Can't backup Windows Server 2008 R2 (X64 Enterprise) with BA client

McAfee

It appears this was being caused by McAfee AntiVirus... Removed McAfee and the backup completed successfully. I plan to speak with McAfee about this so they can add a global exclusion.
 
Or maybe we'll just skip that file..

After speaking with our McAfee administrator I decided to instead just add a global exclude for that file on the TSM server. I thought I had it right... but it's not working.. the backup still fails while attempting to access that file for the systemstate. Can anybody see what I did wrong? Here's the result of a "query inclexcl" on the Client:

Code:
tsm> query inclexcl
*** FILE INCLUDE/EXCLUDE ***
Mode Function  Pattern (match from top down)  Source File
---- --------- ------------------------------ -----------------
Excl Directory *\...\.TsmCacheDir             TSM
Excl Directory c:\Windows\system32\microsoft\protect Operating System
Excl Directory C:\Windows\winsxs              Operating System
Excl Directory C:\Windows\Vss\Writers         Operating System
Excl Directory C:\Windows\tasks               Operating System
Excl Directory C:\Windows\system32\wbem\repository Operating System
Excl Directory C:\Windows\system32\tasks      Operating System
Excl Directory C:\Windows\System32\Microsoft\Protect Operating System
Excl Directory C:\Windows\system32\LogFiles\WMI\RtBackup Operating System
Excl Directory C:\Windows\system32\DriverStore\FileRepository Operating System
Excl Directory C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE
} Operating System
Excl Directory C:\Windows\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE
} Operating System
Excl Directory C:\Windows\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295E
E} Operating System
Excl Directory C:\Windows\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295E
E} Operating System
Excl Directory C:\Windows\servicing\packages  Operating System
Excl Directory C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microso
ft\SoftwareProtectionPlatform Operating System
Excl Directory C:\Windows\Registration        Operating System
Excl Directory C:\Windows\assembly            Operating System
Excl Directory C:\ProgramData\Microsoft\Network\Downloader Operating System
Excl Directory C:\programdata\Microsoft\Crypto\RSA\MachineKeys Operating System
Excl Directory C:\adsm.sys                    Operating System
[B]Exclude All       *\...\TFTP.EXE                 Server[/B]
Exclude All       *\...\Program Files\System Center Operations Manager 2007\Heal
th Service State\Health Service Store\tmp.edb Server
Exclude All       *\...\Program Files\System Center Operations Manager 2007\Heal
th Service State\Health Service Store\edbtmp.log Server
Exclude All       *\...\Program Files\System Center Operations Manager 2007\Heal
th Service State\Health Service Store\edb.log Server
Exclude All       *\...\Program Files\System Center Operations Manager 2007\Heal
th Service State\Health Service Store\HealthServiceStore.edb Server
Exclude All       *\windows\system32\spool\*.*   Server
Exclude All       *\quarantine\*.*               Server
Exclude All       *\...\program files\IBM\Director\data\*.* Server
Exclude All       *\...\i386\...\*               Server
Exclude All       *\...\_date*.dat               Server
Exclude All       *\...\network associates\...\* Server
Exclude All       *\...\perflib*.dat             Server
Exclude All       *\...\Usrclass.dat.log         Server
Exclude All       *\...\Usrclass.dat             Server
Exclude All       *\...\*.mdf                    Server
Exclude All       *\...\*.ldf                    Server
Exclude All       *\...\io.sys                   Server
Exclude All       *\msdos.sys                    Server
Exclude All       *\ibmdos.com                   Server
Exclude All       *\ibmio.com                    Server
Exclude All       *\microsoft uam volume\...\*   Server
Exclude All       *\...\Temporary Internet Files\* Server
Exclude All       *\...\recycler\*               Server
Exclude All       *\...\cache\*                  Server
Exclude All       *\...\temp\...\*               Server
Exclude All       *\...\ntuser.dat.log           Server
Exclude All       *\...\ntuser.dat               Server
Exclude All       *\...\system32\config\...\*    Server
Exclude All       *\...\netlogon.chg             Server
Exclude All       *\...\pagefile.sys             Server
Exclude Archive   *\dsmthreshmig.bin             Operating System
Exclude Archive   *\dsmrecon.bin                 Operating System
