ntbackup problem with Outlook Express dbx files after XP SP3

[prubin]

Hello all. I've noticed that right after upgrading XP to SP3, ntbackup
has stopped backing up my scheduled task for Outlook Express' dbx
files, even though the task exits with the success code 0x0.

Upon closer examination with some test files, it appears that ntbackup
will NOT load the 'Load Selections' if they are BELOW the path:

C:\Documents and Settings\Username\Local Settings\Application Data
\Identities\Registry Stuff\

Any files loaded and 'Save Selections' in the path:

C:\Documents and Settings\Username\Local Settings\Application Data
\Identities\Registry Stuff\Microsoft\Outlook Express\

does NOT load when you reload the selections using 'Load Selections'.

I've found this to be the case on three different computers.
Any ideas?

 

[Pegasus \(MVP\)]

Hello all. I've noticed that right after upgrading XP to SP3, ntbackup
has stopped backing up my scheduled task for Outlook Express' dbx
files, even though the task exits with the success code 0x0.

Upon closer examination with some test files, it appears that ntbackup
will NOT load the 'Load Selections' if they are BELOW the path:

C:\Documents and Settings\Username\Local Settings\Application Data
\Identities\Registry Stuff\

Any files loaded and 'Save Selections' in the path:

C:\Documents and Settings\Username\Local Settings\Application Data
\Identities\Registry Stuff\Microsoft\Outlook Express\

does NOT load when you reload the selections using 'Load Selections'.

I've found this to be the case on three different computers.
Any ideas?

What does the ntbackup log file report?

 

[prubin]

The log report is empty, which makes sense, since it's not loading
anything to back up, and the result code is success 0x0. As I see it,
the task begins, ntbackup doesn't load anything to back up (since it
doesn't work on anything below the C:\Documents and Settings\Username
\Local Settings\Application Data\Identities\Registry Stuff\)
directory, and then successfully exits.

Any ideas?

 

[Pegasus \(MVP\)]

No, an empty log report does not make sense. It can be empty for several
reasons:
- You're looking at the wrong file. What file are you looking at?
- The backup job is still running.
- The backup job bombed out before running to completion.

Now let's dig a little deeper. Instead of running your backup job from the
wizard, run it inside the following batch file:
@echo off
echo %date% %time% %UserName% >> c:\test.txt
ntbackup /.. /..
echo %date% %time% >> c:\test.txt
echo. >> c:\test.txt

In your reply you should post four things:
- The contents of c:\test.txt
- The contents of your .bks file
- The exact ntbackup command line, with all its switches.
- Any relevant item reported by the Event Logger.


The log report is empty, which makes sense, since it's not loading
anything to back up, and the result code is success 0x0. As I see it,
the task begins, ntbackup doesn't load anything to back up (since it
doesn't work on anything below the C:\Documents and Settings\Username
\Local Settings\Application Data\Identities\Registry Stuff\)
directory, and then successfully exits.

Any ideas?

 

[prubin]

Thank you for your reply. I believe you're not understanding the
problem. I can run the backup from within the ntbackup program itself
OK, as long as I manually select the folder before backing up:

C:\Documents and Settings\Username\Local Settings\Application Data
\Identities\Registry Stuff\Microsoft\Outlook Express\

The problem exists when you ''Load Selections' from the saved backup
file. When you Load the selections from below the directory:

C:\Documents and Settings\Username
\Local Settings\Application Data\Identities\Registry Stuff\

Then NOTHING gets loaded, and running the job backs up nothing, just
as would be expected. On the other hand, if the selections are at or
above the directory shown above, then the selections properly load,
and the backup can proceed normally. Make sense?

The issue is that when you 'Load Selections' below the directory shown
above, ntbackup does NOT load any selections, so any saved job
proceeds to save nothing.

 

[Pegasus \(MVP\)]

I am quite aware that some of your backup jobs run as you expect them
whereas others don't, depending on your selection of folders to be backed
up. What I'm trying to get across is an understanding of the elements that
play an important role in every run of ntbackup.exe. They are:

1. The exact command line that gets executed. If you don't know what it is,
make the job execute at some later time (e.g. tomorrow), then examine its
command line that is now visible in the Task Scheduler (which is accessible
via the Control Panel). Your OE files might not get backed up because
"Shadow Copy" is no longer enabled. The command line would tell me straight
away. It would also tell me where you're backing up to. Maybe your
destination cannot hold the amount of data you're trying to back up.

