Issues with VSS and warning event 136 (Ntfs)

Question

Hello,

on a Windows Server 2019 Standard we use Veeam as our backup solution. Every time a new backup starts, the following event is generated:

Log Name: System
Event Source: Ntfs
Event ID: 136
Severity: Warning
Message:
The default transaction resource manager on volume Dati encountered an error while starting and its metadata was reset. The data contains the error code.

We first try reaching Veeam support, that suggested us to follow this thread:
https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/i-receive-the-error-the-default-transaction/d5c78d99-0b4d-e011-8dfc-68b599b31bf5

After following all the steps, the problem is not solved.
Then, Veeam support suggested us to test a new shadow copy using the command-line utility 'diskshadow', following this guide: https://www.veeam.com/kb1980
As soon as I run those commands, the same event has been generated. They told us that there is some problems with VSS, that Veeam leverages during their backups.

We also tried by configuring an additional backup using Windows Server Backup and the same event is generated.

Any suggestions?

Thank you in advance.
Daniele Capuano

Answer 1

Hi,

This issue occurs if the Windows file system transaction log is corrupted. The Windows file system uses the transaction log to recover system transactions when a file error occurs.The Common Log File System (CLFS) transaction logs may be left in an inconsistent state. When the CLFS transaction logs are in an inconsistent state.

Please check if delete the .blf files and the .regtrans-ms files from the %Windir%\System32\SMI\Store\Machine folder could work:

1. Click Start Image, type cmd in the Start Search box, and then right-click cmd in the Programs list.
2. Click Run as administrator, and then click Continue.
3. At a command prompt, type the following command, and then press ENTER: fsutil resource setautoreset true c:\
   (Note These steps assume that Windows is installed in the default location, on drive C. If this is not the case, adjust the drive letter of the folder path to match your configuration.
4. Restart the computer. After you restart the computer, the registry regenerates the deleted files. These regenerated files are in a consistent state.

http://www.eventid.net/display-eventid-136-source-ntfs-eventno-10031-phase-1.htm
https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/i-receive-the-error-the-default-transaction/d5c78d99-0b4d-e011-8dfc-68b599b31bf5

(Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.)

Thanks for your time!
Best Regards,
Anne

-----------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.