An Azure backup service that provides built-in management at scale.
Based on the symptoms (snapshot always succeeds, failure occurs only during “Transfer data to vault”, other file share on same policy works), focus on backup/restore service limits, throttling, and storage account configuration rather than basic connectivity.
Key checks and actions:
- Check the backup job error code and failure file list
- Open the failed backup job in the Recovery Services vault and look for a specific error code/message.
- If the error is one of the throttling or “all files failed” types, use the guidance below:
-
FileshareBackupFailedWithAzureRpRequestThrottling– indicates storage service throttling. -
DataTransferServiceAllFilesFailedToRecover/DataTransferServiceCoFLimitReached– similar patterns exist on restore; for backup, the same throttling and per‑file issues can apply.
-
- If a failure file list or log path is provided, review it to see if specific files are repeatedly failing (locked, in use, or path/name issues).
- Check for storage service throttling
- The context explicitly calls out throttling errors:
-
FileshareBackupFailedWithAzureRpRequestThrottling– “File share backup or restore operation failed due to storage service throttling. This may be because the storage service is busy processing other requests for the given storage account. Try the backup/restore operation at a later time.”
-
- Even off‑hours, other workloads (FSLogix I/O, diagnostics, other services) can cause bursts that trigger throttling.
- Actions:
- Confirm in the job details whether throttling is the reported cause.
- If yes, reschedule the backup to a different time window and ensure no heavy operations (large copy/migration jobs, scans, etc.) run against that storage account then.
- The context explicitly calls out throttling errors:
- Verify storage account network routing and special services setting
- For Azure Files backup, the storage account must use Microsoft network routing, not Internet routing:
- Error
UserErrorStorageAccountInternetRoutingNotSupported: “Storage accounts with Internet routing configuration are not supported by Azure Backup. Ensure that the routing preference set for the storage account hosting backed-up file share is Microsoft network routing.”
- Error
- Confirm:
- In the storage account → Networking → Network routing, ensure “Microsoft network routing” is selected.
- “Allow access from Microsoft services” is already enabled, which is required.
- For Azure Files backup, the storage account must use Microsoft network routing, not Internet routing:
- Confirm no account locks or policy conflicts
- If the storage account is locked, backup jobs can fail:
-
UserErrorStorageAccountIsLocked: “Backup or restore jobs failed due to storage account being in locked state. Remove the lock on the Storage Account or use delete lock instead of read lock and retry the backup or restore operation.”
-
- Also ensure no concurrent operations conflict with backup configuration:
-
BMSUserErrorConflictingProtectionOperation/BMSUserErrorObjectLocked– wait for any in‑progress configure/modify operations to complete before the scheduled backup.
-
- If the storage account is locked, backup jobs can fail:
- Validate that the file share and snapshots remain intact
- Although the first backup succeeded, later failures can occur if snapshots or the share state change:
- Ensure the file share is not in soft‑deleted state and has not been deleted/recreated.
- For restore scenarios, errors like
UserErrorAFSSourceSnapshotNotFoundand soft‑delete errors appear if snapshots or the share are deleted; similar issues can affect incremental backup chains if snapshots are removed.
- For FSLogix, ensure no external process is cleaning up snapshots or manipulating the share in a way that interferes with incremental backups.
- Although the first backup succeeded, later failures can occur if snapshots or the share state change:
- Re‑run backup after addressing configuration and throttling
- After confirming:
- Microsoft network routing is enabled.
- No storage account locks are present.
- No conflicting backup/modify operations are running.
- Backup window avoids other heavy workloads.
- Trigger an on‑demand backup of the problematic 500‑GB share and monitor the job details for:
- Stage at which it fails.
- Exact error code and message.
- After confirming:
- When to escalate
- If:
- Network routing is correct,
- No locks or soft‑delete issues exist,
- No throttling error is reported, and
- The job still fails at “Transfer to vault” while a similar share on the same account and policy succeeds,
- Collect the job error code, time, and correlation IDs from the job details and open a support case, as this may indicate a service‑side issue specific to that share or vault.
- If:
References: