S
Steven Stern
Sometime in the last few weeks (according to the event log), VSS has stopped
working during my backups. Any help on getting VSS working again will be
appreciated.
I've been through Google and the newsgroups and have determined the following.
1) If I open a command prompt very soon after logging in, it appears OK:
vssadmin list writers
vssadmin 1.0 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Waiting for responses. These may be delayed if a shadow copy is being
prepared.
Writer name: 'WMI Writer'
Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Writer Instance Id: {c0089fe9-e140-446b-ac90-e5750ce24fbb}
State: [1] Stable
Writer name: 'MSDEWriter'
Writer Id: {f8544ac1-0611-4fa5-b04b-f7ee00b03277}
Writer Instance Id: {8958779f-b584-4941-b5ae-54298da7441f}
State: [1] Stable
Writer name: 'IIS Metabase Writer'
Writer Id: {59b1f0cf-90ef-465f-9609-6ca8b2938366}
Writer Instance Id: {953aeaf9-9b2a-40b9-92a4-dcca5a175ded}
State: [1] Stable
Writer name: 'Microsoft Writer (Bootable State)'
Writer Id: {f2436e37-09f5-41af-9b2a-4ca2435dbfd5}
Writer Instance Id: {d3727d95-15d6-4834-a3c9-ea495a8d5ffe}
State: [1] Stable
2) About 2 minutes later, it's DOA.
vssadmin list writers
vssadmin 1.0 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Error: 0x8000ffff
Between (1) and (2) above, the following errors were logged:
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 5013
Date: 2/7/2004
Time: 10:30:16 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: Shadow Copy writer ContentIndexingService
called routine RegQueryValueExW which failed with status 0x80070002 (converted
to 0x800423f4).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 53 48 43 4f 4d 4e 43 WSHCOMNC
0008: 32 32 33 30 00 00 00 00 2230....
0010: 57 53 48 43 49 43 00 00 WSHCIC..
0018: 32 38 37 00 00 00 00 00 287.....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12302
Date: 2/7/2004
Time: 10:30:19 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: An internal inconsistency was detected in
trying to contact shadow copy service writers. Please check to see that the
Event Service and Volume Shadow Copy Service are operating properly.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 55 45 43 58 4d 4c 43 BUECXMLC
0008: 33 36 32 34 00 00 00 00 3624....
0010: 42 55 45 43 58 4d 4c 43 BUECXMLC
0018: 33 35 39 34 00 00 00 00 3594....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 5013
Date: 2/7/2004
Time: 10:33:03 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: Shadow Copy writer ContentIndexingService
called routine RegQueryValueExW which failed with status 0x80070002 (converted
to 0x800423f4).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 53 48 43 4f 4d 4e 43 WSHCOMNC
0008: 32 32 33 30 00 00 00 00 2230....
0010: 57 53 48 43 49 43 00 00 WSHCIC..
0018: 32 38 37 00 00 00 00 00 287.....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12302
Date: 2/7/2004
Time: 10:33:03 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: An internal inconsistency was detected in
trying to contact shadow copy service writers. Please check to see that the
Event Service and Volume Shadow Copy Service are operating properly.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 55 45 43 58 4d 4c 43 BUECXMLC
0008: 33 36 32 34 00 00 00 00 3624....
0010: 42 55 45 43 58 4d 4c 43 BUECXMLC
0018: 33 35 39 34 00 00 00 00 3594....
The disk is 60% used. XP Pro, SP1, patches up to date.
Other stuff that might be relevant...
NAV 2004
ZoneAlarm 4.5.538
These Windows services are started:
Alerter
Ati HotKey Poller
Automatic Updates
COM+ Event System
COM+ System Application
Computer Browser
Creative Service for CDROM Access
Cryptographic Services
DHCP Client
Diskeeper
Distributed Link Tracking Client
DNS Client
Error Reporting Service
Event Log
Help and Support
IIS Admin
Infrared Monitor
IPSEC Services
Logical Disk Manager
Messenger
Network Connections
Network Location Awareness (NLA)
Norton AntiVirus Auto Protect Service
PGPsdkService
Plug and Play
Pml Driver HPZ12
Print Spooler
Protected Storage
Remote Access Connection Manager
Remote Procedure Call (RPC)
SAVScan
Secondary Logon
Security Accounts Manager
Server
Shell Hardware Detection
Symantec Core LC
Symantec Event Manager
Symantec Settings Manager
System Event Notification
System Restore Service
Task Scheduler
TCP/IP NetBIOS Helper
Telephony
Terminal Services
Themes
TrueVector Internet Monitor
Upload Manager
Volume Shadow Copy
WebClient
Windows Audio
Windows Image Acquisition (WIA)
Windows Management Instrumentation
Windows Time
Wireless Zero Configuration
WMDM PMSP Service
Workstation
working during my backups. Any help on getting VSS working again will be
appreciated.
