User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:)

notla0782 · April 8, 2016

Hello,

I need help with 'User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:) on Alton-C875D"'.

I have searched the forum and there is a similar 2006 post but i wonder about the currency of it.

I have a similar problem. I use a desktop to run Retrospect v11 running windows 10. I have three v11 clients that also run windows 10. However, this issue only occurs on one client, a laptop, that travels when I travel..

About a month ago, I upgraded to v11 from v10.5 and then the desktop's C: drive failed. I had to perform a restore of the desktop's C: drive that went ok. However, at the next scheduled backup, the laptop backup did not run due to the 'restricted NTFS rights' message above. About a week later,I traveled to TX and returned. Tried the backup up again and once more, I received the restricted rights message.

So, what do I need to do the resolve this problem? Thanks

A-

Scillonian · April 8, 2016

If you updated the Retrospect Client software on the affected laptop, how did you do it?

notla0782 · April 9, 2016

I did update client software. I did this from the Configure>Clients. Selected the laptop, clicked on the Tools tab and clicked on the Update button. I then navigated to the Retrospect 11.0/Client Updaters/Windows, doubled the one file and let it run..

Scillonian · April 9, 2016

I had one of my Windows 10 clients not update properly when updating it through client properties. Try uninstalling the Retrospect Client software on the laptop, restart Windows and reinstall the Retrospect Client software. (You will probably have to forget and re-add the client in Retrospect after the reinstall.)

notla0782 · April 10, 2016

Hi. I reinstalled Retrospect client and started the backup. The backup completed successfully although with some error notifications one of which is the subject of this thread. This time the backup asked for a second backup device as the primary device was full. I have not seen this request before since wrestling with this particular issue..I pointed it to a spare drive and the backup continued. Could that have been the source of my troubles? I do not recall seeing that out of space process pop up before since I upgraded to Restrospect 11.0. One other thing, I ran this iteration as administrator. Would have made any difference?

Scillonian · April 11, 2016

With each backup Retrospect adds more data to the backup set so eventually it will become full and Retrospect will ask for a new member or groom the backup set to recover space if grooming is enabled.

If Retrospect reports the backup as having completed successfully and 'Errors, Warnings' shows '0, 0' on the 'History' tab of Activity Monitor then any errors show in the log are likely debug information. Retrospect 11 shows more debug information in the logs than it predecessors.

So we can see the errors in context can you post the log entries for the backup?

notla0782 · April 13, 2016

This is from the most recent scheduled backup. It ran successfully with warnings and one error.

--Log--

+ Executing Toshiba backup at 4/12/2016 11:53 PM

Using thorough rebuild

4/12/2016 11:53:22 PM: Finished scanning backup set data files

To Backup Set Backup Set C875D I_D...

- 4/12/2016 11:53:21 PM: Copying TI106426W0A (C:) on XXXXX-C875D

4/13/2016 12:06:28 AM: lvtrRescan: FSSGetChangeTree

4/13/2016 12:06:31 AM: lvtrRescan: TAppendCB

4/13/2016 12:08:38 AM: lvtrRescan: T1CompareCB

4/13/2016 12:10:38 AM: lvtrRescan: T1Compare

4/13/2016 12:10:38 AM: lvtrRescan: TMatchRemove

4/13/2016 12:10:39 AM: lvtrRescan: FSSSetChangeTree

4/13/2016 12:10:45 AM: lvtrRescan: FSSSetChangeTree Finished

4/13/2016 12:10:45 AM: Found: 226,763 files, 39,966 folders, 324.4 GB

4/13/2016 12:10:51 AM: Finished matching

Backing up 3 out of 106 files using block level incremental backup, storing full backups for remaining 103.

