Sign in
Microsoft.com
 
Windows Server TechCenter
 
 
 
Windows Server TechCenter > Windows Server Forums > File Services and Storage > VSS Failures on Windows Server 2003 Standard
Ask a questionAsk a question
Search Forums:
 

AnswerVSS Failures on Windows Server 2003 Standard

  • Tuesday, November 03, 2009 1:47 AMHotSpot Computing Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    I have been wrestling with this issue for more than a week now and running out of ideas.  We run two Windows Server 2003 R2 Standard SP2 boxes; one hosts AD and the other is a member server.  The member server has not been able to create shadow copies for more than a week, causing a cascade of issues that I suspect relate to it.

    This server was a controller in an older domain, but was successfully demoted before the new domain was added.  I suspect this may be a permissions issues, but can't really explain why and don't know how this would have happened (all was running smoothly until about 3 weeks ago).

    The OS is on a RAID-1 SCSI array; the data partitions are on a RAID-5 SCSI array.

    Apart from being a member server and hosting Exchange 2003, the server in question is also a file server (we plan to migrate SQL from the box but first need to get backups functioning again).

    In a nutshell, here is what we have tried:

    - When I try re-registering the DLL files for VSS, everything appears to go smoothly and the services start, but no shadow copies result.

    - I have also deleted the MS provider key at HKLM\SYSTEM\CurrentControlSet\Services\VSS\Providers\ and rebooted, then re-registered to no avail.

    - We had been running Backup Exec 12.5 on both boxes but in the course of troubleshooting I have removed it (no biggie; the jobs and database are hosted on the other box).  This was a a troubleshooting step also suggested by Dell.

    - We downloaded and installed the hotfix from MS KB 969219.  I read through some of the other hotfixes but they did not sound pertinent (perhaps they are?) and this one in particular was also recommended by Dell.


    ===============
    The symptoms are as follows...

    -  When accessing the Shadow Copies tab from any server volume, I get "Error 0x80070006:  Access is denied"

    - running the VSSAdmin commands at the command prompt yields the following:


    C:\Documents and Settings\administrator>vssadmin list writers
    vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
    (C) Copyright 2001 Microsoft Corp.

    Error: Unexpected failure: Catastrophic failure

    C:\Documents and Settings\administrator>vssadmin list providers
    vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
    (C) Copyright 2001 Microsoft Corp.

    Error: You don't have the correct permissions to run this command.

    Meanwhile, in the event log, I see the following entries (oldest to newest):

    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 1
    Date:  11/2/2009
    Time:  8:15:03 PM
    User:  N/A
    Computer: HAL
    Description:
    Volume Shadow Copy Service initialization error: the control dispatcher cannot be started [0x80070427].

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20   - Code:
    0008: 20 43 4f 52 53 56 43 43    CORSVCC
    0010: 30 30 30 30 30 32 30 38   00000208
    0018: 2d 20 43 61 6c 6c 3a 20   - Call:
    0020: 20 43 4f 52 53 56 43 43    CORSVCC
    0028: 30 30 30 30 30 31 39 35   00000195
    0030: 2d 20 50 49 44 3a 20 20   - PID: 
    0038: 30 30 30 30 37 39 39 36   00007996
    0040: 2d 20 54 49 44 3a 20 20   - TID: 
    0048: 30 30 30 30 38 30 30 30   00008000
    0050: 2d 20 43 4d 44 3a 20 20   - CMD: 
    0058: 56 73 73 76 63 20 2f 52   Vssvc /R
    0060: 65 67 69 73 74 65 72 20   egister
    0068: 2d 20 55 73 65 72 3a 20   - User:
    0070: 53 48 49 4e 44 45 4c 52   SHINDELR
    0078: 4f 43 4b 5c 53 52 41 20   OCK\SRA
    0080: 41 44 4d 49 4e 20 20 20   ADMIN  
    0088: 2d 20 53 69 64 3a 20 20   - Sid: 
    0090: 53 2d 31 2d 35 2d 32 31   S-1-5-21
    0098: 2d 32 37 36 32 39 34 34   -2762944
    00a0: 34 34 31 2d 36 37 37 34   441-6774
    00a8: 32 32 32 39 34 2d 32 38   22294-28
    00b0: 34 38 38 31 35 33 30 38   48815308
    00b8: 2d 35 30 30 20 20 20 20   -500   


    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 11
    Date:  11/2/2009
    Time:  8:16:09 PM
    User:  N/A
    Computer: HAL
    Description:
    Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name Coordinator cannot be started. [0x80070005]

