question

TonyCable-3185 avatar image
0 Votes"
TonyCable-3185 asked eulerbernardesjunior commented

server 2019 corrupt files

Hi

A couple of days ago, one of our file servers running server 2019 had a lockup, and upon rebooting it, a number of files (over 90%) in a shared folder seems to be corrupt. I've since done a restore, and they seem to be fine again. The error message (which i can't remember exactly off the top of my head) was the one where it says SYSTEM can't access the file (i can find the exact error message). I couldn't delete any files, nor could i restore over the top of them. The weird thing is, it was only one folder share that was corrupt. The drive contains three other shares, and they all seemed to be fine when i checked them over, so it doesn't appear to be a drive issue. It is a virtual server, running on VMware.

I need to try to get to the bottom of what caused them to corrupt, and was wondering if there is anything specific in the server logs i need to looks for. I can see some errors in the logs at the time that it happened, but not sure if they are related or relevant. One refers to having I/O errors, which seems to be relevant, and the others appear to be related to windows search.

Is there any specific places within the logs which will help me work out the root cause of the issue?

I need to report back as to the cause of the issue, and need to ensure that it's not going to happen again.

Thanks

windows-serverwindows-server-2019
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @TonyCable-3185 ! how you there?

Im having the same problem. did you find any solution?

Thanks!!

0 Votes 0 ·
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered LimitlessTechnology-2700 rolled back

Hello TonyCable

In this case I would recomment starting to collect SMB logs to check the I/O communication. But this will be an ongoing data collection for issues ongoing, not a historical record to analyze past behaviour. And it would be a bit hard since the you had restored.

https://docs.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/troubleshooting-smb

On the other hand, when SYSTEM account can't access, would seem that some corruption on the ACL (or someone was touching the permissions and ownership of the share properties)

Best regards,

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TonyCable-3185 avatar image
0 Votes"
TonyCable-3185 answered

Hi

I will collect the logs now - as luck would have it, i have saved the old server in a safe area so i could refer back to it, so i have all the logs that i need.

I've only restored the files to a new server, in case there was something on the server causing it to go wrong.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.