none
Volume Shadow Copy Service warning event id: 12348

    Question

  • I am having the following warning message show up in the event viewer:

    Volume Shadow Copy Service warning: VSS was denied access to the root of
    volume \\?\Volume{8e9de90b-5c09-11e1-8084-d4bed995f240}\.
    Denying administrators from accessing volume roots can cause many unexpected
    failures, and will prevent VSS from functioning properly. 
    Check security on the volume, and try the operation again.
    Operation:
       Removing auto-release shadow copies
       Loading provider
    Context:
       Execution Context: System Provider
    Source: VSS
    Event ID: 12348

    After this warning message occurs VSS is then stopped.

    I attempted to correct  this issue by using the  icacls C:\ /grant system:f command.

    Each time I attempt the command I get:

    Access is denied.
    Successfully processed 0 files; Failed processing 1 files

    I would appreciate any help in this matter.

    Thank you.

    Wednesday, November 07, 2012 7:36 PM

All replies

  • Hi,

    I would like suggest you refer to the link below as reference and check if it helps.

    Comments for Event ID:12348

    http://www.eventid.net/display-eventid-12348-source-VSS-eventno-10350-phase-1.htm

    Regards.


    Spencer

    TechNet Community Support

    Friday, November 09, 2012 3:34 AM
  • Thank you for your response. In my case my computer is not a Hyper-V host.

    Friday, November 09, 2012 5:13 AM
  • Hi,

    I know that, but have you tried the second comment?

    1. Ensure that VSS has access to the volume root directory?

    2. To verify that the Volume Shadow Copy Service is started?

    Regards.


    Spencer

    TechNet Community Support

    Friday, November 09, 2012 5:18 AM
  • I am having a problem when you say "Ensure that VSS has access to the volume root directory".

    When I try the following:

     icacls \\?\Volume{8e9de90b-5c09-11e1-8084-d4bed995f240}\/grant system:f

    I get:

    Access is denied.
    Successfully processed 0 files; Failed processing 1 files

    What else should I do?

    Friday, November 09, 2012 5:39 AM
  • Hi,

    You must have membership in Administrators,  or you must have been delegated the appropriate authority.

    To ensure that Volume Shadow Copy Service (VSS) has access to the volume root directory:

    Open an elevated Command Prompt. Click Start,  click All Programs,  click Accessories,  right-click Command Prompt,  and then click Run as administrator.
    Type icacls <VolumeRootPath> /grant system:f at the command prompt,  where <VolumeRootPath> is the path to the volume root directory,  for example,  D:\.


    Spencer

    TechNet Community Support

    Friday, November 09, 2012 5:51 AM
  • Yes I had already done that.

    Friday, November 09, 2012 6:07 AM
  • I am having the same problem. The problem is I don't know what the volume root is? There are ?? marks where the volume root should be. Here is the statement I am getting: \\?\Volume{940fb3ff-2fd7-11e1-ab8a-b8ac6faf6b96}\. This is found in the registry under HKEY_LOCAL_MACHINE/SYSTEM/MountedDevices. There are 41 of these statements in that section all starting with \\??\Volume...

    I have been getting dozens, if not hundreds, of these warning statements in my event viewer.

    Tuesday, January 08, 2013 5:23 AM
  • Try using:

    icacls C:\/grant system:f

    You will probably get:

    Access is denied.
    Successfully processed 0 files; Failed processing 1 files

    That is the problem I am having.

    Tuesday, January 08, 2013 6:29 AM