This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 67%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
Hi, We have 3 VMs running on ESXi 7, that we backup with Veeam. When the initial backup was configured and run, it was ok and completed successfully. The job has guest file system quiescing enabled. Since the initial backup, we have removed some leftover folders from an application that was uninstalled. This was the only change on the VMs we made before the next backup job. Now, every time we run the backup (or more specifically, take a snapshot of the VM with guest file system quiescing enabled), the VM blue screens with a "PNP__DETECTED__ FATAL_ERROR" message. Looking at bluescreenview, the culprit drivers are hal.sys and partmgr.sys Hal.sys I just take to mean that some driver has put the HAL into a weird state, not hal.sys itself causing an issue, and partmgr.sys is related to partition management or file systems? I do see some NTFS events around the time of the snapshots, with detail such as:
The system failed to flush data to the transaction log. Corruption may occur in VolumeId: \\?\Volume{e48532b2-0000-0000-0000-602200000000}, DeviceName: \Device\HarddiskVolume7.
(The specified request is not a valid operation for the target device.)
And
The default transaction resource manager on volume \\?\Volume{e48532b2-0000-0000-0000-602200000000} encountered a non-retryable error and could not start. The data contains the error code.
I'm not really sure where my next port of call is to determine what driver is actually having an issue and causing the bluescreen? Can anyone point me in the right direction please? Many thanks James
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 68%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
Hello Thank you for your question and reaching out. I can understand you are having query\issues related to Backup and Blue screen. As you are using VMware and Veeam , which are non Microsoft products or services , I would suggest you to post or get in touch with their respective VMware and Veeam forums or support. --If the reply is helpful, please Upvote and Accept as answer--
They won't help me with this. The Bluescreen is happening because of something occurring within Windows, and I simply need to determine what driver is causing the issue. The fact this is happening during a VM snapshot is only partially relevant, as it is just a case that VMware is telling Windows to make applications ready for backup (file system quiescing). If we can find that it is a VMware specific driver causing the problem, I can open a ticket with them, but until then it is out of scope of VMware support.