Return
-
Title
CAPI2 error is shown in Event Viewer every time backup is starting -
Description
Every time the backup is initiated, protected machine's Event Viewer, Application show the following error:Log Name: Application
Source: Microsoft-Windows-CAPI2
Event ID: 513
Task Category: none
Level: Error
Description:
An error occurred in Cryptographic Services while processing the OnIdentity()call in System Writer Object.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.
System Error:
Access is denied. -
Cause
This problem occurs because VSS System Writer does not have permission to read the NT AUTHORITY\SERVICE (service account). When System Writer runs as a cryptographic service and tries to read the Mslldp.sys information from a Microsoft Link-Layer Discovery Protocol driver, the "access denied" error is generated. -
Resolution
To prevent this entry from being logged, grant the required permission to the Microsoft Link-Layer Discovery Protocol driver (Mslldp.dll) to process System Writer.To do this, please follow these steps:
- Open an administrative Command Prompt window, and then run the following command to check the current permissions:
sc sdshow mslldp
- Copy the output string from step 1, append it with (A;;CCLCSWLOCRRC;;;SU) and then run the following command to add the access permission to Mslldp.dll:
sc sdset mslldp <string>
For example, run the following command (in one line):
sc sdset mslldp D:(D;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BG)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCDCLCSWRPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SO)(A;;LCRPWP;;;S-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453)(A;;CCLCSWLOCRRC;;;SU)
- Open an administrative Command Prompt window, and then run the following command to check the current permissions:
-
Additional Information
https://support.microsoft.com/en-us/help/3209092/event-id-513-when-running-vss-in-windows-server