SBS 2003 VSS Unable to create shadow copies Event IDs 11 12292 700

Discussion in 'Windows Small Business Server' started by rob_bell27, Jul 23, 2008.

  1. rob_bell27

    rob_bell27 Guest

    I am running SBS 2003 fully patched SP2
    I have been unable to perform backups or create shadow copies for some time
    now.

    Daily I am receiving errors with event ids 11 12292 and 7001

    I have tried every suggested solution including reregistering DLLs however I
    cannot reregister SWPRV.DLL. I have also reinstalled COM+. I am unable to
    perform a repair install on SBS 2003 as I only have original pre-SP1 media.

    Vssadmin list writers / providers detail is included below.

    Does anyone from Microsoft know how I can reinstall the neccessary
    components to get shadow copies working again?


    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 11
    Date: 23/07/2008
    Time: 7:00:00 AM
    User: N/A
    Computer: SBS2003
    Description:
    Volume Shadow Copy Service information: The COM Server with CLSID
    {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} and name SW_PROV cannot be started.
    [0x80070424]

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20 - Code:
    0008: 43 4f 52 53 4f 46 54 43 CORSOFTC
    0010: 30 30 30 30 30 30 38 30 00000080
    0018: 2d 20 43 61 6c 6c 3a 20 - Call:
    0020: 43 4f 52 53 4f 46 54 43 CORSOFTC
    0028: 30 30 30 30 30 30 36 35 00000065
    0030: 2d 20 50 49 44 3a 20 20 - PID:
    0038: 30 30 30 30 37 35 36 38 00007568
    0040: 2d 20 54 49 44 3a 20 20 - TID:
    0048: 30 30 30 30 35 39 33 32 00005932
    0050: 2d 20 43 4d 44 3a 20 20 - CMD:
    0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
    0060: 57 53 5c 53 79 73 74 65 WS\Syste
    0068: 6d 33 32 5c 76 73 73 76 m32\vssv
    0070: 63 2e 65 78 65 20 20 20 c.exe
    0078: 2d 20 55 73 65 72 3a 20 - User:
    0080: 4e 54 20 41 55 54 48 4f NT AUTHO
    0088: 52 49 54 59 5c 53 59 53 RITY\SYS
    0090: 54 45 4d 20 20 20 20 20 TEM
    0098: 2d 20 53 69 64 3a 20 20 - Sid:
    00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18


    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 12292
    Date: 23/07/2008
    Time: 7:00:00 AM
    User: N/A
    Computer: SBS2003
    Description:
    Volume Shadow Copy Service error: Error creating the Shadow Copy Provider
    COM class with CLSID {65ee1dba-8ff4-4a58-ac1c-3470ee2f376a} [0x80070424].

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20 - Code:
    0008: 43 4f 52 53 4f 46 54 43 CORSOFTC
    0010: 30 30 30 30 30 30 38 37 00000087
    0018: 2d 20 43 61 6c 6c 3a 20 - Call:
    0020: 43 4f 52 53 4f 46 54 43 CORSOFTC
    0028: 30 30 30 30 30 30 36 35 00000065
    0030: 2d 20 50 49 44 3a 20 20 - PID:
    0038: 30 30 30 30 37 35 36 38 00007568
    0040: 2d 20 54 49 44 3a 20 20 - TID:
    0048: 30 30 30 30 35 39 33 32 00005932
    0050: 2d 20 43 4d 44 3a 20 20 - CMD:
    0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
    0060: 57 53 5c 53 79 73 74 65 WS\Syste
    0068: 6d 33 32 5c 76 73 73 76 m32\vssv
    0070: 63 2e 65 78 65 20 20 20 c.exe
    0078: 2d 20 55 73 65 72 3a 20 - User:
    0080: 4e 54 20 41 55 54 48 4f NT AUTHO
    0088: 52 49 54 59 5c 53 59 53 RITY\SYS
    0090: 54 45 4d 20 20 20 20 20 TEM
    0098: 2d 20 53 69 64 3a 20 20 - Sid:
    00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18