2. The file/folder selections. They are written into a Unicode file located
in your profile folder and having a .bks extension. I have seen backup jobs
fail because this file got turned into an ASCII file.

3. The backup log. It is a file backup??.log buried deep inside your profile
folder, numbered from 01 to 10 (I think).

4. The Event Logger. You can examine it with the command eventvwr.exe.

Unless you provide the relevant details of the above elements I am unable to
offer anyting other than guesses about the cause of your problem. The batch
file I proposed in my previous reply will tell me two important things:
a) If and when the backup job started.
b) If and when the job ended.

If all this sounds too hard then you may be able to walk around the problem
by moving your OE data store to a different location. Ask an OE newsgroup if
unsure how to do this.


Thank you for your reply. I believe you're not understanding the
problem. I can run the backup from within the ntbackup program itself
OK, as long as I manually select the folder before backing up:

C:\Documents and Settings\Username\Local Settings\Application Data
\Identities\Registry Stuff\Microsoft\Outlook Express\

The problem exists when you ''Load Selections' from the saved backup
file. When you Load the selections from below the directory:

C:\Documents and Settings\Username
\Local Settings\Application Data\Identities\Registry Stuff\

Then NOTHING gets loaded, and running the job backs up nothing, just
as would be expected. On the other hand, if the selections are at or
above the directory shown above, then the selections properly load,
and the backup can proceed normally. Make sense?

The issue is that when you 'Load Selections' below the directory shown
above, ntbackup does NOT load any selections, so any saved job
proceeds to save nothing.

 

[prubin]

Here are the details answers:

1. C:\WINDOWS\system32\ntbackup.exe backup "@C:\Documents and Settings
\MyName\Local Settings\Application Data\Microsoft\Windows NT\NTBackup
\data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM" /
v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s /f "C:
\Documents and Settings\MyName\My Documents\OutlookExpress.bkf"

2. C:\Documents and Settings\MyName\Local Settings\Application Data
\Identities\RegistryStuff\Microsoft\Outlook Express\

3. File Backup backup01.log is EMPTY.

4. NOTHING in Application Events.
In System Events:
The Removable Storage service was successfully sent a start control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The Removable Storage service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

RSM was stopped.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The Removable Storage service entered the stopped state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[Pegasus \(MVP\)]

Great. Now what about the contents of c:\test.txt which is generated by the
batch file I suggested you use?

Here are the details answers:

1. C:\WINDOWS\system32\ntbackup.exe backup "@C:\Documents and Settings
\MyName\Local Settings\Application Data\Microsoft\Windows NT\NTBackup
\data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM" /
v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s /f "C:
\Documents and Settings\MyName\My Documents\OutlookExpress.bkf"

2. C:\Documents and Settings\MyName\Local Settings\Application Data
\Identities\RegistryStuff\Microsoft\Outlook Express\

3. File Backup backup01.log is EMPTY.

4. NOTHING in Application Events.
In System Events:
The Removable Storage service was successfully sent a start control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The Removable Storage service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

RSM was stopped.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The Removable Storage service entered the stopped state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[prubin]

Hello again. I ran the backup job from the batch file your suggested,
and here are the results:

1. The contents of c:\test.txt
Wed 09/03/2008 8:08:55.06 MyName
Wed 09/03/2008 8:08:58.42

2. The contents of your .bks file
C:\Documents and Settings\MyName\Local Settings\Application Data
\Identities\RegistryStuff\Microsoft\Outlook Express\

3. The exact ntbackup command line, with all its switches
C:\WINDOWS\system32\ntbackup.exe backup "@C:\Documents and Settings
\MyName\Local Settings\Application Data\Microsoft\Windows NT\NTBackup
\data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM" /
v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s /f "C:
\Documents and Settings\MyName\My Documents\OutlookExpress.bkf"

4. Any relevant item reported by the Event Logger
There's NOTHING in the Application Log, and there are four entries in
the System log:

The Removable Storage service was successfully sent a start control.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The Removable Storage service entered the running state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

RSM was stopped.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The Removable Storage service entered the stopped state.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Please let me know what you think.

