Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a Windows 2003 server that is running a semi-custom backup task. The scheduled task calls NTbackup with a few switches depending on whether it is a full or incremental backup. Most of the time, the NTbackup completes fine, and the wrapper then appends the NTbackup log into its own log before adding a few final comments and completing.

The problem I am having is that sometimes, NTbackup seems to just... blank out. It always completes backup of the C: and E: drives, but then it will start the system state and not add any more messages into the event log saying it completed that. And the NTbackup log is left empty, since it doesn't write anything to the log until all the backup tasks are complete. This is causing the wrapper to append no text into its own log. That causes problems for us because we read the information out of that log to determine whether backups are failing. The wrapper task also reports that it is completing normally in the event log.

Anyone ever seen a case where system state doesn't complete consistently? To be clear, the server is not logging any error messages anywhere. It's just not seeming to complete or log anything.

EDIT: I have discovered that this sometimes happens after it begins the backup of the E: drive, so it's not specific to the systemstate portion, as it has failed on the E: drive with or without systemstate included in the backup.

UPDATE 9/26/13: I have found that VSS is posting the following two errors to the application log:

Source: VSS
Event ID: 8193
Volume Shadow Copy Service error: Unexpected error calling routine
IMultiInterfaceEventControl::GetSubscriptions.  hr = 0x800706bf.

Source: VSS
Event ID: 12291
Volume Shadow Copy Service error: Error on creating/using the COM+
Writers publisher interface: BackupShutdown [0x8000ffff].

I've researched these some, and I went through the suggested troubleshooting. The COM+ Event System server is running and set to automatic startup. The Volume Shadow Copy server is set to manual startup. I ran vssadmin list writers with admin permission and all five writers listed showed their state as stable and last error as no error. I've read some about changing group policy permissions for the account running the backups, but I'm not clear on how or what to do. And this is not happening consistently, as I said. Sometimes the backup runs fine, sometimes it fail to complete with the errors above, and sometimes it completes with those errors. In the former case, the errors show up a few minutes after the backup just stops, and in the latter, the errors show up within milliseconds of the backup's completion.

share|improve this question
Well, what's on the server? It's not a domain controller or Exchange server or anything else with a special system state that needs to be backed up in a special manner... is it? –  HopelessN00b Jun 30 '12 at 8:53
@HopelessN00b This is actually happening on three different servers. I think one might be a domain controller, but none of them are exchange servers. One of them has the failure occur sometimes during the data drive backup, before it even gets to system state. –  Joe M Feb 25 '13 at 23:49
I may have found a solution for this. I am testing it but will need a few weeks of backups to make sure it is fixed. If it looks good, I'll post my answer here. –  Joe M Mar 5 '13 at 16:43
I have still had no luck getting this fixed. –  Joe M May 3 '13 at 19:53
did you check your event log? No error? Ntbackup should write some status there also. –  Olivier S Jun 11 '13 at 19:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.