriver (Tee)" <> wrote in message
news:2A788D64-9B90-4B8A-B9A2-...
> Hi,
> Our backups (using NTBackup) are failing on Exchange. The storage media is
> Sony TAIT2-80N (80 GB / 208 GB).
>
> Our Exchange databases and streaming files are 32GB in size.
>
> This initially appears to be an issue of too much data for the tape. But
> even if I backup to an external hard drive (with over 200GB free space) I
> get
> the same result, so it something other than space.
>
> The backup log is as follows:
> Backup Status
> Operation: Backup
> Active backup destination: 8mm AIT
> Media name: "Fri-06-11-2009"
>
> Volume shadow copy creation: Attempt 1.
> Backup (via shadow copy) of "D: "
> Backup set #1 on media #1
> Backup description: "Fri-06-11-2009"
> Media name: "Fri-06-11-2009"
>
> Backup Type: Normal
>
> Backup started on 6/11/2009 at 11:03 PM.
> Backup completed on 7/11/2009 at 3:07 AM.
> Directories: 7876
> Files: 50681
> Bytes: 47,345,474,153
> Time: 4 hours, 4 minutes, and 2 seconds
> Backup of "SERVER-01\Microsoft Information Store\First Storage Group"
> Backup set #2 on media #1
> Backup description: "Fri-06-11-2009"
> Media name: "Fri-06-11-2009"
>
> Backup Type: Normal
>
> Backup started on 7/11/2009 at 3:07 AM.
> The 'Microsoft Information Store' returned 'Error returned from an ESE
> function call (d).
>
> ' from a call to 'HrESEBackupRead()' additional data '-'The 'Microsoft
> Information Store' returned 'Error returned from an ESE function call (d).
>
> ' from a call to 'HrESEBackupRead()' additional data '-'
> The operation was ended.
> Backup completed on 7/11/2009 at 5:48 AM.
> Directories: 0
> Files: 2
> Bytes: 31,879,803,754
> Time: 2 hours, 41 minutes, and 0 seconds
> ----------------------
> The operation did not successfully complete.
> ----------------------
>
>
> The only events in the event logs around this time are:
> ---
> Event Type: Information
> Event Source: NTBackup
> Event Category: None
> Event ID: 8001
> Date: 7/11/2009
> Time: 3:07:47 AM
> User: N/A
> Computer: SERVER-01
> Description:
> End Backup of 'D:' '
> The operation was successfully completed.'
> Verify: On
> Mode: Replace
> Type: Normal
> Consult the backup report for more details.
>
> ---
> Event Type: Information
> Event Source: NTBackup
> Event Category: None
> Event ID: 8000
> Date: 7/11/2009
> Time: 3:07:47 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Begin Backup of 'SERVER-01\Microsoft Information Store\First Storage
> Group'
> Verify: On
> Mode: Append
> Type: Normal
>
> ---
> Event Type: Information
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 210
> Date: 7/11/2009
> Time: 3:07:52 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: A full backup is starting.
>
> ---
> Event Type: Information
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 220
> Date: 7/11/2009
> Time: 3:07:52 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: Beginning the backup of the
> file D:\Program Files\Exchsrvr\MDBDATA\priv1.edb (size 30205 Mb).
>
> ---
> Event Type: Information
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 221
> Date: 7/11/2009
> Time: 5:47:46 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: Ending the backup of the
> file
> D:\Program Files\Exchsrvr\MDBDATA\priv1.edb.
>
> ---
> Event Type: Information
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 220
> Date: 7/11/2009
> Time: 5:47:46 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: Beginning the backup of the
> file D:\Program Files\Exchsrvr\MDBDATA\priv1.stm (size 1012 Mb).
>
> ---
> Event Type: Error
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 217
> Date: 7/11/2009
> Time: 5:48:47 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: Error (-2226) during backup
> of
> a database (file D:\Program Files\Exchsrvr\MDBDATA\priv1.stm). The
> database
> will be unable to restore.
>
> ---
> Event Type: Information
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 222
> Date: 7/11/2009
> Time: 5:48:47 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: Ending the backup of the
> file
> D:\Program Files\Exchsrvr\MDBDATA\priv1.stm. Not all data in the file has
> been read (read 207421440 bytes out of 1061167104 bytes).
>
> ---
> Event Type: Error
> Event Source: NTBackup
> Event Category: None
> Event ID: 8001
> Date: 7/11/2009
> Time: 5:48:47 AM
> User: N/A
> Computer: SERVER-01
> Description:
> End Backup of 'CAP-SERVER-01\Microsoft Information Store\First Storage
> Group' 'Warnings or errors were encountered.'
> Verify: On
> Mode: Append
> Type: Normal
> Consult the backup report for more details.
>
> ---
> Event Type: Information
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 225
> Date: 7/11/2009
> Time: 5:48:47 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: No log files can be
> truncated.
>
>
> Help would be much appreciated. Exchange store hasn't been backed up
> properly in weeks.



