1. PDQ Deploy & Inventory Help Center
  2. Community
  3. PDQ Deploy
 

Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Using PDQ Deploy to free up 'System Reserved' partition from log files

Avatar
Systeem Beheerder

Bonjour

I was running into a problem with Quest Rapid Recovery, the 'System Reserved' partition could not be backupped. More information here: https://support.quest.com/kb/118402/how-to-delete-aalogs-change-logs

The solution is to delete some aalog* files in the System Volume Information folder. And there are is quite a handful of commands to execute. Lukely, there is a tool called PDQ Deploy 😉

I created a deployment. If you want to do the same, you have to do some legwork first. Go to Disk Management, get the properties from your 'System Reserved' partition from the Shadow Copies tab. (Select the volume, click on Settings and copy/paste the full \?\Volume{

The first task, in my case, is to stop the RapidRecoveryAgent:

net stop RapidRecoveryAgent
sc.exe config RapidRecoveryAgent start= disabled

Next task is to assign junction points, assuming you don't use a C:\SRP directory already:

if %computername% == IASQL01        mklink /D C:\SRP \\?\Volume{c943307b-42f4-11e3-a426-806e6f6e6963}\
if %computername% == IASRV01        mklink /D C:\SRP \\?\Volume{5355933e-faa1-11e2-8a9c-806e6f6e6963}\
if %computername% == IASRV04        mklink /D C:\SRP \\?\Volume{a4190f6c-1d99-11e2-b45a-806e6f6e6963}\
if %computername% == IASRV09        mklink /D C:\SRP \\?\Volume{ccc7a531-c91e-11e5-93e7-806e6f6e6963}\

Of course, this list is longer currently, but you should get the picture; the ID's are different for every server. Except for the last bit, which are searchable in the registry in case you need to free up a 'System Reserved' on a workstation (without Shadow Copies).

In case of Quest Rapid Recovery, you need to unload the filter driver. No idea what it does:

fltmc unload aafsflt

Next, gain access:

icacls "C:\SRP\System Volume Information" /setowner %USERDOMAIN%\%USERNAME% /T /C /Q
icacls "C:\SRP\System Volume Information" /grant:r %USERDOMAIN%\%USERNAME%:F
icacls "C:\SRP\System Volume Information" /grant:r %USERDOMAIN%\%USERNAME%:F /T /C /Q

In case of Quest Rapid Recovery, delete the aalog* files and load the filter driver:

del "C:\SRP\System Volume Information\aalog*"

and load the filer driver:

fltmc load aafsflt

Remove the link:

rmdir C:\SRP /Q

Configure and startup the Quest service:

SC CONFIG RapidRecoveryAgent start= delayed-auto
net start RapidRecoveryAgent
0

Comments

0 comments