Volume Shadow Copy Service error
- Hi,
We have a Win 2008 server running MOSS, and do backup with DPM. We get the error:
Volume Shadow Copy Service error: Unexpected error RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005.
Operation:
Initializing Writer
Context:
Writer Class Id: {57af97e4-4a76-4ace-a756-d11e8f0294c7}
Writer Name: SPSearch VSS Writer
Writer Instance ID: {521f87a1-1a77-4808-9ebd-fd643b3771cb}
How to fix?- 已移動Sushil.Baid [MSFT]MSFT2008年12月24日 上午 05:51VSS ueries can be answered in "file services and storage" forum. (Moved from Backup – Windows and Windows Server to File Services and Storage)
解答
- Hi customer,
Would you please perform the following steps on the problematic server to test if it helps?
1. Net stop vss
2. Net stop swprv
3. Go to command prompt, for Windows Server 2008 X86
Cd %systemroot%\system32
regsvr32 /i swprv.dll
regsvr32 /i eventcls.dll
regsvr32 vssui.dll
Vssvc /Register
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll
For Windows Server 2008 64bit
Cd %systemroot%\syswow64
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll
regsvr32 msxml.dll
regsvr32 msxml4.dll
4. Check and Stop the following services:
a) Volume Shadow Copy Service.
b) Microsoft Software Shadow Copy Provider.
c) COM+ event system
d) COM+ System Application
5. Take the backup of the "Subscriptions" key
HKEY_LOCAL_MACHINE \Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscript
Delete the "Subscriptions" key. Delete just the Subscriptions subkey, leave the EventClasses key.
6. Expand and locate the following registry subtree
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VolSnap
Add DWord key with the name of MinDiffAreaFileSize with value 3000
7. Restart/Start the following services:
a) COM+ event system
b) COM+ System Application
c) Microsoft Software Shadow Copy Provider
d) Volume Shadow Copy
8. Reboot the machine.
It appears that the issue is related to System Center Data Protection Manager, you may consider initializing a new thread in System Center Data Protection Manager Community. The engineers and community members there have more experience and can help you in a more efficient way.
System Center Data Protection Manager Community
http://technet.microsoft.com/en-us/dpm/bb737891.aspx
Hope the issue will be resolved soon.
David Shen - MSFT- 已標示為解答David Shen - MSFTMSFT, 版主2008年12月27日 上午 04:22
Hi,
For the case with volume shadow copy (VSS) and DPM, I resolved it by uninstalling the agent, disabled the firewall, and then reinstalled DPM agent.
I've left the FW off. Now the VSS error messageses are gone.
The installtion of the DPM agent doesn't do the job correct I assume...
Jon- 已標示為解答Excalibur 2009年4月22日 上午 08:40
所有回覆
- Hi customer,
Would you please perform the following steps on the problematic server to test if it helps?
1. Net stop vss
2. Net stop swprv
3. Go to command prompt, for Windows Server 2008 X86
Cd %systemroot%\system32
regsvr32 /i swprv.dll
regsvr32 /i eventcls.dll
regsvr32 vssui.dll
Vssvc /Register
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll
For Windows Server 2008 64bit
Cd %systemroot%\syswow64
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll
regsvr32 msxml.dll
regsvr32 msxml4.dll
4. Check and Stop the following services:
a) Volume Shadow Copy Service.
b) Microsoft Software Shadow Copy Provider.
c) COM+ event system
d) COM+ System Application
5. Take the backup of the "Subscriptions" key
HKEY_LOCAL_MACHINE \Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscript
Delete the "Subscriptions" key. Delete just the Subscriptions subkey, leave the EventClasses key.
6. Expand and locate the following registry subtree
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VolSnap
Add DWord key with the name of MinDiffAreaFileSize with value 3000
7. Restart/Start the following services:
a) COM+ event system
b) COM+ System Application
c) Microsoft Software Shadow Copy Provider
d) Volume Shadow Copy
8. Reboot the machine.
It appears that the issue is related to System Center Data Protection Manager, you may consider initializing a new thread in System Center Data Protection Manager Community. The engineers and community members there have more experience and can help you in a more efficient way.
System Center Data Protection Manager Community
http://technet.microsoft.com/en-us/dpm/bb737891.aspx
Hope the issue will be resolved soon.
David Shen - MSFT- 已標示為解答David Shen - MSFTMSFT, 版主2008年12月27日 上午 04:22
- Hi,
Here are the result from regsvr32 on this 64bit Win 08 system:
Es.dll: The module ”es.dll” was loaded but the entry-point DllRegister was not found.
Msxml.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….
MSxml4.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….
The files msxml.dll and msxml4.dll does not exsist at all on the server...
I've not completed the staps from 4 because of these errors...
?? - I get the same errors as "Excalibur". I continued on with the modifications but the VSS error still comes back.
How is this related to System Center Data Protection Manager? I am not running any System Center Products in my environment.
Please help!