 

[Pegasus \(MVP\)]

Good. The results you post tell me (amongst other things) that the backup
job ended after only 3 seconds. This means that there is something badly
wrong. Here is a batch file that may give us a clue:
01. @echo off
02. set DataFolder=C:\Documents and Settings\$$$\Local Settings\Application
Data\Microsoft\Windows NT\NTBackup\data
03. set DocFolder=C:\Documents and Settings\$$$\My Documents
04. set OEFolder=C:\Documents and Settings\$$$\Local Settings\Application
Data\Identities\RegistryStuff\Microsoft\Outlook Express
05.
06. echo Start %date% %time% > c:\test.txt
07. dir "%DataFolder%" >> c:\test.txt
08. dir "%OEFolder%" >> c:\test.txt
09. copy /y c:\test.txt "%DocFolder%" 1>>c:\test.txt 2>>&1
10.
11. copy /y "%DataFolder%\OutlookExpress.bks" c:\test.bks > nul
12. echo> "%temp%\test.scr" d
13. echo>>"%temp%\test.scr" q
14. debug c:\test.bks < "%temp%\test.scr" >> c:\test.txt
15.
16. ntbackup 1>>c:\test.txt 2>>&1 /.. /..
17. echo End %date% %time% >> c:\test.txt
18. notepad c:\test.txt

Explanation:
- Lines 1 to 4 set the scene.
- Line 6 creates a date/time stamp.
- Lines 7 to 9 tell me if you have the required access to your various
folders.
- Lines 11 to 14 tell me if your .bks file is a Unicode file.
- Line 16 is your ntbackup command with a slight modification.

Instructions:
- Replace $$$ with the correct user name.
- Complete Line 17 by including all ntbackup switches after "&1".
- Remove the line numbers.
- Run the batch file.
- Copy & paste the text you see on the screen.

 

[prubin]

Thanks for your reply. I don't understand what you mean by:

"- Complete Line 17 by including all ntbackup switches after "&1". "

Can you please clarify what is intended for this line?

 

[prubin]

I think I have it now, it should be line 16 instead of line 17.
I ran this batch file:

@echo off
set DataFolder=C:\Documents and Settings\MyName\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data
set DocFolder=C:\Documents and Settings\MyName\My Documents
set OEFolder=C:\Documents and Settings\MyName\Local Settings
\Application Data\Identities\RegistryStuff\Microsoft\Outlook Express

echo Start %date% %time% > c:\test.txt
dir "%DataFolder%" >> c:\test.txt
dir "%OEFolder%" >> c:\test.txt
copy /y c:\test.txt "%DocFolder%" 1>>c:\test.txt 2>>&1

copy /y "%DataFolder%\OutlookExpress.bks" c:\test.bks > nul
echo> "%temp%\test.scr" d
echo>>"%temp%\test.scr" q
debug c:\test.bks < "%temp%\test.scr" >> c:\test.txt

ntbackup 1>>c:\test.txt 2>>&1 /a /d /v:no /r:no /rs:no /hcff /m
daily /j
echo End %date% %time% >> c:\test.txt
notepad c:\test.txt

And here is the result:

First, the Backup Utility shows a dialog box: "Failed to create emty
document."
And then here's the result in Notepad:

Start Wed 09/03/2008 11:20:28.87
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\MyName\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data

Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\MyName\Local Settings
\Application Data\Identities\RegistryStuff\Microsoft\Outlook Express

The system cannot find the path specified.
0 file(s) copied.
-d

1400:0100 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0110 00 00 00 00 00 00 00 00-00 00 00 00 34 00 EF
13 ............4...
1400:0120 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0130 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0140 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0150 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0160 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0170 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
-q

End Wed 09/03/2008 11:20:30.45

Please let me know what's next.

 

[Pegasus \(MVP\)]

Thanks for your reply. I don't understand what you mean by:

"- Complete Line 17 by including all ntbackup switches after "&1". "

C:\WINDOWS\system32\ntbackup.exe backup 1>>c:\test.txt 2>>&1 "@C:\Documents
and Settings\MyName\Local Settings\Application Data\Microsoft\Windows
NT\NTBackup\data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16
AM" /
v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s /f "C:\Documents
and Settings\MyName\My Documents\OutlookExpress.bkf"

 

[prubin]

OK, I've run the following Batch Command:

@echo off
set DataFolder=C:\Documents and Settings\MyName\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data
set DocFolder=C:\Documents and Settings\MyName\My Documents
set OEFolder=C:\Documents and Settings\MyName\Local Settings
\Application Data\Identities\RegistryStuff\Microsoft\Outlook Express

echo Start %date% %time% > c:\test.txt
dir "%DataFolder%" >> c:\test.txt
dir "%OEFolder%" >> c:\test.txt
copy /y c:\test.txt "%DocFolder%" 1>>c:\test.txt 2>>&1

copy /y "%DataFolder%\OutlookExpress.bks" c:\test.bks > nul
echo> "%temp%\test.scr" d
echo>>"%temp%\test.scr" q
debug c:\test.bks < "%temp%\test.scr" >> c:\test.txt

ntbackup 1>>c:\test.txt 2>>&1 C:\WINDOWS\system32\ntbackup.exe backup
1>>c:\test.txt 2>>&1 "@C:\Documents and Settings\MyName\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data
\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM" / v:no /
r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s /f "C:\Documents
and Settings\MyName\My Documents\OutlookExpress.bkf"

echo End %date% %time% >> c:\test.txt
notepad c:\test.txt

And here is the result:

Start Wed 09/03/2008 11:51:49.51
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\MyName\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data

Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\MyName\Local Settings
\Application Data\Identities\RegistryStuff\Microsoft\Outlook Express

The system cannot find the path specified.
0 file(s) copied.
-d

1400:0100 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0110 00 00 00 00 00 00 00 00-00 00 00 00 34 00 EF
13 ............4...
1400:0120 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0130 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0140 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0150 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0160 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
1400:0170 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00
00 ................
-q

End Wed 09/03/2008 11:51:50.45

Please advise.

 

[Pegasus \(MVP\)]

You need to work out yourself why you get this error message - it's basic
stuff!

Directory of C:\Documents and Settings\MyName\Local Settings\Application
Data\Microsoft\Windows NT\NTBackup\data

Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\MyName\Local Settings\Application
Data\Identities\RegistryStuff\Microsoft\Outlook Express

The system cannot find the path specified.
0 file(s) copied.

You probably forgot to set the correct value for "MyName" . . . After fixing
this up, run the batch file again.

 

[prubin]

Ah, there were spaces after the directory names, which confused the
copy and dir operations. I've removed the extra spaces, and now the
batch file runs fine.
Here are the results (edited a bit for privacy):

Start Wed 09/03/2008 15:10:33.39
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\Paul\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data

09/03/2008 11:50 AM <DIR> .
09/03/2008 11:50 AM <DIR> ..
09/03/2008 11:50 AM 232 backup01.log
09/03/2008 11:51 AM 232 backup02.log
09/03/2008 03:05 PM 232 backup03.log
09/03/2008 03:06 PM 232 backup04.log
09/03/2008 03:06 PM 232 backup05.log
09/03/2008 03:06 PM 232 backup06.log
09/03/2008 03:07 PM 232 backup07.log
09/03/2008 03:07 PM 232 backup08.log
09/03/2008 03:08 PM 232 backup09.log
09/03/2008 03:10 PM 232 backup10.log
09/02/2008 01:52 PM 282 OutlookExpress.bks
09/02/2008 10:21 AM 7 test.txt
12 File(s) 2,609 bytes
2 Dir(s) 34,251,157,504 bytes free
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\Paul\Local Settings
\Application Data\Identities\{9FC94C40-7E64-4775-
B93E-9E76DF6395D0}\Microsoft\Outlook Express

09/03/2008 02:39 PM <DIR> .
09/03/2008 02:39 PM <DIR> ..
09/03/2008 10:22 AM 83,716,548 advertising.dbx
09/03/2008 03:02 PM 36,876,612 computer.dbx
09/03/2008 03:03 PM 1,347,668,812 Deleted Items.dbx
09/03/2008 10:22 AM 24,899,440 Drafts.dbx
09/03/2008 03:03 PM 116,775,392 employment.dbx
09/03/2008 08:02 AM 74,720 Folders.dbx
09/03/2008 03:08 PM 94,498,160 Inbox.dbx
09/03/2008 08:02 AM 9,656 Offline.dbx
09/03/2008 03:08 PM 7,334,612 Outbox.dbx
09/02/2008 09:17 AM 9,404 Pop3uidl.dbx
04/04/2008 11:33 AM 76,500 Search Folder (1).dbx
06/08/2008 02:01 AM 142,036 Search Folder (2).dbx
07/26/2008 09:31 AM 76,500 Search Folder (3).dbx
08/07/2008 08:53 AM 76,500 Search Folder (4).dbx
03/02/2008 10:29 AM 76,500 Search Folder.dbx
09/03/2008 03:01 PM 190,809,952 Sent Items.dbx
09/02/2008 10:21 AM 7 test.txt
55 File(s) 2,768,247,407 bytes
2 Dir(s) 34,251,153,408 bytes free
1 file(s) copied.
-d