    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 7001
    Date: 23/07/2008
    Time: 7:00:00 AM
    User: N/A
    Computer: SBS2003
    Description:
    VssAdmin: Unable to create a shadow copy: The shadow copy provider had an
    unexpected error while trying to process the specified command.
    Command-line: 'C:\WINDOWS\system32\vssadmin.exe Create Shadow /AutoRetry=5
    /For=\\?\Volume{87af546e-9e11-11d9-b9f5-806e6f6e6963}\'.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20 - Code:
    0008: 41 44 4d 56 41 44 4d 43 ADMVADMC
    0010: 30 30 30 30 30 38 32 38 00000828
    0018: 2d 20 43 61 6c 6c 3a 20 - Call:
    0020: 41 44 4d 56 41 44 4d 43 ADMVADMC
    0028: 30 30 30 30 30 37 36 38 00000768
    0030: 2d 20 50 49 44 3a 20 20 - PID:
    0038: 30 30 30 31 30 37 37 32 00010772
    0040: 2d 20 54 49 44 3a 20 20 - TID:
    0048: 30 30 30 30 39 32 39 36 00009296
    0050: 2d 20 43 4d 44 3a 20 20 - CMD:
    0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
    0060: 57 53 5c 73 79 73 74 65 WS\syste
    0068: 6d 33 32 5c 76 73 73 61 m32\vssa
    0070: 64 6d 69 6e 2e 65 78 65 dmin.exe
    0078: 20 43 72 65 61 74 65 20 Create
    0080: 53 68 61 64 6f 77 20 2f Shadow /
    0088: 41 75 74 6f 52 65 74 72 AutoRetr
    0090: 79 3d 35 20 2f 46 6f 72 y=5 /For
    0098: 3d 5c 5c 3f 5c 56 6f 6c =\\?\Vol
    00a0: 75 6d 65 7b 38 37 61 66 ume{87af
    00a8: 35 34 36 65 2d 39 65 31 546e-9e1
    00b0: 31 2d 31 31 64 39 2d 62 1-11d9-b
    00b8: 39 66 35 2d 38 30 36 65 9f5-806e
    00c0: 36 66 36 65 36 39 36 33 6f6e6963
    00c8: 7d 5c 20 20 20 20 20 20 }\
    00d0: 2d 20 55 73 65 72 3a 20 - User:
    00d8: 4e 54 20 41 55 54 48 4f NT AUTHO
    00e0: 52 49 54 59 5c 53 59 53 RITY\SYS
    00e8: 54 45 4d 20 20 20 20 20 TEM
    00f0: 2d 20 53 69 64 3a 20 20 - Sid:
    00f8: 53 2d 31 2d 35 2d 31 38 S-1-5-18

    Running vssadmin list providers results in

    Provider name: 'Microsoft Software Shadow Copy provider 1.0'
    Provider type: System
    Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}
    Version: 1.0.0.7

    vssadmin list writers
    vssadmin 1.1 - Volume Shadow Copy Service administrative command-
    (C) Copyright 2001 Microsoft Corp.

    Writer name: 'MSDEWriter'
    Writer Id: {f8544ac1-0611-4fa5-b04b-f7ee00b03277}
    Writer Instance Id: {294fadfd-dba6-44ed-a599-47aedef0acef}
    State: [1] Stable
    Last error: No error

    Writer name: 'FRS Writer'
    Writer Id: {d76f5a28-3092-4589-ba48-2958fb88ce29}
    Writer Instance Id: {75815c4a-f64e-4b18-956a-5ab298a6f24b}
    State: [1] Stable
    Last error: No error

    Writer name: 'WINS Jet Writer'
    Writer Id: {f08c1483-8407-4a26-8c26-6c267a629741}
    Writer Instance Id: {7a600fc8-be39-4997-81a7-60dc1cd6ba64}
    State: [1] Stable
    Last error: No error

    Writer name: 'Dhcp Jet Writer'
    Writer Id: {be9ac81e-3619-421f-920f-4c6fea9e93ad}
    Writer Instance Id: {d125d0c3-ceff-49f2-840b-27376085d690}
    State: [1] Stable
    Last error: No error

    Writer name: 'IIS Metabase Writer'
    Writer Id: {59b1f0cf-90ef-465f-9609-6ca8b2938366}
    Writer Instance Id: {ec666ee1-d6aa-4834-b5b4-11a0b531adad}
    State: [1] Stable
    Last error: No error

    Writer name: 'Registry Writer'
    Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
    Writer Instance Id: {13947038-9ae5-4701-9508-fadc3a2b2b07}
    State: [1] Stable
    Last error: No error