User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:) on XXXXX-C875D"

4/13/2016 12:13:21 AM: Copying: 112,065 files (233.6 GB) and 24,733 hard links

File "C:\System Volume Information\{01576e26-eac5-11e5-bf45-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{05414bfc-7d16-11e5-bf29-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{06f6194b-829d-11e5-bf2a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{06f61d6f-829d-11e5-bf2a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{073af24b-f62c-11e5-bf4a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{073af26c-f62c-11e5-bf4a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{0931cf88-71c7-11e5-bf23-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{0bfc3691-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{0bfc36bc-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{0bfc495b-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{0bfc49dd-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{12bbf4ea-3afd-11e5-bf16-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{13400807-e587-11e5-bf41-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{1db9848c-3009-11e5-bf11-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{1e431dae-2520-11e5-bf0c-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{1fadac5c-dcf0-11e5-bf3f-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{2049e2c3-b895-11e5-bf3a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{2049e2e4-b895-11e5-bf3a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{2325bee7-bbac-11e5-bf3b-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

File "C:\System Volume Information\{24c81017-fba4-11e5-bf4e-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)

and 97 others

T-32: --ERR-- (8912) ReadStation tryReadFile: BRRead err127

T-32: --ERR-- (8912) ReadStation: workUntilEnd:-1127 seq6491

T-32: --ERR-- (5024) ChecksumStation: workUntilEnd:-1127 seq#8982

T-32: --ERR-- (9548) Terminal: workUntilEnd:-1127 seq#8982

T-32: --ERR-- (5776) BackupReadCloseAsync: err127

File "C:\Windows\System32\WDI\LogFiles\WdiContextLog.etl.002": can't read, error -1127 (data error detected in file using cyclic redundancy check)

T-32: --ERR-- (5776) TPipelineMgr::tryStartPipeline: m_outQ->error127 m_whyEnd127

T-32: --ERR-- (5776) TPipelineMgr::tryStartPipeline: error127

4/13/2016 2:13:43 AM: Building Snapshot...

4/13/2016 2:13:45 AM: Copying VSS writer files

4/13/2016 2:15:04 AM: Finished copying VSS writer files

4/13/2016 2:15:49 AM: Copying Snapshot: 342 files (299.8 MB)

4/13/2016 2:15:58 AM: Snapshot stored, 299.8 MB

4/13/2016 2:16:01 AM: 1 execution errors

Remaining: 119 files, 217.2 GB

Completed: 111946 files, 16.5 GB, with 30% compression

Performance: 139.6 MB/minute

Duration: 02:22:39 (00:22:21 idle/loading/preparing)

4/13/2016 2:16:01 AM: Compressing catalog file

- 4/13/2016 2:16:10 AM: Verifying Backup Set C875D I_D

Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)

4/13/2016 2:18:24 AM: Execution completed successfully

Completed: 136679 files, 19.2 GB

Performance: 9780.4 MB/minute

Duration: 00:02:13 (00:00:12 idle/loading/preparing)

4/13/2016 2:18:24 AM: Compressing catalog file

NetConnTop::PreDispose: m_deferredPackets.MaxCountf

Scillonian · April 13, 2016

The files in the 'C:\System Volume Information' folder are related to System Restore Points. Their absence from the backup will only be an issue if you want to do a full system restore and also have the System Restore Points also restored.

The errors under Verifying Backup Set suggest Retrospect is experiencing problems (non critical) with reading the backup set files. (16.5 GB, with 30% compression gives about 11.5 GB which is ~21 600 MB backup set .RDB files which is the number of errors.

Does each machine have its own backup set? The names of the machine and the backup set suggest this may be the case. Where is the backup set stored?

It is possible that when the desktop drive crashed the backup set became corrupted. The Retrospect configuration file could also have become corrupted with respect to this one client.

To test the backup set the first option would be to rebuild the catalog file. If there are still errors after this then create a new backup set and and backup to that to see if the errors stop.

notla0782 · April 16, 2016

Yes each machine has its own backup set.

Followed your suggestion to rebuild the catalog file and executed another backup. It ran successfully with many of the same warnings and errors as noted in my previous post. Current log is posted below. I will create a new backup set and try again later today.

