none
Volume Shadow Copy Service error

    Question

  • Hi,

    We have a Win 2008 server running MOSS, and do backup with DPM. We get the error: 

    Volume Shadow Copy Service error: Unexpected error RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005.

    Operation:

    Initializing Writer

    Context:

    Writer Class Id: {57af97e4-4a76-4ace-a756-d11e8f0294c7}

    Writer Name: SPSearch VSS Writer

    Writer Instance ID: {521f87a1-1a77-4808-9ebd-fd643b3771cb}

    How to fix?

    • Moved by Sushil.Baid [MSFT] Wednesday, December 24, 2008 5:51 AM VSS ueries can be answered in "file services and storage" forum. (Moved from Backup – Windows and Windows Server to File Services and Storage)
    Tuesday, December 23, 2008 7:22 AM

Answers

  • Hi customer,

     

    Would you please perform the following steps on the problematic server to test if it helps?

     

    1. Net stop vss

     

    2. Net stop swprv

     

    3. Go to command prompt, for Windows Server 2008 X86

     

    Cd %systemroot%\system32

    regsvr32 /i swprv.dll

    regsvr32 /i eventcls.dll

    regsvr32 vssui.dll

    Vssvc /Register

    regsvr32 ole32.dll

    regsvr32 vss_ps.dll

    regsvr32 es.dll

    regsvr32 stdprov.dll

    regsvr32 msxml3.dll

     

    For Windows Server 2008 64bit

     

    Cd %systemroot%\syswow64

    regsvr32 ole32.dll

    regsvr32 vss_ps.dll

    regsvr32 es.dll

    regsvr32 stdprov.dll

    regsvr32 msxml3.dll

    regsvr32 msxml.dll

    regsvr32 msxml4.dll

     

    4. Check and Stop the following services:

     

    a) Volume Shadow Copy Service.

    b) Microsoft Software Shadow Copy Provider.

    c) COM+ event system

    d) COM+ System Application

     

    5. Take the backup of the "Subscriptions" key

     

    HKEY_LOCAL_MACHINE \Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscript

     

    Delete the "Subscriptions" key. Delete just the Subscriptions subkey, leave the EventClasses key.

     

    6. Expand and locate the following registry subtree

     

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VolSnap

     

    Add DWord key with the name of MinDiffAreaFileSize with value 3000

     

    7. Restart/Start the following services:

     

    a) COM+ event system

    b) COM+ System Application

    c) Microsoft Software Shadow Copy Provider

    d) Volume Shadow Copy

     

    8. Reboot the machine.

     

    It appears that the issue is related to System Center Data Protection Manager, you may consider initializing a new thread in System Center Data Protection Manager Community. The engineers and community members there have more experience and can help you in a more efficient way.

     

    System Center Data Protection Manager Community

    http://technet.microsoft.com/en-us/dpm/bb737891.aspx

     

    Hope the issue will be resolved soon.


    David Shen - MSFT
    • Marked as answer by David Shen Saturday, December 27, 2008 4:22 AM
    Wednesday, December 24, 2008 10:07 AM

  • Hi,

    For the case with volume shadow copy (VSS) and DPM, I resolved it by uninstalling the agent, disabled the firewall, and then reinstalled DPM agent.
    I've left the FW off. Now the VSS error messageses are gone.

    The installtion of the DPM agent doesn't do the job correct I assume...



    Jon
    • Marked as answer by Excalibur Wednesday, April 22, 2009 8:40 AM
    Wednesday, April 22, 2009 8:39 AM

All replies

  • Hi customer,

     

    Would you please perform the following steps on the problematic server to test if it helps?

     

    1. Net stop vss

     

    2. Net stop swprv

     

    3. Go to command prompt, for Windows Server 2008 X86

     

    Cd %systemroot%\system32

    regsvr32 /i swprv.dll

    regsvr32 /i eventcls.dll

    regsvr32 vssui.dll

    Vssvc /Register

    regsvr32 ole32.dll

    regsvr32 vss_ps.dll

    regsvr32 es.dll

    regsvr32 stdprov.dll

    regsvr32 msxml3.dll

     

    For Windows Server 2008 64bit

     

    Cd %systemroot%\syswow64

    regsvr32 ole32.dll

    regsvr32 vss_ps.dll

    regsvr32 es.dll

    regsvr32 stdprov.dll

    regsvr32 msxml3.dll

    regsvr32 msxml.dll

    regsvr32 msxml4.dll

     

    4. Check and Stop the following services:

     

    a) Volume Shadow Copy Service.

    b) Microsoft Software Shadow Copy Provider.

    c) COM+ event system

    d) COM+ System Application

     

    5. Take the backup of the "Subscriptions" key

     

    HKEY_LOCAL_MACHINE \Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscript

     

    Delete the "Subscriptions" key. Delete just the Subscriptions subkey, leave the EventClasses key.