    Writer name: 'Event Log Writer'
    Writer Id: {eee8c692-67ed-4250-8d86-390603070d00}
    Writer Instance Id: {94b9481c-92c2-4313-ba16-596550fe4b04}
    State: [1] Stable
    Last error: No error

    Writer name: 'COM+ REGDB Writer'
    Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
    Writer Instance Id: {29db9c1c-8f84-4a14-8301-3c70dee87b67}
    State: [1] Stable
    Last error: No error

    Writer name: 'BITS Writer'
    Writer Id: {4969d978-be47-48b0-b100-f328f07ac1e0}
    Writer Instance Id: {74113664-0abe-4ba4-8ab2-2bf1b4c293a4}
    State: [1] Stable
    Last error: No error
     
    rob_bell27, Jul 23, 2008
    #1
    1. Advertisements

  2. Hello Customer,

    Thank you for posting here.

    According to your description, I understand that you get event error 11,
    12292 and 7001 on your SBS 2003 about VSS. If I have misunderstood the
    problem, please don't hesitate to let me know.

    Based on my research, there are many reasons will relate to this issue. I
    suggest we try the following steps to see if we can resolve this issue:

    1. Open ''My computer''. Right-click every partition and click
    ''Properties''. In the ''Shadow copies'' tab, check the scheduled shadow
    copy task. Have you scheduled any shadow copy task? If yes, please try to:

    a. Right click C drive in My Computer and click properties
    b. In the Shadow Copies tab, please click volumes and click Disable to
    disable the feature.

    Note: you may need to select multiple times for each volume (partitions,
    such as C drive, D drive and so on) and perform disable operation.

    d. Click OK
    d. Open the Task Scheduler from control panel, and then remove any
    remaining shadow copy tasks. Shadow copy tasks appear similar to "VSS
    VolumeGUID " or "ShadowCopyVolume VolumeGUID ".

    Note: The name of the scheduled task is the same as the name of the Volume
    Shadow Copy service task resource that is associated with the scheduled
    task.

    If you want to re-enable the correct VSS settings on the drive, please
    continue the following steps.
    e. Open the properties page of C (and other drive) drive in My Computer
    again.
    f. Enable the Volume Shadow Copy for each volume by clicking Enable button.

    2. What's the backup program you are using? Do you use the SBS backup
    wizard to create the backup tasks or use the NTbackup program to schedule
    the backup? Please try to disable and then re-enable the SBS backup to test
    this issue:
    Server Management -> Backup -> Configure Backup, please select "Do not use
    Small Business Server backup" and finish the wizard. Then rerun this wizard
    and select "Change existing backup settings" option to re-enable the SBS
    backup.

    3. As I know, if 2 backup scheduled jobs running at same time or one backup
    job begins before another backup job finished, this error message will
    appear. Therefore, please check the scheduled time if you have more than
    one scheduled backup job.

    4. Let's install the following VSS hotfix, and then check if the issue can
    be reproduced.

    Please contact our CSS and get the latest VSS hotfix KB913648 and install
    on your SBS.

    A new Volume Shadow Copy Service update is now available that fixes various
    Volume Shadow Copy Service problems in Windows Server 2003
    http://support.microsoft.com/default.aspx?scid=kb;en-us;913648

    5. If you install any 3rd-party backup application on SBS, please try to
    uninstall it and test this issue.

    6. Please do clean boot on SBS and then test this issue:

    To clean boot the problematic computer, please use the steps below:
    a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
    (without the quotation marks). Click OK.

    b. In the System Configuration Utility (MSConfig) window, click to select
    the Selective Startup button.

    c. Click to clear the check mark from the "Load startup items" below
    Selective Startup.

    d. Click the Services tab, click to check the "Hide All Microsoft Services"
    box, and remove all the check marks from the remained Non-Microsoft
    Services. Please note that the Exchange services could be marked as
    non-Microsoft. Please do not disable those services.

    e. Click OK to close the MSConfig window. Click Yes when you are asked to
    restart your computer in order to enable the changes.

    f. After restarting, please check whether this issue will reoccur.

    g. If there are no more problems, please use the above steps to enable
    services and startup items one by one in order to figure out the root cause
    of this issue.