What third party apps do you have installed on the Exchange server?

EventID 222 and some of the others, may indicate a third party application
(one example is eXclaimer), is interefering with the backup, or there may
possibly be hardware corruption. Basically, something is interefering with
the backup.

Read more on this and the other errors that are showing up:

Error -613 message and you cannot back up Exchange 2000 Server or Exchange
Server 2003
http://support.microsoft.com/kb/318429

You cannot back up the information store in Exchange 2000 Server and event
ID error messages are logged
http://support.microsoft.com/kb/840013

You can also read up on the individual EventIDs you are receiving, but I
would suggest to read the Microsoft KB articles I provided above, which seem
to cover the issues you are seeing.
http://eventid.net/display.asp?event...ce=ESE&phase=1
http://eventid.net/display.asp?event...ce=ESE&phase=1
http://eventid.net/display.asp?event...ce=ESE&phase=1
etc.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

thedriver (Tee) wrote:

>Hi,
>Our backups (using NTBackup) are failing on Exchange. The storage media is
>Sony TAIT2-80N (80 GB / 208 GB).
>
>Our Exchange databases and streaming files are 32GB in size.
>
>This initially appears to be an issue of too much data for the tape. But
>even if I backup to an external hard drive (with over 200GB free space) I
>get
>the same result, so it something other than space.

The logs you post are not consistent with a "not enough room on the tape"
diagnosis.

They do suggest that there's a problem with your Exchange stores, or just
possibly a problematic 3rd-party interaction with them.

>Help would be much appreciated. Exchange store hasn't been backed up
>properly in weeks.

I'd start by disabling or uninstalling any 3rd-party extensions to
Exchange (eg disclaimer software, anti-spam add-ins, that sort of thing),
and making sure that any server AV is not touching any of the Exchange
data folders.

Then try and run an Exchange backup. If it still fails, you need to do an
integrity check of the stores with ESEUTIL /G.

Post back what you find.

--
Steve Foster
------------
Please reply only to the newsgroups.
For SSL Certificates, Domains, etc, visit.: https://netshop.virtual-isp.net

"Steve Foster" <> wrote in message
news:...
> thedriver (Tee) wrote:
>
>>Hi,
>>Our backups (using NTBackup) are failing on Exchange. The storage media is
>>Sony TAIT2-80N (80 GB / 208 GB).
>>
>>Our Exchange databases and streaming files are 32GB in size.
>>
>>This initially appears to be an issue of too much data for the tape. But
>>even if I backup to an external hard drive (with over 200GB free space) I
>>get
>>the same result, so it something other than space.
>
> The logs you post are not consistent with a "not enough room on the tape"
> diagnosis.
>
> They do suggest that there's a problem with your Exchange stores, or just
> possibly a problematic 3rd-party interaction with them.
>
>>Help would be much appreciated. Exchange store hasn't been backed up
>>properly in weeks.
>
> I'd start by disabling or uninstalling any 3rd-party extensions to
> Exchange (eg disclaimer software, anti-spam add-ins, that sort of thing),
> and making sure that any server AV is not touching any of the Exchange
> data folders.
>
> Then try and run an Exchange backup. If it still fails, you need to do an
> integrity check of the stores with ESEUTIL /G.
>
> Post back what you find.
>
> --
> Steve Foster

As I believe it is a 3rd party app causing it as well, as I've indicated.

Ace

Hello,

Thanks for your post and suggestions from Ace and Steve.

I also agree that based on my experience, this issue usually occur if Norton Anti-virus (NAV) Enterprise version was running on the server and was scanning the MDBDATA folder where affected
databases were. Once that was stopped, the backup might complete. To exclude Exchange server sensitive folders/files from AV software, you may refer to KB823166 below:

823166 Overview of Exchange Server 2003 and antivirus software
http://support.microsoft.com/default...b;EN-US;823166

BTW, This issues happens if the following services are started

1. Microsoft Software Shadow Copy Provider
2. Volume Shadow Copy

By default these services are set to manual. Please check and stop these two services and the see if backup complete successfully this time.