     

    6. Expand and locate the following registry subtree

     

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VolSnap

     

    Add DWord key with the name of MinDiffAreaFileSize with value 3000

     

    7. Restart/Start the following services:

     

    a) COM+ event system

    b) COM+ System Application

    c) Microsoft Software Shadow Copy Provider

    d) Volume Shadow Copy

     

    8. Reboot the machine.

     

    It appears that the issue is related to System Center Data Protection Manager, you may consider initializing a new thread in System Center Data Protection Manager Community. The engineers and community members there have more experience and can help you in a more efficient way.

     

    System Center Data Protection Manager Community

    http://technet.microsoft.com/en-us/dpm/bb737891.aspx

     

    Hope the issue will be resolved soon.


    David Shen - MSFT
    • Marked as answer by David Shen Saturday, December 27, 2008 4:22 AM
    Wednesday, December 24, 2008 10:07 AM
  • Hi,

    Here are the result from regsvr32 on this 64bit Win 08 system:

    Es.dll: The module ”es.dll” was loaded but the entry-point DllRegister was not found.

    Msxml.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….

    MSxml4.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….

    The files msxml.dll and msxml4.dll does not exsist at all on the server...

    I've not completed the staps from 4 because of these errors...

    ??

    Friday, January 02, 2009 7:47 AM
  • I get the same errors as "Excalibur". I continued on with the modifications but the VSS error still comes back.

    How is this related to System Center Data Protection Manager? I am not running any System Center Products in my environment.

    Please help!
    Thanks!

    Joel
    Wednesday, January 07, 2009 10:32 PM
  •  Hi,

    This issue is still not solved - please help!

    Here are the result from regsvr32 on this 64bit Win 08 system:

    Es.dll: The module ”es.dll” was loaded but the entry-point DllRegister was not found.

    Msxml.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….

    MSxml4.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….

    The files msxml.dll and msxml4.dll does not exsist at all on the server...

    I've not completed the staps from 4 because of these errors...

    ??

    Thursday, February 19, 2009 10:19 PM
  • Hello..

     We need help!

    Same problem her as

    AZDHS_WIC and
    Excalibur

     



    RVenes
    Friday, February 27, 2009 4:58 PM
  • David Shen - MSFT said:

    For Windows Server 2008 64bit

     

    Cd %systemroot%\syswow64

    regsvr32 ole32.dll

    regsvr32 vss_ps.dll

    regsvr32 es.dll

    regsvr32 stdprov.dll

    regsvr32 msxml3.dll

    regsvr32 msxml.dll

    regsvr32 msxml4.dll


    Same results as Excalibur for Server 2008 x64 Std, MOSS 2007 Enterprise
    Current roles for server is Web Server IIS only.

    Es.dll: The module ”es.dll” was loaded but the entry-point DllRegister was not found.

    Msxml.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….

    MSxml4.dll: the module “msxml.dll failed to load. Make sure the binary I stored at the….


    4. Check and Stop the following services:

    a) Volume Shadow Copy Service.
    Is in "Manual" startup mode - not running.


    b) Microsoft Software Shadow Copy Provider.
    Is in "Manual" startup mode - not running.


    c) COM+ event system
    Is in "Automatic" startup mode - Running. Stopped it.
    Dependencies automaticly stops "BITS" and "System Event Notification Service"


    d) COM+ System Application

    Is in "Manual" startup mode - not running.

    5. Backup and delete the key.
    Performed it.

    6. Added the DWORD key MinDiffAreaFileSize with 3000 (as decimal, not hex)

    7. Starting the services in the prescribed order;

    a) COM+ event system
    (starting BITS and System Event Notification Service manually)

    b) COM+ System Application

    c) Microsoft Software Shadow Copy Provider

    d) Volume Shadow Copy

    No Events indicating a problem before restart.

