Event ID 12348 — Volume Shadow Copy Service Operations

Applies To: Windows Server 2008

The Volume Shadow Copy Service (VSS) provides the ability to create a point in time image (shadow copy) of one or more volumes that can be used to perform backups. The service is also used during restores of applications.

Event Details

Product: Windows Operating System
ID: 12348
Source: VSS
Version: 6.0
Symbolic Name: VSS_WARNING_ACCESS_DENIED_VOLROOT
Message: Volume Shadow Copy Service warning: VSS was denied access to the root of volume %1. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly. Check security on the volume, and try the operation again. %2

Resolve

Ensure that VSS has access to the volume root directory

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To ensure that Volume Shadow Copy Service (VSS) has access to the volume root directory:

  1. Open an elevated Command Prompt. Click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type icacls <VolumeRootPath> /grant system:f at the command prompt, where <VolumeRootPath> is the path to the volume root directory, for example, D:\.

For more information about the **icacls **command, see https://go.microsoft.com/fwlink/?LinkId=104873.

Verify

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To verify that the Volume Shadow Copy Service is started:

  1. Click Start, point to Administrative Tools, and then click Services.
  2. In the results pane, double-click Volume Shadow Copy.
  3. In Service status, make sure that the status is Started. If the status is not Started, click Start.
  4. Make sure Startup type is set to Manual.
  5. Click OK.

Volume Shadow Copy Service Operations

File Services