Ask the Community
Groups
Volume Shadow Copy Service Errors - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="summary"><strong>SUMMARY</strong></h2> <p>How to find the cause of common VSS errors.</p> <h2 data-id="issue"><strong>ISSUE</strong></h2> <p>Windows Client is showing Volume Shadow Copy Service (VSS) errors.<br><br>See <a href="https://kaseya.vanillacommunities.com/kb/articles/aliases/unitrends/hc/en-us/articles/360013266818" rel="noopener nofollow">this KB </a>for examples of specific VSS errors.</p> <h2 data-id="resolution"><strong>RESOLUTION</strong></h2> <p>In order to fix Volume Shadow Copy Service (VSS) errors in your system, and before you dive into the details, you need to know exactly what causes these errors in your system. If you encounter VSS failures for your Windows Client, you’ll need to check the Windows Event Viewer as follows:</p> <h2 data-id="n-a"> <br><img src="https://us.v-cdn.net/6032361/uploads/migrated/U5ED5GACHMUJ/eid-ka83r000000k9rv-feoid-00n40000003czoj-refid-0em400000000man." alt="Event Viewer" class="embedImage-img importedEmbed-img"></img></h2> <p><br>The error<strong> </strong>may look like this:</p> <p><img src="https://us.v-cdn.net/6032361/uploads/migrated/MI7TLI1EU5D9/volumeshadowcopyservicetroubleshootingeventviewervsserrorexample.png" alt="User-added image" class="embedImage-img importedEmbed-img"></img><br><br>VolSnap entries<strong> </strong>may look like this:<br><br><br><img src="https://us.v-cdn.net/6032361/uploads/migrated/UNTDFPYBC6LC/volumeshadowcopyservicetroubleshootingeventviewervolsnaperrorexample.png" alt="User-added image" class="embedImage-img importedEmbed-img"></img><br> </p> <p>What you need to do next if you are using Hyper-V, is to check the Hyper-V logs (following section).</p> <p>It also helps to run a search using your favorite search engine and search for: VOLSNAP 27 or VSS 8193.</p> <p>You basically use the Event ID and Source in your search to find additional information online on how to fix your particular error.</p> <p>Most of the time, however, the way to fix the error becomes obvious when reading the error message, see the following Hyper-V example:</p> <p> </p> <h2 data-id="hyper-v-volume-shadow-copy-errors">Hyper-V Volume Shadow Copy Errors</h2> <p>If you are using Hyper-V, you may find additional Hyper-V VSS error information by navigating further down to:</p> <p><strong>Applications and Services Logs -> Microsoft -> Windows -> Hyper-V XXXXXXX</strong></p> <p>You will find about a dozen different Hyper-V logs and more often than not you’ll find the answer to your problem right there.</p> <p>The following example shows that the <em>virtual machine’s Hyper-V Integration Services are not available or installed</em>:<br><br><img src="https://us.v-cdn.net/6032361/uploads/migrated/TXSF1EC89T38/volumeshadowcopyservicetroubleshootingeventviewer2.png" alt="User-added image" class="embedImage-img importedEmbed-img"></img><br><br>Please collect as much information as possible and export the Event Viewer logs. Contact support for further investigation.<br><br><br><strong>How to Fix Volume Shadow Copy Service: 11 Strategies</strong><br> </p> <blockquote class="blockquote"> <strong>Warning:</strong> Serious problems may occur if these commands are executed incorrectly. These problems may require redeployment of the appliance, result in a loss of data, and/or cause system downtime. Unitrends cannot guarantee these problems can be solved and customers should proceed at their own risk.</blockquote> <p><br><strong>Step #1: The First Thing To Do Before Attempting Fixes</strong><br><br>Check Windows Event Viewer logs and several sub-logs; this will save you hours if not days of work!<br><br>This is the most crucial step in fixing the problem: dig through the Event Viewer logs. If you haven’t done this before, it’s a great opportunity to approach it now since the Event Viewer system is where Windows logs almost everything. Once you know the exact cause, the fix is usually trivial.<br><br> </p> <p> </p> <h2 data-id="repair-strategy-1-of-11">Repair Strategy #1 of 11</h2> <p>Reboot. For some reason, servers that haven’t been rebooted in a while cause VSS to malfunction. As all Microsoft veterans know, you need to reboot regularly as a preventive and cleanup<br>measure for your system. Rebooting will eliminate VSS problems caused by transient VSS errors.</p> <h2 data-id="repair-strategy-2-of-11"> <br>Repair Strategy #2 of 11</h2> <p>Open “vssadmin from the command line (run cmd as administrator).</p> <p>Enter "diskshadow" and then "delete shadows all" or “vssadmin delete shadows /all” on older OSes to clean up any dead / orphaned shadows. Some defect systems accumulate hundreds of VSS snapshots that persist in the system and cause Windows to become unresponsive. <strong>WARNING</strong>: Do not run this command if the server or workstation is pending a reboot to install Windows updates!</p> <p>Enter “vssadmin list writers” and check for errors. If you receive errors for one writer, you may need to fix that particular service. It is quite common to receive multiple errors from several related services, such as “VolSnap” and “Disk”.