VSS Failures on Windows Server 2003 Standard

-

i have been wrestling issue more week , running out of ideas.  run 2 windows server 2003 r2 standard sp2 boxes; 1 hosts ad , other member server.  member server has not been able create shadow copies more week, causing cascade of issues suspect relate it.

this server controller in older domain, demoted before new domain added.  suspect may permissions issues, can't explain why , don't know how have happened (all running smoothly until 3 weeks ago).

the os on raid-1 scsi array; data partitions on raid-5 scsi array.

apart from being member server and hosting exchange 2003, server in question file server (we plan migrate sql box first need backups functioning again).

in nutshell, here have tried:

- when try re-registering dll files vss, appears go smoothly , services start, no shadow copies result.

- have deleted ms provider key @ hklm\system\currentcontrolset\services\vss\providers\ , rebooted, re-registered no avail.

- had been running backup exec 12.5 on both boxes in course of troubleshooting have removed (no biggie; jobs , database hosted on other box).  a troubleshooting step suggested dell.

- downloaded , installed hotfix ms kb 969219.  read through of other hotfixes did not sound pertinent (perhaps are?) , 1 in particular recommended dell.


===============
the symptoms follows...

-  when accessing shadow copies tab server volume, "error 0x80070006:  access denied"

- running vssadmin commands @ command prompt yields following:


c:\documents , settings\administrator>vssadmin list writers
vssadmin 1.1 - volume shadow copy service administrative command-line tool
(c) copyright 2001 microsoft corp.

error: unexpected failure: catastrophic failure

c:\documents , settings\administrator>vssadmin list providers
vssadmin 1.1 - volume shadow copy service administrative command-line tool
(c) copyright 2001 microsoft corp.

error: don't have correct permissions run command.

meanwhile, in event log, see following entries (oldest newest):

event type: error
event source: vss
event category: none
event id: 1
date:  11/2/2009
time:  8:15:03 pm
user:  n/a
computer: hal
description:
volume shadow copy service initialization error: control dispatcher cannot started [0x80070427].

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: 2d 20 43 6f 64 65 3a 20   - code:
0008: 20 43 4f 52 53 56 43 43    corsvcc
0010: 30 30 30 30 30 32 30 38   00000208
0018: 2d 20 43 61 6c 6c 3a 20   - call:
0020: 20 43 4f 52 53 56 43 43    corsvcc
0028: 30 30 30 30 30 31 39 35   00000195
0030: 2d 20 50 49 44 3a 20 20   - pid: 
0038: 30 30 30 30 37 39 39 36   00007996
0040: 2d 20 54 49 44 3a 20 20   - tid: 
0048: 30 30 30 30 38 30 30 30   00008000
0050: 2d 20 43 4d 44 3a 20 20   - cmd: 
0058: 56 73 73 76 63 20 2f 52   vssvc /r
0060: 65 67 69 73 74 65 72 20   egister
0068: 2d 20 55 73 65 72 3a 20   - user:
0070: 53 48 49 4e 44 45 4c 52   shindelr
0078: 4f 43 4b 5c 53 52 41 20   ock\sra
0080: 41 44 4d 49 4e 20 20 20   admin  
0088: 2d 20 53 69 64 3a 20 20   - sid: 
0090: 53 2d 31 2d 35 2d 32 31   s-1-5-21
0098: 2d 32 37 36 32 39 34 34   -2762944
00a0: 34 34 31 2d 36 37 37 34   441-6774
00a8: 32 32 32 39 34 2d 32 38   22294-28
00b0: 34 38 38 31 35 33 30 38   48815308
00b8: 2d 35 30 30 20 20 20 20   -500   


event type: error
event source: vss
event category: none
event id: 11
date:  11/2/2009
time:  8:16:09 pm
user:  n/a
computer: hal
description:
volume shadow copy service information: com server clsid {e579ab5f-1cc4-44b4-bed9-de0991ff0623} , name coordinator cannot started. [0x80070005]

