Answered by:
Best route for data recovery

Question
-
Greetings.
My WHS seemes to have gone haywire over a short period of time.. From what I can tell, I may be experiencing multiple issues (seen on the forums). My only goal is to recover the data in shared folders (I know... bad admin for not having this backup elsewhere already. It's a new setup and haven't done this yet).
This is a custom built machine with WHS+PP1. (Install media contains PP1). I have two identical 500G Segate SATA drives. I am backing up a Windows XP desktop and a Vista Ultimate MCE. I have a handful of shared folders (~10) and all but two are duplicated.
Out of the issues I am experiencing; they are:
-File conflict errors
-"Backup service is not running"
-Unhealty secondary drive
-Shared folders showing unhealtyI have some event logs below for more info, but the real (and most important) question I have at this point is how is the best way to go about getting a copy of my data in shared folders data off of the server? I am not really concerned with resolving the issues/performance of the WHS at this point. I have a feeling that most (if not all) of the issue is the drive controller on the motherboard (I had issues with another setup). I've got another machine that I have put the drives in, but not sure where to start.
-If I add the drives to another machine, where do I grab the files from? (reviewed one document, but it wasn't too clear on where they are kept)
-I saw some check disk attempts before removing them from the WHS. Should I run checkdisk first before copying?
-Should I mirror the drives and then try a repair from WHS? (I didn't want to try the repair initially from WHS, and am scared to death I may have some issue similar to http://support.microsoft.com/default.aspx?scid=kb%3bEN-US%3b950193)
-Can anyone suggest a good SATA controller card? ;-)Thanks in advance.
-Dana
Events
================================================
an unexpected error has occured in the windows home server storage managerEvent Type: Error
Event Source: HomeServer
Event Category: Backup
Event ID: 267
Date: 11/19/2008
Time: 9:48:04 PM
User: N/A
Computer: DATASTORE
Description:
Client Backup server failed at d:\wssg_src\whs_pp1\qhs\src\backup\util\diskfile.cpp(145)For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: HomeServer
Event Category: Backup
Event ID: 272
Date: 11/19/2008
Time: 9:48:04 PM
User: N/A
Computer: DATASTORE
Description:
Unexpected error 0x48f from CreateFile on D:\folders\{00008086-058D-4C89-AB57-A7F909A47AB4}\Commit.dat: The device is not connected.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: HomeServer
Event Category: PersistentDriveLetter
Event ID: 1280
Date: 11/19/2008
Time: 9:45:11 PM
User: N/A
Computer: DATASTORE
Description:
Persistent Drive Letter Service failed: Starting service: No attempts to start the service have been made since the last boot.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Ntfs
Event Category: Disk
Event ID: 55
Date: 11/19/2008
Time: 9:49:47 PM
User: N/A
Computer: DATASTORE
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:\fs\5.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0d 00 04 00 02 00 52 00 ......R.
0008: 02 00 00 00 37 00 04 c0 ....7..À
0010: 00 00 00 00 02 01 00 c0 .......À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: c2 00 22 00 Â.".Event Type: Warning
Event Source: VSS
Event Category: None
Event ID: 12290
Date: 11/19/2008
Time: 9:48:36 PM
User: N/A
Computer: DATASTORE
Description:
Volume Shadow Copy Service warning: GetVolumeInformationW(\\?\Volume{3d0cf23f-97af-11dd-8a0f-b3aa3001473b}\,NULL,0,NULL,NULL,[0x00000000], , 260) == 0x00000570. hr = 0x00000000.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 20 43 6f 64 65 3a 20 - Code:
0008: 53 50 52 50 52 4f 56 43 SPRPROVC
0010: 30 30 30 30 32 32 34 34 00002244
0018: 2d 20 43 61 6c 6c 3a 20 - Call:
0020: 53 50 52 50 52 4f 56 43 SPRPROVC
0028: 30 30 30 30 32 31 37 36 00002176
0030: 2d 20 50 49 44 3a 20 20 - PID:
0038: 30 30 30 30 33 31 30 38 00003108
0040: 2d 20 54 49 44 3a 20 20 - TID:
0048: 30 30 30 30 33 31 33 32 00003132
0050: 2d 20 43 4d 44 3a 20 20 - CMD:
0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
0060: 57 53 5c 53 79 73 74 65 WS\Syste
0068: 6d 33 32 5c 73 76 63 68 m32\svch
0070: 6f 73 74 2e 65 78 65 20 ost.exe
0078: 2d 6b 20 73 77 70 72 76 -k swprv
