• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 966
  • Last Modified:

Event ID 215 Certsrv.exe

Windows 2003 R2 Enterprise SP2 server

Using NTBACKUP which is scheduled everyday to run

I get this error everyday

Event Type: Error
Event Source: ESENT
Event Category: Logging/Recovery
Event ID: 215
Date: <Date>
Time: <Time>
User: N/A
Computer: <ComputerName>
Description: certsrv.exe (1368) The backup has been stopped because it was halted by the client or the connection with the client failed.

Microsoft says in this doc

http://support.microsoft.com/kb/927654

that it is a known bug and to ignore the error.

An error is an error.

I have two other Windows 2003 R2 Enterprise Servers running NTBACKUP and they do not post this error.

This error only happens when you have certificate services ca installed

That tells me that something is not right on server A

Has any one come across this error?
0
Thomas Grassi
Asked:
Thomas Grassi
  • 7
  • 6
1 Solution
 
jcimarronCommented:
trgrassijr55--It is a bug when certsrv.exe is involved.
As the support.microsoft.com reference says " The backup process should be completed as expected in this situation. Additionally, you can successfully restore from the backup that is created by the NTBackup utility."  
So there are times when an error may not be pertinent to operation and therefore does not need fixing.
It is hard to know what more can be said.
0
 
Thomas GrassiSystems AdministratorAuthor Commented:
Yes I know that why doesn't MS fix things like this.

They say to ignore the error but how many errors can we ignore?
0
 
jcimarronCommented:
trgrassijr55--Well, of course, some errors you can't ignore.  But this one is well documented as a bug.  Unfortunately MS is not likely to fix bugs in Server 2003 which causes no problem other than having to turn the message off.
It could be worse.  :)
0
Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

 
Thomas GrassiSystems AdministratorAuthor Commented:
Any idea on how to turn off that message?

Must be a registry entry somewhere I hope
0
 
jcimarronCommented:
trgrassijr55---Regrets.  I have no idea how to turn the message off (by which I understand you to mean to prevent it from showing in the first place).
0
 
Thomas GrassiSystems AdministratorAuthor Commented:
I was hoping that maybe someone out there does know how
0
 
jcimarronCommented:
trgrassijr55--Certainly.  Wait a while.  But sometimes the right answer is that there is no answer.  At least it seems your Server A is OK.
0
 
Thomas GrassiSystems AdministratorAuthor Commented:
I've requested that this question be deleted for the following reason:

No Answer given
0
 
jcimarronCommented:
trgrassijr55--
I supported your own observation that the error is a bug and does not need fixing.  http:#a39235213 and http:#a39236100 therefore seem appropriate answers to your original question.
As I said then "It is hard to know what more can be said".

http:#a39241699 is at least a partial answer to your subsequent question.   "But sometimes the right answer is that there is no answer."
0
 
jcimarronCommented:
(C) Question answered by one or more Expert comments.  See http:#a39390138

This is a somewhat unusual situation.  trgrassijr55 really did not ask a question.  He/she posed a problem and then provided the answer by mentioning http://support.microsoft.com/kb/927654.  
The only real question was whether others here on E-E report having the same problem?  No one did, but there is much info that says it is a common bug.  
 
Whether bug or error there seems no solution other than to live with it if NTBACKUP is run with certsrv.exe present.
0
 
Thomas GrassiSystems AdministratorAuthor Commented:
I've requested that this question be deleted for the following reason:

yes a question was asked.

1. did anyone every see this error before?
2. Anyway to stop this error from posting in the event log.

Only answers received was I have no idea

That is not an answer to a question if you do not have any ideas then dont respond.
I answer many questions and when I come across one that I do not know I go on to the next one. I am not the worlds greatest.

I have answered many questions that I felt I should have received points for and never got any I never complain.
There are many question here to answer and to pick from.

Thanks for trying
0
 
jcimarronCommented:
trgrassijr55--
"1. did anyone ever see this error before?  
2. Anyway to stop this error from posting in the event log.

Only answers received was I have no idea "

Concerning #1  We both agree that question was asked.
Your thread has been on E-E for a month.  No one but me has posted.  I would assume that means no E-E expert has seen this error.  
Concerning #2  You never asked that.

Concerning "Only answers received was I have no idea "  I said that only when, several days after the first question, you asked a new question about turning the message off.

My understanding is that the error message is only in the Event Viewer.  So, based on MS' explanation the bug should not be causing you a problem.  But yes, it exists, and no one knows how to fix it.  That is what my posts tried to help you understand.  


The issue is an interesting one.  It is too bad the thread will be deleted since the "answer" would be good to be archived.
" sometimes the right answer is that there is no answer."
0
 
Thomas GrassiSystems AdministratorAuthor Commented:
I hesitate closing this giving points since I did not get a good answer

but to clear my board I gave some
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 7
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now