Hope this helps. Also, if you have any questions or concerns, please do not hesitate to let me know.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

================================================== ================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/...i/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/...i/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/arch...ewsgroups.aspx
================================================== ================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ================
This posting is provided "AS IS" with no warranties, and confers no rights.
================================================== ================

Thank you Ace, Steve and Robbin for your help. Sorry I've taken so long.
Unfortunately, I've not been able to resolve this yet. Here's some updates...

""Ace Fekay [MCT]"" wrote:
>EventID 222 and some of the others, may indicate a third party application (one example is eXclaimer), is >interefering with the backup, or there may possibly be hardware corruption...

""Steve Foster"" wrote:
>I'd start by disabling or uninstalling any 3rd-party extensions to Exchange, and making sure that any server >AV is not touching any of the Exchange data folders.

I've looked at all programs installed on the server and the only Exchange
related program is the Antivirus and the Microsoft AutoAccept Agent (but this
was installed since the problem started).

Here is the list of programs installed on the server (excluding patches and
hotfixes):
7-Zip 4.65
Adobe Flash Player 10 ActiveX
Adobe Reader 9.1.1
Advanced Monitoring Agent
APC PowerChute Personal Edition
Auto Accept Agent
CDO Protocol Event Registration Tool
Compatibility Pack for the 2007 Office system
Debugging Tools for Windows (x86)
Exchange Server User Monitor
ISO Recorder
LAN-Fax Utilities
Marvell Miniport Driver
Microsoft .NET Compact Framework 2.0
Microsoft .NET Framework 1.1 -- Device Update 4.0
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Baseline Security Analyzer 2.1
Microsoft Connector for POP3 Mailboxes
Microsoft Exchange Server Best Practices Analyzer Tool
Microsoft Exchange Troubleshooting Assistant
Microsoft Group Policy Management Console with SP1
Microsoft Health Monitor 2.1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Excel Viewer
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Visio Viewer 2007
Microsoft Office Word Viewer 2003
Microsoft Outlook Web Access Administration Tool
Microsoft Report Viewer Redistributable 2005
Microsoft Report Viewer Redistributable 2008
Microsoft Silverlight
Microsoft SQL Server Desktop Engine (SBSMonitoring)
Microsoft SQL Server Management Studio Express
Microsoft SQL Server Native Client
Microsoft XML Parser
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 6 Service Pack 2 (KB954459)
NVIDIA Drivers
Server Performance Advisor
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor
(05/27/2006 1.3.2.0)
Windows Imaging Component
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Search 4.0
Windows Server 2003 Service Pack 2
Windows Server Update Services 3.0 SP2
Windows Server Update Services 3.0 SP2 Console
Windows Small Business Server 2003
Windows Small Business Server 2003 Best Practices Analyzer
Windows Small Business Server 2003 Service Pack 1
Windows Small Business Server ActiveSync
Windows Small Business Server Admin
Windows Small Business Server Backup
Windows Small Business Server Client Experience
Windows Small Business Server Client Setup
Windows Small Business Server Common
Windows Small Business Server Connectivity
Windows Small Business Server Documents
Windows Small Business Server Fax
Windows Small Business Server Fax Cfg
Windows Small Business Server IE Client App
Windows Small Business Server Licensing
Windows Small Business Server Monitoring
Windows Small Business Server Remote Portal
Windows Support Tools
XpertVision 5.1

MS KB 318429 - the event log does not display any -613 error messages. The
error in the event log is -2226 (see below)
MS KB 840013 - only relates to Exchange 2000
MS KB 889528 - only relates to Exchange 2003 SP1 (Exchange SP2 is installed)

Our email exclaimers are built into the signature, so there is no extra
software that adds this.

Seemingly, the most helpful error or event log seemss to be the following:
Event Type: Error
Event Source: ESE
Event Category: Logging/Recovery
Event ID: 217
Date: 7/11/2009
Time: 5:48:47 AM
User: N/A
Computer: SERVER-01
Description:
Information Store (5220) First Storage Group: Error (-2226) during backup
of
a database (file D:\Program Files\Exchsrvr\MDBDATA\priv1.stm). The
database
will be unable to restore.
But I can't find any info relating to this error.