+   Executing Toshiba backup at 4/15/2016 12:20 PM
       Using thorough rebuild
       4/15/2016 12:20:12 PM: Finished scanning backup set data files
   To Backup Set Backup Set C875D I_D...
       Can't use Open File Backup option for TI106426W0A (C:) on XXXXX-C875D, error -557 (transaction already complete)

-   4/15/2016 12:20:11 PM: Copying TI106426W0A (C:) on XXXXX-C875D
       4/15/2016 4:29:21 PM: lvtrRescan: FSSGetChangeTree
       4/15/2016 4:29:24 PM: lvtrRescan: TAppendCB
       4/15/2016 4:31:30 PM: lvtrRescan: T1CompareCB
       4/15/2016 4:33:30 PM: lvtrRescan: T1Compare
       4/15/2016 4:33:30 PM: lvtrRescan: TMatchRemove
       4/15/2016 4:33:31 PM: lvtrRescan: FSSSetChangeTree
       4/15/2016 4:33:45 PM: lvtrRescan: FSSSetChangeTree Finished
       4/15/2016 4:33:45 PM: Found: 225,439 files, 40,242 folders, 324.0 GB
       4/15/2016 4:33:47 PM: Finished matching
       Backing up 2 out of 143 files using block level incremental backup, storing full backups for remaining 141.
       User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:) on XXXXX-C875D"
       4/15/2016 4:36:21 PM: Copying: 150,572 files (281.2 GB) and 0 hard links
       T-21: Error on pattern C:\Documents and Settings\*
       File "C:\Program Files\AVAST Software\Avast\setup\vps_32-12e0.vpx": can't read, error -1101 (file/directory not found)
       File "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{01576e26-eac5-11e5-bf45-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{05414bfc-7d16-11e5-bf29-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{06f6194b-829d-11e5-bf2a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{06f61d6f-829d-11e5-bf2a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{073af24b-f62c-11e5-bf4a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{073af26c-f62c-11e5-bf4a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{0931cf88-71c7-11e5-bf23-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{0bfc3691-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{0bfc36bc-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{0bfc495b-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{0bfc49dd-f852-11e5-bf4d-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{12bbf4ea-3afd-11e5-bf16-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{13400807-e587-11e5-bf41-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{1db9848c-3009-11e5-bf11-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{1e431dae-2520-11e5-bf0c-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{1fadac5c-dcf0-11e5-bf3f-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{2049e2c3-b895-11e5-bf3a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{2049e2e4-b895-11e5-bf3a-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
   4/16/2016 12:37:44 AM: Building Snapshot...
       File "C:\Windows\System32\config\RegBack\SOFTWARE": can't read, error -1017 (insufficient permissions)
       and 101 others
       Can't back up System State, error -557 (transaction already complete)
       4/16/2016 12:38:12 AM: Copying Snapshot: 1 files (69.3 MB)
       4/16/2016 12:38:17 AM: Snapshot stored, 69.3 MB
   4/16/2016 12:38:17 AM: 2 execution errors       Remaining: 122 files, 217.7 GB
       Completed: 150450 files, 64.7 GB
       Performance: 137.5 MB/minute
       Duration: 12:18:06 (04:16:53 idle/loading/preparing)

       4/16/2016 12:38:17 AM: Compressing catalog file
-   4/16/2016 12:38:28 AM: Verifying Backup Set C875D I_D
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       Xca::ArxExec: error calling ArxGetDiskFileInfo(), error -696 (unknown)
       and 102 others
   4/16/2016 12:52:10 AM: Execution completed successfully       Completed: 150450 files, 64.7 GB
       Performance: 4984.4 MB/minute
       Duration: 00:13:41 (00:00:24 idle/loading/preparing)

       4/16/2016 12:52:10 AM: Compressing catalog file

notla0782 · April 17, 2016

After a catalog rebuild and a new backup set, the latest backup finished with 3 errors and numerous warnings. Operation log posted below:

