locked
Event 8193, VSS RRS feed

  • Question

  • Application Log:  Volume Shadow Copy Service error: Unexpected error calling routine CheckTokenMembership.  hr = 0x80070005, Access is denied.

    Several instances of this error appear in my Application Log. Details Tab data associates it with third party backup software. The software vendor showed me that the software is, in fact, working. Therefore, they contend this is a problem with VSS, which they cannot resolve.

    After searching the Internet for some days looking for a working solution, and having tested much of what I found, I have negative results. Therefore, I am posting this question here seeking help in resolving this error.

    Please accept my apologies if I have posted this in the wrong forum. Thank you in advance to anyone who can assist.

    Application Log Errata:

    Log Name:      Application
    Source:        VSS
    Date:          7/30/2019 12:47:04 PM
    Event ID:      8193
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      BIGBIRD
    Description:
    Volume Shadow Copy Service error: Unexpected error calling routine CheckTokenMembership.  hr = 0x80070005, Access is denied.
    .
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="VSS" />
        <EventID Qualifiers="0">8193</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2019-07-30T16:47:04.000000000Z" />
        <EventRecordID>378320</EventRecordID>
        <Channel>Application</Channel>
        <Computer>BIGBIRD</Computer>
        <Security />
      </System>
      <EventData>
        <Data>CheckTokenMembership</Data>
        <Data>0x80070005, Access is denied.
    </Data>
        <Data>
        </Data>
        <Binary>2D20436F64653A20534543534543524330303030303238312D2043616C6C3A20534543534543524330303030303232312D205049443A202030303030323230382D205449443A202030303030353830302D20434D443A202022433A5C50726F6772616D2046696C65735C436172626F6E6974655C436172626F6E697465204261636B75705C636172626F6E697465736572766963652E657865222020202020202D20557365723A204E616D653A20424947424952445C4D69636861656C2C205349443A532D312D352D32312D313939373235343633322D313439393134343630322D313233363932333736332D3130303120202020202020</Binary>
      </EventData>
    </Event>



    Tuesday, July 30, 2019 8:41 PM

All replies

  • Hi,

    1. Please make sure your accounts have full control, refer to the following article:

    Event ID: 8193 Volume Shadow Copy Service error: Unexpected error calling routine

    Note: This is a third-party link and we do not have any guarantees on this website. This is just for your convenience. And Microsoft does not make any guarantees about the content.

    2. Check the following services are running in Services.

    Volume Shadow Copy

    COM+ Event System

    Cryptographic Services

    3. Install the latest updates for windows by checking for updates to keep your machines up-to-date and avoid known issues.

    4. Since the backup software you used is a third-party tool, it's recommended to use Windows Server Backup from Microsoft to back up and restore Exchange data: 

    https://docs.microsoft.com/en-us/exchange/high-availability/disaster-recovery/windows-server-backup?view=exchserver-2019

    Best regards,

    Yilia 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, July 31, 2019 3:24 AM
  • Hi Yilia.

    Thank you for your suggestions. My enumeration aligns with yours.

    1. My account had full control permission in accordance with the documentation at https://absolute-sharepoint.com/2014/10/event-id-8193-volume-shadow-copy-service-error-unexpected-error-calling-routine.html. I had actually come across that link previously and configured my registry key permissions based on it.
    2. I verified the following services are running: COM+ Event System, Cryptographic Services, and Volume Shadow Copy.
    3. I verified all the latest "important" (i.e. not "optional") updates for windows have been installed.
    4. I am not backing up an Exchange Server with this third party software.

    I appreciate your recommendations, but they do not involve any actual configuration change that might resolve the problem. Please advise if you have other troubleshooting recommendations.





    Wednesday, July 31, 2019 3:17 PM