locked
VSS Error 7001 / VSS Writer problem / Backups not functioning..help

    Question

  • Hi folks.  For about 3 weeks I'm getting lots of VSS 7001 errors stating:

    "Log Name:      Application
    Source:        VSS
    Date:          3/19/2010 7:00:48 AM
    Event ID:      7001
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      PCSERVER.HOME.LOCAL
    Description:
    VssAdmin: Unable to create a shadow copy: Either the specified volume was not found or it is not a local volume.
    Command-line: 'C:\Windows\system32\vssadmin.exe Create Shadow /AutoRetry=15 /For=\\?\Volume{777516db-9669-11de-89d5-001bfc66bc7f}\'.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="VSS" />
        <EventID Qualifiers="0">7001</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2010-03-19T11:00:48.000000000Z" />
        <EventRecordID>10288</EventRecordID>
        <Channel>Application</Channel>
        <Computer>PCSERVER.HOME.LOCAL</Computer>
        <Security />
      </System>
      <EventData>
        <Data>Unable to create a shadow copy</Data>
        <Data>Either the specified volume was not found or it is not a local volume. </Data>
        <Data>C:\Windows\system32\vssadmin.exe Create Shadow /AutoRetry=15 /For=\\?\Volume{777516db-9669-11de-89d5-001bfc66bc7f}\</Data>
        <Data>
        </Data>
        <Binary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inary>
      </EventData>
    </Event>

     

    I ran a vssadmin list writers and the VSS writer is bad:

    "Writer name: 'Microsoft Hyper-V VSS Writer'
       Writer Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de}
       Writer Instance Id: {5b9eeb44-d0b1-4e34-ab82-89b043454ca9}
       State: [5] Waiting for completion
       Last error: Unexpected error

     

    Also, my backups are not completing.  Getting this error:

    Log Name:      Application
    Source:        Microsoft-Windows-Backup
    Date:          3/19/2010 1:07:17 AM
    Event ID:      521
    Task Category: None
    Level:         Error
    Keywords:     
    User:          SYSTEM
    Computer:      PCSERVER.HOME.LOCAL
    Description:
    The backup operation that started at '‎2010‎-‎03‎-‎19T05:03:13.039000000Z' has failed because the Volume Shadow Copy Service operation to create a shadow copy of the volumes being backed up failed with following error code '2155348129'. Please review the event details for a solution, and then rerun the backup operation once the issue is resolved.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Backup" Guid="{1DB28F2E-8F80-4027-8C5A-A11F7F10F62D}" />
        <EventID>521</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2010-03-19T05:07:17.647662300Z" />
        <EventRecordID>10282</EventRecordID>
        <Correlation />
        <Execution ProcessID="3560" ThreadID="5808" />
        <Channel>Application</Channel>
        <Computer>PCSERVER.HOME.LOCAL</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="BackupTime">2010-03-19T05:03:13.039000000Z</Data>
        <Data Name="ErrorCode">2155348129</Data>
        <Data Name="ErrorMessage">%%2155348129</Data>
      </EventData>
    </Event>

     

    Not sure how to fix this problem.  I have deleted and recreated the snapshots numerous times but nothing is helping.  This is a backup of a Hyper V server 2008 R2.  Thanks for your help in advance.

     

     

     

     

    Saturday, March 20, 2010 12:49 AM

All replies

  • Hi there,

    You probably have multiple VSS writers in your system. I presume the disk isn't a local disk but a NAS/SAN disk or whatever, so I'll base my answer on this assumption.

    Open up an elevated command prompt and type: vssadmin list providers. You'll see multiple writers in here similar to this one:

    Provider name: 'Microsoft Software Shadow Copy provider 1.0'
       Provider type: System
       Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}
       Version: 1.0.0.7

    This is the default provider installed on the system. When you install host integration tools or some from your storage provider it'll install a new snapshot provider with Provider Type: Hardware. Write down the Provider ID and open up the registry. Go to HKLM\System\CurrentControlSet\Services\VSS\Providers and create a registry-export using File, Export. Select the key (the folder) that contains the Provider ID you've written down earlier and delete it. Reboot the machine and retry the backup, Windows will use the built-in System writer now.

    If this doesn't resolve your issue, put the backed up registry backup back using File, Import and restart the machine again. Most often the reason these kinds of backups fail is misconfiguration at the side of the storage. A hardware provider is dependant on VSS at the storage with which the VSS service tells the storage to make a snapshot of the volume instead of snapshotting it itself.

    Hope this helps.

    Regards,

    Stefan Hazenbroek

    Saturday, March 20, 2010 1:17 PM
  • Hi there,

    You probably have multiple VSS writers in your system. I presume the disk isn't a local disk but a NAS/SAN disk or whatever, so I'll base my answer on this assumption.

    Open up an elevated command prompt and type: vssadmin list providers. You'll see multiple writers in here similar to this one:

    Provider name: 'Microsoft Software Shadow Copy provider 1.0'
       Provider type: System
       Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}
       Version: 1.0.0.7

    This is the default provider installed on the system. When you install host integration tools or some from your storage provider it'll install a new snapshot provider with Provider Type: Hardware. Write down the Provider ID and open up the registry. Go to HKLM\System\CurrentControlSet\Services\VSS\Providers and create a registry-export using File, Export. Select the key (the folder) that contains the Provider ID you've written down earlier and delete it. Reboot the machine and retry the backup, Windows will use the built-in System writer now.