+   Executing Toshiba backup at 4/16/2016 6:09 PM
       Using thorough rebuild
       4/16/2016 6:09:07 PM: Finished scanning backup set data files
   To Backup Set Backup Set C875D I_D1...
       Can't use Open File Backup option for TI106426W0A (C:) on XXXXX-C875D, error -557 (transaction already complete)

-   4/16/2016 6:09:06 PM: Copying TI106426W0A (C:) on XXXXX-C875D
       4/16/2016 6:45:15 PM: lvtrRescan: FSSGetChangeTree
       4/16/2016 6:45:18 PM: lvtrRescan: TAppendCB
       4/16/2016 6:47:26 PM: lvtrRescan: T1CompareCB
       4/16/2016 6:49:28 PM: lvtrRescan: T1Compare
       4/16/2016 6:49:28 PM: lvtrRescan: TMatchRemove
       4/16/2016 6:49:29 PM: lvtrRescan: FSSSetChangeTree
       4/16/2016 6:49:35 PM: lvtrRescan: FSSSetChangeTree Finished
       4/16/2016 6:49:35 PM: Found: 230,567 files, 40,427 folders, 326.0 GB
       4/16/2016 6:49:35 PM: Finished matching
       User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:) on XXXXX-C875D"
       4/16/2016 6:52:11 PM: Copying: 229,906 files (297.3 GB) and 0 hard links
       T-21: Error on pattern C:\Documents and Settings\*
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\AppxBlockMap.xml": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\AppxManifest.xml": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\AppxSignature.p7x": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\resources.pri": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\AppxMetadata\CodeIntegrity.cat": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\hxcalendarresim.dll": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\hxcommintl.dll": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\hxmailintl.dll": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\mso.acl": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\msointl30_winrt.dll": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\msointlimm.dll": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\outlook_whatsnew.xml": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\wintlim.dll": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\xlsrvintl.dll": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\locimages\10146_20x20x32.png": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\locimages\10146_24x24x32.png": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\locimages\10146_32x32x32.png": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_neutral_vi-vn_8wekyb3d8bbwe\vi-vn\locimages\10146_40x40x32.png": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml": can't read, error -1101 (file/directory not found)
       File "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40791.0_x64__8wekyb3d8bbwe\AppxManifest.xml": can't read, error -1101 (file/directory not found)
   4/17/2016 7:16:08 AM: Building Snapshot...
       File "C:\Windows\System32\DriverStore\FileRepository\wdmaudio.inf_amd64_5641cde732058628\portcls.sys": can't read, error -1101 (file/directory not found)
       and 1,344 others
       Can't back up System State, error -557 (transaction already complete)
       4/17/2016 7:16:37 AM: Copying Snapshot: 1 files (71.0 MB)
       4/17/2016 7:16:41 AM: Snapshot stored, 71.0 MB
   4/17/2016 7:16:41 AM: 2 execution errors       Remaining: 1365 files, 218.2 GB
       Completed: 228541 files, 79.4 GB
       Performance: 110.4 MB/minute
       Duration: 13:07:35 (00:51:53 idle/loading/preparing)

       4/17/2016 7:16:41 AM: Compressing catalog file
-   4/17/2016 7:16:54 AM: Verifying Backup Set C875D I_D1
   4/17/2016 7:33:41 AM: Execution completed successfully       Completed: 228541 files, 79.4 GB
       Performance: 4965.6 MB/minute
       Duration: 00:16:47 (00:00:25 idle/loading/preparing)

       4/17/2016 7:33:42 AM: Compressing catalog file

.

Lennart_T · April 18, 2016

It might be a permissions problem. The user running Retrospect (server) doesn't have enough permissions to access all files/folders on the client. Please see the User's Guide on how to set up permissions for the "Retrospect" user.

