I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
Ed
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
Ed Cryer <ed@somewhere.in.the.uk> wrote:
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
I've not seen that message. Image backup, or logical (file) backup?
Some causes could be interrupted backup process, not enough space for
the backup on the destination drive, power outage even if momentary,
write error on the destination drive, interference by anti-virus
software, running high or critical priority processes that hog the CPU
so Reflect cannot function. Did you check the backup log?
Did you get a Windows update, but have not rebooted yet to ensure the
fileset was in sync that got changed?
I produced an image of my C disk today, and got an initial message that I've not seen before; a warning that parts of the operating system wouldn't be saved.
How long has this been going on?
Ed
On 01/12/2024 14:10, Ed Cryer wrote:
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
Ed
If you are imaging the C: drive while the system is running then not everything is copied because some files are protected by the operating
system while they are used.
You can create a rescue media which can be used to boot-up the machine
to clone/image the system disk.
You asked how long this has been going on. The short answer is as long
as "MOST" imaging software were created. I never backup the system disk
while the machine is running. Rescue Media is what I use 100% of the time.
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
Ed
VanguardLH wrote:
Ed Cryer <ed@somewhere.in.the.uk> wrote:
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
I've not seen that message. Image backup, or logical (file) backup?
Some causes could be interrupted backup process, not enough space for
the backup on the destination drive, power outage even if momentary,
write error on the destination drive, interference by anti-virus
software, running high or critical priority processes that hog the CPU
so Reflect cannot function. Did you check the backup log?
Did you get a Windows update, but have not rebooted yet to ensure the
fileset was in sync that got changed?
I've been doing this same C backup for years. Suddenly the message appears. I've often restored from the image; always successfully.
Today's backup finished ok. The log just says image completed successfully.
Maybe you're right about some critical priority process running. Just a
very infrequent coincidence. I'll see what happens next time.
Ed
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
Ed
Ed Cryer wrote:
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
PaulNoSpam suspects a VSS error.
The Reflect folder contains file "vssfixx64.exe".
Run that and see if it helps.
Paul in Houston TX <Paul@Houston.Texas> wrote:
Ed Cryer wrote:
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
PaulNoSpam suspects a VSS error.
The Reflect folder contains file "vssfixx64.exe".
Run that and see if it helps.
The OP hasn't look at the Reflect log for the failed backup job, so the
error code noted in the article below may not be what he got:
https://knowledgebase.macrium.com/display/KNOWX/VSS+Error%3A+0x8004230F
I have Reflect, and it already has the vssfixx64.exe in its folder. The properties for mine says it is version 1.0.2.1. The downloaded x64 file
from the above article is the same version.
Besides the possible causes already mentioned, I didn't about the OP
using another VSS product, like ShadowProtect.
https://knowledgebase.macrium.com/display/KNOWX/VSS+fails+due+to+modification+by+3rd+party+software
"vssadmin list writers" will show what others there are. Nothing popped
out as obvious for Reflect's VSS writer. The names aren't all obvious. "vssadmin list providers" only shows me the one from Microsoft. At HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers in
the registry, there is only 1 entry (showing the MS provider). Perhaps
a VSS provider can register themself at the time they are called.
And for an even more esoteric cause:
There are spurious errors that remain unresolved that logs won't reveal
the causes. They'll reveal an error code, but not the causes. For
example, gamma radiation can significantly disrupt the circuitry in a computer: ionizing atoms, flipping bits in memory, causing random
errors. I didn't bother to check solar history to see if there was a
recent gamma burst from the Sun, or if Earth happened to be in the
sweeping path of a pulsar. I haven't seen "radiation hardened
computers" for sale to consumers, but then I never looked since I wasn't going to spend $200K to $300K on one.
On Sun, 12/1/2024 8:15 PM, VanguardLH wrote:
And for an even more esoteric cause:
There are spurious errors that remain unresolved that logs won't reveal
the causes. They'll reveal an error code, but not the causes. For
example, gamma radiation can significantly disrupt the circuitry in a
computer: ionizing atoms, flipping bits in memory, causing random
errors. I didn't bother to check solar history to see if there was a
recent gamma burst from the Sun, or if Earth happened to be in the
sweeping path of a pulsar. I haven't seen "radiation hardened
computers" for sale to consumers, but then I never looked since I wasn't
going to spend $200K to $300K on one.
Normally, I would cast scorn on this idea, but I did have
my *wrist watch* disturbed while it was sitting on my desk
here. I wasn't watching it, but the settings were "all screwy"
and the battery was still good.
Normal energy cosmic rays, shouldn't be able to do that
on 3 micron CMOS. CMOS has high noise margins to begin
with, as logic goes, and large geometry means that
a cosmic ray, at most, should upset one bit kind of thing,
not blow the bloody doors off it.
