read only in windows 10 directories. main hd and external

Kbird · 02 Oct 2016

I am not sure either , it should not even be 142GB as with compression it should save 15-25% on that too.

Have a look in the Macrium Other Tasks>View Windows VSS Events and see if there are errors ?

You may need to "fix" the VSS Errors 1st ( other tasks) or perhaps run Macrium without VSS ( in Options/Defaults)

Even after the image is made Macrium will (should) Verify the image , so it may appear to Run longer than just making the Image.

You may need to now delete other macrium attempts to backup to the Passport manually to make room for another attempt , which shouldn't be an issue since it looks like there should be roughly 240gb on the Passport free.

KB

JoshuaM · 02 Oct 2016

it says

Date 9/30/2016 10:05:12 PM
Type Error
Event 513
Source Microsoft-Windows-CAPI2

Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object.

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.

System Error:
Access is denied.
.

note: after I stopped it, it deleted the attempt automatically. by the way, the driver directory in windows 10 only has system permissions (trusted installer) by default. not even administrator permissions.

Kbird · 02 Oct 2016

The (Shadow) System Writer Object mentioned is the VSS Service AFAIK which is why i suggested a backup without VSS enabled to see if you can get around that Error.

#513 error is here and it is the VSS (Shadow Copy System Writer)
Event ID 513 â€” Shadow Copy System Writer Functionality

*** edit just Try the Verify Part at the bottom of the Tech Writeup , the rest may not be Win10?
ie

In the command prompt window, type vssadmin list writers.
Ensure that Writer Name: 'System Writer' is displayed in the list.

Ok I wasn't sure if it crashed you were able to just stop it nicely and it had cleaned up after itself. .....

JoshuaM · 02 Oct 2016

Kbird said:

The (Shadow) System Writer Object mentioned is the VSS Service AFAIK which is why i suggested a backup without VSS enabled to see if you can get around that Error.

#513 error is here and it is the VSS (Shadow Copy System Writer)
Event ID 513 â€” Shadow Copy System Writer Functionality

*** edit just Try the Verify Part at the bottom of the Tech Writeup , the rest may not be Win10?
ie

In the command prompt window, type vssadmin list writers.
Ensure that Writer Name: 'System Writer' is displayed in the list.

Ok I wasn't sure if it crashed you were able to just stop it nicely and it had cleaned up after itself. .....

so basically, here is a problem.. I don't know right now, but originally when I set my main account as administrator, I was not part of administrators group for some reason.. I am probably not in administrators group now, or I might be, but it is likely that due to what you are saying, that it kept trying to make shadow copies, but failed. I thought the picture I had attached said it was successful, but I know that it kept writing, and it also said that error occurred the same time that the shadow copies are notated.
it was a hectic thing to try to change permissions last time, and then after that, all of my system got read only, and supposedly a virus.. so.. do I need to try and go without VSS, or try to follow the thing above from probably another version of windows?

Kbird · 02 Oct 2016

try without VSS and see if successful 1st

JoshuaM · 03 Oct 2016

okay, it is in process.. but i selected to create an image of the selected partitions in order to restore windows.. it also said the same amount of memory (142 gb). will it still create the same image needed as "Image selected disks on computer?" i think that they are all listed on 'disk 1."

Note: i don't know how to exclude VSS. i had set some setting to exclude writing or something like that. however, it still had this log:

Imaging Summary

	Backup Definition File:	G:\win10imagebackup\My Backup(1).xml
	Auto Verify:	N
	Maximum File Size:	Automatic
	Compression:	High
	Password:	N
	Intelligent Copy:	N
	Power Saving:	N
	Email On Success:	N
	Email On Failure:	N
	Total Selected:	141.21 GB

Destination:
	Backup Type:	Full
	File Name:	G:\win10imagebackup\3B83DF34657E6283-00-00.mrimg

Operation 1 of 5
	Hard Disk:	1
	Drive Letter:	N/A
	File System:	FAT32 (LBA)
	Label:	NO NAME
	Size:	256.0 MB
	Free:	170.8 MB
	Used:	85.2 MB

Operation 2 of 5
	Hard Disk:	1
	Drive Letter:	N/A
	File System:	Unformatted
	Label:
	Size:	16.0 MB
	Free:	0 B
	Used:	16.0 MB

Operation 3 of 5
	Hard Disk:	1
	Drive Letter:	C
	File System:	NTFS
	Label:	Windows
	Size:	913.93 GB
	Free:	787.79 GB
	Used:	126.14 GB

Operation 4 of 5
	Hard Disk:	1
	Drive Letter:	N/A
	File System:	NTFS
	Label:	Windows RE tools
	Size:	980.0 MB
	Free:	434.9 MB
	Used:	545.1 MB

Operation 5 of 5
	Hard Disk:	1
	Drive Letter:	D
	File System:	NTFS
	Label:	RECOVERY
	Size:	16.35 GB
	Free:	1.91 GB
	Used:	14.44 GB

Starting Image - Monday, October 3, 2016 11:19:28 AM
	Initializing
	Destination Drive:	My Passport (G:) - Free Space 241.38 GB
	Free space threshold:	Delete oldest backup sets when free space is less than 5.00 GB

	Creating Volume Snapshot - Please Wait
Volume Snapshots Created

Saving Partition - NO NAME
	Reading File System Bitmap
	Saving Partition

Saving Partition -
	Reading File System Bitmap
	Saving Partition

Saving Partition - Windows (C:)
	Reading File System Bitmap
	Saving Partition
	New File: 241 GB	3B83DF34657E6283-00-00.mrimg
	No space on destination.

Kbird · 03 Oct 2016

I believe on a GPT Disk with standard Partitions it is the same thing and will Image 4 partitions , I am not sure about your D: though, as it is a HP Recovery Partition , I am not sure If win10/macrium would deem that as necessary? I don't have that so can't check it.

You can check and do a separate image of just D: if needed.

KB.

JoshuaM · 03 Oct 2016

however, it still is saying 241 GB available. highest compression it starts to write, then for some reason it writes 230 gb instead of 141? shouldn't a compressed file be taking up less space? do I need to put it on low compression?

Kbird · 03 Oct 2016

I always use Medium ....... but it depends on the type of file on how much it can be compressed or not....

KB

simrick · 03 Oct 2016

Hi guys. If I may:
JoshuaM - from your Macrium screenshot of your partitions, I see about 141GB used space which needs to be backed up.

read only in windows 10 directories. main hd and external-joshua-partitions.png

But your instruction set says you're trying to backup 241GB on the C partition.

read only in windows 10 directories. main hd and external-joshua-partitions01.png

How can this be? It doesn't make sense.
If you chose intelligent sector copy, it would copy 126.21GB of data; if you chose the forensic/exact copy, it would say 913.93GB. So I am not sure what's happening. Do you have over 100GB sitting in your recycle bin? Could this be a result of an active infection? Should we proceed with the scans in post #21 and forgo the backup until we are able to accomplish it?

Didn't mean to butt in, but have been watching from the sidelines. :)