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20   - Code:
    0008: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0010: 30 30 30 30 33 39 36 37   00003967
    0018: 2d 20 43 61 6c 6c 3a 20   - Call:
    0020: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0028: 30 30 30 30 33 39 35 32   00003952
    0030: 2d 20 50 49 44 3a 20 20   - PID: 
    0038: 30 30 30 30 36 32 30 38   00006208
    0040: 2d 20 54 49 44 3a 20 20   - TID: 
    0048: 30 30 30 30 36 32 31 32   00006212
    0050: 2d 20 43 4d 44 3a 20 20   - CMD: 
    0058: 76 73 73 61 64 6d 69 6e   vssadmin
    0060: 20 6c 69 73 74 20 77 72    list wr
    0068: 69 74 65 72 73 20 20 20   iters  
    0070: 2d 20 55 73 65 72 3a 20   - User:
    0078: 53 48 49 4e 44 45 4c 52   SHINDELR
    0080: 4f 43 4b 5c 53 52 41 20   OCK\SRA
    0088: 41 44 4d 49 4e 20 20 20   ADMIN  
    0090: 2d 20 53 69 64 3a 20 20   - Sid: 
    0098: 53 2d 31 2d 35 2d 32 31   S-1-5-21
    00a0: 2d 32 37 36 32 39 34 34   -2762944
    00a8: 34 34 31 2d 36 37 37 34   441-6774
    00b0: 32 32 32 39 34 2d 32 38   22294-28
    00b8: 34 38 38 31 35 33 30 38   48815308
    00c0: 2d 35 30 30 20 20 20 20   -500   

    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 8193
    Date:  11/2/2009
    Time:  8:16:09 PM
    User:  N/A
    Computer: HAL
    Description:
    Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80070005.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20   - Code:
    0008: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0010: 30 30 30 30 33 39 37 33   00003973
    0018: 2d 20 43 61 6c 6c 3a 20   - Call:
    0020: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0028: 30 30 30 30 33 39 35 32   00003952
    0030: 2d 20 50 49 44 3a 20 20   - PID: 
    0038: 30 30 30 30 36 32 30 38   00006208
    0040: 2d 20 54 49 44 3a 20 20   - TID: 
    0048: 30 30 30 30 36 32 31 32   00006212
    0050: 2d 20 43 4d 44 3a 20 20   - CMD: 
    0058: 76 73 73 61 64 6d 69 6e   vssadmin
    0060: 20 6c 69 73 74 20 77 72    list wr
    0068: 69 74 65 72 73 20 20 20   iters  
    0070: 2d 20 55 73 65 72 3a 20   - User:
    0078: 53 48 49 4e 44 45 4c 52   SHINDELR
    0080: 4f 43 4b 5c 53 52 41 20   OCK\SRA
    0088: 41 44 4d 49 4e 20 20 20   ADMIN  
    0090: 2d 20 53 69 64 3a 20 20   - Sid: 
    0098: 53 2d 31 2d 35 2d 32 31   S-1-5-21
    00a0: 2d 32 37 36 32 39 34 34   -2762944
    00a8: 34 34 31 2d 36 37 37 34   441-6774
    00b0: 32 32 32 39 34 2d 32 38   22294-28
    00b8: 34 38 38 31 35 33 30 38   48815308
    00c0: 2d 35 30 30 20 20 20 20   -500   

    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 11
    Date:  11/2/2009
    Time:  8:16:18 PM
    User:  N/A
    Computer: HAL
    Description:
    Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name Coordinator cannot be started. [0x80070005]

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20   - Code:
    0008: 41 44 4d 50 52 4f 43 43   ADMPROCC
    0010: 30 30 30 30 31 31 32 32   00001122
    0018: 2d 20 43 61 6c 6c 3a 20   - Call:
    0020: 41 44 4d 50 52 4f 43 43   ADMPROCC
    0028: 30 30 30 30 31 31 31 31   00001111
    0030: 2d 20 50 49 44 3a 20 20   - PID: 
    0038: 30 30 30 30 36 32 34 34   00006244
    0040: 2d 20 54 49 44 3a 20 20   - TID: 
    0048: 30 30 30 30 36 32 35 36   00006256
    0050: 2d 20 43 4d 44 3a 20 20   - CMD: 
    0058: 76 73 73 61 64 6d 69 6e   vssadmin
    0060: 20 6c 69 73 74 20 70 72    list pr
    0068: 6f 76 69 64 65 72 73 20   oviders
    0070: 2d 20 55 73 65 72 3a 20   - User:
    0078: 53 48 49 4e 44 45 4c 52   SHINDELR
    0080: 4f 43 4b 5c 53 52 41 20   OCK\SRA
    0088: 41 44 4d 49 4e 20 20 20   ADMIN  
    0090: 2d 20 53 69 64 3a 20 20   - Sid: 
    0098: 53 2d 31 2d 35 2d 32 31   S-1-5-21
    00a0: 2d 32 37 36 32 39 34 34   -2762944
    00a8: 34 34 31 2d 36 37 37 34   441-6774
    00b0: 32 32 32 39 34 2d 32 38   22294-28
    00b8: 34 38 38 31 35 33 30 38   48815308
    00c0: 2d 35 30 30 20 20 20 20   -500   