So something energetic happened, at a guess.
Maybe a cosmic ray went through the watch sideways,
but even that would not flip everything.
The metal of the watch, should give some protection
from an RF attack (say, a microwave beam).
That's the reason I now have two wrist watches sitting
on the desk. Yet another experiment, to see if there is
ever a next time for one of these, both watches are
kicked around or not. Other devices in the room, were
not affected. It's not like all sorts of stuff dropped
at the same time.
*******
With regard to the OPs device, it has 50 bytes of error
syndrome to protect 512 bytes of data. Even if hit with
a chain saw, it should be able to correct the error
and reconstitute the data. It should still be able to boot.
If you subjected a flash device to an XRay source, you
might be able to erase part of it that way. But how many
portable XRay sources do you have around the house ?
I don't think I have anything here, to give me 40kV to work
with. The best I can do is around 15kV.
Paul
On Sun, 12/1/2024 9:18 AM, LiverpoolFC Fan wrote:
On 01/12/2024 14:10, Ed Cryer wrote:
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
Ed
If you are imaging the C: drive while the system is running then not
everything is copied because some files are protected by the operating
system while they are used.
You can create a rescue media which can be used to boot-up the machine
to clone/image the system disk.
You asked how long this has been going on. The short answer is as long
as "MOST" imaging software were created. I never backup the system disk
while the machine is running. Rescue Media is what I use 100% of the time. >>
Incorrect.
Most all of the backup softwares use VSS during a backup.
This is a mechanism for doing "hot" backups of the C: partition
in particular.
The way this works, is softwares with issues (like the OS), they
have to have a "provider" to quiesce certain files. When VSS is
triggered and a shadow copy made (a "frozen" snapshot of the OS partition), there is a ten second interval, where the providers are told it is
time to quiesce. And that's when the shadow is made.
Some files have not been getting backed up. Perhaps the Windows.db or Windows.edb of the SearchIndexer did not get backed up. I don't
think the Pagefile.sys gets backed up. Even though the traffic level
on that file is a *lot* different than in past OSes, it is unlikely
to be a good candidate for the design.
Thus, you will find things missing from a backup. But these are
also not "critical" items. If the pagefile.sys was replaced with
a like-sized file of zeros, you'd never notice at boot time.
And the Windows.edb can be regenerated. As a derived file, it's
not a critical file.
As the system gets more features involving virtualization,
it's hard to comment on the "things you can't see". Maybe
something like that is causing the OPs problem.
But generally speaking, the OS and the applications
are familiar with VSS and the shadow copy system and this
is why we're not freaking out about making backups
while the computer is running.
*******
Now, *if* a users computer has a problem, such as the VSS subsystem
is down, then on Macrium at least, it switches to PSS and that
is its own invention. That likely would be missing some additional files.
I would interpret the OPs message as an indication that
something is wrong with VSS, as a first approximation.
Shadows can be persistent or non-persistent. Macrium may use
persistent shadows for "incremental forever" or "incremental".
There have definitely been cases of some competing backup
products, using up all 64 shadow slots and running out! And
that would represent a failure of sorts. A design failure
by the backup software maker.
vssadmin list shadows
On WinXP, the difference was supposed to be, it did not support
persistent shadows, and you could have a shadow long enough to
make a full backup without a problem. I wasn't always convinced
that it did not have persistent shadows, as sometimes the shadow
list had an entry or two that should not have been there.
Paul
Everything looks OK. The image file is slightly larger than the previous
one; the log consists of one line - image successful; ...
Ed Cryer <ed@somewhere.in.the.uk> wrote:
[...]
Everything looks OK. The image file is slightly larger than the previous
one; the log consists of one line - image successful; ...
You probably mean the message in the popup window of the current
backup, or in the 'Logs' *list*. But the actual log should be much
longer (not that I expect more relevant info there):
'Logs' tab -> double click the relevant entry in the list (or
right-click it -> View)
(this is for the last free version, 8.0.7783)
Ed Cryer wrote:
Frank Slootweg wrote:
Ed Cryer <ed@somewhere.in.the.uk> wrote:
[...]
Everything looks OK. The image file is slightly larger than the previous >>> one; the log consists of one line - image successful; ...
You probably mean the message in the popup window of the current
backup, or in the 'Logs' *list*. But the actual log should be much
longer (not that I expect more relevant info there):
'Logs' tab -> double click the relevant entry in the list (or
right-click it -> View)
(this is for the last free version, 8.0.7783)
That's the stuff that rolls up the screen during runtime. And yes, all
OK. And no mention of the warning I saw (which, incidentally, had the option to "not show again"; as if it were purely informational).
