VSS error showing in Event Viewer

Question

Hi ya

Everytime I have built Windows 7 either 32bit or 64bit I see the following error in the event viewer relating to VSS. Here is what the event viewer log shows:

Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied.

. This is often caused by incorrect security settings in either the writer or requestor process.

Operation:

Gathering Writer Data

Context:

Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}

Writer Name: System Writer

Writer Instance ID: {4be9d63a-4623-49cf-8b81-bd4b23e174de}

Any ideas how I overcome this error? I have checked the VSS service and it's set to manual.

Many thanks in advance.

Answer 1

Hi there

Thank you so much for replying to my question.

Before I read your reply I took it on myself to uninstall McAfee Total Protection 2010 as I just had this niggling feel it might be that. I have uninstalled McAfee Total Protection and the error has dissappeared. I have installed Microsoft Security Essentials and still the error has vanished. So that pretty much concludes McAfee was the root cause.

I have since removed McAfee on my daughters netbook and again the VSS on hers has now rectified itself.

Thanks again for your reply

Tim

Answer 2

VSS Errors Occur on Windows Server 2008 Systems

Valid on Windows Server 2008 platforms.

Symptom:

Database level backup jobs complete successfully and Windows Event ID 8194 appears in Windows Event Viewer.

Environment:

Microsoft Exchange Server 2007 is installed on a Windows Server 2008 x64 system.

Solution:

Event ID 8194 relates to Volume Shadow Copy Service errors.

For more information, see the Microsoft support website. You can eliminate the error condition by adding the access permissions for the Network Service

account to the COM Security of the affected server. To add the access permissions for the Network Service account, do the following:

From the Start Menu, select Run

The Run dialog opens.

In the Open field, input dcomcnfg and click OK.

The Component Services dialog opens.

Expand Component Services, Computers, and My Computer.

Right-click My Computer and click Properties on the pop-up menu.

The My Computer Properties dialog opens.

Click the COM Security tab.

Under Access Permission click Edit Default.

The Access Permissions dialog opens.

From the Access Permissions dialog, add the Network Service account with Local Access allowed.

Close all open dialogs.

Restart the computer.

Answer 3

Try This.  It worked in my case.  (Win 7 64-bit).

VSS Errors Occur on Windows Server 2008 Systems

Valid on Windows Server 2008 platforms.

Symptom:

Database level backup jobs complete successfully and Windows Event ID 8194 appears in Windows Event Viewer.

Environment:

Microsoft Exchange Server 2007 is installed on a Windows Server 2008 x64 system.

Solution:

Event ID 8194 relates to Volume Shadow Copy Service errors.

For more information, see the Microsoft support website. You can eliminate the error condition by adding the access permissions for the Network Service

account to the COM Security of the affected server. To add the access permissions for the Network Service account, do the following:

From the Start Menu, select Run

The Run dialog opens.

In the Open field, input dcomcnfg and click OK.

The Component Services dialog opens.

Expand Component Services, Computers, and My Computer.

Right-click My Computer and click Properties on the pop-up menu.

The My Computer Properties dialog opens.

Click the COM Security tab.

Under Access Permission click Edit Default.

The Access Permissions dialog opens.

From the Access Permissions dialog, add the Network Service account with Local Access allowed.

Close all open dialogs.

Restart the computer

Answer 4

If you do the following, the registry should be automatically changed for you (that's what happened for me).

From the Start Menu, select Run

The Run dialog opens.

In the Open field, input dcomcnfg and click OK.

The Component Services dialog opens.

Expand Component Services, Computers, and My Computer.

Right-click My Computer and click Properties on the pop-up menu.

The My Computer Properties dialog opens.

Click the COM Security tab.

Under Access Permission click Edit Default.

The Access Permissions dialog opens.

From the Access Permissions dialog, add the "Network Service" account with Local Access allowed.

Close all open dialogs.

Restart the computer.

Answer 5

Hi carrtim1,

This issue occurs when using a 3rd party backup program that utilizes Windows VSS (Volume Shadow Service) and has its own requestor.

It looks like the requestor (the backup application) does not allow system writer to call back into their process and hence generates the error in the application log.

Step 1:

Check if the Volume Shadow Copy service is running on your computer or not.

To check for the same,

1. Click ‘Start’, type ‘services.msc’ and hit Enter.
2. Locate “Volume Shadow Copy” and check if the service is started.
3. If not ‘Start’ the service.

Step 2:

If the issue persists, you may have to make some changes in the registry.

1. The following example grants access to the "MyDomain\MyUser" account:
2. Click on Start, type regeditin the search box.
3. On the Registry Editor window, navigate to the below location:

HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services>VSS>VssAccessControl <--- ADD KEY

MyDomain\MyUser = 1 <- ADD VALUE

Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following link:

 http://windows.microsoft.com/en-US/windows7/Back-up-the-registry

Step 3:

If you still come across the issue, to troubleshoot the error condition, you first need to determine what caused it by using the VssAdmin command line tool. After determining the cause of the error condition, follow the steps indicated for each possible cause.

Access the below link to know about Volume Shadow Copy Service Operations:

http://technet.microsoft.com/en-us/library/cc734235(WS.10).aspx

Hope this helps.

Regards, Manasa P – Microsoft Support.