Exclude All       *\dsmthreshmig.bin             Operating System
Exclude All       *\dsmrecon.bin                 Operating System
Exclude All       C:\Windows\usrclass.dat.log    Operating System
Exclude All       C:\Windows\usrclass.dat        Operating System
Exclude All       C:\Windows\system32\NtmsData\...\* Operating System
Exclude All       C:\Windows\system32\MSDtc\trace\dtctrace.log Operating System
Exclude All       C:\Windows\system32\MSDtc\MSDTC.LOG Operating System
Exclude All       C:\Windows\system32\LogFiles\WMI\RtBackup\*.* Operating System
Exclude All       c:\windows\system32\driverstore\infcache.* Operating System
Exclude All       c:\windows\system32\driverstore\*.dat Operating System
Exclude All       C:\Windows\system32\config\system.log Operating System
Exclude All       C:\Windows\system32\config\system Operating System
Exclude All       C:\Windows\system32\config\software.log Operating System
Exclude All       C:\Windows\system32\config\software Operating System
Exclude All       C:\Windows\system32\config\security.log Operating System
Exclude All       C:\Windows\system32\config\security Operating System
Exclude All       C:\Windows\system32\config\sam.log Operating System
Exclude All       C:\Windows\system32\config\sam Operating System
Exclude All       C:\Windows\system32\config\default.log Operating System
Exclude All       C:\Windows\system32\config\default Operating System
Exclude All       C:\Windows\system32\config\components.log Operating System
Exclude All       C:\Windows\system32\config\components Operating System
Exclude All       C:\Windows\System32\Bits.log   Operating System
Exclude All       C:\Windows\System32\Bits.bak   Operating System
Exclude All       C:\Windows\softwaredistribution\...\*.* Operating System
Exclude All       C:\Windows\serviceprofiles\networkservice\ntuser.dat.log Opera
ting System
Exclude All       C:\Windows\serviceprofiles\networkservice\ntuser.dat Operating
 System
Exclude All       C:\Windows\serviceprofiles\localservice\ntuser.dat.log Operati
ng System
Exclude All       C:\Windows\serviceprofiles\localservice\ntuser.dat Operating S
ystem
Exclude All       C:\Windows\netlogon.chg        Operating System
Exclude All       C:\Windows\Minidump\...\*      Operating System
Exclude All       C:\Windows\memory.dmp          Operating System
Exclude All       c:\windows\inf\setupapi.ev*    Operating System
Exclude All       C:\Users\cmmc223\AppData\Local\Temp\...\* Operating System
Exclude All       C:\Users\cmmc223\...\index.dat Operating System
Exclude All       C:\System Volume Information\SRM\Rules\*.xml Operating System
Exclude All       C:\System Volume Information\SRM\Reports\*.xml Operating Syste
m
Exclude All       C:\System Volume Information\SRM\Properties\*.xml Operating Sy
stem
Exclude All       C:\System Volume Information\SRM\Modules\*.xml Operating Syste
m
Exclude All       C:\System Volume Information\SRM\FileManagementTasks\*.xml Ope
rating System
Exclude All       C:\StorageReports\Scheduled\*.* Operating System
Exclude All       C:\StorageReports\Interactive\*.* Operating System
Exclude All       C:\StorageReports\Incident\*.* Operating System
Exclude All       C:\ProgramData\Microsoft\Windows\WER\...\* Operating System
Exclude All       C:\ProgramData\Microsoft\RAC\Temp\* Operating System
Exclude All       C:\ProgramData\Microsoft\RAC\StateData\* Operating System
Exclude All       C:\ProgramData\Microsoft\RAC\PublishedData\* Operating System
Exclude All       C:\ProgramData\Microsoft\RAC\Outbound\* Operating System
Exclude All       C:\ProgramData\Microsoft\RAC\* Operating System
Exclude All       C:\ProgramData\Microsoft\Network\Downloader\* Operating System
Exclude All       *\System Volume Information\MountPointManagerRemoteDatabase Op
erating System
Exclude All       *\System Volume Information\...\*{3808876B-C176-4e48-B7AE-0404
6E6CC752} Operating System
Exclude All       *\System Volume Information\*.{7cc467ef-6865-4831-853f-2a4817f
d1bca}DB Operating System
Exclude All       *\System Volume Information\*.{7cc467ef-6865-4831-853f-2a4817f
d1bca}ALT Operating System
Exclude All       *\Pagefile.sys                 Operating System
Exclude All       *\hiberfil.sys                 Operating System
No DFS include/exclude statements defined.
tsm>

I bolded the relevant line.. so it is getting picked up.. but I guess there is something wrong with my syntax.. I thought that statement would exclude any and all files named "tftp.exe" no matter where they are. Is that not the case?
 