    If we cannot resolve the issue after we perform the above steps, please
    kindly help me collect some information for further investigation:

    1. Save the application event log and system event log as evt files on the
    problematic machine and send to my mailbox:

    2. Please gather backupxx.log files in the folder C:\Documents and
    Settings\SBS Backup User\Local Settings\Application Data\Microsoft\Windows
    NT\NTBackup\data; and Sbsbackuplog0x.log files which can be located under
    the folder %sbsprogramdir%\Support\Backup Logs.

    3. Please capture screenshots on the error messages and send the pictures
    to me at

    Hope these steps will give you some help.

    Thanks and have a nice day!

    Best regards,

    Terence Liu (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
     
    Terence Liu [MSFT], Jul 23, 2008
    #2
    1. Advertisements

  3. rob_bell27

    rob_bell27 Guest

    Hi Terence

    Thank you for your reply.

    Please note, when I open the Shadow Copies tab on each partition, I see the
    error "Initialization failed. Error 0x8004230f: The shadow copy provider had
    an unexpected error while trying to process the specified operation." I
    therefor cannot enable or disable shadow copies.

    Re: Hotfix KB913648, my system is already using newer file versions than
    those listed in the KB article. Example, SWPRV.DLL, hotfix version is
    5.2.3790.2669, I have 5.2.3790.4143 installed already.

    My backup solution is Symantec BackupExec 12.

    Regards
    Rob



     
    rob_bell27, Jul 24, 2008
    #3
  4. Hello Rob,

    Thank you for your update.

    Based on research of your error message, I think this issue happens because
    the VSS system files are not registered. Or, the system files corrupted by
    the BackupExec.

    I. Please register the dlls thru the following steps:

    1. Click Start, click Run, type cmd , and then click OK.
    2. Type the following commands at a command prompt. Press ENTER after you
    type each command.

    cd /d %windir%\system32
    Net stop vss
    Net stop swprv
    regsvr32 ole32.dll
    regsvr32 oleaut32.dll
    regsvr32 vss_ps.dll
    vssvc /register
    regsvr32 /i swprv.dll
    regsvr32 /i eventcls.dll
    regsvr32 es.dll
    regsvr32 stdprov.dll
    regsvr32 vssui.dll
    regsvr32 msxml.dll
    regsvr32 msxml3.dll
    regsvr32 msxml4.dll

    Note: The last command may not run successfully.

    3. Perform a backup operation to verify that the issue is resolved.

    II. From Start -> Run, enter DCOMCNFG. Under "Component Services,
    Computers, My Computer, Dcom Config - make sure that the "Microsoft Volume
    Shadow Copy Service software provider" is listed.

    III. If you still have the issue, I suggest you uninstall BackupExec, and
    register the dlls again.

    If you get error when you try to register the dlls, please capture
    screenshots of the error messages and send the pictures to me at


    I hope these steps will give you some help.

    Thanks and have a nice day!

    Best regards,

    Terence Liu (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
     
    Terence Liu [MSFT], Jul 25, 2008
    #4
  5. Hello Rob,

    Thank you for your update. I'm sorry for the delay response due to the
    weekend.

    I did not get any email from you. Please ensure you sent the email to me
    working mailbox:

    Based on my research on the error message, I suggest we try the following
    steps to see if we can resolve this issue:

    I. Please apply the following VSS hotfix on SBS. Then test the backup again.
    Availability of a Volume Shadow Copy Service (VSS) update rollup package
    for Windows Server 2003 to resolve some VSS snapshot issues
    http://support.microsoft.com/kb/940349

    II. Run cliconfg.exe on SBS. Tick the option "Enable shared memory
    protocol". Then, test the backup again.

    III. If the issue persists, this problem may occur if the following
    registry key is corrupted:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-0
    0805fc79216}\Subscriptions

    Please perform the following steps:
    1. Click Start, click Run, type Regedit , and then click OK.
    2. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-0
    0805fc79216}\Subscriptions

    3. On the Edit menu, click Delete, and then click Yes to confirm that you
    want to delete the subkey.
    4. Exit Registry Editor.
    5. Click Start, click Run, type services.msc , and then click OK.
    6. Right-click the following services one at a time. For each service,
    click Restart:

    COM+ Event System
    COM+ System Application
    Microsoft Software Shadow Copy Provider
    Volume Shadow Copy

    7. Click Start, click Run, type cmd , and then click OK .
    8. At the command prompt, type vssadmin list writers , and then press
    ENTER.
    9. If the VSS writers are now listed, close the Command Prompt window. You
    do not have to complete the remaining steps.