1400:0100 43 00 3A 00 5C 00 44 00-6F 00 63 00 75 00 6D 00 C.:.
\.D.o.c.u.m.
1400:0110 65 00 6E 00 74 00 73 00-20 00 61 00 6E 00 64 00
e.n.t.s. .a.n.d.
1400:0120 20 00 53 00 65 00 74 00-74 00 69 00 6E 00 67
00 .S.e.t.t.i.n.g.
1400:0130 73 00 5C 00 50 00 61 00-75 00 6C 00 5C 00 4C 00 s.\.Name
\.L.
1400:0140 6F 00 63 00 61 00 6C 00-20 00 53 00 65 00 74 00
o.c.a.l. .S.e.t.
1400:0150 74 00 69 00 6E 00 67 00-73 00 5C 00 41 00 70 00 t.i.n.g.s.
\.A.p.
1400:0160 70 00 6C 00 69 00 63 00-61 00 74 00 69 00 6F 00
p.l.i.c.a.t.i.o.
1400:0170 6E 00 20 00 44 00 61 00-74 00 61 00 5C 00 49 00
n. .D.a.t.a.\.I.
-q

End Wed 09/03/2008 15:10:34.32

What next?

 

[Pegasus \(MVP\)]

We're edging closer . . .
- You have appropriate access rights to the various folders you use.
- There is sufficient free space on your target drive.
- Your .bks file is a Unicode file.
- If you edit the hex dump of a file to maintain privacy, remember to edit
not only the visible letters but their hex equivalents too . . .
- Your OE Deleted Items folder is a whopping 1.4 GBytes in size. Why?
- You previously claimed that the backup reports were empty. They
aren't - each contains 232 bytes of data. The key is most likely there -
what does it say, and why did you think the reports were empty?


Ah, there were spaces after the directory names, which confused the
copy and dir operations. I've removed the extra spaces, and now the
batch file runs fine.
Here are the results (edited a bit for privacy):

Start Wed 09/03/2008 15:10:33.39
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\Paul\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data

09/03/2008 11:50 AM <DIR> .
09/03/2008 11:50 AM <DIR> ..
09/03/2008 11:50 AM 232 backup01.log
09/03/2008 11:51 AM 232 backup02.log
09/03/2008 03:05 PM 232 backup03.log
09/03/2008 03:06 PM 232 backup04.log
09/03/2008 03:06 PM 232 backup05.log
09/03/2008 03:06 PM 232 backup06.log
09/03/2008 03:07 PM 232 backup07.log
09/03/2008 03:07 PM 232 backup08.log
09/03/2008 03:08 PM 232 backup09.log
09/03/2008 03:10 PM 232 backup10.log
09/02/2008 01:52 PM 282 OutlookExpress.bks
09/02/2008 10:21 AM 7 test.txt
12 File(s) 2,609 bytes
2 Dir(s) 34,251,157,504 bytes free
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\Paul\Local Settings
\Application Data\Identities\{9FC94C40-7E64-4775-
B93E-9E76DF6395D0}\Microsoft\Outlook Express

09/03/2008 02:39 PM <DIR> .
09/03/2008 02:39 PM <DIR> ..
09/03/2008 10:22 AM 83,716,548 advertising.dbx
09/03/2008 03:02 PM 36,876,612 computer.dbx
09/03/2008 03:03 PM 1,347,668,812 Deleted Items.dbx
09/03/2008 10:22 AM 24,899,440 Drafts.dbx
09/03/2008 03:03 PM 116,775,392 employment.dbx
09/03/2008 08:02 AM 74,720 Folders.dbx
09/03/2008 03:08 PM 94,498,160 Inbox.dbx
09/03/2008 08:02 AM 9,656 Offline.dbx
09/03/2008 03:08 PM 7,334,612 Outbox.dbx
09/02/2008 09:17 AM 9,404 Pop3uidl.dbx
04/04/2008 11:33 AM 76,500 Search Folder (1).dbx
06/08/2008 02:01 AM 142,036 Search Folder (2).dbx
07/26/2008 09:31 AM 76,500 Search Folder (3).dbx
08/07/2008 08:53 AM 76,500 Search Folder (4).dbx
03/02/2008 10:29 AM 76,500 Search Folder.dbx
09/03/2008 03:01 PM 190,809,952 Sent Items.dbx
09/02/2008 10:21 AM 7 test.txt
55 File(s) 2,768,247,407 bytes
2 Dir(s) 34,251,153,408 bytes free
1 file(s) copied.
-d