It might also be a problem with the disk directory on the client, although some/most/all of the errors and warnings can probably be blamed on lack of permissions. Just for good measure, repair the client C: volume with CHDSK.

http://en.wikipedia.org/wiki/Chkdsk

Scillonian · April 18, 2016

It might be a permissions problem. The user running Retrospect (server) doesn't have enough permissions to access all files/folders on the client. Please see the User's Guide on how to set up permissions for the "Retrospect" user.

The SYSTEM account is a built in account of Windows and should basically have access to everywhere. Under default settings Retrospect will only run on the backup server under this account when it is being run by the Launcher Service for a scheduled backup when the main Retrospect application is not running. ~~(I'm not near a system to check at the moment but I'm fairly certain that the client software does run under the SYSTEM account.)~~ By default the Retrospect Client (RemotSvc.exe, retroclient.exe, pcpds.exe) run under the SYSTEM account.

As there are three clients and only one is giving problems I would tend to think the account under which Retrospect is running on the backup server has the correct permissions. Another option is the configuration file has been corrupted on the backup server.

It might also be a problem with the disk directory on the client, although some/most/all of the errors and warnings can probably be blamed on lack of permissions.

The 'can't read, error -1101 (file/directory not found)' errors in the 'C:\Program Files\WindowsApps\' can be ignored. All it means is that between scanning the volume, particularly if InstantScan is used, and copying the files the files were removed when, in this case, the Windows Store updated the respective apps. (I had a bunch of these last evening on a clients.)

Edited April 18, 2016 by Scillonian

notla0782 · April 19, 2016

ran CHKDSK on client. Errors found and fixed. A backup is scheduled for Tuesday night. At this point, I am not sure what to do about the permissions.

notla0782 · April 20, 2016

The log for the latest backup run follows. There are fewer warnings and errors for this run. I would think that running CHKDSK fixed the cause of some of the errors. Thanks for the suggestion. How do I handle the permissions?

+   Executing Toshiba backup at 4/20/2016 12:19 AM
       Using thorough rebuild
       4/20/2016 12:19:23 AM: Finished scanning backup set data files
   To Backup Set Backup Set C875D I_D1...

-   4/20/2016 12:19:22 AM: Copying TI106426W0A (C:) on Alton-C875D
       4/20/2016 12:31:31 AM: lvtrRescan: FSSGetChangeTree
       4/20/2016 12:31:34 AM: lvtrRescan: TAppendCB
       4/20/2016 12:33:39 AM: lvtrRescan: T1CompareCB
       4/20/2016 12:35:38 AM: lvtrRescan: T1Compare
       4/20/2016 12:35:38 AM: lvtrRescan: TMatchRemove
       4/20/2016 12:35:39 AM: lvtrRescan: FSSSetChangeTree
       4/20/2016 12:35:43 AM: lvtrRescan: FSSSetChangeTree Finished
       4/20/2016 12:35:43 AM: Found: 224,954 files, 40,146 folders, 113.8 GB
       4/20/2016 12:35:46 AM: Finished matching
       Backing up 5 out of 8 files using block level incremental backup, storing full backups for remaining 3.
       User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:) on Alton-C875D"
       4/20/2016 12:38:18 AM: Copying: 72,569 files (17.5 GB) and 20,582 hard links
       File "C:\System Volume Information\{00f0bd7b-063c-11e6-bf57-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{a3e980e7-0699-11e6-bf57-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{a3e9810b-0699-11e6-bf57-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
   4/20/2016 1:51:57 AM: Building Snapshot...
       4/20/2016 1:52:00 AM: Copying VSS writer files
       4/20/2016 1:53:18 AM: Finished copying VSS writer files
       4/20/2016 1:54:02 AM: Copying Snapshot: 349 files (301.4 MB)
       4/20/2016 1:54:11 AM: Snapshot stored, 301.4 MB
   4/20/2016 1:54:13 AM: 1 execution errors       Remaining: 4 files, 6.0 GB
       Completed: 72565 files, 11.6 GB, with 35% compression
       Performance: 160.3 MB/minute
       Duration: 01:34:50 (00:21:12 idle/loading/preparing)