    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 11
    Date:  11/2/2009
    Time:  8:16:31 PM
    User:  N/A
    Computer: HAL
    Description:
    Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name Coordinator cannot be started. [0x80070005]

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20   - Code:
    0008: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0010: 30 30 30 30 33 39 36 37   00003967
    0018: 2d 20 43 61 6c 6c 3a 20   - Call:
    0020: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0028: 30 30 30 30 33 39 35 32   00003952
    0030: 2d 20 50 49 44 3a 20 20   - PID: 
    0038: 30 30 30 30 36 32 39 32   00006292
    0040: 2d 20 54 49 44 3a 20 20   - TID: 
    0048: 30 30 30 30 36 33 34 34   00006344
    0050: 2d 20 43 4d 44 3a 20 20   - CMD: 
    0058: 76 73 73 61 64 6d 69 6e   vssadmin
    0060: 20 6c 69 73 74 20 77 72    list wr
    0068: 69 74 65 72 73 20 20 20   iters  
    0070: 2d 20 55 73 65 72 3a 20   - User:
    0078: 53 48 49 4e 44 45 4c 52   SHINDELR
    0080: 4f 43 4b 5c 53 52 41 20   OCK\SRA
    0088: 41 44 4d 49 4e 20 20 20   ADMIN  
    0090: 2d 20 53 69 64 3a 20 20   - Sid: 
    0098: 53 2d 31 2d 35 2d 32 31   S-1-5-21
    00a0: 2d 32 37 36 32 39 34 34   -2762944
    00a8: 34 34 31 2d 36 37 37 34   441-6774
    00b0: 32 32 32 39 34 2d 32 38   22294-28
    00b8: 34 38 38 31 35 33 30 38   48815308
    00c0: 2d 35 30 30 20 20 20 20   -500   


    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 8193
    Date:  11/2/2009
    Time:  8:16:31 PM
    User:  N/A
    Computer: HAL
    Description:
    Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance.  hr = 0x80070005.

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20   - Code:
    0008: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0010: 30 30 30 30 33 39 37 33   00003973
    0018: 2d 20 43 61 6c 6c 3a 20   - Call:
    0020: 42 55 45 43 58 4d 4c 43   BUECXMLC
    0028: 30 30 30 30 33 39 35 32   00003952
    0030: 2d 20 50 49 44 3a 20 20   - PID: 
    0038: 30 30 30 30 36 32 39 32   00006292
    0040: 2d 20 54 49 44 3a 20 20   - TID: 
    0048: 30 30 30 30 36 33 34 34   00006344
    0050: 2d 20 43 4d 44 3a 20 20   - CMD: 
    0058: 76 73 73 61 64 6d 69 6e   vssadmin
    0060: 20 6c 69 73 74 20 77 72    list wr
    0068: 69 74 65 72 73 20 20 20   iters  
    0070: 2d 20 55 73 65 72 3a 20   - User:
    0078: 53 48 49 4e 44 45 4c 52   SHINDELR
    0080: 4f 43 4b 5c 53 52 41 20   OCK\SRA
    0088: 41 44 4d 49 4e 20 20 20   ADMIN  
    0090: 2d 20 53 69 64 3a 20 20   - Sid: 
    0098: 53 2d 31 2d 35 2d 32 31   S-1-5-21
    00a0: 2d 32 37 36 32 39 34 34   -2762944
    00a8: 34 34 31 2d 36 37 37 34   441-6774
    00b0: 32 32 32 39 34 2d 32 38   22294-28
    00b8: 34 38 38 31 35 33 30 38   48815308
    00c0: 2d 35 30 30 20 20 20 20   -500   


    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 11
    Date:  11/2/2009
    Time:  8:16:36 PM
    User:  N/A
    Computer: HAL
    Description:
    Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and name Coordinator cannot be started. [0x80070005]