""Robbin Meng [MSFT]"" wrote:
>I also agree that based on my experience, this issue usually occur if Norton Anti-virus (NAV) Enterprise >version was running on the server and was scanning the MDBDATA folder where affected databases were. >Once that was stopped, the backup might complete. To exclude Exchange server sensitive folders/files from >AV software, you may refer to KB823166 below:
>
>BTW, This issues happens if the following services are started
> 1. Microsoft Software Shadow Copy Provider
> 2. Volume Shadow Copy
>By default these services are set to manual. Please check and stop these two services and the see if backup >complete successfully this time.


I had Eset NOD32 AV 2.7 for Exchange installed on the SBS2003 server. I had
the following exclusions list in place as per both MS KB 823166 and MS KB
822158:
C:\PROGRAM FILES\EXCHSRVR\MDBDATA\
C:\PROGRAM FILES\EXCHSRVR\MTADATA\
C:\PROGRAM FILES\EXCHSRVR\CAP-SERVER-01.LOG\
C:\PROGRAM FILES\EXCHSRVR\MAILROOT\
C:\PROGRAM FILES\EXCHSRVR\SRSDATA\
C:\WINDOWS\SYSTEM32\INETSRV\
C:\PROGRAM FILES\EXCHSRVR\IMCDATA\
D:\PROGRAM FILES\EXCHSRVR\MDBDATA\
D:\PROGRAM FILES\EXCHSRVR\RECOVERY STORAGE GROUP\
D:\PROGRAM FILES\EXCHSRVR\TEMP\
C:\WINDOWS\IIS TEMPORARY COMPRESSED FILES\
C:\PROGRAM FILES\EXCHSRVR\CONNDATA\
C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \DATASTORE.EDB
C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\EDB*.LOG
C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\RES1.LOG
C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\RES1.LOG
C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\EDB.CHK
C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\TMP.EDB
C:\WINDOWS\SYSTEM32\SECURITY\EDB.CHK
C:\WINDOWS\SYSTEM32\SECURITY\EDB.LOG
C:\WINDOWS\SYSTEM32\SECURITY\*.LOG
C:\WINDOWS\SECURITY\DATABASE\SECEDIT.SCB
C:\DOCUMENTS AND SETTINGS\ALL USERS\NTUSER.POL
C:\WINDOWS\SYSTEM32\GROUPPOLICY\REGISTRY.POL
C:\WINDOWS\SYSTEM32\NTDS\NTDS.DIT
C:\WINDOWS\SYSTEM32\NTDS\NTDS.PAT
C:\WINDOWS\SYSTEM32\NTDS\EDB*.LOG
C:\WINDOWS\SYSTEM32\NTDS\RES1.LOG
C:\WINDOWS\SYSTEM32\NTDS\RES2.LOG
C:\WINDOWS\SYSTEM32\NTDS\TEMP.EDB
C:\WINDOWS\SYSTEM32\NTDS\EDB.CHK
C:\WINDOWS\NTFRS\JET\SYS\EDB.CHK
C:\WINDOWS\NTFRS\JET\NTFRS.JDB
C:\WINDOWS\NTFRS\JET\LOG\*.LOG
D:\FRS-STAGING\

C:\WINDOWS\SYSVOL\SYSVOL\CAPEZIOCO.LOCAL\DO_NOT_RE MOVE_NTFRS_PREINSTALL_DIRECTORY\
C:\WINDOWS\SYSVOL\STAGING\
C:\WINDOWS\SYSVOL\STAGING\DOMAIN\
C:\WINDOWS\SYSVOL\STAGING AREAS\
C:\WINDOWS\SYSTEM32\DHCP\
C:\WINDOWS\SYSTEM32\DNS\
C:\WINDOWS\SYSTEM32\WINS\
C:\PROGRAM FILES\MICROSOFT WINDOWS SMALL BUSINESS
SERVER\NETWORKING\POP3\FAILED MAIL\
C:\PROGRAM FILES\MICROSOFT WINDOWS SMALL BUSINESS
SERVER\NETWORKING\POP3\INCOMING MAIL\
C:\PAGEFILE.SYS
C:\PROGRAM FILES\ESET\INFECTED\
C:\PROGRAM FILES\ESET\
C:\WINDOWS\SYSTEM32\SYSTEM32\LICSTR.CPA
C:\WINDOWS\SYSTEM32\SYSTEM32\LLS\
C:\WINDOWS\SYSTEM32\SYSTEM32\NTMSDATA\

I have also uninstalled Eset AV, restarted the server and again tried to
backup the database - it still fails with the same error.

