Backup job failing with error a0008488 Access is denied.

Posted on 2006-07-06
Last Modified: 2012-06-27
I'm having a problem where when backing up WinSvr2k, Exchange 2k Standard SP3 with BE Version 9.0 Rev. 4454 I started getting a error a0008488 Access is denied, along with the errors listed below after our misconfigured AV Symantec 9 ran a full scan on the exchange server.

This wasn't caught until after a full tape rotation had occurred, so restoring the IS is not an option. On this specific backup job the verify option was turned off. Also I've been able to restore random emails that needed to be restored without any error's. I've been doing a bit of research, and have came across anything from creating a new IS to scrapping the server and starting all over (not an option). The items that are being backup are as follows: Exchsrvr folder, MS Exch Mailboxes, MS Exch Public Folders, System State, MS IS. When I uncheck the IS it backs up everything without any errors.

Being that we are using Exchagne Standard we don't have the option to create another IS on the server, so I was considering the option of copying the EDB, STM, and log files to a temporary Exch Server long enough to delete the current Storage Group and create a new one, and then copy the EDB, STM, and log files back over to the orginial server. Before I went through that trouble I wanted to see if anyone has ran into this issue before and if so how you resolved it.

Completed status: Failed
Final error code: a0008488 HEX
Final error description: Access is denied.

Final error category: Security Errors

Backup - \\Server\Microsoft Information Store\First Storage Group Access denied to database Mailbox Store (Server).
Access denied to database Public Folder Store (Server).
Access denied to database Log files.

Backup - \\Server\Microsoft Information Store\First Storage Group WARNING: "\\Server\Microsoft Information Store\First Storage Group\Mailbox Store (Server)" is a corrupt file.
This file cannot verify.
WARNING: "\\Server\Microsoft Information Store\First Storage Group\Public Folder Store (Server)" is a corrupt file.
This file cannot verify.
WARNING: "\\Server\Microsoft Information Store\First Storage Group\Log files" is a corrupt file.
This file cannot verify.
Question by:big_grasshopper
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 104

Expert Comment

ID: 17052592
If you do a backup with ntbackup of just Exchange, what happens?

You do know that are duplicating what you backup?
If you are backing up the information store, then you don't need to backup the public folders or mailboxes separately - they contain the store.

It is also recommended that the system state is done separately. I often do a backup to disk of the system state with ntbackup and then pickup the file with Backup Exec.


Author Comment

ID: 17052616
Sorry I forgot to mention that, it backs up the IS without any errors
LVL 104

Expert Comment

ID: 17052891
If the IS is backing up correctly, then there are no problems with the Exchange server itself.
Public folder and mailbox backups are provided by the vendor of the backup software - Microsoft doesn't provide those natively.

I don't do backups of Exchange outside of the information store as I don't see the point.
Based on the error message, you need to check the permissions of the account being used to access those components to see if it still has the relevant permissions.

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Author Comment

ID: 17053079
Yep, I knew that I was duplicating my data; I was doing it for the purpose of single email restores. Doing a brick level backup has made it easy on me when needing to restore a single email.

I have to admit that I wasn't aware of the recommendation on backing up the system state separately. I did a real quick search on this, and didn't find anything specific, can you lead me in the right direction for some documentation on this issue.

I would agree with you about it being a permissions issue if I didn't know for a fact that the permissions hadn't changed for the account that was preforming the backup. Here's a link I found on the Veritas site that is the error word for word,, which the first cause they list of this issue is due to Anti-virus software accessing the Information Store at the same time as the backup. Unfortunately I know that I had mis-configured the AV to scan, and did not have the exclusions that needed to be there in order to do the AV scan. Also when I open backup exec to look at the restore options it list the IS status as corrupt. But I don't get any error's with NTBackup, which I might consider using NTBackup in place of backup exce, but the process to restore a single email becomes a bit longer. Before I forget I want to say thank you.
LVL 104

Accepted Solution

Sembee earned 250 total points
ID: 17053388
I have never done a brick level backup in all the years that I have been working with Exchange. Haven't felt the need.
With the deleted item settings that Exchange provides, I can recover most things easily. With Exchange 2003 they become even more redundant - as you can use the recovery storage group.

You may find that by resetting the backup job, and possibly using another account for the brick level backups, that the problem is resolved. The information from Veritas isn't very useful on fixing the problem. If you have support with Veritas you might want to take it up with them.

This is a KB article that refers to the problem of system state being done at the same time.

That has specific circumstances when the problem comes up. I basically separate the jobs as standard practise, as it avoids the issue coming up.


Author Comment

ID: 17053833
Unfortunately it was a policy decision that was made because they didn't want to allow exchange to retain deleted emails, for any length of time. So it's a necessary evil to use the brick level backup with veritas.

Also unfortunately I've already tried setting up a different job, both with the existing account and with a new account, and I got the same results. I had to laugh when I read Veritas suggestion to upgrade to the most recent version as a possible solution. And we haven't had support for some time, and I don't forsee us upgrading our product.

What do you think about the idea of moving the mailboxes to a temporary exchange server and deleting and re-creating a new storage group on the existing server?
LVL 104

Expert Comment

ID: 17054020
I haven't had to diagnose this problem before as I don't do brick level backups. Therefore I cannot comment on whether it will fix the problem.

Exchange has all of these data protection features built in, yet people set policies that fail to use them - which simply amazes me.


Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question