I'm on version 8.0.7783 also. So it's not a recent update.
So then, why haven't I had that display previously? Strange occurrence.
^M
Ed
https://www.dropbox.com/scl/fi/s70y6pifzb0e69wtllpok/Macrium-msg.jpg?rlkey=75kmtcripzu018e8fq84nvn3p&e=1&dl=0
The Macrium message box.
Ed Cryer <ed@somewhere.in.the.uk> wrote:
Ed Cryer wrote:
Frank Slootweg wrote:
Ed Cryer <ed@somewhere.in.the.uk> wrote:
[...]
Everything looks OK. The image file is slightly larger than the previous >>>>> one; the log consists of one line - image successful; ...
  You probably mean the message in the popup window of the current
backup, or in the 'Logs' *list*. But the actual log should be much
longer (not that I expect more relevant info there):
  'Logs' tab -> double click the relevant entry in the list (or
right-click it -> View)
(this is for the last free version, 8.0.7783)
That's the stuff that rolls up the screen during runtime. And yes, all
OK. And no mention of the warning I saw (which, incidentally, had the
option to "not show again"; as if it were purely informational).
I'm on version 8.0.7783 also. So it's not a recent update.
So then, why haven't I had that display previously? Strange occurrence.
^M
Ed
https://www.dropbox.com/scl/fi/s70y6pifzb0e69wtllpok/Macrium-msg.jpg?rlkey=75kmtcripzu018e8fq84nvn3p&e=1&dl=0
The Macrium message box.
[Re-typed text of JPG file:]
"Macrium Reflect
Backup may not include all required partitions
It appears as if you are trying to create a backup of the operating system.
The current selection may not include all partitions neccessary for this.
Preceed anyway?
[ ] Do not show this again [OK] [Cancel]"
Ah, this *is* a familiar one and a bit different from what you said in
your OP, which was "a warning that parts of the operating system
wouldn't be saved", while the actual warning talks about not including
all *partitions* (not "parts").
I've only seen this warning message when creating or modifying a
Backup Definition file (Do you use a Backup Definition File?), but
perhaps it can also occur during other situations.
Anyway, as you said "I produced an image of my C disk today", the
warning message is exactly telling you that: You didn't include all the partitions needed to create a backup of your operating system, because
you didn't include the other 'boot' recovery, etc. partitions.
So if you tell us how exactly your perform your image backup, i.e. the detailed steps from starting Macrium Reflect till the actual warning
message occurs, we might be able to determine why you get the message.
I produced an image of my C disk today, and got an initial message that
I've not seen before; a warning that parts of the operating system
wouldn't be saved.
How long has this been going on?
Ed
Therefore, I can do a full system restore from the latest image without
any loss or corruption.
On 03/12/2024 19:28, Ed Cryer wrote:
Therefore, I can do a full system restore from the latest image without
any loss or corruption.
IT'S ALL VERY WELL BUT DOES THE SYSTEM STILL BOOT-UP AFTER YOU HAVE
RESTORED FROM THE BACKUPS? MANY TIMES PEOPLE REPORT THAT THEIR SYSTEM
CAN'T BOOT-UP FROM IMAGES AND SO THEY RESORT TO COMPLETE INSTALLATION OF
OS AND ALL APPLICATIONS THAT THEY ARE USING.
THEIR PERSONAL DATA IS GONE FOREVER BECAUSE THEY RELIED ON THEIR BACK-UP SCHEDULE THAT THEY HAD DEVISED 40 YEARS AGO!! THEY FORGOT THE BASIC HEX ROUTINE OF TESTING THE BACK-UP RESTORATION.
Paul wrote on 12/2/24 7:20 PM:
    https://i.postimg.cc/N0hDy3Wc/partition-sets.gif
   Paul
With Macrium I also choose the MSR(locsted after System, prior to Windows and WinRE partitions.
Macrium when MSR is present auto selects MSR and Recovery when choosing the image selected disks option. When choosing the option to image the partitions required to backup and restore Windows - the MSR and WinRE require user selection.
Ed Cryer wrote:
I produced an image of my C disk today, and got an initial message that I've not seen before; a warning that parts of the operating system wouldn't be saved.
How long has this been going on?
Ed
The C drive has 3 partitions
PQSERVICE
SYSTEM RESERVED
Win-10
All previous Macrium images contain all three. The latest contains only two, the SYSTEM RESERVED (100MB) isn't saved.
That partition contains boot information in files dated on the day the OS was first initialised; apart from, that is, an empty $RECYCLE.BIN and an empty System Volume Information folder.
Therefore, I can do a full system restore from the latest image without any loss or corruption.