I've been through Google and the newsgroups and have determined the following.
1) If I open a command prompt very soon after logging in, it appears OK:
vssadmin list writers
vssadmin 1.0 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Waiting for responses. These may be delayed if a shadow copy is being
prepared.
Writer name: 'WMI Writer'
Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Writer Instance Id: {c0089fe9-e140-446b-ac90-e5750ce24fbb}
State: [1] Stable
Writer name: 'MSDEWriter'
Writer Id: {f8544ac1-0611-4fa5-b04b-f7ee00b03277}
Writer Instance Id: {8958779f-b584-4941-b5ae-54298da7441f}
State: [1] Stable
Writer name: 'IIS Metabase Writer'
Writer Id: {59b1f0cf-90ef-465f-9609-6ca8b2938366}
Writer Instance Id: {953aeaf9-9b2a-40b9-92a4-dcca5a175ded}
State: [1] Stable
Writer name: 'Microsoft Writer (Bootable State)'
Writer Id: {f2436e37-09f5-41af-9b2a-4ca2435dbfd5}
Writer Instance Id: {d3727d95-15d6-4834-a3c9-ea495a8d5ffe}
State: [1] Stable
2) About 2 minutes later, it's DOA.
vssadmin list writers
vssadmin 1.0 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Error: 0x8000ffff
Between (1) and (2) above, the following errors were logged:
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 5013
Date: 2/7/2004
Time: 10:30:16 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: Shadow Copy writer ContentIndexingService
called routine RegQueryValueExW which failed with status 0x80070002 (converted
to 0x800423f4).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 53 48 43 4f 4d 4e 43 WSHCOMNC
0008: 32 32 33 30 00 00 00 00 2230....
0010: 57 53 48 43 49 43 00 00 WSHCIC..
0018: 32 38 37 00 00 00 00 00 287.....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12302
Date: 2/7/2004
Time: 10:30:19 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: An internal inconsistency was detected in
trying to contact shadow copy service writers. Please check to see that the
Event Service and Volume Shadow Copy Service are operating properly.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 55 45 43 58 4d 4c 43 BUECXMLC
0008: 33 36 32 34 00 00 00 00 3624....
0010: 42 55 45 43 58 4d 4c 43 BUECXMLC
0018: 33 35 39 34 00 00 00 00 3594....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 5013
Date: 2/7/2004
Time: 10:33:03 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: Shadow Copy writer ContentIndexingService
called routine RegQueryValueExW which failed with status 0x80070002 (converted
to 0x800423f4).
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 57 53 48 43 4f 4d 4e 43 WSHCOMNC
0008: 32 32 33 30 00 00 00 00 2230....
0010: 57 53 48 43 49 43 00 00 WSHCIC..
0018: 32 38 37 00 00 00 00 00 287.....
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12302
Date: 2/7/2004
Time: 10:33:03 PM
User: N/A
Computer: SDS
Description:
Volume Shadow Copy Service error: An internal inconsistency was detected in
trying to contact shadow copy service writers. Please check to see that the
Event Service and Volume Shadow Copy Service are operating properly.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 55 45 43 58 4d 4c 43 BUECXMLC
0008: 33 36 32 34 00 00 00 00 3624....
0010: 42 55 45 43 58 4d 4c 43 BUECXMLC
0018: 33 35 39 34 00 00 00 00 3594....
The disk is 60% used. XP Pro, SP1, patches up to date.
Other stuff that might be relevant...
NAV 2004
ZoneAlarm 4.5.538
These Windows services are started:
Alerter
Ati HotKey Poller
Automatic Updates
COM+ Event System
COM+ System Application
Computer Browser
Creative Service for CDROM Access
Cryptographic Services
DHCP Client
Diskeeper
Distributed Link Tracking Client
DNS Client
Error Reporting Service
Event Log
Help and Support
IIS Admin
Infrared Monitor
IPSEC Services
Logical Disk Manager
Messenger
Network Connections
Network Location Awareness (NLA)
Norton AntiVirus Auto Protect Service
PGPsdkService
Plug and Play
Pml Driver HPZ12
Print Spooler
Protected Storage
Remote Access Connection Manager
Remote Procedure Call (RPC)
SAVScan
Secondary Logon
Security Accounts Manager
Server
Shell Hardware Detection
Symantec Core LC
Symantec Event Manager
Symantec Settings Manager
System Event Notification
System Restore Service
Task Scheduler
TCP/IP NetBIOS Helper
Telephony
Terminal Services
Themes
TrueVector Internet Monitor
Upload Manager
Volume Shadow Copy
WebClient
Windows Audio
Windows Image Acquisition (WIA)
Windows Management Instrumentation
Windows Time
Wireless Zero Configuration
WMDM PMSP Service
Workstation