    If the VSS writers are not listed, type the following commands at the
    command prompt. Press ENTER after each command.

    cd /d %windir%\system32
    net stop vss
    net stop swprv
    regsvr32 ole32.dll
    regsvr32 oleaut32.dll
    regsvr32 vss_ps.dll
    vssvc /register
    regsvr32 /i swprv.dll
    regsvr32 /i eventcls.dll
    regsvr32 es.dll
    regsvr32 stdprov.dll
    regsvr32 vssui.dll
    regsvr32 msxml.dll
    regsvr32 msxml3.dll
    regsvr32 msxml4.dll

    Note: The last command may not run successfully.

    10. At the command prompt, type vssadmin list writers , and then press
    ENTER.
    11. Confirm that the VSS writers are now listed.

    If we cannot resolve the issue after we perform the above steps, please
    kindly help me collect some information for further investigation:

    1. Save the application event log and system event log as evt files on the
    problematic machine and send to my mailbox:

    2. Please gather backupxx.log files in the folder C:\Documents and
    Settings\SBS Backup User\Local Settings\Application Data\Microsoft\Windows
    NT\NTBackup\data; and Sbsbackuplog0x.log files which can be located under
    the folder %sbsprogramdir%\Support\Backup Logs.

    3. Please capture screenshots on the error messages and send the pictures
    to me at

    Hope these steps will give you some help.

    Thanks and have a nice day!

    Best regards,

    Terence Liu (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
     
    Terence Liu [MSFT], Jul 29, 2008
    #5
  6. Hi Rob,

    Thank you for your update.

    The "Microsoft Software Shadow Copy Provider" service is missing from your
    SBS, I think this is because some 3rd-party software uninstall it. I
    suggest you perform the following steps:

    1. Using regedit check for the existence of
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swprv.
    2. In %winntroot%\system32 regsvr32 swprv.dll
    3. Start, Run, C:\Windows\System32\svchost.exe -k swprv (this will load the
    dll and Recreate the service.)
    4. Verify that the Microsoft Software Shadow Copy provider service is now
    present but it is set to Manual.
    5. Leave the service set to Manual. Third party applications will start the
    service when needed.

    Then, please continue the steps in my previous reply.

    If there's anything else about this issue I can do for you, please do not
    hesitate to let me know.

    Thank you and have a nice day,

    Best regards,

    Terence Liu (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed­
     
    Terence Liu [MSFT], Jul 30, 2008
    #6
  7. Email from customer:
    =========================

    Hi Terence

    Thankyou for the reply.

    I have attempted to complete steps as you suggested.

    1. There was no entry for swprv in the registry
    2. Regsvr32 swprv.dll fails with code 0x8000ffff as previously
    Event log shows
    Event Type: Error
    Event Source: VSS
    Event Category: None
    Event ID: 12289
    Date: 31/07/2008
    Time: 8:04:46 AM
    User: N/A
    Computer: SBS2003
    Description:
    Volume Shadow Copy Service error: Unexpected error
    CComModule::RegisterServer(TRUE). hr = 0x8007007e.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 2d 20 43 6f 64 65 3a 20 - Code:
    0008: 53 50 52 53 57 50 52 43 SPRSWPRC
    0010: 30 30 30 30 30 38 33 35 00000835
    0018: 2d 20 43 61 6c 6c 3a 20 - Call:
    0020: 53 50 52 53 57 50 52 43 SPRSWPRC
    0028: 30 30 30 30 30 37 35 31 00000751
    0030: 2d 20 50 49 44 3a 20 20 - PID:
    0038: 30 30 30 31 30 30 37 32 00010072
    0040: 2d 20 54 49 44 3a 20 20 - TID:
    0048: 30 30 30 30 38 36 30 34 00008604
    0050: 2d 20 43 4d 44 3a 20 20 - CMD:
    0058: 72 65 67 73 76 72 33 32 regsvr32
    0060: 20 73 77 70 72 76 20 20 swprv
    0068: 2d 20 55 73 65 72 3a 20 - User:
    0070: 41 4c 54 4f 4e 41 48 41 ALTONAHA
    0078: 54 43 48 45 52 59 5c 61 TCHERY\a
    0080: 64 6d 69 6e 69 73 74 72 dministr
    0088: 61 74 6f 72 20 20 20 20 ator
    0090: 2d 20 53 69 64 3a 20 20 - Sid:
    0098: 53 2d 31 2d 35 2d 32 31 S-1-5-21
    00a0: 2d 31 30 32 37 36 37 31 -1027671
    00a8: 39 39 30 2d 34 39 36 36 990-4966
    00b0: 34 32 30 31 33 2d 33 37 42013-37
    00b8: 33 39 37 39 30 33 36 38 39790368
    00c0: 2d 35 30 30 20 20 20 20 -500
    00c8: 2d 20 45 72 72 6f 72 3a - Error:
    00d0: 43 43 6f 6d 4d 6f 64 75 CComModu
    00d8: 6c 65 3a 3a 52 65 67 69 le::Regi
    00e0: 73 74 65 72 53 65 72 76 sterServ
    00e8: 65 72 28 54 52 55 45 29 er(TRUE)
    3. C:\Windows\System32\svchost.exe -k swprv did not produce an error. There
    are no related entries in the event log.
    4. MS Shadow Copy Provider is still not listed as a service
    5. Unable to continue from this point.