Thanks!
Joel - Hi,
This issue is still not solved - please help!
Here are the result from regsvr32 on this 64bit Win 08 system:
Es.dll: The module ”es.dll” was loaded but the entry-point DllRegister was not found.
Msxml.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….
MSxml4.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….
The files msxml.dll and msxml4.dll does not exsist at all on the server...
I've not completed the staps from 4 because of these errors...
?? - David Shen - MSFT said:
For Windows Server 2008 64bit
Cd %systemroot%\syswow64
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll
regsvr32 msxml.dll
regsvr32 msxml4.dll
Same results as Excalibur for Server 2008 x64 Std, MOSS 2007 Enterprise
Current roles for server is Web Server IIS only.
Es.dll: The module ”es.dll” was loaded but the entry-point DllRegister was not found.
Msxml.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….
MSxml4.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….
4. Check and Stop the following services:
a) Volume Shadow Copy Service.
Is in "Manual" startup mode - not running.
b) Microsoft Software Shadow Copy Provider.
Is in "Manual" startup mode - not running.
c) COM+ event system
Is in "Automatic" startup mode - Running. Stopped it.
Dependencies automaticly stops "BITS" and "System Event Notification Service"
Is in "Manual" startup mode - not running.
d) COM+ System Application
5. Backup and delete the key.
Performed it.
6. Added the DWORD key MinDiffAreaFileSize with 3000 (as decimal, not hex)
7. Starting the services in the prescribed order;
a) COM+ event system
(starting BITS and System Event Notification Service manually)b) COM+ System Application
c) Microsoft Software Shadow Copy Provider
d) Volume Shadow Copy
No Events indicating a problem before restart.
8. Rebooting.
After reboot there's a new writer problem, new ID; instead of "SPSearch VSS Writer" it's "OSearch VSS Writer".
Volume Shadow Copy Service error: Unexpected error RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005. Operation:
Initializing Writer
Context:
Writer Class Id: {8d5f38cd-fb7a-49ca-ae1b-21d1f017d8f9}
Writer Name: OSearch VSS Writer
Writer Instance ID: {029600bb-1f4d-4e96-ac5f-bb33a8ecb2ac}
Still looking for ideas on how to fix.
Sincerly, Jon E. Carlsen - Additional info, the reg keys in the event have the following content;
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\IIS Config Writer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\IIS Metabase Writer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\System Writer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\VolSnap] "VolumesSafeForWrite (Enter)"=hex:48,00,00,00,00,00,00,00,64,c8,7f,02,66,a2,c9,\ 01,00,00,00,00,00,00,00,00,1e,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 "VolumesSafeForWrite (Leave)"=hex:48,00,00,00,00,00,00,00,2e,63,bb,02,66,a2,c9,\ 01,00,00,00,00,00,00,00,00,1f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer]
As for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
lists the expected service accounts.
However "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag" does not contain the specific service accounts - nor the WSS local groups (WSS_ADMIN_WPG) in the permissions.
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag" contains the WSS group (WSS_ADMIN_WPG) in permissions.
Hm, do we have a permission inheritance problem here?
I'll do a couple of tests.
EDIT; Adding the WSS_ADMIN_WPG with full control and inheritance for the sbubkeys did not help.
Sincerly, Jon E. Carlsen - Hello I got excactly the same problem, except that i don't have a Data Protection Manager in my environment.
It seems that every hour, exactly at 27 Minutes (06:27, 07:27, 08:27) the server wants to do a VSS Backup (no idea why he does that and where this has been configured).
The MOSS 2007 Server is running on Windows Server 2008 x64.
Every hour he wants to do that VSS backup, the following error message appears:
Volume Shadow Copy Service error: Unexpected error RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005. Operation:
Initializing Writer
Context:
Writer Class Id: {57af97e4-4a76-4ace-a756-d11e8f0294c7}
Writer Name: SPSearch VSS Writer
Writer Instance ID: {521f87a1-1a77-4808-9ebd-fd643b3771cb} - Here some additional infos:
Every hour exactly the same events ar logged in the same order. Here they are:
10045 Information
10032 Error
10046 Error
1013 Information
12289 Error
1003 Information
6398 Error
Hi,
For the case with volume shadow copy (VSS) and DPM, I resolved it by uninstalling the agent, disabled the firewall, and then reinstalled DPM agent.
I've left the FW off. Now the VSS error messageses are gone.
The installtion of the DPM agent doesn't do the job correct I assume...
Jon- 已標示為解答Excalibur 2009年4月22日 上午 08:40
- I had the same problem, after deinstalling and reinstalling MOSS 2007.
It is obviously an access problem, with the two SharePoint service accounts (SPSearch and OSearch) not being able to access a key below ...\VSS\Diag as the error message states.
I right-clicked the Diag folder in the registry and brought up the Permissions dialog and allowed the two respective service accounts to have access. After that I haven't had any such error messages anymore.