</p> <p>If you see a VSS error, try the following:</p> <p>Restart the services:</p> <p><em>COM+ System Application</em><br><em>Service, Distributed Transaction Coordinator Service, and Volume</em><br><em>Shadow Copy Service<br><br><br>*Edit* 7-27-16<br>########################################<br>Check services for any abnormal state. <br><br>Example </em><br>Virtual Disk Service is stuck in a "Stopping" state, the process may need to be manually stopped and restarted.<br><br><em>########################################</em><br><br> </p> <p>and also restart the affected service, for example, the Hyper-V VSS writer.<br><br>The most important thing to do is to check the Event Viewer for any additional error information logged. Usually, each VSS aware service will have its own logs, most likely inside the Event Viewer.</p> <p>Run again “vssadmin list writers” to check if the above resolved the problem. If it didn’t follow with the next strategy below:<br><br> </p> <h2 data-id="repair-strategy-3-of-11">Repair Strategy #3 of 11</h2> <p>Uninstall all backup utilities on your computer, including Windows Backup if it’s installed. You don’t need to uninstall Unitrends Agent because the Agent doesn’t contain or install any VSS drivers; however, we have seen VSS components of other backup solution developers cause system instability and errors.</p> <p>After all other backup tools have been uninstalled, open the Registry Editor (Regedit) as administrator and check the following branch: “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Providers”</p> <p>Underneath that key, you should only find Microsoft Software Shadow Copy Provider 1.0 and no other VSS provider (with the exception of Windows Server 2012 and later, where you’ll find several system providers). If you do find another third-party VSS provider registered, it may be a residue registry entry of a previous software installation. You can save the entry by exporting the entire registry to a file (right-click and select Export) and then it’s safe to delete the entire branch entry underneath HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Provider.</p> <p>Then reboot and try again running “vssadmin list writers” to confirm the problem has been resolved.</p> <p><strong>Note:</strong> If you are using specialized attached storage that requires its own VSS provider, you may see a driver reference in the above registry key. Please leave those kinds of entries intact.<br>In addition, on Windows Server 2012 you may find additional system-related VSS providers there, which should also remain referenced<br><br>.</p> <h2 data-id="vss-repair-strategy-4-of-11">VSS Repair Strategy #4 of 11</h2> <p>On some systems, the command <strong>vssadmin delete shadows</strong> isn't available. In Windows XP that's okay because VSS snapshots can't be persistent on XP (a reboot will get rid off them); however, on Vista/2008 you need to delete old shadows using:<br><strong>vssadmin Resize ShadowStorage /For=C: /On=C: /MaxSize=320MB</strong></p> <p>300MB is usually the smallest amount you can specify and will effectively delete any existing VSS snapshots on your system.</p> <p>If you don't get any VSS writer errors when using <strong>vssadmin list writers </strong>but the system isn't able to create a new VSS snapshot (and you have deleted all existing snapshots), then you may have to actually increase the max shadow storage size on your system. Use the previous command with a greater number, such as 10GB:<br><strong>vssadmin Resize ShadowStorage /For=C: /On=C: /MaxSize=10GB</strong></p> <p>You can choose to allocate a percentage of disk space instead. Microsoft recommends 20%. That command would look like this for the C: drive.<br><strong>vssadmin Resize ShadowStorage /For=C: /On=C: /MaxSize=20%</strong><br><br>Note that it is also possible to allocate shadow copy storage space on a different drive, as along as it's local:<br><strong>vssadmin Resize ShadowStorage /For=C: /On=X: /MaxSize=200GB</strong></p> <p>If you receive the following message, check the <strong>Volume Shadow Copy</strong> service (must be Automatic or Manual) and if VSS capabilities are disabled or broken.<br><strong>the specified volume shadow copy storage association was not found</strong><br><br>If VSS is disabled, you can create it by executing this command<br><strong>vssadmin add shadowstorage /for=c: /on=c:</strong><br><br>Also check this article discussing the VSS error "Cannot find anymore diff area candidates" for instructions on how to set the diff area using the Windows user interface on Server operating systems.