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: 2d 20 43 6f 64 65 3a 20   - code:
0008: 42 55 45 43 58 4d 4c 43   buecxmlc
0010: 30 30 30 30 33 39 36 37   00003967
0018: 2d 20 43 61 6c 6c 3a 20   - call:
0020: 42 55 45 43 58 4d 4c 43   buecxmlc
0028: 30 30 30 30 33 39 35 32   00003952
0030: 2d 20 50 49 44 3a 20 20   - pid: 
0038: 30 30 30 30 36 32 30 38   00006208
0040: 2d 20 54 49 44 3a 20 20   - tid: 
0048: 30 30 30 30 36 32 31 32   00006212
0050: 2d 20 43 4d 44 3a 20 20   - cmd: 
0058: 76 73 73 61 64 6d 69 6e   vssadmin
0060: 20 6c 69 73 74 20 77 72    list wr
0068: 69 74 65 72 73 20 20 20   iters  
0070: 2d 20 55 73 65 72 3a 20   - user:
0078: 53 48 49 4e 44 45 4c 52   shindelr
0080: 4f 43 4b 5c 53 52 41 20   ock\sra
0088: 41 44 4d 49 4e 20 20 20   admin  
0090: 2d 20 53 69 64 3a 20 20   - sid: 
0098: 53 2d 31 2d 35 2d 32 31   s-1-5-21
00a0: 2d 32 37 36 32 39 34 34   -2762944
00a8: 34 34 31 2d 36 37 37 34   441-6774
00b0: 32 32 32 39 34 2d 32 38   22294-28
00b8: 34 38 38 31 35 33 30 38   48815308
00c0: 2d 35 30 30 20 20 20 20   -500   

event type: error
event source: vss
event category: none
event id: 8193
date:  11/2/2009
time:  8:16:09 pm
user:  n/a
computer: hal
description:
volume shadow copy service error: unexpected error calling routine cocreateinstance.  hr = 0x80070005.

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: 2d 20 43 6f 64 65 3a 20   - code:
0008: 42 55 45 43 58 4d 4c 43   buecxmlc
0010: 30 30 30 30 33 39 37 33   00003973
0018: 2d 20 43 61 6c 6c 3a 20   - call:
0020: 42 55 45 43 58 4d 4c 43   buecxmlc
0028: 30 30 30 30 33 39 35 32   00003952
0030: 2d 20 50 49 44 3a 20 20   - pid: 
0038: 30 30 30 30 36 32 30 38   00006208
0040: 2d 20 54 49 44 3a 20 20   - tid: 
0048: 30 30 30 30 36 32 31 32   00006212
0050: 2d 20 43 4d 44 3a 20 20   - cmd: 
0058: 76 73 73 61 64 6d 69 6e   vssadmin
0060: 20 6c 69 73 74 20 77 72    list wr
0068: 69 74 65 72 73 20 20 20   iters  
0070: 2d 20 55 73 65 72 3a 20   - user:
0078: 53 48 49 4e 44 45 4c 52   shindelr
0080: 4f 43 4b 5c 53 52 41 20   ock\sra
0088: 41 44 4d 49 4e 20 20 20   admin  
0090: 2d 20 53 69 64 3a 20 20   - sid: 
0098: 53 2d 31 2d 35 2d 32 31   s-1-5-21
00a0: 2d 32 37 36 32 39 34 34   -2762944
00a8: 34 34 31 2d 36 37 37 34   441-6774
00b0: 32 32 32 39 34 2d 32 38   22294-28
00b8: 34 38 38 31 35 33 30 38   48815308
00c0: 2d 35 30 30 20 20 20 20   -500   

event type: error
event source: vss
event category: none
event id: 11
date:  11/2/2009
time:  8:16:18 pm
user:  n/a
computer: hal
description:
volume shadow copy service information: com server clsid {e579ab5f-1cc4-44b4-bed9-de0991ff0623} , name coordinator cannot started. [0x80070005]