The Microsoft Software Shadow Copy Provider and Volume Shadow Copy services
are both set to Manual already.

I've also tried moving the Exchange databases, log files and system file to
another drive (on another drive controller) and still could complete the
backup (with the same error -2226 code).

Any further help would be greatly appreciated!

thedriver (Tee) wrote:

>""Steve Foster"" wrote:
>>I'd start by disabling or uninstalling any 3rd-party extensions to
>>Exchange, and making sure that any server >AV is not touching any of the
>>Exchange data folders.
>
>I've looked at all programs installed on the server and the only Exchange
>related program is the Antivirus and the Microsoft AutoAccept Agent (but
>this
>was installed since the problem started).

It still needs to be disabled or removed.


>Here is the list of programs installed on the server (excluding patches and
>hotfixes):
> Advanced Monitoring Agent

What's this?

> Auto Accept Agent
> CDO Protocol Event Registration Tool
> Exchange Server User Monitor

All of these are Exchange-related.

> LAN-Fax Utilities
> XpertVision 5.1

Do these connect into Exchange in any way?

> Compatibility Pack for the 2007 Office system
> Debugging Tools for Windows (x86)
> Microsoft .NET Compact Framework 2.0
> Microsoft Office Excel Viewer
> Microsoft Office PowerPoint Viewer 2007 (English)
> Microsoft Office Visio Viewer 2007
> Microsoft Office Word Viewer 2003
> Microsoft Silverlight

I can't see why any of these would be on the server (they're not there OOB).

>
>MS KB 318429 - the event log does not display any -613 error messages. The
>error in the event log is -2226 (see below)
>MS KB 840013 - only relates to Exchange 2000
>MS KB 889528 - only relates to Exchange 2003 SP1 (Exchange SP2 is
>installed)

Some of these offer general guidance and background information that's
valid across more than one version of Exchange, even though the prescribed
fixes are for specific versions. As for 889528, it's worth getting the
update, even if just to make sure that it's installed as part of SP2 (it's
not always the case!).

>Our email exclaimers are built into the signature, so there is no extra
>software that adds this.

What adds the signatures?

>Any further help would be greatly appreciated!

What was the result of the ESEUTIL /G you were asked to run?

--
Steve Foster
------------
Please reply only to the newsgroups.
For SSL Certificates, Domains, etc, visit.: https://netshop.virtual-isp.net