0080: 2d 20 55 73 65 72 3a 20 - User:
0088: 4e 54 20 41 55 54 48 4f NT AUTHO
0090: 52 49 54 59 5c 53 59 53 RITY\SYS
0098: 54 45 4d 20 20 20 20 20 TEM
00a0: 2d 20 53 69 64 3a 20 20 - Sid:
00a8: 53 2d 31 2d 35 2d 31 38 S-1-5-18
00b0: 2d 20 45 72 72 6f 72 3a - Error:
00b8: 47 65 74 56 6f 6c 75 6d GetVolum
00c0: 65 49 6e 66 6f 72 6d 61 eInforma
00c8: 74 69 6f 6e 57 28 5c 5c tionW(\\
00d0: 3f 5c 56 6f 6c 75 6d 65 ?\Volume
00d8: 7b 33 64 30 63 66 32 33 {3d0cf23
00e0: 66 2d 39 37 61 66 2d 31 f-97af-1
00e8: 31 64 64 2d 38 61 30 66 1dd-8a0f
00f0: 2d 62 33 61 61 33 30 30 -b3aa300
00f8: 31 34 37 33 62 7d 5c 2c 1473b}\,
0100: 4e 55 4c 4c 2c 30 2c 4e NULL,0,N
0108: 55 4c 4c 2c 4e 55 4c 4c ULL,NULL
0110: 2c 5b 30 78 30 30 30 30 ,[0x0000
0118: 30 30 30 30 5d 2c 20 2c 0000], ,
0120: 20 32 36 30 29 20 3d 3d 260) ==
0128: 20 30 78 30 30 30 30 30 0x00000
0130: 35 37 30 20 20 20 20 20 570Monday, January 12, 2009 7:14 AM
Answers
-
Hi Dana,
If I add the drives to another machine, where do I grab the files from? (reviewed one document, but it wasn't too clear on where they are kept)
the files are on each of the DATA volumes in the hidden folder DE (subfolder shares). So you need to toggle the Show hidden files and folders option in Explorer. On one disk you will find the files, on the other the duplicates. Which from them are intact, cannot be said due to file system issues without copying/reading them.
I saw some check disk attempts before removing them from the WHS. Should I run checkdisk first before copying?
Yes, you can do this even in your server. Maybe it solves the issue already. Check this FAQ.
Should I mirror the drives and then try a repair from WHS?
If you mean copy the data with mirroring, that would be good, while using a disk cloning tool does not work well with WHS.
Since a Server Reinstallation (contradictionary to a new install) only touches the system volume, you would be safe here. But since your problem seems to come from one of your data disks, the result cannot be predicted.
Best greetings from Germany
Olaf- Marked as answer by Danamatt Wednesday, January 14, 2009 8:01 AM
Monday, January 12, 2009 9:22 AMModerator
All replies
-
Hi Dana,
If I add the drives to another machine, where do I grab the files from? (reviewed one document, but it wasn't too clear on where they are kept)
the files are on each of the DATA volumes in the hidden folder DE (subfolder shares). So you need to toggle the Show hidden files and folders option in Explorer. On one disk you will find the files, on the other the duplicates. Which from them are intact, cannot be said due to file system issues without copying/reading them.
I saw some check disk attempts before removing them from the WHS. Should I run checkdisk first before copying?
Yes, you can do this even in your server. Maybe it solves the issue already. Check this FAQ.
Should I mirror the drives and then try a repair from WHS?
If you mean copy the data with mirroring, that would be good, while using a disk cloning tool does not work well with WHS.
Since a Server Reinstallation (contradictionary to a new install) only touches the system volume, you would be safe here. But since your problem seems to come from one of your data disks, the result cannot be predicted.
Best greetings from Germany
Olaf- Marked as answer by Danamatt Wednesday, January 14, 2009 8:01 AM
Monday, January 12, 2009 9:22 AMModerator -
Well if you second hard drive is bad/failing you should still have a "copy" of all the files in folders you selected for duplication. Backups will be gone hence the backup service error.Since the (extra/new) hard drive is in a diff box, you could just try to copy the files from the server share. If it was in the server you could use the backup server option to copy the shares.Always best to have an "extra" copy of your files, but you should retain your duplicated folders/data when you remove the bad hard drive using the tools/links in the server console. Again no hope for your computer backups though.When you get all this sorted you may consider adding a 3rd drive to backup your backup database.Still.....
GreyMonday, January 12, 2009 3:28 PMModerator -
Awesome. Thanks gang. The hidden attribute was throwing me off.
Data recovered. Now to play around with trying to fix the darn thing...Wednesday, January 14, 2009 8:02 AM