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20   - Code:
    0008: 41 44 4d 50 52 4f 43 43   ADMPROCC
    0010: 30 30 30 30 31 31 32 32   00001122
    0018: 2d 20 43 61 6c 6c 3a 20   - Call:
    0020: 41 44 4d 50 52 4f 43 43   ADMPROCC
    0028: 30 30 30 30 31 31 31 31   00001111
    0030: 2d 20 50 49 44 3a 20 20   - PID: 
    0038: 30 30 30 30 36 33 32 38   00006328
    0040: 2d 20 54 49 44 3a 20 20   - TID: 
    0048: 30 30 30 30 36 33 36 30   00006360
    0050: 2d 20 43 4d 44 3a 20 20   - CMD: 
    0058: 76 73 73 61 64 6d 69 6e   vssadmin
    0060: 20 6c 69 73 74 20 70 72    list pr
    0068: 6f 76 69 64 65 72 73 20   oviders
    0070: 2d 20 55 73 65 72 3a 20   - User:
    0078: 53 48 49 4e 44 45 4c 52   SHINDELR
    0080: 4f 43 4b 5c 53 52 41 20   OCK\SRA
    0088: 41 44 4d 49 4e 20 20 20   ADMIN  
    0090: 2d 20 53 69 64 3a 20 20   - Sid: 
    0098: 53 2d 31 2d 35 2d 32 31   S-1-5-21
    00a0: 2d 32 37 36 32 39 34 34   -2762944
    00a8: 34 34 31 2d 36 37 37 34   441-6774
    00b0: 32 32 32 39 34 2d 32 38   22294-28
    00b8: 34 38 38 31 35 33 30 38   48815308
    00c0: 2d 35 30 30 20 20 20 20   -500   

     

Answers

  • Tuesday, November 03, 2009 8:12 AMDavid Shen - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote

    Hi Eddie,

     

    Based on our experience, some third party can cause the conflict which resulting this VSS issue. In order to narrow down the cause of the issue more efficiently, let us refer the following steps to perform a Clean Boot to see if the issue still continues.

    Step 1: Perform a Clean Boot

     

    1. Click "Start", go to "Run", and type "msconfig" in the open box to start the System Configuration Utility.

     

    2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click Disable All (if it is not gray).

     

    3. Click the "Startup" tab, click "Disable All" and click "OK".

     

    4.  Restart your computer. When the "System Configuration Utility" window appears, please check the box and click "OK".

     

    Meanwhile, I would like suggest that you apply the VSS rollup update onto that problematic server.

     

    1. Please apply the hotfix mentioned in the following KB article

     

    A Volume Shadow Copy Service (VSS) update package is available for Windows Server 2003

    http://support.microsoft.com/kb/833167  

     

    A Volume Shadow Copy Service (VSS) update-2 package is available

    http://support.microsoft.com/kb/887827  

     

    Availability of a Volume Shadow Copy Service (VSS) update rollup package for Windows Server 2003 to resolve some VSS snapshot issues

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;940349  

     

    Availability of Windows Server 2003 Post-Service Pack 2 COM+ 1.5 Hotfix Rollup Package 12

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;934016  

     

    A new Volume Shadow Copy Service update is now available that fixes various Volume Shadow Copy Service problems in Windows Server 2003

    http://support.microsoft.com/kb/913648/en-us  

     

    The backup application stops responding when you perform a backup that uses a volume snapshot in Windows Server 2003 with SP1

    http://support.microsoft.com/kb/923628

     

    Best Regards,

    David Shen

    This posting is provided "AS IS" with no warranties, and confers no rights.
     

All Replies

  • Tuesday, November 03, 2009 8:12 AMDavid Shen - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote

    Hi Eddie,

     

    Based on our experience, some third party can cause the conflict which resulting this VSS issue. In order to narrow down the cause of the issue more efficiently, let us refer the following steps to perform a Clean Boot to see if the issue still continues.

    Step 1: Perform a Clean Boot

     

    1. Click "Start", go to "Run", and type "msconfig" in the open box to start the System Configuration Utility.

     

    2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click Disable All (if it is not gray).

     

    3. Click the "Startup" tab, click "Disable All" and click "OK".

     

    4.  Restart your computer. When the "System Configuration Utility" window appears, please check the box and click "OK".

     

    Meanwhile, I would like suggest that you apply the VSS rollup update onto that problematic server.

     

    1. Please apply the hotfix mentioned in the following KB article

     

    A Volume Shadow Copy Service (VSS) update package is available for Windows Server 2003

    http://support.microsoft.com/kb/833167  

     

    A Volume Shadow Copy Service (VSS) update-2 package is available

    http://support.microsoft.com/kb/887827  

     

    Availability of a Volume Shadow Copy Service (VSS) update rollup package for Windows Server 2003 to resolve some VSS snapshot issues

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;940349  

     

    Availability of Windows Server 2003 Post-Service Pack 2 COM+ 1.5 Hotfix Rollup Package 12

    http://support.microsoft.com/default.aspx?scid=kb;EN-US;934016  

     

    A new Volume Shadow Copy Service update is now available that fixes various Volume Shadow Copy Service problems in Windows Server 2003

    http://support.microsoft.com/kb/913648/en-us  

     

    The backup application stops responding when you perform a backup that uses a volume snapshot in Windows Server 2003 with SP1

    http://support.microsoft.com/kb/923628

     

    Best Regards,

    David Shen

    This posting is provided "AS IS" with no warranties, and confers no rights.