       4/20/2016 1:54:13 AM: Compressing catalog file
-   4/20/2016 1:54:21 AM: Verifying Backup Set C875D I_D1
   4/20/2016 1:55:50 AM: Execution completed successfully       Completed: 93147 files, 14.4 GB
       Performance: 11275.0 MB/minute
       Duration: 00:01:28 (00:00:10 idle/loading/preparing)

       4/20/2016 1:55:51 AM: Compressing catalog file
       NetConnTop::PreDispose: m_deferredPackets.MaxCount=11

Lennart_T · April 20, 2016

How do I handle the permissions?

Page 19 in the User's Guide:

Creating a Retrospect User Account

In order to back up any disk, remote share, and SQL or Exchange database, Retrospect must be run under a user account that has access to those disks and databases.

Retrospect, Inc. recommends that you create an account that has administrator access to all resources before installing Retrospect.

.....

Make this account a member of:

Domain Users

Domain Admins

Administrators

Backup Operators

http://download.retrospect.com/docs/win/v11/user_guide/Retrospect_Win_User_Guide-EN.pdf

I think the key words here are "create an account". This implies not trying to use a "built-in" account.

Scillonian · April 20, 2016

Have a look at this post from June 2006 which gives a possible workaround for this error:

User "SYSTEM" has restricted NTFS rights for "Local Disk (C:) on SERVER"

This would suggest the problem is on the client. It is worth a look in the Event Viewer on the laptop to see if there are any errors or warnings recorded around the time of the backup errors.

notla0782 · April 27, 2016

I apologize about not responding sooner, but "life interfered" this past week. On all the clients, I am using a created account that has administrator rights. A backup is running now on the affected client. I will look in the Event viewer later as suggested and reread the June 2006 post. BTW, I had to manually start the backup tonight because the scheduled backup failed almost immediately. The client was up and running. The Retrospect client software was waiting for login. Here is the log:

+   Normal backup using Toshiba backup at 4/26/2016 11:30 PM
       Using thorough rebuild
       4/26/2016 11:30:01 PM: Finished scanning backup set data files
   To Backup Set Backup Set C875D I_D1...
       Can't access backup client XXXXX-C875D, error -525 (wrong client found at that address)       4/26/2016 11:30:04 PM: Compressing catalog file
   4/26/2016 11:30:05 PM: Execution incomplete

Via the Configure>Clients, I selected the client's Access tab. It had right IP address displayed so I clicked on the change button and I entered it in the window and clicked OK. A display was returned asking permission to replace the name, XXXXX-C875D with XXXXX-C875D. My response is OK. After that, a manual start was done. Any thoughts?

Scillonian · April 27, 2016

ran CHKDSK on client. Errors found and fixed. A backup is scheduled for Tuesday night. At this point, I am not sure what to do about the permissions.

Possible the errors on the disk have done some damage to Windows that cannot be fixed automatically. From my experience the only reliable long term fix is a reinstall of Windows. When I have tried to repair these type of problems they work for a while but eventually creep back again.

Via the Configure>Clients, I selected the client's Access tab. It had right IP address displayed so I clicked on the change button and I entered it in the window and clicked OK. A display was returned asking permission to replace the name, XXXXX-C875D with XXXXX-C875D. My response is OK. After that, a manual start was done. Any thoughts?

Something changed on the Client to make Retrospect think it is a different Client even though the names were the same. This change could be related to the errors CHKDSK found earlier.

Run CHKDSK again to see if it finds any more errors.

notla0782 · May 4, 2016

Ran CHKDSK again. no errors reported. What switches should be used when running CHKDSK for this instance? Backup is running now. Had to start it manually. Same process as last week.

notla0782 · May 4, 2016

this is the log from the most recent backup run. It is not much different from last week's run as far as errors and warnings are concerned. BTW the last CHKDSK command was run with '/B'.