"thedriver (Tee)" <> wrote in message
news:F2BA6628-A568-4B62-B309-...
> Thank you Ace, Steve and Robbin for your help. Sorry I've taken so long.
> Unfortunately, I've not been able to resolve this yet. Here's some
> updates...
>
> ""Ace Fekay [MCT]"" wrote:
>>EventID 222 and some of the others, may indicate a third party application
>>(one example is eXclaimer), is >interefering with the backup, or there may
>>possibly be hardware corruption...
>
> ""Steve Foster"" wrote:
>>I'd start by disabling or uninstalling any 3rd-party extensions to
>>Exchange, and making sure that any server >AV is not touching any of the
>>Exchange data folders.
>
> I've looked at all programs installed on the server and the only Exchange
> related program is the Antivirus and the Microsoft AutoAccept Agent (but
> this
> was installed since the problem started).
>
> Here is the list of programs installed on the server (excluding patches
> and
> hotfixes):
> 7-Zip 4.65
> Adobe Flash Player 10 ActiveX
> Adobe Reader 9.1.1
> Advanced Monitoring Agent
> APC PowerChute Personal Edition
> Auto Accept Agent
> CDO Protocol Event Registration Tool
> Compatibility Pack for the 2007 Office system
> Debugging Tools for Windows (x86)
> Exchange Server User Monitor
> ISO Recorder
> LAN-Fax Utilities
> Marvell Miniport Driver
> Microsoft .NET Compact Framework 2.0
> Microsoft .NET Framework 1.1 -- Device Update 4.0
> Microsoft .NET Framework 2.0 Service Pack 2
> Microsoft .NET Framework 3.0 Service Pack 2
> Microsoft .NET Framework 3.5 SP1
> Microsoft Application Error Reporting
> Microsoft Baseline Security Analyzer 2.1
> Microsoft Connector for POP3 Mailboxes
> Microsoft Exchange Server Best Practices Analyzer Tool
> Microsoft Exchange Troubleshooting Assistant
> Microsoft Group Policy Management Console with SP1
> Microsoft Health Monitor 2.1
> Microsoft Internationalized Domain Names Mitigation APIs
> Microsoft National Language Support Downlevel APIs
> Microsoft Office Excel Viewer
> Microsoft Office PowerPoint Viewer 2007 (English)
> Microsoft Office Visio Viewer 2007
> Microsoft Office Word Viewer 2003
> Microsoft Outlook Web Access Administration Tool
> Microsoft Report Viewer Redistributable 2005
> Microsoft Report Viewer Redistributable 2008
> Microsoft Silverlight
> Microsoft SQL Server Desktop Engine (SBSMonitoring)
> Microsoft SQL Server Management Studio Express
> Microsoft SQL Server Native Client
> Microsoft XML Parser
> MSXML 4.0 SP2 (KB936181)
> MSXML 4.0 SP2 (KB954430)
> MSXML 6 Service Pack 2 (KB954459)
> NVIDIA Drivers
> Server Performance Advisor
> Windows Driver Package - Advanced Micro Devices (AmdK8) Processor
> (05/27/2006 1.3.2.0)
> Windows Imaging Component
> Windows Internet Explorer 7
> Windows Internet Explorer 8
> Windows Search 4.0
> Windows Server 2003 Service Pack 2
> Windows Server Update Services 3.0 SP2
> Windows Server Update Services 3.0 SP2 Console
> Windows Small Business Server 2003
> Windows Small Business Server 2003 Best Practices Analyzer
> Windows Small Business Server 2003 Service Pack 1
> Windows Small Business Server ActiveSync
> Windows Small Business Server Admin
> Windows Small Business Server Backup
> Windows Small Business Server Client Experience
> Windows Small Business Server Client Setup
> Windows Small Business Server Common
> Windows Small Business Server Connectivity
> Windows Small Business Server Documents
> Windows Small Business Server Fax
> Windows Small Business Server Fax Cfg
> Windows Small Business Server IE Client App
> Windows Small Business Server Licensing
> Windows Small Business Server Monitoring
> Windows Small Business Server Remote Portal
> Windows Support Tools
> XpertVision 5.1
>
> MS KB 318429 - the event log does not display any -613 error messages. The
> error in the event log is -2226 (see below)
> MS KB 840013 - only relates to Exchange 2000
> MS KB 889528 - only relates to Exchange 2003 SP1 (Exchange SP2 is
> installed)
>
> Our email exclaimers are built into the signature, so there is no extra
> software that adds this.
>
> Seemingly, the most helpful error or event log seemss to be the following:
> Event Type: Error
> Event Source: ESE
> Event Category: Logging/Recovery
> Event ID: 217
