"RSM was stopped"
Windows 2003 SP2 - native ntbackup
This server backs up both local data (on the server itself) and data stored elsewhere. That data is accessed through mapped drives (they are mapped on this server to the remote location).
The target of the backup is a internal backup tape drive.
The backups are scheduled backups that are supposed to start at 11:00 PM
--------------------------------------------------------
--------------------------------------------------------
The backups succeed most of the time.
I can see in the Application Log of the Event Viewer that drives E:, H:, I:, etc. were backed up. The log also shows that verification succeeded. I can even restore data to the server and the data is valid (I can open a restored document - the content is there).
In the case of a successful backup, this is the sequence of events shown in the System Log:
---------------------------------------------------------
---------------------------------------------------------
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 10/29/2012
Time: 11:00:07 PM
User: NT AUTHORITY\SYSTEM
Computer: MyServer
Description:
The Removable Storage service was successfully sent a start control.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 10/29/2012
Time: 11:00:07 PM
User: N/A
Computer: MyServer1
Description:
The Removable Storage service entered the running state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 10/29/2012
Time: 11:01:07 PM
User: NT AUTHORITY\SYSTEM
Computer: MyServer1
Description:
The Volume Shadow Copy service was successfully sent a start control.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 10/29/2012
Time: 11:01:07 PM
User: N/A
Computer: MyServer1
Description:
The Volume Shadow Copy service entered the running state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 10/29/2012
Time: 11:01:11 PM
User: NT AUTHORITY\SYSTEM
Computer: MyServer1
Description:
The Microsoft Software Shadow Copy Provider service was successfully sent a start control.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 10/29/2012
Time: 11:01:11 PM
User: N/A
Computer: MyServer1
Description:
The Microsoft Software Shadow Copy Provider service entered the running state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 10/30/2012
Time: 1:41:24 AM
User: N/A
Computer: MyServer1
Description:
The Volume Shadow Copy service entered the stopped state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 10/30/2012
Time: 1:44:24 AM
User: N/A
Computer: MyServer1
Description:
The Microsoft Software Shadow Copy Provider service entered the stopped state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Removable Storage Service
Event Category: None
Event ID: 98
Date: 10/30/2012
Time: 4:14:43 AM
User: N/A
Computer: MyServer1
Description:
RSM was stopped.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 10/30/2012
Time: 4:14:44 AM
User: N/A
Computer: MyServer1
Description:
The Removable Storage service entered the stopped state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
------------------------------------------------
------------------------------------------------
Note that RSM stops after 4:00 PM, or after the backup has been completed.
Now here is the sequence I observe in the Event Viewer when the backup fails - or rather, does not even start.
------------------------------------------------
------------------------------------------------
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 10/30/2012
Time: 11:00:06 PM
User: NT AUTHORITY\SYSTEM
Computer: MyServer1
Description:
The Removable Storage service was successfully sent a start control.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 10/30/2012
Time: 11:00:06 PM
User: N/A
Computer: MyServer1
Description:
The Removable Storage service entered the running state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Removable Storage Service
Event Category: None
Event ID: 98
Date: 10/30/2012
Time: 11:31:08 PM
User: N/A
Computer: MyServer1
Description:
RSM was stopped.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
--------------------------------------
--------------------------------------
So 30 minutes later, RSM stops. Why?
I thought it might be certain backup tapes but more than once, I've observed that if I leave the tape in after a backup failure, the backup of the following night will succeed - with the same tape.
Of course, the backup runs under the same credentials. Backups obviously have not been configured to run under different credentials for different nights (it would make no sense and I would have remembered doing something so outlandish).
Is there a method to augment logging level for RSM so I could determine what is causing RSM to stop?
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.