+   Executing Toshiba backup at 5/3/2016 11:42 PM
       Using thorough rebuild
       5/3/2016 11:42:08 PM: Finished scanning backup set data files
   To Backup Set Backup Set C875D I_D1...

-   5/3/2016 11:42:07 PM: Copying TI106426W0A (C:) on XXXXX-C875D
       5/3/2016 11:53:26 PM: lvtrRescan: FSSGetChangeTree
       5/3/2016 11:53:28 PM: lvtrRescan: TAppendCB
       5/3/2016 11:55:35 PM: lvtrRescan: T1CompareCB
       5/3/2016 11:57:41 PM: lvtrRescan: T1Compare
       5/3/2016 11:57:41 PM: lvtrRescan: TMatchRemove
       5/3/2016 11:57:42 PM: lvtrRescan: FSSSetChangeTree
       5/3/2016 11:58:02 PM: lvtrRescan: FSSSetChangeTree Finished
       5/3/2016 11:58:02 PM: Found: 216,267 files, 40,386 folders, 120.2 GB
       5/3/2016 11:58:07 PM: Finished matching
       Backing up 5 out of 11 files using block level incremental backup, storing full backups for remaining 6.
       User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:) on XXXXX-C875D"
       5/4/2016 12:00:46 AM: Copying: 51,547 files (20.4 GB) and 18,332 hard links
       File "C:\System Volume Information\{00f0bd7b-063c-11e6-bf57-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{62adfc1e-119d-11e6-bf59-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{62adfc50-119d-11e6-bf59-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{a3e980e7-0699-11e6-bf57-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{a3e9810b-0699-11e6-bf57-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{b1bb22a6-0a29-11e6-bf58-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{c077c00d-0c22-11e6-bf58-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       File "C:\System Volume Information\{c077c02b-0c22-11e6-bf58-4c72b959901f}{3808876b-c176-4e48-b7ae-04046e6cc752}": can't read, error -1017 (insufficient permissions)
       T-32: --ERR-- (2088) ReadStation tryReadFile: BRRead err=-1127
       T-32: --ERR-- (2088) ReadStation: workUntilEnd:-1127 seq=47127
       T-32: --ERR-- (4980) ChecksumStation: workUntilEnd:-1127 seq=72893
       T-32: --ERR-- (8484) Terminal: workUntilEnd:-1127 seq=72893
       T-32: --ERR-- (3576) BackupReadCloseAsync: err=-1127
       File "C:\Windows\System32\WDI\{533a67eb-9fb5-473d-b884-958cf4b9c4a3}\{2f60262c-46f2-4f3e-a00c-da1f260338c0}\snapshot.etl": can't read, error -1127 (data error detected in file using cyclic redundancy check)
       T-32: --ERR-- (3576) TPipelineMgr::tryStartPipeline: m_outQ->error=-1127 m_whyEnd=-1127
       T-32: --ERR-- (3576) TPipelineMgr::tryStartPipeline: error=-1127
   5/4/2016 12:52:57 AM: Building Snapshot...
       5/4/2016 12:52:59 AM: Copying VSS writer files
       5/4/2016 12:54:12 AM: Finished copying VSS writer files
       5/4/2016 12:54:56 AM: Copying Snapshot: 349 files (299.0 MB)
       5/4/2016 12:55:04 AM: Snapshot stored, 299.0 MB
   5/4/2016 12:55:05 AM: 1 execution errors       Remaining: 10 files, 11.3 GB
       Completed: 51537 files, 9.2 GB, with 25% compression
       Performance: 179.5 MB/minute
       Duration: 01:12:58 (00:20:49 idle/loading/preparing)

       5/4/2016 12:55:05 AM: Compressing catalog file
-   5/4/2016 12:55:13 AM: Verifying Backup Set C875D I_D1
   5/4/2016 12:56:31 AM: Execution completed successfully       Completed: 69869 files, 11.9 GB
       Performance: 10673.5 MB/minute
       Duration: 00:01:17 (00:00:09 idle/loading/preparing)

Lennart_T · May 4, 2016

On all the clients, I am using a created account that has administrator rights.