> Date: 7/11/2009
> Time: 5:48:47 AM
> User: N/A
> Computer: SERVER-01
> Description:
> Information Store (5220) First Storage Group: Error (-2226) during
> backup
> of
> a database (file D:\Program Files\Exchsrvr\MDBDATA\priv1.stm). The
> database
> will be unable to restore.
> But I can't find any info relating to this error.
>
> ""Robbin Meng [MSFT]"" wrote:
>>I also agree that based on my experience, this issue usually occur if
>>Norton Anti-virus (NAV) Enterprise >version was running on the server and
>>was scanning the MDBDATA folder where affected databases were. >Once that
>>was stopped, the backup might complete. To exclude Exchange server
>>sensitive folders/files from >AV software, you may refer to KB823166
>>below:
>>
>>BTW, This issues happens if the following services are started
>> 1. Microsoft Software Shadow Copy Provider
>> 2. Volume Shadow Copy
>>By default these services are set to manual. Please check and stop these
>>two services and the see if backup >complete successfully this time.
>
>
> I had Eset NOD32 AV 2.7 for Exchange installed on the SBS2003 server. I
> had
> the following exclusions list in place as per both MS KB 823166 and MS KB
> 822158:
> C:\PROGRAM FILES\EXCHSRVR\MDBDATA\
> C:\PROGRAM FILES\EXCHSRVR\MTADATA\
> C:\PROGRAM FILES\EXCHSRVR\CAP-SERVER-01.LOG\
> C:\PROGRAM FILES\EXCHSRVR\MAILROOT\
> C:\PROGRAM FILES\EXCHSRVR\SRSDATA\
> C:\WINDOWS\SYSTEM32\INETSRV\
> C:\PROGRAM FILES\EXCHSRVR\IMCDATA\
> D:\PROGRAM FILES\EXCHSRVR\MDBDATA\
> D:\PROGRAM FILES\EXCHSRVR\RECOVERY STORAGE GROUP\
> D:\PROGRAM FILES\EXCHSRVR\TEMP\
> C:\WINDOWS\IIS TEMPORARY COMPRESSED FILES\
> C:\PROGRAM FILES\EXCHSRVR\CONNDATA\
> C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \DATASTORE.EDB
> C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\EDB*.LOG
> C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\RES1.LOG
> C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\RES1.LOG
> C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\EDB.CHK
> C:\WINDOWS\SYSTEM32\SOFTWAREDISTRIBUTION\DATASTORE \LOGS\TMP.EDB
> C:\WINDOWS\SYSTEM32\SECURITY\EDB.CHK
> C:\WINDOWS\SYSTEM32\SECURITY\EDB.LOG
> C:\WINDOWS\SYSTEM32\SECURITY\*.LOG
> C:\WINDOWS\SECURITY\DATABASE\SECEDIT.SCB
> C:\DOCUMENTS AND SETTINGS\ALL USERS\NTUSER.POL
> C:\WINDOWS\SYSTEM32\GROUPPOLICY\REGISTRY.POL
> C:\WINDOWS\SYSTEM32\NTDS\NTDS.DIT
> C:\WINDOWS\SYSTEM32\NTDS\NTDS.PAT
> C:\WINDOWS\SYSTEM32\NTDS\EDB*.LOG
> C:\WINDOWS\SYSTEM32\NTDS\RES1.LOG
> C:\WINDOWS\SYSTEM32\NTDS\RES2.LOG
> C:\WINDOWS\SYSTEM32\NTDS\TEMP.EDB
> C:\WINDOWS\SYSTEM32\NTDS\EDB.CHK
> C:\WINDOWS\NTFRS\JET\SYS\EDB.CHK
> C:\WINDOWS\NTFRS\JET\NTFRS.JDB
> C:\WINDOWS\NTFRS\JET\LOG\*.LOG
> D:\FRS-STAGING\
>
> C:\WINDOWS\SYSVOL\SYSVOL\CAPEZIOCO.LOCAL\DO_NOT_RE MOVE_NTFRS_PREINSTALL_DIRECTORY\
> C:\WINDOWS\SYSVOL\STAGING\
> C:\WINDOWS\SYSVOL\STAGING\DOMAIN\
> C:\WINDOWS\SYSVOL\STAGING AREAS\
> C:\WINDOWS\SYSTEM32\DHCP\
> C:\WINDOWS\SYSTEM32\DNS\
> C:\WINDOWS\SYSTEM32\WINS\
> C:\PROGRAM FILES\MICROSOFT WINDOWS SMALL BUSINESS
> SERVER\NETWORKING\POP3\FAILED MAIL\
> C:\PROGRAM FILES\MICROSOFT WINDOWS SMALL BUSINESS
> SERVER\NETWORKING\POP3\INCOMING MAIL\
> C:\PAGEFILE.SYS
> C:\PROGRAM FILES\ESET\INFECTED\
> C:\PROGRAM FILES\ESET\
> C:\WINDOWS\SYSTEM32\SYSTEM32\LICSTR.CPA
> C:\WINDOWS\SYSTEM32\SYSTEM32\LLS\
> C:\WINDOWS\SYSTEM32\SYSTEM32\NTMSDATA\
>
> I have also uninstalled Eset AV, restarted the server and again tried to
> backup the database - it still fails with the same error.
>
> The Microsoft Software Shadow Copy Provider and Volume Shadow Copy
> services
> are both set to Manual already.
>
> I've also tried moving the Exchange databases, log files and system file
> to
> another drive (on another drive controller) and still could complete the
> backup (with the same error -2226 code).
>
> Any further help would be greatly appreciated!


I agree with Steve.

I would suggest to disable the following and see what happens.

Advanced Monitoring Agent
LAN-Fax Utilities
Server Performance Advisor
Auto Accept Agent
CDO Protocol Event Registration Tool
XpertVision 5.1


For excluding the Exchange part in Eset, I would suggest to simply exclude
the whole Exchange folder and subfolders (C:\PROGRAM FILES\EXCHSRVR\).

Ace