Windows Server 2008 Active Directory backup with Granular Recovery Technology (GRT) fails with "Access Denied"


Windows Server 2008 Active Directory backup with Granular Recovery Technology (GRT) fails with:

Error Message

V-79-57344-33928 - Access Denied. Cannot backup directory \Active Directory\DC=domainname and its subdirectories.
The connection to target system has been lost. Backup set canceled.



Use Windows Server 2008 internal backup utility to test system state backup of an affected domain controller. Please follow the steps mentioned below:

  1. Click Start, click Command Prompt, and then click Run as administrator.
  2. If prompted, in the User Account Control dialog box, provide Backup Operator credentials, and then click OK.
  3. At the command prompt, type the following command, and then press ENTER:
wbadmin start systemstatebackup -backuptarget:<targetDrive>: -quiet
Where <targetDrive> identifies a local NTFS formatted volume or the letter of the physical disk drive to receive the backup. 
Without the -quiet parameter, the process will prompt to press Y to proceed with the backup operation.
Additional Considerations:
Be aware of the following issues when performing a system state backup:
  • To use Wbadmin.exe, Windows Server Backup must be installed.
  • The target volume for a system state backup can be a local drive, but it cannot be any of the volumes that are included in the backup by default. 
 If Windows internal Backup cannot complete the system state Backup of a domain controller, contact Microsoft for further assistance.


Terms of use for this information are found in Legal Notices.



Did this article answer your question or resolve your issue?


Did this article save you the trouble of contacting technical support?


How can we make this article more helpful?

Email Address (Optional)