Windows 10 System Image Backup Failed 0x80070002 Event 513 CAPI2 - Microsoft Community

i hope helps someone:

i wanted system image prior cloning dell xps 8300 hdd sata drive ssd.  the system windows 7 machine upgraded windows 10.    i backing external usb 3.0 2tb drive.  

i kept receiving error message:  backup not successful. error is: system cannot find file specified. (0x80070002).   

i tried various resolutions included deleting prior backups off of drive, making sure that volume shadow copy service or vss and windows backup services set automatic, verifying c drive, , more.  

reviewing event log, additional error message prior failure was:  event id 513 capi2, 

cryptographic services failed while processing onidentity() call in system writer object.

details:
addlegacydriverfiles: unable image of binary microsoft link-layer discovery protocol.

system error:
access denied.
.

i ran resolution:  

fix event 513 capi2 errors during windows backup

march 10, 2015

update: march 2016.
commenters have noted same fix appears work correctly on windows 10 well

a semi-common error seen on various windows 8.1 , 2012/r2 systems following during start of system backups use vss (i.e. backups).  this causes backup process hang long period of time, or fail.

application event log:  cryptographic services failed while processing onidentity() call in system writer object.    details:  addlegacydriverfiles: unable image of binary microsoft link-layer discovery protocol.    system error:  access denied.  

much digging through forums has found what appears cause.

during backup vss process running under network_service account calls cryptcatsvc!csystemwriter::addlegacydriverfiles(), enumerates drivers records in service control manager database , tries opening each 1 of them. , function fails on mslldp record "access denied" error.

turned out fails because mslldp driver's security permissions not allow network_service access driver record.

what causes have incorrect permissions in first place unclear, simple fix exists.  we've tested on several systems without issue, mileage may vary.

it can fixed correcting security description on mslldp service, using built-in command line utility sc.exe

open administrative command prompt (not powershell) , execute following.  this must 1 long command without carriage returns

sc sdset mslldp d:(d;;ccdclcswrpwpdtlocrsdrcwdwo;;;bg)(a;;ccdclcswrpwpdtlocrsdrcwdwo;;;sy)(a;;ccdclcswrpdtlocrsdrcwdwo;;;ba)(a;;ccdclcswrpwpdtlocrsdrcwdwo;;;so)(a;;lcrpwp;;;s-1-5-80-3141615172-2057878085-1754447212-2405740020-3916490453)(a;;cclcswlocrrc;;;su)s:(au;fa;ccdclcswrpwpdtlocrsdrcwdwo;;;wd)

you should receive successful result of

[sc] setserviceobjectsecurity success  

if so, problem resolved, , there's no reboot required.  the next backup should complete successfully.

once did this, seemed backup ran longer, still failing with:

the backup operation started @ '‎2017‎-‎03‎-‎21t02:52:47.726176200z' has failed following error code '0x80780166' (windows backup encountered error when writing data backup target.). please review event details solution, , rerun backup operation once issue resolved.

details:  

error code:  0x80780166

error message:  %%2155348326

i found people error stating usb port might issue , move system 2.0 port.  

i did, , backup ran successfully.   don't know if solution, or if needed update permissions msslldp service too.  

Windows / Windows 10 / Windows update, recovery, & backup / PC