Last night our Win2008 R2 server registered the following in Event Viewer about 4 minutes after starting a backup:
Log Name: System<br/>
Source: volsnap<br/>
Date: 9/18/2009 2:04:15 AM<br/>
Event ID: 27<br/>
Task Category: None<br/>
Level: Error<br/>
Keywords: Classic<br/>
User: N/A<br/>
Computer: Rome.douglas-associates.local<br/>
Description:<br/>
The shadow copies of volume \\?\Volume{03b1197a-98ea-11de-90fa-0023aeff5859} were aborted during detection because a critical control file could not be opened.<br/>
Event Xml:<br/>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><br/>
<System><br/>
<Provider Name="volsnap" /><br/>
<EventID Qualifiers="49158">27</EventID><br/>
<Level>2</Level><br/>
<Task>0</Task><br/>
<Keywords>0x80000000000000</Keywords><br/>
<TimeCreated SystemTime="2009-09-18T06:04:15.895194600Z" /><br/>
<EventRecordID>4175</EventRecordID><br/>
<Channel>System</Channel><br/>
<Computer>Rome.douglas-associates.local</Computer><br/>
<Security /><br/>
</System><br/>
<EventData><br/>
<Data><br/>
</Data><br/>
<Data>\\?\Volume{03b1197a-98ea-11de-90fa-0023aeff5859}</Data><br/>
<Binary>0000000002003000000000001B0006C0010000000E0000C012000000000000000000000000000000</Binary><br/>
</EventData><br/>
</Event>
This error showed up twice (2:03:36 AM and 2:04:15 AM) and the only thing going on at the time was a backup job. The backups claim to have completed successfully, but this error leaves me with some doubt.
Can anyone fill me in on what's happening and what (if anything) needs to be done.
Many thanks!
Some basics on the server:
Dell T710 w/12Gb RAM, Intel E5520 (1 cpu, 4 cores w/HT, OS shows 8 processors), RAID 1 Drive 1Tb
Win Server 2008 R2 (RTM-64bit) with these Roles: ADDS, DHCP, DNS, File Services, Hyper-V (3 VMs all running W2k3 32bit)