    If this doesn't resolve your issue, put the backed up registry backup back using File, Import and restart the machine again. Most often the reason these kinds of backups fail is misconfiguration at the side of the storage. A hardware provider is dependant on VSS at the storage with which the VSS service tells the storage to make a snapshot of the volume instead of snapshotting it itself.

    Hope this helps.

    Regards,

    Stefan Hazenbroek

    Actually the disks are local.  OS is on a single Sata and the data and hyper v's are on a raid 0.  All local.  Don't know if that changes your answer.
    Saturday, March 20, 2010 3:34 PM
  • Not right away. Could you check if multiple providers exist anyway using vssadmin list providers?

    Saturday, March 20, 2010 4:30 PM
  • Hi Stefan,

     

    Here is my output from the list writers command..

     

    Provider name: 'Microsoft Software Shadow Copy provider 1.0'

       Provider type: System

       Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}

       Version: 1.0.0.7

     

    That's the only one I have.  Should I still proceed with the export operations?  Thanks.

    Saturday, March 20, 2010 8:16 PM
  •  

    Hi,

     

    The error is similar as the one descripted here:

     

    http://support.microsoft.com/kb/833779

     

    Please check if there is any shadow copy task related to Volume{777516db-9669-11de-89d5-001bfc66bc7f}. Remove it to see the result.

     

    Meanwhile, as it related to Windows 2008 backup feature, you may need to post your question in following forum:

     

    Backup – Windows and Windows Server

     

    http://social.technet.microsoft.com/Forums/en-US/windowsbackup/threads

    Monday, March 22, 2010 8:44 AM
    Moderator
  • Hi,

    [quote]That's the only one I have.  Should I still proceed with the export operations?  Thanks.[/quote]

    No, that's not needed because you only have one provider, so this cannot be the issue. Check out the post Shaon posted, this indeed looks like something that might resolve your issue.

    Wednesday, March 24, 2010 10:30 PM
  • Right I did try that.  I forgot to post back.  Where do I find the volume shadow scheduled tasks?  I couldn't find it anywhere in the task schedulers.  Thanks.
    Thursday, March 25, 2010 12:06 AM
  • Hi,

    Try open Windows Server Backup, click Backup Schedule in right list.

     

    Thursday, March 25, 2010 9:22 AM
    Moderator
  • Hi,

    Try open Windows Server Backup, click Backup Schedule in right list.

     

    No I mean where do I find what you wrote about here..

     

    "Please check if there is any shadow copy task related to Volume{777516db-9669-11de-89d5-001bfc66bc7f}. Remove it to see the result."

     

    Thanks

    Thursday, March 25, 2010 11:35 AM
  • Sorry for the misunderstanding.

    You can run mountvol.exe  in CMD.

    Friday, March 26, 2010 6:36 AM
    Moderator
  • Sorry for the misunderstanding.

    You can run mountvol.exe  in CMD.

    Here is the output...

     

    Possible values for VolumeName along with current mount points are:

     

        \\?\Volume{10d839c1-ff31-11d5-8a0c-806e6f6e6963}\

            D:\

     

        \\?\Volume{401fcc01-967f-11de-868f-806e6f6e6963}\

            *** NO MOUNT POINTS ***

     

        \\?\Volume{f3a188d0-2920-11df-a1ac-001e58483780}\

            *** NO MOUNT POINTS ***

     

        \\?\Volume{742ef890-cfb2-11de-8ff3-000acd14e889}\

            E:\

     

        \\?\Volume{742ef897-cfb2-11de-8ff3-000acd14e889}\

            G:\

     

        \\?\Volume{401fcc02-967f-11de-868f-806e6f6e6963}\

            C:\

     

        \\?\Volume{401fcc05-967f-11de-868f-806e6f6e6963}\

            F:\

     

    I don't see the referenced volume in there.  What's next?  Ideas?  Thanks.

    Friday, March 26, 2010 2:35 PM
  • Hi,

    At current situation, is there any backup schedule set? If you, is it available to write them down and re-create them? You can try delete them, re-add them one at a time to find out which one causes the issue.

    Meanwhile, try the following commands to see if we will get any error:

    cd /d %windir%\system32
    net stop vss
    net stop swprv
    regsvr32 /s ole32.dll
    regsvr32 /s oleaut32.dll
    regsvr32 /s vss_ps.dll
    vssvc /register
    regsvr32 /s /i swprv.dll
    regsvr32 /s /i eventcls.dll
    regsvr32 /s es.dll
    regsvr32 /s stdprov.dll
    regsvr32 /s vssui.dll
    regsvr32 /s msxml.dll
    regsvr32 /s msxml3.dll
    regsvr32 /s msxml4.dll
    vssvc /register
    net start swprv
    net start vss

    Wednesday, March 31, 2010 9:12 AM
    Moderator
  • Well, I somehow fixed it.  I did the following.



    1. Shutdown all my VMs

    2. Rebooted my host server.

    3. Deleted/Merged all snapshots.

    4. Started all VMs and re-installed Integration Services (only worked with pre 08/win7 machines as these stated they were already installed).

    5. Rebooted server.

    6. Backup ran as scheduled successfully.  



    Thanks for everyone's help and glad my backup is running okay......for now.
    Friday, April 2, 2010 1:23 PM