Volume Shadow Copy Service error

[Aleks A.]

I'm getting the following error in my application log:

Log Name: Application
Source: VSS
Date: 2/28/2007 1:17:12 PM
Event ID: 8194
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Lenovo-T60
Description:
Volume Shadow Copy Service error: Unexpected error querying for the
IVssWriterCallback interface. hr = 0x80070005. This is often caused by
incorrect security settings in either the writer or requestor process.

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {825e3939-590d-4e36-a491-d7fd400f4002}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">8194</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-02-28T18:17:12.000Z" />
<EventRecordID>2501</EventRecordID>
<Channel>Application</Channel>
<Computer>Lenovo-T60</Computer>
<Security />
</System>
<EventData>
<Data>0x80070005</Data>
<Data>

Operation:
Gathering Writer Data

Context:
Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Name: System Writer
Writer Instance ID: {825e3939-590d-4e36-a491-d7fd400f4002}</Data>
<Binary>2D20436F64653A20575254575254494330303030303935382D2043616C6C3A20575254575254494330303030303932382D205049443A202030303030313339362D205449443A202030303030323536342D20434D443A2020433A5C57696E646F77735C73797374656D33325C737663686F73742E657865202D6B204E6574776F726B53657276696365202020202020202D20557365723A204E5420415554484F524954595C4E4554574F524B2053455256494345202020202D205369643A2020532D312D352D3230</Binary>
</EventData>
</Event>

followed by:

Log Name: Application
Source: VSS
Date: 2/28/2007 1:32:13 PM
Event ID: 8224
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Lenovo-T60
Description:
The VSS service is shutting down due to idle timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">8224</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-02-28T18:32:13.000Z" />
<EventRecordID>2503</EventRecordID>
<Channel>Application</Channel>
<Computer>Lenovo-T60</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Binary>2D20436F64653A2020434F525356434330303030303737322D2043616C6C3A2020434F525356434330303030303735342D205049443A202030303030303633322D205449443A202030303030303333362D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>


Any idea how to remedy this problem?

 

[Jill Zoeller [MSFT]]

Can you do the following steps and email me the log file?

Under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Asr,
create a new key called LogFileSetting

Under LogFileSetting, create a new DWORD value called EnableLogging.
Right-click that value, click Modify, and then enter 00000001 (hexadecimal)
or 1 (decimal)

Under LogFileSetting, create a new String value called LogPathName.
Right-click that value, click Modify, and then enter C:\asr.log

Now, reproduce the problem and send me the resulting asr.log file. When you
are done, delete the registry entry you created.

Also, can you send me a screenshot of your Disk Management screen? Please
use my email address minus "online."


--
This posting is provided "AS IS" with no warranties, and confers no rights.

Want to learn more about Windows file and storage technologies? Visit our
team blog at http://blogs.technet.com/filecab/default.aspx.