    Is there another method to reinstall the MS Shadow Copy Provider as a
    service?

    Thank you again for your assistance

    Cheers
    Rob
     
    Terence Liu [MSFT], Jul 31, 2008
    #7
  8. Hi Bob,

    Thank you for your update.

    I suggest we try the following steps to see if we can resolve this issue:

    Step 1:

    ==Install the latest VSS Hotfix. Latest as of date is KB940349
    Availability of a Volume Shadow Copy Service (VSS) update rollup package
    for Windows Server 2003 to resolve some VSS snapshot issues
    http://support.microsoft.com/kb/940349

    ==Reboot the box.
    ==Try taking backup on local HDD instead of media or network location.

    If the issue is not resolved with this move to Step 2:

    Step 2:

    Check for the following registry files.

    [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}]@="VssEvent"
    "AppID"="{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}"

    [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\InprocServer
    32]
    @="C:\\WINNT\\system32\\ES.DLL"
    "ThreadingModel"="Both"

    [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\ProgID]@="Vs
    sEvent.1"

    [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\VersionIndep
    endentProgID]@="VssEvent"

    If there is any change fix it and try backup. If it fails move to STEP 3

    Step 3: Re-registered the Following DLLs
    Go to command prompt and type

    Net stop vss
    Net stop swprv

    Go to system32 folder by typing

    CD %systemroot%\system32

    regsvr32 ole32.dll
    regsvr32 vss_ps.dll
    Vssvc /Register
    regsvr32 /i swprv.dll
    regsvr32 /i eventcls.dll
    regsvr32 es.dll
    regsvr32 stdprov.dll
    regsvr32 vssui.dll
    regsvr32 msxml.dll
    regsvr32 msxml3.dll
    regsvr32 msxml4.dll
    regsvr32 Vssapi.dll
    regsvr32 Vssui.dll

    Net start vss
    Net start swprv

    If still no luck move to Step 4

    Step 4: Reset the DCOM settings by running following command.

    secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
    /verbose

    If still no luck move to Step 5

    Step 5: Reinstall Com+

    1. Backup and then delete HKLM\Software\Microsoft\COM3
    2. Boot to Recovery console and rename clbcatq.dll to ~clbcatq.dll. Be sure
    to use the tilde.
    3. Boot to normal mode and in Control Panel, open the Add or Remove
    Programs tool, and then open the Add/Remove Windows Components tool. Do not
    make any changes, just click "Next". This reinstalls COM+.

    NOTE: You must have your Windows Server 2003 SP1 files available during
    this step.

    Step 6: Delete the Debug key for VSS if it is there

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Debug
    Net stop vss
    net start vss

    If we cannot resolve the issue after we perform the steps above, you may
    need to restore your SBS from backup.

    I hope these steps will give you some help.

    Thanks and have a nice day!

    Best regards,

    Terence Liu (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
     
    Terence Liu [MSFT], Jul 31, 2008
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.