Hello
I've came to situation where I can not find who is backing up the server. :)
At a specific time database get backed up with two tools. One is known, another is the one that needs to be tracked.
Windows logs show these backups as a regular SQL backups, nothing special about these.
SQL trace shows that backups as a backup with following info
BACKUP DATABASE [DBNAME] TO VIRTUAL_DEVICE='{GUID comes here}' WITH SNAPSHOT,BUFFERCOUNT=1,BLOCKSIZE=1024,COPY_ONLY
SQL Trace shows that backups are done with LocalSystem account and hostname is server name.
I can not find any jobs that might start such backups. Also Backup admins say that they have one tool configured for backups (the known one). And Sharepoint Admins say that database backup is not enabled it the settings (I've checked in SP 2013 you can configure Content DB backup from Sharepoint administration).
Maybe someone can advice how to track down that application, which is doing backups?
Thanks.
Olegas