1400:0100 43 00 3A 00 5C 00 44 00-6F 00 63 00 75 00 6D 00 C.:.
\.D.o.c.u.m.
1400:0110 65 00 6E 00 74 00 73 00-20 00 61 00 6E 00 64 00
e.n.t.s. .a.n.d.
1400:0120 20 00 53 00 65 00 74 00-74 00 69 00 6E 00 67
00 .S.e.t.t.i.n.g.
1400:0130 73 00 5C 00 50 00 61 00-75 00 6C 00 5C 00 4C 00 s.\.Name
\.L.
1400:0140 6F 00 63 00 61 00 6C 00-20 00 53 00 65 00 74 00
o.c.a.l. .S.e.t.
1400:0150 74 00 69 00 6E 00 67 00-73 00 5C 00 41 00 70 00 t.i.n.g.s.
\.A.p.
1400:0160 70 00 6C 00 69 00 63 00-61 00 74 00 69 00 6F 00
p.l.i.c.a.t.i.o.
1400:0170 6E 00 20 00 44 00 61 00-74 00 61 00 5C 00 49 00
n. .D.a.t.a.\.I.
-q

End Wed 09/03/2008 15:10:34.32

What next?

 

[prubin]

Answering your questions:

1. Yes, I have administrative rights.

2. There is over 30GB free space on the disk.

3. the .bks file was created by the ntbackup.exe file

4. I recieve a lot of email each month, so 1.4GB is not unreasonable
for a couple months of emails.

5. Sorry, when I run the ntbackup directly, it exits and the resulting
backup reports are empty when I read them in a text editor. I didn't
realize that it was hexcode. Here is the result with a hex editor:

?Command Line Problem: A valid backup operation was not specified on
the command line.

ff fe 43 00 6f 00 6d 00 6d 00 61 00 6e 00 64 00 20 00 4c 00 69 00 6e
00 65 00 20 00 50 00 72 00 6f 00 62 00 6c 00 65 00 6d 00 3a 00 20 00
41 00 20 00 76 00 61 00 6c 00 69 00 64 00 20 00 62 00 61 00 63 00 6b
00 75 00 70 00 20 00 6f 00 70 00 65 00 72 00 61 00 74 00 69 00 6f 00
6e 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 73 00 70
00 65 00 63 00 69 00 66 00 69 00 65 00 64 00 20 00 6f 00 6e 00 20 00
74 00 68 00 65 00 20 00 63 00 6f 00 6d 00 6d 00 61 00 6e 00 64 00 20
00 6c 00 69 00 6e 00 65 00 2e 00 0d 00 0a 00 0d 00 0a 00 2d 00 2d 00
2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d
00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 2d 00 0d 00 0a 00 0d 00
0a 00

Is there any way to debug what this means?

 

[Pegasus \(MVP\)]

I suggested you should run this command:
C:\WINDOWS\system32\ntbackup.exe backup 1>>c:\test.txt 2>>&1
"@C:\Documents and Settings\MyName\Local Settings\
Application Data\Microsoft\Windows NT\NTBackup\
data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM"
/v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s
/f "C:\Documents and Settings\MyName\My Documents\OutlookExpress.bkf"

This is the command you appear to have run. Spot the difference!
ntbackup 1>>c:\test.txt 2>>&1 C:\WINDOWS\system32\ntbackup.exe backup
1>>c:\test.txt 2>>&1
"@C:\Documents and Settings\MyName\Local Settings\
Application Data\Microsoft\Windows NT\NTBackup\
data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM"
/ v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s
/f "C:\Documents and Settings\MyName\My Documents\OutlookExpress.bkf"

For clarity of code, it might be better to run this command:
C:\WINDOWS\system32\ntbackup.exe backup
"@C:\Documents and Settings\MyName\Local Settings\
Application Data\Microsoft\Windows NT\NTBackup\
data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM"
/v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s
/f "C:\Documents and Settings\MyName\My Documents\OutlookExpress.bkf"
1>>c:\test.txt 2>>&1

 

[prubin]

OK, I've used this line (of course with MyName replaced):

