Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

VSS issue on SBS 2008

11 views

Skip to first unread message

tct14

unread,

Jan 5, 2010, 9:09:41 AM1/5/10

I am using Backup Exex 12.5 on SBS 2008. For 6+ months my backups have
been running fine, but last week they began failing with the following:

Backup- SBS2008 - AOFO: Initialization failure on: "\\SBS2008\Microsoft
Information Store\First Storage Group". Advanced Open File Option used:
Microsoft Volume Shadow Copy Service (VSS).

V-79-10000-11226 - VSS Snapshot error. The Microsoft Volume Shadow Copy
Service (VSS) snapshot provider selected returned: "Unexpected provider
error". Ensure that all provider services are enabled and can be
started. Check the Windows Event Viewer for details.

I have been working with Symantec on the issue, but they told me it was
a Microsoft issue. They did suggest that I install Windows Server 2008
SP2 to re-register all dll's, which I did, but that did not resolve the
issue. I have checked that all of the services are enabled (Volume
Shadow Copy, Symantec SymSnap VSS Provider, Microsoft Software Shadow
Copy Provider, and some others they had me check).

I also receive the following errors in the system event logs:

Log Name: Application
Source: VSS
Date: 1/5/2010 7:07:45 AM
Event ID: 12292
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SBS2008.McClymond.local
Description:
Volume Shadow Copy Service error: Error creating the Shadow Copy
Provider COM class with CLSID {790f2886-9889-4c99-8ef5-531add05d044}
[0x8007007e].

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">12292</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-01-05T13:07:45.000Z" />
<EventRecordID>420278</EventRecordID>
<Channel>Application</Channel>
<Computer>SBS2008.McClymond.local</Computer>
<Security />
</System>
<EventData>
<Data>{790f2886-9889-4c99-8ef5-531add05d044}</Data>
<Data>0x8007007e</Data>
<Data>

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator</Data>

and

Log Name: Application
Source: VSS
Date: 1/5/2010 7:07:45 AM
Event ID: 13
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SBS2008.McClymond.local
Description:
Volume Shadow Copy Service information: The COM Server with CLSID
{790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be
started. [0x8007007e]

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">13</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-01-05T13:07:45.000Z" />
<EventRecordID>420277</EventRecordID>
<Channel>Application</Channel>
<Computer>SBS2008.McClymond.local</Computer>
<Security />
</System>
<EventData>
<Data>{790f2886-9889-4c99-8ef5-531add05d044}</Data>
<Data>SW_PROV</Data>
<Data>0x8007007e</Data>
<Data>

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator</Data>

Any help would be greatly appreciated.

--
tct14
------------------------------------------------------------------------
tct14's Profile: http://forums.techarena.in/members/170958.htm
View this thread: http://forums.techarena.in/small-business-server/1289753.htm

http://forums.techarena.in

Larry Struckmeyer[SBS-MVP]

unread,

Jan 5, 2010, 10:05:30 AM1/5/10

Hi:

Have you looked at this?

http://eventid.net/display.asp?eventid=12292&eventno=4714&source=VSS&phase=1

SBS BPA?

www.sbsbpa.com

Also, have you registered the VSS writer DLLs?

Please save the following commands as the .bat file

==========================

net stop "System Event Notification Service"

net stop "COM+ Event System"

net stop "Microsoft Software Shadow Copy Provider"

net stop "Volume Shadow Copy"

cd /d %windir%\system32

net stop vss

net stop swprv

regsvr32 /s ole32.dll

regsvr32 /s oleaut32.dll

regsvr32 /s vss_ps.dll

vssvc /register

regsvr32 /s /i swprv.dll

regsvr32 /s /i eventcls.dll

regsvr32 /s es.dll

regsvr32 /s stdprov.dll

regsvr32 /s vssui.dll

regsvr32 /s msxml3.dll

net start "System Event Notification Service"

net start "COM+ Event System"

net start "Microsoft Software Shadow Copy Provider"

net start "Volume Shadow Copy"

==========================

After run the .bat file and restart the server.

Also, here is a comprehensive list of possible issues:

http://www.gfi.com/blog/vss-troubleshooting/

-
Larry
Please post the resolution to your
issue so others may benefit
-
Get Your SBS Health Check at
www.sbsbpa.com

> http://forums.techarena.in
>

Robbin Meng [MSFT]

unread,

Jan 7, 2010, 2:47:03 AM1/7/10

Hi,

Thanks for your post and Larry's good input.

In addition to regsiter the VSS dll files, I wonder if you have ever installed Symantec Norton Ghost and if the software is up to date now? as I found some previous cases are caused by Symantec
Norton Ghost VSS entries. Based on research of the error message from Event 12292, "The COM Server with CLSID {790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be
started. [0x8007007e]", the Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167} means 'Symantec Software VSS Provider'.

So please make sure all the Symantec software are updated with latest patches and double check and make sure there are NO multiple jobs were set to run at exactly the same time.

If the issue persists, let's run "vssadmin list providers " and then disable 3rd party invalid VSS providers.

Followed the below steps to remove 3rd party invalid VSS providers like Symantec or Acronis etc.
1. Go to :
HKLM\System\CurrentControlSet\Services\VSS\Providers

2. Click on the key in the left pane, and if the word e.g. Acronis appears in the right pane it's the key you want. Export it to somewhere convenient as a backup.
3. Then delete it from the registry. The key may also be present in one or more of the ControlSet00n branches; export and remove them as well.

Now run "vssadmin list providers" again and the 3rd party invalid VSS providers(e.g. Acronis) entry should have gone.

Once this key was gone, run Backup again to test. However, if the issue still occurs, to resolve it in a more efficient manner, you may still need to contact Symantec for more information and keep them
posted with our latest troubleshooting results if necessary.

Used following KB article to isolate if its a problem with third party provider
http://support.microsoft.com/default.aspx?scid=kb;EN-US;941956

More related information found just for your reference:

Failed to take a snapshot
http://social.microsoft.com/Forums/en-US/whssoftware/thread/5057969b-3f2a-40a7-9865-dd6ada05962e/

Volume Shadow Copy Service - Exchange Writer Failure
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24433889.html

sb600c + BackupExec 12.5 + iSCSI = VSS ERROR
http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1262848382212+28353475&threadId=1378108

Norton Ghost 14
http://radified.com/cgi-bin/yabb2/YaBB.pl?num=1205071186

Hope this helps. Also, if you have any questions or concerns, please do not hesitate to let me know.

Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

==================================================================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/community/discussion/richui/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-2008-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================

0 new messages