Windows Backups Failing with Associated VSS 8193 Errors

 

Hi, this is Michael Koeppl again. I’m with the Premier Mission Critical (PMC) Team and assisting customers when they hit OS issues in their critical infrastructure, and today I wanted to talk with you about an interesting Windows Backup issue I encountered.

My customer realized that his System State Backups (https://technet.microsoft.com/en-us/library/cc938537.aspx) on one of his DCs stopped working and asked if I could have  a look.

In the Application Event Log was a prominent VSS error saying something about a ConvertStringSidToSid function which failed.

clip_image002

Here’s the original text for better searchability:

Log Name:      Application
Source:        VSS
Date:          27.06.2017 21:00:21
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      MYcomputer.anydomain.net

Description:
Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-2828234547-00000000000-1509355905-1125.bak).  hr = 0x80070539,
The security ID structure is invalid.

Operation:
OnIdentify event
Gathering Writer Data

Context:
Execution Context: Shadow Copy Optimization Writer
Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
Writer Name: Shadow Copy Optimization Writer
Writer Instance ID: {74a61a33-665e-4041-b325-726825b2bf8e}

This was followed by a 521 Event from Windows Backup telling you that the Backup operation failed.

clip_image004

Why?

The hint was already in the event details from the VSS error:

ConvertStringSidToSid(S-1-5-21-2828234547-00000000000-1509355905-1125.bak)

Can you spot the SID with the BAK extension at the end?

So we looked at the ProfileList regkey on that machine.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

And here it is:

clip_image006

We followed this KB (947215) and ultimately removed the Profile with the BAK extension and started another Windows SystemState Backup, which succeeded without any errors.

The User Profile Service failed the logon. User profile cannot be loaded
http://support.microsoft.com/kb/947215/en-us

Here’s an automated way to clean up the old profiles from that list.

Script to fix issues described in KB947215 (PowerShell)

https://gallery.technet.microsoft.com/scriptcenter/Script-to-fix-issues-ab65f43e

Hope you enjoyed the quick excursion from VSS to profiles with an easy solution at the end.

Greetings,

Michael