The question remains; when did this change in Macrium Reflect come in? What caused it? Some change in my system or an update to the program? I suspect the latter, and wait for others to report the message appearing on their systems.
On Tue, 12/3/2024 2:28 PM, Ed Cryer wrote:
Ed Cryer wrote:
I produced an image of my C disk today, and got an initial message that I've not seen before; a warning that parts of the operating system wouldn't be saved.
How long has this been going on?
Ed
The C drive has 3 partitions
PQSERVICE
SYSTEM RESERVED
Win-10
All previous Macrium images contain all three. The latest contains only two, the SYSTEM RESERVED (100MB) isn't saved.
That partition contains boot information in files dated on the day the OS was first initialised; apart from, that is, an empty $RECYCLE.BIN and an empty System Volume Information folder.
Therefore, I can do a full system restore from the latest image without any loss or corruption.
The question remains; when did this change in Macrium Reflect come in? What caused it? Some change in my system or an update to the program? I suspect the latter, and wait for others to report the message appearing on their systems.
That pattern is a W10-over-W7 installation.
The PQSERVICE might be 15GB or so, and contain Windows 7 Factory.
I have a clean Win10 install on MSDOS partitioning, and it looks like this. and I know that I can't quite reproduce your setup. Maybe my laptop
would come the closest, but I can't remember for sure whether that
was a Clean, or W10-over-W7 install.
[Picture]
https://i.postimg.cc/HWqMPBxZ/W10-MSDOS-Partition-WAFFLES-Samsung-256.gif
OK, this one is a bit closer to a W10-over-W7 with MSDOS partitioning (LAPTOP).
The System Reserved is on the right side of C: and the upgrade process
(of creating additional System Reserved and not cleaning up the decommissioned
System Reserved), is not possible for the Windows Update logic to handle.
The System Reserved was made larger for the WinRE larger size issue.
Since there are only four primary partitions on MSDOS and (snicker) I used them all up, Windows is prevented from making a mess.
[Picture]
https://i.postimg.cc/FRnq01j6/LAPTOP-partition-table-MSDOS.gif
While that is closer to yours, it's not a perfect match by any stretch.
It's just in the same ballpark. I didn't take a PQEDIT32 picture,
as the boot flag will be where the "boot" label is recorded in the second picture.
*******
Any time a partition size is disturbed, you should make a new Backup settings file or edit the existing one. That's one of the problems of living in a dynamic environment, where you don't control everything. You have to notice when something is broken, then consider how many backup images
have been broken by the change (like in the middle of a Full+Incrementals set), then do
whatever is necessary to kick off a new set of backups, with
amended partition info. Whatever it happens to want.
Complete sets of old backups are not broken as such. If you had
to restore to a brand new hard drive, the thing would boot and so on.
And if you restore to a partition which is smaller, Macrium does not
mind, unless the total files won't fit in the partition :-) Macrium
support resize-on-restore, a handy feature.
Should you test the ability to boot a restoration ?
Yes.
And the "spare drive" you purchase for this test case,
of restoring to a new drive, that "spare drive" functions
as your "replacement drive" when the other one wears out.
It's not wasted money, the spare drive will come in handy
when the time comes. If you sell the computer, you can sell
the spare with it, at recovery cost price.
*******
If you still have a copy of "ImgToVHD.exe" that Macrium used to have,
that can convert a "small" MRIMG (a full backup) to a VHD file.
The VHD file can be mounted in Windows in Disk Management, and
then you can use ordinary tools for measuring the size of partitions
and so on. An MRIMG can also be mounted in Windows, for forensic
purposes, using the Macrium option to mount an image. There should
generally be ways of gaining forensic analysis capability, to
compare the older sets of backups, to any newer sets, if the need arises.
Paul
Hi, Paul
I have the full solution now, and it's so simple that I feel almost ashamed of myself for not having solved it earlier without having to post here.
You've been a good friend over the years, so I'll state it baldly.
The GUI of Macrium Reflect didn't have the SYSTEM RESERVED partition ticked; and I didn't originally notice.
As to why it wasn't ticked, I can only speculate. My best guess is some slip of my hand.
Now that I've ticked it, the GUI always presents with it already ticked.
Ed
It's no wonder that amidst all that mystery about our minds, people
run paranoid about the rise of AI and how its own future wellbeing will
bring it into collision with organic minds; and then they'll try and wipe us out.
You might just as well tell us about how God wiped out this or that city, this or that world. Mysticism, speculation and fodder for cooks on
soapboxes at Hyde Park Corner.
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 508 |
Nodes: | 16 (0 / 16) |
Uptime: | 242:12:08 |
Calls: | 9,986 |
Calls today: | 4 |
Files: | 13,836 |
Messages: | 6,358,541 |