System State Backup of a Windows 2008 server fails with the Error "0xE000FEDF : A failure occurred reading an object" or "0xe0008488 - Access is denied."

Problem

The backup job of System State of an Active Directory Domain Controller on Windows 2008 Server fails with Error:

0xE000FEDF - A failure occurred reading an object.

Exceptions:Backup- System?State Warning: "System?State\SYSVOL\SYSVOL\SYSVOL Share" is a corrupt file. This file cannot verify.

V-79-57344-65247

or

Granular Recovery Technology (GRT) based backup of System State to a Backup to Disk (B2D) Folder fails with error "Final error: 0xe0008488 - Access is denied." if compression is enabled.

 V-79-57344-33928

Error Message

Error 1:

Final error: 0xe000fedf - A failure occurred reading an object.
Final error category: Resource Errors

V-79-57344-65247 - A failure occurred reading an object.  (0xE000FEDF)
V-79-57344-33928 - Access Denied. Cannot backup directory and its subdirectories.

Beremote log on Domain controller shows following details.

 brUtil::OpenActiveObject Information: Active Object is a Directory  C:\Windows\SYSVOL\sysvol\test.com\Policies\{6D7B1D2D-722C-40E7-A99F-7D8936BB725D}\
 brUtil::OpenActiveObject Error: 0xE0008488 Could not open the object   C:\Windows\SYSVOL\sysvol\test.com\Policies\{6D7B1D2D-722C-40E7-A99F-7D8936BB725D}\
 Status FS_ACCESS_DENIED (0xE0008488) for Component SYSVOL Share in SHADOW::ReadComponent
 AD:Status FS_READING_OBJECT_FAILURE (0xE000FEDF) calling FS_ReadObj in  SystemState::ReadObj:262
 Informational: Closing Component 'SYSVOL Share'
 Informational: calling IVssBackupComponents::SetBackupSucceeded with status  'FS_READING_OBJECT_FAILURE (0xE000FEDF)' for Component 'D4CC33A6-1713-4397-8CE3-77112225E3DA-F6B33CFF-C72D-4F51-BBC7- CA7DF3350E19' in SHADOW::CloseComponent
______________________________________________________________________________________________

Error 2:

0xe0008488 - Access is denied.

The Remote Agent Debug Log from the Backup Exec server(see Related Document below for more information) displays the following message:

STARTING RESTORE MAP: 
SOURCE PATH:  D:\active directory\IMG000297
TARGET PATH:  D:\active directory\IMG000297\vdb_2009_06_28_1200_30
RSTMAP[0] - D:\active directory\IMG000297\vdb_2009_06_28_1200_30\ntds.dit >>>> D:\active directory\IMG000297\vdb_2009_06_28_1200_30\ntds.dit
Recovery FAILED - ERROR::RC = -4005 - -4005 Read/write access is not supported on compressed files.
UN-Fixing sLog logFile: D:\active directory\IMG000297\edb.log
UN-Fixing sLog logFile: D:\active directory\IMG000297\edb003F4.log
    DSProv:Error status:12 (-4005/-4005 Read/write access is not supported on compressed files. ) opening [D:\active directory\IMG000297\ntds.dit] at B:414
Terminating instance Dactive directoryIMG000297vdb_2009_06_28_1200_30

Cause

The  Error 1 above  appears because the Backup Exec Service account (BESA) has limited permissions on the C: Drive of the Windows Server 2008 server which is to be backed up

or

Error 2 above occurs if compression is enabled on the Backup to Disk folder where the GRT based System State backups are taken.

Solution

1. Log on to the Domain controller with the BESA  credentials.
2. Give Full Control to the BESA  on the folder C:\
3. Perform the backup job of system state again and the backup job should be successful.

For Error 2 :

1. Deselect the highlighted check box per what shows in the screenshot above to disable the compression for the drive or the Backup to Disk (B2D) folder for which the Exchange GRT Backup Job is targeted.
2. Restart all Backup Exec services and re-run the System State GRT Backups.