Archive Bit not being reset by a full backup

[Mthales]

Hi,
I've got a system set up that does a full backup once a week and an incremental each day. The incrementals are backing up to much data. I've investigated this and it seems that the archive bits are not being reset on these files by the full backup so they are always being saved in the incremental even when they haven't changed. But the strange part of this is the job backs up 2 local drives and 4 remote drives and this problem is only happening on one of the local drives! All the others have their archive bits reset and backup exactly as I expect.
Please can anyone offer me some help or advice with this, Thank you

 

[justin2000]

I have seen this happen with mis-configured anti virus programs - when you back up the files, the anti-virus then scans it and puts the archive bit back on the file.

 

[Mthales]

Thanks for that help Justin2000 I'll definitly go take a look at my anti virus - it's McAfee Virus Scan. I don't suppose you could give me any clues as to what I'm looking for in the settings could you?

 

[justin2000]

This was with older versions - not sure if the newer ones do it.
What would happen is the backup would backup the file, then for some reason teh Auto-protect of the anti-virus would scan it again and put the archive bit back.

maybe search on backups on mcafee's website.
It's only a guess though, I could be totally off here.

 

[Mthales]

We finally found out what was causing this - so just in case anyone else is having the same problem I'd like to try and explain what it was:

It turned out that the Group Policy settings for "remote log in" has part of it that deals with file security by changing the attributes of certain files. The directories that need dealing with like this are defined by a list in the settings and are all the usual temporary and user specific files like "C:\WINDOWS\temp\" etc. Well our server had "D:\" set in that list as well! this resulted in the setting of the archive bit on every file on the D drive every time anyone remotely logged in to it causing them all to get get backed up every differential.

Hope this proves useful to someone and thanks for all the help I got investigating this issue.