Full Windows OS restore results in Status 1 due to Access Denied on VirtFile.sys

Problem

Full Windows OS restore results in Status 1 due to Access Denied on the file: VirtFile.sys

Error Message

The restore job of the System State data concludes with Status 1:

Jun 12, 2024, 1:58:14 PM - Info bptm (pid=11108) completed reading 
Jun 12, 2024, 1:58:14 PM - Info bptm (pid=11108) EXITING with status 0 <----------
Jun 12, 2024, 1:58:14 PM - Info tar32 (pid=900) done. status: 1
Jun 12, 2024, 1:58:14 PM - Info tar32 (pid=900) done. status: 1: the requested operation was partially succesbackup imagesful
Jun 12, 2024, 1:58:14 PM - Error bpbrm (pid=11748) client restore EXIT STATUS 1: the requested operation was partially successful
Jun 12, 2024, 1:58:15 PM - restored from image myclient_1718207338; restore time: 0:16:27
Jun 12, 2024, 1:58:15 PM - end Restore; elapsed time 0:16:28
The requested operation was partially successful.  (1)

A review of the client-side tar log at General Log Level 2, shows Access Denied attempting to replace VirtFile.sys:

13:54:52.142 [900.4472] <2> ov_log::V_GlobalLog: INF - brUtil::GetFileObjStream Error: Could not create the Object: \windows\system32\drivers (\\?\C:\windows\system32\drivers\VirtFile.sys)
13:54:52.142 [900.4472] <2> ov_log::V_GlobalLog: INF - brUtil::WriteObject Write Error : -536836984
13:54:52.142 [900.4472] <2> ov_log::V_GlobalLog: INF - Status FS_EXTENDED_ERROR (0xE000FEA9) writing Component System Files BrUtil object stream 0x4C494645 in SHADOW::WriteComponent
13:54:52.157 [900.4472] <2> ov_log::V_GlobalLog: INF - [FS_WriteObj::431]  amount_to_write:184 amount_written:184 blockSize:1 ... ret_val:0xe000fea9
13:54:52.157 [900.4472] <2> ov_log::V_GlobalLog: INF - [FS_WriteObj]  buffer:0x2585d27dd65  size:184  blockSize:1 ... Exit (0xe000fea9)
13:54:52.157 [900.4472] <2> ov_log::V_GlobalLog: INF -   AD:Status FS_EXTENDED_ERROR (0xE000FEA9) calling FS_WriteObj in SystemState::WriteObj:201
13:54:52.157 [900.4472] <2> ov_log::V_GlobalLog: INF - [FS_WriteObj::431]  amount_to_write:184 amount_written:184 blockSize:1 ... ret_val:0xe000fea9
13:54:52.157 [900.4472] <2> ov_log::V_GlobalLog: INF - [FS_WriteObj]  buffer:0x2585d27dd65  size:184  blockSize:1 ... Exit (0xe000fea9)
13:54:52.157 [900.4472] <2> ov_log::V_GlobalLogEx: ERR - beds_ss_access::V_Write FS_EXTENDED_ERROR on FS_WriteObj() Result:0xE0008488 Action:0x2 Error_id:0x233C
13:54:52.157 [900.4472] <2> ov_log::V_GlobalLogEx: ERR - beds_ss_access::V_Write:FS_WriteObj() Failed! 0xE0008488:Access is denied.

Cause

This behavior is by design. NetBackup 10.4 has implemented a new feature which denies access from any process that attempts to open the Virfile.sys driver. The restore failure happens due to this feature.

Solution

The restore failure for VirtFile.sys can be safely ignored, and the recovered OS will not suffer from any impact due to the file not being restored.