OK, what about the Retrospect server, then?

A user that is a member of "Domain Admin" and the others listed in the manual.

User "SYSTEM" has restricted NTFS rights

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

can't read, error -1017 (insufficient permissions)

Those errors speak for themselves, I think.

You are still having permissions problems. I would check the permissions on the mentioned folders for the user running Retrospect.

Scillonian · May 4, 2016

OK, what about the Retrospect server, then?

A user that is a member of "Domain Admin" and the others listed in the manual.

The Domain Users and Domain Admins only exist for computers that are members of an [Active Directory] domain. On computers that are stand alone or members of a workgroup only the Administrators and Backup Operators exist.

On my current backup server, which is a dedicated Windows 10 Pro 64-bit machine, the user that Retrospect runs under is only a member of the Administrators group and I have had no permissions problems with either the backup server or any clients. I have added the user to the Backup Operators group in the past but as I tend to reinstall Windows around yearly on the backup server and its active backup I often forget to do this but have never noticed a difference.

Those errors speak for themselves, I think.

You are still having permissions problems. I would check the permissions on the mentioned folders for the user running Retrospect.

I still believe the Windows 10 installation on the client is the problem because:

I use a desktop to run Retrospect v11 running windows 10. I have three v11 clients that also run windows 10. However, this issue only occurs on one client, a laptop, that travels when I travel.

If the user permissions were wrong on the backup server then all three clients should be affected. On the clients the Retrospect Client runs under the SYSTEM [user] account. From the errors the permissions for the SYSTEM account on the laptop are not what they should be. On the other two clients they are what they should. The problem is, aside from reinstalling Windows, there is no easy way correct permissions problems with system (as in built in) accounts. (On Windows 10 going to 'Settings > Update and recovery > Recovery > Reset this PC' may work but I've never successfully used this feature for any of the Windows 10 problems I've had.)

On the backup server the user account under which Retrospect is running needs sufficient network permissions to access the clients and the sufficient permissions necessary to write to and read from the backup set member files.

Just out of interest for the moment what model is the Toshiba laptop?

Lennart_T · May 5, 2016

The Domain Users and Domain Admins only exist for computers that are members of an [Active Directory] domain.

Yes, of course.

The problem is that notla0782 hasn't told us anything about the use of Active Directory or not, so it can't be ruled out.

Scillonian · May 5, 2016

The problem is that notla0782 hasn't told us anything about the use of Active Directory or not, so it can't be ruled out.

True. Just assuming no Active Directory because we're on the board for the desktop version of Retrospect. It would help if the Retrospect User Guide noted these account groups only exist on domain computers.

Also hasn't told us which edition (Desktop, Single Server, Etc) of Retrospect they are using, which edition or editions (Home, Pro, Enterprise, etc) of Windows 10 they are using and whether clean installs or upgrades from earlier versions of Windows for each machine.

notla0782 · May 8, 2016

Here are the answers to your musings...

First of all, this is a home backup setup. I backup another desktop and two laptops. The desktops are custom builds. I am not using domain computers.

The other laptop is a HP p010nr.running Windows 10 Home which was upgraded from Windows 8.1.

The Toshiba laptop model is C875D-S7225. It was upgraded from Win 8.1 to Windows 10 Pro .

The Retrospect version is Retrospect Perm Upgrade Desktop v.11 for Windows.

The backup machine runs Windows 10 Pro also upgraded from Win 8.1.

The other desktop is running Windows 10 Home upgraded from Windows 7 (I think)

User "SYSTEM" has restricted NTFS rights for "TI106426W0A (C:)

Recommended Posts

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Join the conversation