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: 2d 20 43 6f 64 65 3a 20   - code:
0008: 41 44 4d 50 52 4f 43 43   admprocc
0010: 30 30 30 30 31 31 32 32   00001122
0018: 2d 20 43 61 6c 6c 3a 20   - call:
0020: 41 44 4d 50 52 4f 43 43   admprocc
0028: 30 30 30 30 31 31 31 31   00001111
0030: 2d 20 50 49 44 3a 20 20   - pid: 
0038: 30 30 30 30 36 32 34 34   00006244
0040: 2d 20 54 49 44 3a 20 20   - tid: 
0048: 30 30 30 30 36 32 35 36   00006256
0050: 2d 20 43 4d 44 3a 20 20   - cmd: 
0058: 76 73 73 61 64 6d 69 6e   vssadmin
0060: 20 6c 69 73 74 20 70 72    list pr
0068: 6f 76 69 64 65 72 73 20   oviders
0070: 2d 20 55 73 65 72 3a 20   - user:
0078: 53 48 49 4e 44 45 4c 52   shindelr
0080: 4f 43 4b 5c 53 52 41 20   ock\sra
0088: 41 44 4d 49 4e 20 20 20   admin  
0090: 2d 20 53 69 64 3a 20 20   - sid: 
0098: 53 2d 31 2d 35 2d 32 31   s-1-5-21
00a0: 2d 32 37 36 32 39 34 34   -2762944
00a8: 34 34 31 2d 36 37 37 34   441-6774
00b0: 32 32 32 39 34 2d 32 38   22294-28
00b8: 34 38 38 31 35 33 30 38   48815308
00c0: 2d 35 30 30 20 20 20 20   -500   

event type: error
event source: vss
event category: none
event id: 11
date:  11/2/2009
time:  8:16:31 pm
user:  n/a
computer: hal
description:
volume shadow copy service information: com server clsid {e579ab5f-1cc4-44b4-bed9-de0991ff0623} , name coordinator cannot started. [0x80070005]

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: 2d 20 43 6f 64 65 3a 20   - code:
0008: 42 55 45 43 58 4d 4c 43   buecxmlc
0010: 30 30 30 30 33 39 36 37   00003967
0018: 2d 20 43 61 6c 6c 3a 20   - call:
0020: 42 55 45 43 58 4d 4c 43   buecxmlc
0028: 30 30 30 30 33 39 35 32   00003952
0030: 2d 20 50 49 44 3a 20 20   - pid: 
0038: 30 30 30 30 36 32 39 32   00006292
0040: 2d 20 54 49 44 3a 20 20   - tid: 
0048: 30 30 30 30 36 33 34 34   00006344
0050: 2d 20 43 4d 44 3a 20 20   - cmd: 
0058: 76 73 73 61 64 6d 69 6e   vssadmin
0060: 20 6c 69 73 74 20 77 72    list wr
0068: 69 74 65 72 73 20 20 20   iters  
0070: 2d 20 55 73 65 72 3a 20   - user:
0078: 53 48 49 4e 44 45 4c 52   shindelr
0080: 4f 43 4b 5c 53 52 41 20   ock\sra
0088: 41 44 4d 49 4e 20 20 20   admin  
0090: 2d 20 53 69 64 3a 20 20   - sid: 
0098: 53 2d 31 2d 35 2d 32 31   s-1-5-21
00a0: 2d 32 37 36 32 39 34 34   -2762944
00a8: 34 34 31 2d 36 37 37 34   441-6774
00b0: 32 32 32 39 34 2d 32 38   22294-28
00b8: 34 38 38 31 35 33 30 38   48815308
00c0: 2d 35 30 30 20 20 20 20   -500   


event type: error
event source: vss
event category: none
event id: 8193
date:  11/2/2009
time:  8:16:31 pm
user:  n/a
computer: hal
description:
volume shadow copy service error: unexpected error calling routine cocreateinstance.  hr = 0x80070005.