Opened a PMR with IBM about this.. apparently exclude/include statements have no effect on systemstate backups... it's all or nothing and you cannot exclude individual files.

Based on this my only option is to set the virus scanner to allow access.. McAfee EPO has an option that will allow certain executables to have access to tftp.exe.

Tested it and it's still not working... I'll let you know if I get a McAfee setting that works.
 
A systemstate backup is done by Windows, not TSM. So TSM excludes don't effect a systemstate backup at all (with the exeception of certain objects, like you can exclude the entire RSM database if you wish).

What I did was just delete tftp.exe (and you'll have to remove it from the system protected files first so it just doesn't copy it back). You'll need to disable (not remove, just disable) McCafee while you're doing this.

We had the same exact problem with several Windows 2003 servers and McCafee
 
Our McAfee guy was finally able to get a setting set on the EPO server so that McAfee allowed access to TFTP.EXE on this specific server. That fixed the problem. I guess we'll have to do the same on all 2008 R2 Enterprise x64 machines from this point on.
 
Hi guys,

About the TSM System State problem that we had (read previous messages; FSRM part), TSM BA Client v 6.1.3.1 is solving it. It add a TESTFLAG SKIPLPM that skips 'missing' system state component in a cluster environment (i.e. some cluster ressources are on NodeA , others on NodeB , TSM whine about some missing 'drives' when backuping System State.)

http://www-01.ibm.com/support/docview.wss?rs=663&tc=SSGSG7&uid=swg21403384

Read fixed Appars for TSM BA Client v. 6.1.3.1
 
So.... you fellas have no issues running 6.1.*.* client code when the server may be 5.5?

I wonder why IBM continues to update the 5.5 client code rather than focus efforts on 6.1.

We have the same problems on our 2K8 64bit clients (most of which are VMs)
 
Has anyone got this resolved?

I have windows 2008 on cluster. TSM systemstate failed as it does not exclude what I have placed in the registry for Systemstatebackup via windows 2008 backup server feature.

Window backup feature works after this hotfix from http://support.microsoft.com/default.aspx?scid=kb;EN-US;980794 is applied however TSM systemstate still pick up all those invalid path.

All my invalid paths are on shared cluster disk in such those on passive node will fail.

Anyone have managed to get tsm to backup systemstate successfully? Am running ba client 6.2.2 on Windows 2008 64bit sp2.

TSM Server is 6.2.2 running on windows 2008 Std 64bit sp2.
 
Hello Folks!

Has anyone got this issue fixed? I have the same error! going to Microsoft is not really an option for me simply because I cant or my windows system-admin wont rather.

Please refer the error below

08/03/2011 12:06:33 psfssub.cpp (4093): psIsHardLink(): Failed to get link information for file <\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy16\Windows\winsxs\x86_ntprint.inf.resources_31bf3856ad364e35_6.0.6001.18000_en-us_0837c78311803b3e\PCL4RES.DLL.mui>. rc is 5
08/03/2011 12:06:33 ANS1228E Sending of object 'xxxxxxx\SystemState\NULL\System State\SystemState' failed
08/03/2011 12:06:33 ANS4007E Error processing 'xxxxxxx\SystemState\NULL\System State\SystemState': access to the object is denied

Regards,
TSMDumber
 
ANS5269E The Microsoft Volume Shadow Copy Services writer 'Task Scheduler Writer' current state (VSS_WS_STABLE) is not valid for the current operation or cannot be determined. The last error reported is '00000000'.
07/10/2013 20:47:42 ANS5250E An unexpected error was encountered.
TSM function name : GetFileSecurityInfo
TSM function : CreateFile() returned '123' for file '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy418\Windows\System32\Perfc???.dat'
 
'ANS5269E reported by STABLE writer' error was oslved in newer version of TSM client.
perfc*.dat - if you don't need performance counters logs, exclude those files.
 
Back
Top