Hi,

I'm using SBS 2003 Premium Edition with SP 1.

I have been backing up successfully for months now. However, my backups
failed for the last couple of days. Please let me know if anyone has any
ideas on how to fix this.

This is the log file:

2/21/2007 11:30 PM
-------------------------------
Date: 2/21/2007
Time: 11:30 PM
User: SYSTEM
-------------------------------

Backup Runner started.
Launching NTBackup: ntbackup.exe backup "@C:\Program Files\Microsoft Windows
Small Business Server\Backup\Small Business Backup Script.bks" /d "SBS Backup
created on 2/21/2007 at 11:30 PM" /v:yes /r:no /rs:no /hc:off /m normal /j
"Small Business Server Backup Job" /l:s /f "E:\Backup Files\Small Business
Server Backup (02).bkf" /UM
NTBACKUP LOG FILE: C:\Documents and Settings\SBS Backup User\Local
Settings\Application Data\Microsoft\Windows NT\NTBackup\data\backup01.log
=====================<BEGIN NTBACKUP LOG FILE>=====================
Backup Status
Operation: Backup
Active backup destination: File
Media name: "Small Business Server Backup (02).bkf created 2/21/2007 at
11:30 PM"

Volume shadow copy creation: Attempt 1.
Backup (via shadow copy) of "C: "
Backup set #1 on media #1
Backup description: "SBS Backup created on 2/21/2007 at 11:30 PM"
Media name: "Small Business Server Backup (02).bkf created 2/21/2007 at
11:30 PM"

Backup Type: Normal

Backup started on 2/21/2007 at 11:32 PM.
Warning: Unable to open "C:\Program Files\Exchsrvr\Mailroot\vsi
1\UceArchive\ARCH_2007021922331607521422.EML" - skipped.
Reason: Access is denied.
Warning: Unable to open "C:\Program Files\Exchsrvr\Mailroot\vsi
1\UceArchive\ARCH_2007021923342706691446.EML" - skipped.
Reason: Access is denied.
Backup completed on 2/22/2007 at 1:42 AM.
Directories: 5555
Files: 92476
Bytes: 41,009,912,965
Time: 2 hours, 10 minutes, and 4 seconds
Backup of "MTS-SBS\Microsoft Information Store\First Storage Group"
Backup set #2 on media #1
Backup description: "SBS Backup created on 2/21/2007 at 11:30 PM"
Media name: "Small Business Server Backup (02).bkf created 2/21/2007 at
11:30 PM"

Backup Type: Normal

Backup started on 2/22/2007 at 1:43 AM.
Backup completed on 2/22/2007 at 2:20 AM.
Directories: 4
Files: 5
Bytes: 11,984,347,950
Time: 37 minutes and 40 seconds
Backup (via shadow copy) of "System State"
Backup set #3 on media #1
Backup description: "SBS Backup created on 2/21/2007 at 11:30 PM"
Media name: "Small Business Server Backup (02).bkf created 2/21/2007 at
11:30 PM"

Backup Type: Copy

Backup started on 2/22/2007 at 2:22 AM.
Backup completed on 2/22/2007 at 2:25 AM.
Directories: 273
Files: 2798
Bytes: 603,746,181
Time: 3 minutes and 15 seconds

----------------------

Verify Status
Operation: Verify After Backup
Active backup destination: File
Active backup destination: E:\Backup Files\Small Business Server Backup
(02).bkf

Verify of "C:"
Backup set #1 on media #1
Backup description: "SBS Backup created on 2/21/2007 at 11:30 PM"
Verify started on 2/22/2007 at 2:25 AM.
Verify completed on 2/22/2007 at 2:39 AM.
Directories: 5555
Files: 92476
Different: 0
Bytes: 41,009,912,965
Time: 14 minutes and 13 seconds

Verify of "MTS-SBS\Microsoft Information Store\First Storage Group"
Backup set #2 on media #1
Backup description: "SBS Backup created on 2/21/2007 at 11:30 PM"
Verify started on 2/22/2007 at 2:39 AM.
Verify completed on 2/22/2007 at 2:43 AM.
Directories: 4
Files: 0
Different: 0
Bytes: 11,984,347,950
Time: 4 minutes and 15 seconds

Verify of "System State"
Backup set #3 on media #1
Backup description: "SBS Backup created on 2/21/2007 at 11:30 PM"
Verify started on 2/22/2007 at 2:43 AM.
Verify completed on 2/22/2007 at 2:44 AM.
Directories: 273
Files: 2798
Different: 0
Bytes: 603,746,181
Time: 16 seconds

----------------------

=======================<END NTBACKUP LOG FILE>=====================
NTBackup finished the backup with errors.

For more information about failed backups, see the article on
troubleshooting your backup at the following Web page:
http://go.microsoft.com/fwlink/?LinkId=18414

Backup ended at Thursday, February 22, 2007 2:44 AM
Backup Runner finished.

Hi Rgarcia,

It appears you're archiving UCE. When you do that, the email may bypass your
Exchange Anti-virus scanning. If that's the case, and the UCE is infected -
then your file space scanning may pick it up, and you'll get the behaviour
you have.

You have to either stop archiving UCE, or exclude the archive from real-time
anti-virus scanning.

For example:

a) use a reputable block list service (configured in Exchange).
b) use IMF, set to reject (not archive) at a fairly high level, say 7 or8
(configured in exchange)
c) use a good Exchange anti-virus application, such as Trend CSM and set the
virus action to 'delete'.
d) use a good anti-spam application, such as Trend CSM, and elect to either
server-side quarantine or send to an end-user quarantine (spam folder). CSM
offers either or - and automatically excludes the defalt server side
quarantine from real-time anti-virus scanning.

a) blocks a lot of spam, a lot of which is also virus/malware infected -
saves your server resources
b) does more of the same as a)
c) knocks out whatever malware is left
d) allows you to have some control over what's left so far as identifying
false positives.

It's an email gauntlet that is very effective.

Thank you for your reply.

I didn't realized I was archiving UCE. I have a few questions:

Is there a right way to delete all of the UCE from Exchange. I mean, I don't
want to archive so how do I delete it from my Server? I can follow your
instructions on how to set it to reject instead of archive... but how do I
delete all of the UCE I already have archived?

In this scenario... what folder archives the UCE so I can exclude it from
anti-virus real-time scanning?

What folder do I need to exclude from real-time scanning

Let me know. Thanks.

"Les Connor [SBS MVP]" wrote:
[..]

C:\progam files\exchsrvr\vsi1\uce I think. You just click one, ctrl A,
shift and delete and they all go bye bye. It might take a while
though. Double check to empty trash can but the shift delete is
supposed to bypass the trash can.

On Thu, 22 Feb 2007 14:35:04 -0800, Rgarcia
<Rgarcia> wrote:
[..]

Backups are working again. Deleting all of the UCE fixed my problem.

Thanks!!

"Jim Behning SBS MVP" wrote:
[..]