P
polykit
Hi,
We have a server running Windows 2016 Std solely as as a Hyper-V host. Looking in the event logs show a number of VSS errors around the time of our backup (we use Cloudberry VM Edition), which stopped working last weekend. Running vssadmin list writers returns no results at all and is accompanied by this error:
Volume Shadow Copy Service error: An internal inconsistency was detected in trying to contact shadow copy service writers. The Registry Writer failed to respond to a query from VSS. Check to see that the Event Service and Volume Shadow Copy Service are operating properly, and please check the Application event log for any other events.
Operation:
Gathering Writer Data
Executing Asynchronous Operation
Context:
Execution Context: Requestor
Current State: GatherWriterMetadata
There are lots of other errors from VSS listed, mostly with "access denied" somwhere in them:
Source: VSS
Event ID:13
Volume Shadow Copy Service information: The COM Server with CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} and name SW_PROV cannot be started. [0x80070005, Access is denied.
]
Operation:
Obtain a callable interface for this provider
Obtaining provider management interface
Context:
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Class ID: {00000000-0000-0000-0000-000000000000}
Snapshot Context: -1
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Source: VSS
Event ID: 12292
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070005, Access is denied.
].
Operation:
Obtain a callable interface for this provider
Obtaining provider management interface
Context:
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Class ID: {00000000-0000-0000-0000-000000000000}
Snapshot Context: -1
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
I've tried restarting Volume Shadow Copy and Microsoft Software Shadow Copy services and both start without any problem.
Restarting the Com+ Event System service throws this warning which may or may not be related:
Source EventSystem
Event ID: 4609
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80070057 from line 66 of com\complus\src\events\tier1\subscription.cpp. This warning may be expected if the computer is low on resources. If the computer is not low on resources, and these warnings persist, it may indicate a problem in the COM+ Event System.
Can anyone help since I'm running out of ideas!
Thanks
Continue reading...
We have a server running Windows 2016 Std solely as as a Hyper-V host. Looking in the event logs show a number of VSS errors around the time of our backup (we use Cloudberry VM Edition), which stopped working last weekend. Running vssadmin list writers returns no results at all and is accompanied by this error:
Volume Shadow Copy Service error: An internal inconsistency was detected in trying to contact shadow copy service writers. The Registry Writer failed to respond to a query from VSS. Check to see that the Event Service and Volume Shadow Copy Service are operating properly, and please check the Application event log for any other events.
Operation:
Gathering Writer Data
Executing Asynchronous Operation
Context:
Execution Context: Requestor
Current State: GatherWriterMetadata
There are lots of other errors from VSS listed, mostly with "access denied" somwhere in them:
Source: VSS
Event ID:13
Volume Shadow Copy Service information: The COM Server with CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} and name SW_PROV cannot be started. [0x80070005, Access is denied.
]
Operation:
Obtain a callable interface for this provider
Obtaining provider management interface
Context:
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Class ID: {00000000-0000-0000-0000-000000000000}
Snapshot Context: -1
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Source: VSS
Event ID: 12292
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070005, Access is denied.
].
Operation:
Obtain a callable interface for this provider
Obtaining provider management interface
Context:
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
Class ID: {00000000-0000-0000-0000-000000000000}
Snapshot Context: -1
Provider ID: {b5946137-7b9f-4925-af80-51abd60b20d5}
I've tried restarting Volume Shadow Copy and Microsoft Software Shadow Copy services and both start without any problem.
Restarting the Com+ Event System service throws this warning which may or may not be related:
Source EventSystem
Event ID: 4609
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80070057 from line 66 of com\complus\src\events\tier1\subscription.cpp. This warning may be expected if the computer is low on resources. If the computer is not low on resources, and these warnings persist, it may indicate a problem in the COM+ Event System.
Can anyone help since I'm running out of ideas!
Thanks
Continue reading...