</p> <h2 data-id="vss-repair-strategy-5-of-11">VSS Repair Strategy #5 of 11</h2> <p>You can try to re-register all VSS and COM+ components by running the following commands from the command prompt as an administrator:</p> <p>These instructions for 32-bit AND 64-bit systems:</p> <p><strong>cd /d %windir%\system32<br>Net stop vss <br>Net stop swprv</strong></p> <p><strong>regsvr32 ole32.dll<br>regsvr32 vss_ps.dll</strong><br><strong>Vssvc /Register<br>regsvr32 /i swprv.dll<br>regsvr32 /i eventcls.dll<br>regsvr32 es.dll<br>regsvr32 stdprov.dll<br>regsvr32 vssui.dll<br>regsvr32 msxml.dll<br>regsvr32 msxml3.dll<br>regsvr32 msxml4.dll<br>regsvr32 Vssapi.dll<br>regsvr32 Vssui.dll </strong></p> <p><strong>net start vss<br>net start swprv</strong><br> </p> <p>Execute these instructions only on 64-bit systems <em>in addition </em>to the above:</p> <p><strong>Net stop vss<br>Net stop swprv<br>regsvr32.exe /i %windir%\system32\eventcls.dll <br>regsvr32.exe /i %windir%\system32\swprv.dll <br>regsvr32.exe %windir%\system32\vssui.dll <br>regsvr32.exe %windir%\SysWOW64\vss_ps.dll <br>regsvr32.exe %windir%\SysWOW64\msxml.dll <br>regsvr32.exe %windir%\SysWOW64\msxml2.dll<br>regsvr32.exe %windir%\SysWOW64\msxml3.dll<br>regsvr32.exe %windir%\SysWOW64\msxml4.dll<br>regsvr32.exe %windir%\SysWOW64\ole32.dll <br>regsvr32.exe %windir%\SysWOW64\oleaut32.dll<br>regsvr32.exe %windir%\SysWOW64\es.dll<br>regsvr32.exe %windir%\SysWOW64\comsvcs.dll</strong><br><strong>vssvc /register<br>net start swprv<br>net start vss</strong></p> <p><strong>net stop winmgmt</strong></p> <p><strong>regsvr32 wmiutils.dll </strong></p> <p><strong>net start winmgmt</strong></p> <p> </p> <h2 data-id="vss-repair-strategy-6-of-11">VSS Repair Strategy #6 of 11</h2> <p>If the PC or server you are using is a virtual machine host, you need to install the latest VMware Tools (for VMware), Virtual Machine Additions (Virtual Server), or Hyper-V Integration Services (for Hyper-V and Windows Server 2008) on <strong><em>each virtual machine</em></strong>. Try updating them if you have them installed already. Outdated integration services can cause various VSS errors.<br><br> </p> <h2 data-id="vss-repair-strategy-7-of-11">VSS Repair Strategy #7 of 11</h2> <p>Your computer may have a corrupt COM+ subscription information. Open the registry editor (Regedit) and navigate to:</p> <p>HKLM\Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}</p> <p>Then delete the Subscriptions key and reboot the machine.</p> <p>A subsequent call in the command prompt should show no more errors: vssadmin list writers</p> <p>This VSS repair strategy appears to work well when the System Writer is reporting an error. The Event Viewer may be reporting this or a similar error:</p> <p>Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}<br>Writer Name: System Writer<br>Writer Instance ID: {34162f4c-59ff-468e-848d-cb4b3d8dd7dc}</p> <h2 data-id="vss-repair-strategy-8-of-11"> <br>VSS Repair Strategy #8 of 11</h2> <p>Remove or uninstall all backup tools on your computer. Unitrends Agent doesn't need to be removed because it doesn't add a VSS writer to your system. Other products, however, do add a VSS writer which may be causing the problem. You may receive this error:</p> <p>Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during the Windows setup or during the installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and Name VSSEvent is [0x80040154]</p> <p>Several users reported that after uninstalling Acronis this error message disappeared.<br><br><br><strong>VSS Repair Strategy #9 of 11</strong></p> <p>Try uninstalling the virtualization tool you're using (Microsoft Virtual Server, Hyper-V, VMware, etc.) one-by-one, then reboot the client. On some machines, this strategy worked when everything else failed.</p> <p>Once you get VSS working again properly, install the virtualization platform again from scratch and retest VSS.</p> <p> </p> <h2 data-id="vss-repair-strategy-10-of-11">VSS Repair Strategy #10 <strong>of 11</strong> </h2> <p>Install the latest Service Packs and Updates through Windows Update.</p> <p>Check <a href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fsupport.microsoft.com%2F" rel="noopener nofollow">Microsoft's Support</a> for hotfixes and other updates to repair VSS.</p> <h2 data-id="vss-repair-strategy-11-of-11-vss-error-code-800423f3"> <br><br>VSS Repair Strategy #11 of 11 (VSS Error Code 800423f3)</h2> <p>If the VSS error code 0x800423f3 is reported, the reason is a corrupt state of WMI (wmiutils.dll). This may happen if a registry cleaner was used or a third-party application was uninstalled incorrectly. What you need to do is re-register wmiutils.dll and then restart the WMI service.</p> <p>In the command prompt, execute the following three lines (note that stopping the WMI service does NOT stop VMs, it only stops the management service):</p> <p>net stop winmgmt</p> <p>regsvr32 wmiutils.dll </p> <p>net start winmgmt</p> <p>After that, you should start up the Hyper-V Management Service again if needed.<br><br>Another cause for this error: You may need to update your Hyper-V virtual machine integration services inside of each VM when you come across this error. See <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fprevious-versions%2Fwindows%2Fit-pro%2Fwindows-server-2008-R2-and-2008%2Fdd582376%28v%3Dws.10%29" rel="noopener nofollow">https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd582376(v=ws.10)</a>. Check the vmguest.iso date/time you have in your system folder. You may have different versions of the Hyper-V Integration Services CD on your system. There have been bug reports indicating that Hyper-V uses the wrong ISO file when the VM Action menu is used to install the Integration Services. Try attaching the ISO manually and use the latest vmguest.iso in your system folder.</p> </article> </main>