Challenge
A NAS backup/file to tape job skips VSS snapshot creation on SMB share and ends with the following message in the log:Failed to create a VSS snapshot for %hostname%, failing over to backup directly from the share.
Solution
To support the new VSS for SMB File Shares feature, make sure that the following requirements are met:- Application server and file server run Windows Server 2012.
- Application server and file server are domain joined to the same Active Directory domain.
- The “File Server VSS Agent Service” role service is enabled on the file server.
- The backup agent runs in a security context that has backup operators or administrator privileges on both the application server and file server.
- The backup agent/application runs in a security context that has at least the READ permission on the file share data that is being backed up.
https://docs.microsoft.com/en-us/archive/blogs/clausjor/vss-for-smb-file-shares
"File Server VSS Agent Service" role service installation and configuration
Do the following, with administrative privileges, to install the File Server role and the File Server Shadow Copy Agent role service on each file server:
GUI:
1. In the Server Manager Dashboard, click Add roles and features.
2. In the Add Roles and Features Wizard, do the following:
a. In the Before you begin wizard page, click Next.
b. In the Select installation type wizard page, select Role-based or feature-based installation.
c. In the Select destination server wizard page, select the server where you want to install the File Share Shadow Copy Agent.
d. In the Select server roles wizard page:
b. In the Select installation type wizard page, select Role-based or feature-based installation.
c. In the Select destination server wizard page, select the server where you want to install the File Share Shadow Copy Agent.
d. In the Select server roles wizard page:
i. Expand File and Storage Services.
ii. Expand File Services.
iii. Select File Server.
iv. Select File Server VSS Agent Service.
ii. Expand File Services.
iii. Select File Server.
iv. Select File Server VSS Agent Service.
e. In the Select features wizard page, click Next.
f. In the Confirm installation selections, verify that File Server and File Server VSS Agent Service are listed, and click Install.
f. In the Confirm installation selections, verify that File Server and File Server VSS Agent Service are listed, and click Install.
PowerShell
- Start elevated Windows PowerShell (Run as Administrator).
- Run the following command:
Add-WindowsFeature -Name File-Services,FS-VSS-Agent
Add backup user to Backup Operators local group on file server
The user context in which the shadow copy is performed must have the backup privilege on the remote file server(s) that is part of the shadow copy set.
Usually, this is done by adding the user that is performing the shadow copy to the Backup Operators group on the file server(s).
To add a user to the local Backup Operators group, do the following with administrative privileges on each file server:
GUI
1. In the Server Manager Dashboard, click Tools and select Computer Management.
2. In Computer Management:
a. Expand Local Users and Groups.
b. Click Groups.
c.In the results pane, double-click Backup Operators.
d. In the Backup Operators Properties window, click Add.
e. Type the username to add to the Backup Operators group, click OK.
f. In the Backup Operators Properties page, click OK.
g. Close Computer Management.
PowerShell
b. Click Groups.
c.In the results pane, double-click Backup Operators.
d. In the Backup Operators Properties window, click Add.
e. Type the username to add to the Backup Operators group, click OK.
f. In the Backup Operators Properties page, click OK.
g. Close Computer Management.
- Start elevated Windows PowerShell (Run as Administrator)
- Run the following commands, adjusting the user account and file server name to your environment:
$objUser = [ADSI]("WinNT://domain/user")
$objGroup = [ADSI]("WinNT://fileserv/Backup Operators")
$objGroup.PSBase.Invoke("Add",$objUser.PSBase.Path)