C:\WINDOWS\system32\ntbackup.exe backup "@C:\Documents and Settings
\MyName\Local Settings\Application Data\Microsoft\Windows NT\NTBackup
\data\OutlookExpress.bks" /a /d "Set created 9/2/2008 at 10:16 AM" /
v:no /r:no /rs:no /hcff /m daily /j "OutlookExpress" /l:s /f "C:
\Documents and Settings\MyName\My Documents\OutlookExpress.bkf" 1>>c:
\test.txt 2>>&1

And here are the results:

Start Thu 09/04/2008 7:41:58.71
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\MyName\Local Settings
\Application Data\Microsoft\Windows NT\NTBackup\data

09/03/2008 11:50 AM <DIR> .
09/03/2008 11:50 AM <DIR> ..
09/03/2008 03:10 PM 232 backup01.log
09/03/2008 03:18 PM 232 backup02.log
09/03/2008 03:21 PM 132 backup03.log
09/03/2008 03:23 PM 2 backup04.log
09/03/2008 04:12 PM 2 backup05.log
09/03/2008 07:00 PM 2 backup06.log
09/03/2008 03:07 PM 232 backup07.log
09/03/2008 03:07 PM 232 backup08.log
09/03/2008 03:08 PM 232 backup09.log
09/03/2008 04:33 PM 232 backup10.log
09/02/2008 01:52 PM 282 OutlookExpress.bks
09/02/2008 10:21 AM 7 test.txt
12 File(s) 1,819 bytes
2 Dir(s) 34,208,399,360 bytes free
Volume in drive C has no label.
Volume Serial Number is 1447-9761

Directory of C:\Documents and Settings\MyName\Local Settings
\Application Data\Identities\RegistryStuff\Microsoft\Outlook Express

09/04/2008 03:25 AM <DIR> .
09/04/2008 03:25 AM <DIR> ..
09/03/2008 10:22 AM 83,716,548 advertising.dbx
09/03/2008 04:39 PM 36,876,612 computer.dbx
09/04/2008 07:33 AM 1,347,668,812 Deleted Items.dbx
09/03/2008 10:22 AM 24,899,440 Drafts.dbx
09/03/2008 06:33 PM 74,720 Folders.dbx
09/04/2008 07:26 AM 94,498,160 Inbox.dbx
09/03/2008 06:33 PM 9,656 Offline.dbx
09/04/2008 07:36 AM 7,334,612 Outbox.dbx
09/02/2008 09:17 AM 9,404 Pop3uidl.dbx
04/04/2008 11:33 AM 76,500 Search Folder (1).dbx
06/08/2008 02:01 AM 142,036 Search Folder (2).dbx
07/26/2008 09:31 AM 76,500 Search Folder (3).dbx
08/07/2008 08:53 AM 76,500 Search Folder (4).dbx
03/02/2008 10:29 AM 76,500 Search Folder.dbx
09/04/2008 07:36 AM 190,809,952 Sent Items.dbx
09/02/2008 10:21 AM 7 test.txt
55 File(s) 2,768,247,407 bytes
2 Dir(s) 34,208,395,264 bytes free
1 file(s) copied.
-d

1400:0100 43 00 3A 00 5C 00 44 00-6F 00 63 00 75 00 6D 00 C.:.
\.D.o.c.u.m.
1400:0110 65 00 6E 00 74 00 73 00-20 00 61 00 6E 00 64 00
e.n.t.s. .a.n.d.
1400:0120 20 00 53 00 65 00 74 00-74 00 69 00 6E 00 67
00 .S.e.t.t.i.n.g.
1400:0130 73 00 5C 00 50 00 61 00-75 00 6C 00 5C 00 4C 00 s.
\.P.a.u.l.\.L.
1400:0140 6F 00 63 00 61 00 6C 00-20 00 53 00 65 00 74 00
o.c.a.l. .S.e.t.
1400:0150 74 00 69 00 6E 00 67 00-73 00 5C 00 41 00 70 00 t.i.n.g.s.
\.A.p.
1400:0160 70 00 6C 00 69 00 63 00-61 00 74 00 69 00 6F 00
p.l.i.c.a.t.i.o.
1400:0170 6E 00 20 00 44 00 61 00-74 00 61 00 5C 00 49 00
n. .D.a.t.a.\.I.
-q

End Thu 09/04/2008 7:42:03.95

The Backup Log is only 2 bytes has the following:
 ¦

what next?