"Missing" files when querying system state backup

Resolving The Problem

The file C:\Windows\system32\runas.exe (like many others) is considered by Windows to be part of the system state, so it cannot be backed up with standard backup commands (i.e. incremental, selective, etc). Rather, it is backed up as part of the system state backup process.

Running the following Windows command:

fsutil hardlink list c:\windows\system32\runas.exe

you will get

\Windows\System32\runas.exe
\Windows\winsxs\amd64_microsoft-windows-runas_31bf3856ad364e35_6.1.7600.16385_none_bbdd3aeb771e694e\runas.exe

It shows that there is a hardlink to this file that matches one of the names from "dsmc q ba systemstate" output:

7,168 B 04/22/2015 10:23:05 DEFAULT A TEST\SystemState\NULL\System State\SystemState\\TEST\c$|\Windows\winsxs\amd64_microsoft-windows-runas.resources_31bf3856ad364e35_6.1.7600.16385_en-us_0dc7f90218cfa125\runas.exe.mui
20,480 B 04/22/2015 10:23:05 DEFAULT A TEST\SystemState\NULL\System State\SystemState\\TEST\c$|\Windows\winsxs\amd64_microsoft-windows-runas_31bf3856ad364e35_6.1.7600.16385_none_bbdd3aeb771e694e\runas.exe
7,168 B 04/22/2015 10:54:48 DEFAULT A TEST\SystemState\NULL\System State\SystemState\\TEST\c$|\Windows\winsxs\x86_microsoft-windows-runas.resources_31bf3856ad364e35_6.1.7600.16385_en-us_b1a95d7e60722fef\runas.exe.mui
17,408 B 04/22/2015 10:54:48 DEFAULT A TEST\SystemState\NULL\System State\SystemState\\TEST\c$|\Windows\winsxs\x86_microsoft-windows-runas_31bf3856ad364e35_6.1.7600.16385_none_5fbe9f67bec0f818\runas.exe

Hardlinked files are files that have different names or different paths, but they point to the same file on disk. There is only one instance of the file on the disk, but multiple file names point to that instance of the file. During system state backup, Tivoli Storage Manager detects the files with hardlinks, and makes one backup copy. The backup copy is inserted into the Tivoli Storage Manager server database using one instance of the name (not guaranteed to be C:\windows\system32\runas.exe), and also includes the other hardlink file names as part of metadata for that same backup copy. During restore of system state, the hardlinked file is restored, and all the hardlink names are recreated for it.

Note that there is no concept of "primary" and "secondary" file names with hardlinks. Rather, all hardlink names for a file are "peers". All hardlinks must be on the same volume however. It is not possible to have one hardlink on D: and another on C: that both refer to the same file.

Note that this behavior is for system state files only, not for normal non-system state file backup (Tivoli Storage Manager does not preserve hardlinks for non-system state files).