«Windows was unable to save all the data for the file» error when you log off from an RD Session Host server

Symptoms

Consider the following scenario. You have a Windows Server 2012-based Remote Desktop Services (RDS) collection and are logged on to a Remote Desktop (RD) Session Host server. In this scenario, when you log off from the RD Session Host server, the following error message is logged in the System log:

NTFS Event Number: 50
«NTFS — Delayed Write Host»
«Windows was unable to save all the data for the file \$LogFile. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.»

Resolution

Hotfix information

A supported hotfix is available from Microsoft Support. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a «Hotfix download available» section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:

http://support.microsoft.com/contactus/?ws=supportNote The «Hotfix download available» form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running Windows 8 or Windows Server 2012.

Restart requirement

You do not have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any previously released hotfix.

«Windows was unable to save all the data for the file» error when you log off from an RD Session Host server

Symptoms

Consider the following scenario. You have a Windows Server 2012-based Remote Desktop Services (RDS) collection and are logged on to a Remote Desktop (RD) Session Host server. In this scenario, when you log off from the RD Session Host server, the following error message is logged in the System log:

NTFS Event Number: 50
«NTFS — Delayed Write Host»
«Windows was unable to save all the data for the file \$LogFile. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.»

Resolution

Hotfix information

A supported hotfix is available from Microsoft Support. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a «Hotfix download available» section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:

http://support.microsoft.com/contactus/?ws=supportNote The «Hotfix download available» form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running Windows 8 or Windows Server 2012.

Restart requirement

You do not have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any previously released hotfix.

Windows was unable to save all the data

Вопрос

This is Windows 2003 server sp2. Domain conroller. Hewlett Packard DL380 prolient server with raid 5. I am getting the error messages on the console screen:

«Windows was unable to save all the data for the file \$Mft. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.» Then I press Ok button the nex message pop up: «windows was unable to save all the data for the file \System Volume Information\EfaData. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.» I press Ok button, the next message pop up: «Windows was unable to save all the data for the file \$Extend$UsnJrnl:J$. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.»

I installed all latest firmware, updated bios. Checked hadware with hp utilities. No hardware failer is repotred. Ran disk defrag.

Все ответы

1. CHKDSK needs offline checking, when your target is system/boot partition. Use alternative

2. In spite of the fact that you found nothing wrong by HP diagnostics, I recommend to solve the problem with HP support. Here is online reference

3. My guess is that there is AV security software. In this case, please, use the Symantec support and/or Symantec Forum.

Preform clean boot and give a try.

1. Here are the results from chkdsk in safe mode:

C:\Documents and Settings\Administrator.BATTERY>chkdsk.exe
The type of the file system is NTFS.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3).
43840 file records processed.
File verification completed.
462 large file records processed.
0 bad file records processed.
2 EA records processed.
5 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3).
148661 index entries processed.
Index verification completed.
5 unindexed files processed.
CHKDSK is verifying security descriptors (stage 3 of 3).
43840 security descriptors processed.
Security descriptor verification completed.
5145 data files processed.
CHKDSK is verifying Usn Journal.
537533192 USN bytes processed.
Usn Journal verification completed.

284498383 KB total disk space.
15236428 KB in 36993 files.
12892 KB in 5146 indexes.
0 KB in bad sectors.
612779 KB in use by the system.
23040 KB occupied by the log file.
268636284 KB available on disk.

4096 bytes in each allocation unit.
71124595 total allocation units on disk.
67159071 allocation units available on disk.

2. I did use HP support to check my hardware on the server

3. Symantec antivirus support did not find it related to them

Windows was unable to save all the data

Вопрос

This is Windows 2003 server sp2. Domain conroller. Hewlett Packard DL380 prolient server with raid 5. I am getting the error messages on the console screen:

«Windows was unable to save all the data for the file \$Mft. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.» Then I press Ok button the nex message pop up: «windows was unable to save all the data for the file \System Volume Information\EfaData. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.» I press Ok button, the next message pop up: «Windows was unable to save all the data for the file \$Extend$UsnJrnl:J$. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.»

I installed all latest firmware, updated bios. Checked hadware with hp utilities. No hardware failer is repotred. Ran disk defrag.

Все ответы

1. CHKDSK needs offline checking, when your target is system/boot partition. Use alternative

2. In spite of the fact that you found nothing wrong by HP diagnostics, I recommend to solve the problem with HP support. Here is online reference

3. My guess is that there is AV security software. In this case, please, use the Symantec support and/or Symantec Forum.

Preform clean boot and give a try.

1. Here are the results from chkdsk in safe mode:

C:\Documents and Settings\Administrator.BATTERY>chkdsk.exe
The type of the file system is NTFS.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3).
43840 file records processed.
File verification completed.
462 large file records processed.
0 bad file records processed.
2 EA records processed.
5 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3).
148661 index entries processed.
Index verification completed.
5 unindexed files processed.
CHKDSK is verifying security descriptors (stage 3 of 3).
43840 security descriptors processed.
Security descriptor verification completed.
5145 data files processed.
CHKDSK is verifying Usn Journal.
537533192 USN bytes processed.
Usn Journal verification completed.

284498383 KB total disk space.
15236428 KB in 36993 files.
12892 KB in 5146 indexes.
0 KB in bad sectors.
612779 KB in use by the system.
23040 KB occupied by the log file.
268636284 KB available on disk.

4096 bytes in each allocation unit.
71124595 total allocation units on disk.
67159071 allocation units available on disk.

2. I did use HP support to check my hardware on the server

3. Symantec antivirus support did not find it related to them

Windows was unable to save all the data

This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Asked by:

Question

This is Windows 2003 server sp2. Domain conroller. Hewlett Packard DL380 prolient server with raid 5. I am getting the error messages on the console screen:

«Windows was unable to save all the data for the file \$Mft. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.» Then I press Ok button the nex message pop up: «windows was unable to save all the data for the file \System Volume Information\EfaData. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.» I press Ok button, the next message pop up: «Windows was unable to save all the data for the file \$Extend$UsnJrnl:J$. The data has been lost. This error may be caused by your computer hardware or network connection. Please try to save the file elsewhere.»

I installed all latest firmware, updated bios. Checked hadware with hp utilities. No hardware failer is repotred. Ran disk defrag.

All replies

1. CHKDSK needs offline checking, when your target is system/boot partition. Use alternative

2. In spite of the fact that you found nothing wrong by HP diagnostics, I recommend to solve the problem with HP support. Here is online reference

3. My guess is that there is AV security software. In this case, please, use the Symantec support and/or Symantec Forum.

Preform clean boot and give a try.

1. Here are the results from chkdsk in safe mode:

C:\Documents and Settings\Administrator.BATTERY>chkdsk.exe
The type of the file system is NTFS.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3).
43840 file records processed.
File verification completed.
462 large file records processed.
0 bad file records processed.
2 EA records processed.
5 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3).
148661 index entries processed.
Index verification completed.
5 unindexed files processed.
CHKDSK is verifying security descriptors (stage 3 of 3).
43840 security descriptors processed.
Security descriptor verification completed.
5145 data files processed.
CHKDSK is verifying Usn Journal.
537533192 USN bytes processed.
Usn Journal verification completed.

284498383 KB total disk space.
15236428 KB in 36993 files.
12892 KB in 5146 indexes.
0 KB in bad sectors.
612779 KB in use by the system.
23040 KB occupied by the log file.
268636284 KB available on disk.

4096 bytes in each allocation unit.
71124595 total allocation units on disk.
67159071 allocation units available on disk.

2. I did use HP support to check my hardware on the server

3. Symantec antivirus support did not find it related to them