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: 2d 20 43 6f 64 65 3a 20   - code:
0008: 42 55 45 43 58 4d 4c 43   buecxmlc
0010: 30 30 30 30 33 39 37 33   00003973
0018: 2d 20 43 61 6c 6c 3a 20   - call:
0020: 42 55 45 43 58 4d 4c 43   buecxmlc
0028: 30 30 30 30 33 39 35 32   00003952
0030: 2d 20 50 49 44 3a 20 20   - pid: 
0038: 30 30 30 30 36 32 39 32   00006292
0040: 2d 20 54 49 44 3a 20 20   - tid: 
0048: 30 30 30 30 36 33 34 34   00006344
0050: 2d 20 43 4d 44 3a 20 20   - cmd: 
0058: 76 73 73 61 64 6d 69 6e   vssadmin
0060: 20 6c 69 73 74 20 77 72    list wr
0068: 69 74 65 72 73 20 20 20   iters  
0070: 2d 20 55 73 65 72 3a 20   - user:
0078: 53 48 49 4e 44 45 4c 52   shindelr
0080: 4f 43 4b 5c 53 52 41 20   ock\sra
0088: 41 44 4d 49 4e 20 20 20   admin  
0090: 2d 20 53 69 64 3a 20 20   - sid: 
0098: 53 2d 31 2d 35 2d 32 31   s-1-5-21
00a0: 2d 32 37 36 32 39 34 34   -2762944
00a8: 34 34 31 2d 36 37 37 34   441-6774
00b0: 32 32 32 39 34 2d 32 38   22294-28
00b8: 34 38 38 31 35 33 30 38   48815308
00c0: 2d 35 30 30 20 20 20 20   -500   


event type: error
event source: vss
event category: none
event id: 11
date:  11/2/2009
time:  8:16:36 pm
user:  n/a
computer: hal
description:
volume shadow copy service information: com server clsid {e579ab5f-1cc4-44b4-bed9-de0991ff0623} , name coordinator cannot started. [0x80070005]

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: 2d 20 43 6f 64 65 3a 20   - code:
0008: 41 44 4d 50 52 4f 43 43   admprocc
0010: 30 30 30 30 31 31 32 32   00001122
0018: 2d 20 43 61 6c 6c 3a 20   - call:
0020: 41 44 4d 50 52 4f 43 43   admprocc
0028: 30 30 30 30 31 31 31 31   00001111
0030: 2d 20 50 49 44 3a 20 20   - pid: 
0038: 30 30 30 30 36 33 32 38   00006328
0040: 2d 20 54 49 44 3a 20 20   - tid: 
0048: 30 30 30 30 36 33 36 30   00006360
0050: 2d 20 43 4d 44 3a 20 20   - cmd: 
0058: 76 73 73 61 64 6d 69 6e   vssadmin
0060: 20 6c 69 73 74 20 70 72    list pr
0068: 6f 76 69 64 65 72 73 20   oviders
0070: 2d 20 55 73 65 72 3a 20   - user:
0078: 53 48 49 4e 44 45 4c 52   shindelr
0080: 4f 43 4b 5c 53 52 41 20   ock\sra
0088: 41 44 4d 49 4e 20 20 20   admin  
0090: 2d 20 53 69 64 3a 20 20   - sid: 
0098: 53 2d 31 2d 35 2d 32 31   s-1-5-21
00a0: 2d 32 37 36 32 39 34 34   -2762944
00a8: 34 34 31 2d 36 37 37 34   441-6774
00b0: 32 32 32 39 34 2d 32 38   22294-28
00b8: 34 38 38 31 35 33 30 38   48815308
00c0: 2d 35 30 30 20 20 20 20   -500   

hi eddie,

 

based on our experience, third party can cause conflict resulting vss issue. in order narrow down cause of issue more efficiently, let refer following steps perform clean boot see if issue still continues.

step 1: perform clean boot

 

1. click "start", go "run", , type "msconfig" in open box start system configuration utility.

 

2. click "services" tab, check "hide microsoft services" box , click disable (if not gray).

 

3. click "startup" tab, click "disable all" , click "ok".