    8. Rebooting.

    After reboot there's a new writer problem, new ID; instead of "SPSearch VSS Writer" it's "OSearch VSS Writer".

    Volume Shadow Copy Service error: Unexpected error RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005. Operation:
    Initializing Writer
    Context:
    Writer Class Id: {8d5f38cd-fb7a-49ca-ae1b-21d1f017d8f9}
    Writer Name: OSearch VSS Writer
    Writer Instance ID: {029600bb-1f4d-4e96-ac5f-bb33a8ecb2ac}


    Still looking for ideas on how to fix.


    Sincerly, Jon E. Carlsen
    Wednesday, March 11, 2009 4:36 PM
  • Additional info, the reg keys in the event have the following content;

     

     
    Windows Registry Editor Version 5.00  
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag]  
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\BITS Writer]  
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\IIS Config Writer]  
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\IIS Metabase Writer]  
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\System Writer]  
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\VolSnap]  
    "VolumesSafeForWrite (Enter)"=hex:48,00,00,00,00,00,00,00,64,c8,7f,02,66,a2,c9,\  
      01,00,00,00,00,00,00,00,00,1e,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,\  
      00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\  
      00,00,00,00,00,00,00  
    "VolumesSafeForWrite (Leave)"=hex:48,00,00,00,00,00,00,00,2e,63,bb,02,66,a2,c9,\  
      01,00,00,00,00,00,00,00,00,1f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\  
      00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\  
      00,00,00,00,00,00,00  
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer]  
     


    As for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
    lists the expected service accounts.

    However "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag" does not contain the specific service accounts - nor the WSS local groups (WSS_ADMIN_WPG) in the permissions.
    "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag" contains the WSS group (WSS_ADMIN_WPG) in permissions.

    Hm, do we have a permission inheritance problem here?
    I'll do a couple of tests.

    EDIT; Adding the WSS_ADMIN_WPG with full control and inheritance for the sbubkeys did not help.


    Sincerly, Jon E. Carlsen
    Wednesday, March 11, 2009 5:00 PM
  • Hello I got excactly the same problem, except that i don't have a Data Protection Manager in my environment.

    It seems that every hour, exactly at 27 Minutes (06:27, 07:27, 08:27) the server wants to do a VSS Backup (no idea why he does that and where this has been configured).

    The MOSS 2007 Server is running on Windows Server 2008 x64.

    Every hour he wants to do that VSS backup, the following error message appears:

    Volume Shadow Copy Service error: Unexpected error RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005. Operation:
    Initializing Writer
    Context:
    Writer Class Id: {57af97e4-4a76-4ace-a756-d11e8f0294c7}
    Writer Name: SPSearch VSS Writer
    Writer Instance ID: {521f87a1-1a77-4808-9ebd-fd643b3771cb}

    Monday, April 20, 2009 12:15 PM
  • Here some additional infos:

    Every hour exactly the same events ar logged in the same order. Here they are:

    10045 Information
    10032 Error
    10046 Error
    1013 Information
    12289 Error
    1003 Information
    6398 Error
    Monday, April 20, 2009 12:29 PM

  • Hi,

    For the case with volume shadow copy (VSS) and DPM, I resolved it by uninstalling the agent, disabled the firewall, and then reinstalled DPM agent.
    I've left the FW off. Now the VSS error messageses are gone.

    The installtion of the DPM agent doesn't do the job correct I assume...



    Jon
    • Marked as answer by Excalibur Wednesday, April 22, 2009 8:40 AM
    Wednesday, April 22, 2009 8:39 AM
  • I had the same problem, after deinstalling and reinstalling MOSS 2007.

    It is obviously an access problem, with the two SharePoint service accounts (SPSearch and OSearch) not being able to access a key below ...\VSS\Diag as the error message states.

    I right-clicked the Diag folder in the registry and brought up the Permissions dialog and allowed the two respective service accounts to have access. After that I haven't had any such error messages anymore.
    • Proposed as answer by CapnGrizzle Thursday, February 10, 2011 2:20 PM
    Monday, June 29, 2009 5:42 PM