DFS-R: Post Backup or Restore Service Startup

Microsoft.Windows.FileServer.DFSR.PostBackupRestoreFailureMonitor (UnitMonitor)

This object monitors the resumption of replication following a backup or restore operation on a volume containing a replicated folder. If replication fails to resume, this monitor creates a Critical alert.

Knowledge Base article:

Summary

This object monitors the resumption of replication following a backup or restore operation on a volume containing a replicated folder. It does so by looking for the presence of DFS Replication Event 1106. If the replication fails to resume, this monitor creates a Critical alert.

Causes

An unhealthy state of this monitor indicates that the replication failed to resume after a backup application used the Volume Shadow Copy Service (VSS) to back up or restore a volume containing a replicated folder. This can occur if the backup application is still accessing files used by DFS Replication.

Resolutions

Wait for the DFS Replication service to start

No action is required. DFS Replication will attempt to start the DFS Replication service 30 minutes after it stops.

To manually start the DFS Replication service from the Operations console, click Start DFS Replication Service.

To manually start the DFS Replication service from a command prompt, open an elevated command prompt window and then type the following command, where <servername>is the UNC path of the affected server:

Sc <servername> start dfsr

Note: To start a service, you must be a member of the local Administrators group on the affected server. You can also start services using the Services snap-in, the Windows PowerShell Start-Service cmdlet, or command-line tools such as net start.

Verification

This monitor automatically resets to a healthy state when the issue is resolved.

To verify that the DFS Replication service is running from the Operations console, Query DFS Replication Service Status.

To do so from a command prompt, open a command prompt window and then type the following command:

sc <servername> query dfsr

Note: To query the service state, you must be a member of the local Administrators group on the affected server.

Additional

DFS Replication Event 1106 (http://go.microsoft.com/fwlink/?LinkId=187114
Volume Shadow Copy Service on MSDN (http://go.microsoft.com/fwlink/?LinkId=165778)

Element properties:

Target

Microsoft.Windows.FileServer.DFSR.Service

Parent Monitor

System.Health.AvailabilityState

Category

StateCollection

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

DFS-R: Replication Failed to Resume after Backup or Restore Operation

DFS Replication failed to resume replication after a backup application used the Volume Shadow Copy Service (VSS) to back up or restore a volume containing a replicated folder.

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServer.DFSR.PostBackupRestoreFailureMonitor" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.FileServer.DFSR.Service" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.FileServer.DFSR.PostBackupRestoreFailureMonitor_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>DFS Replication</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">1106</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DFSR</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>DFS Replication</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DFSR</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">1104</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">1004</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>