 

4.  restart computer. when "system configuration utility" window appears, please check box , click "ok".

 

meanwhile, suggest apply vss rollup update onto problematic server.

 

1. please apply hotfix mentioned in following kb article

 

a volume shadow copy service (vss) update package available windows server 2003

http://support.microsoft.com/kb/833167  

 

a volume shadow copy service (vss) update-2 package available

http://support.microsoft.com/kb/887827  

 

availability of volume shadow copy service (vss) update rollup package windows server 2003 resolve vss snapshot issues

http://support.microsoft.com/default.aspx?scid=kb;en-us;940349  

 

availability of windows server 2003 post-service pack 2 com+ 1.5 hotfix rollup package 12

http://support.microsoft.com/default.aspx?scid=kb;en-us;934016  

 

a new volume shadow copy service update available fixes various volume shadow copy service problems in windows server 2003

http://support.microsoft.com/kb/913648/en-us  

 

the backup application stops responding when perform backup uses volume snapshot in windows server 2003 sp1

http://support.microsoft.com/kb/923628

 

best regards,

david shen

this posting provided "as is" no warranties, , confers no rights.


Windows Server  >  File Services and Storage



Comments

Post a Comment

Popular posts from this blog

some help on Event 540

-
does event 540 me distinguish between user , administrator access?    this event generated ypon successfull logon, logon exactly? successful logon on system?   is there other way log administrator access system using event viewer?   thank valuable response   georges hi,   as far know, cannot distinguish between user , administrator access event 540. more information, please refer to:   event id: 540 http://www.microsoft.com/technet/support/ee/transform.aspx?prodname=windows+operating+system&prodver=5.0&evtid=540&evtsrc=security&lcid=1033   events 528 , 540 http://blogs.msdn.com/b/ericfitz/archive/2004/12/09/279282.aspx   regards, bruce this posting provided "as is" no warranties, , confers no rights. please remember click "mark answer" on post helps you, , click "unmark answer" if marked post not answer question. can beneficial other community members reading thread.
Read more

WMI Repository 4GB limit - Win 2003 Ent Question

-
Image
hi there, i've question size limit on wmi repository (being 4gb). if isn't correct place post this, apologies , can let me know wheere post this? i've come across few servers running citrix have reached limit on wmi repository size , need install ibm director agent hw monitoring. during install getting 'out of disk space' errors entered in mofcomp.log: "(mon apr 02 04:10:36 2012.172843) : error occurred while processing item 4: (mon apr 02 04:10:36 2012.172843) : error number: 0x8004103b, facility: wmi description: out of disk space" when error number http://msdn.microsoft.com/en-us/library/windows/desktop/aa394559%28v=vs.85%29.aspx i see this: wbem_e_out_of_disk_space 2147749947 (0x8004103b) disk out of space or 4 gb limit on wmi repository (cim repository) size reached. windows xp , windows 2000/nt:   disk out of space. i'm wondering if there reason why limit set 4gb or can increase needs be? can't seem find reas
Read more

Event ID 1302 (error 1307) DFS replication service encountered an error while writing to the debug log file

-
Image
hello. we @ step 0 of migration frs dfsr sysvol replication on windows 2008r2 dc. every time run powershell dfsrmig / getmigrationstate says: "unable create dfsr migration log file. error 1307. all domain controllers have migrated global state 'start'. migration has reached consistent state on domain controllers. succeeded." it creates event id 1302 in "dfs replication" event log, explaining error 1307 means: "this security id may not assigned ownder of object ". i already checked space limits, quotas, permissions on c:\windows\debug according microsoft support article unable fix it. although, there new entries added dfsr00095.txt log file despite error. dfsrxxxx file has not been archived .gz format, and, beleive, contains dfsr diagnostics , events. here of latest entries: 20150908 08:47:27.867 11616 sysm  3354 migration::sysvolmigration::getsysvolreadyflag [mig] sysvol ready 20150908 08:47:27.867 11616 sysm   456 migrati
Read more