Shadow Copy Errors

Archived from groups: microsoft.public.win2000.file_system (More info?)

Greetings-

Windows Server 2003; Two file servers; Both are virtually identical in h/w
and configuration.

On FileServer1, Shadow Copy works without fail, twice a day, as scheduled.
However, on FileServer2, the Shadow Copy errors out. We've
disabled/re-enabled it on the Shadow Copy tab of the Volume Properties.
We've changed the scheduled time. We've rebooted the server.

In troubleshooting this, at one time we were unable to see the settings for
the instance of Shadow Copy and were getting a "RPC Service Unavailable"
message.

Here are the Event Log entries:

Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12289
Date: 5/28/2004
Time: 11:59:00 AM
User: N/A
Computer: LEGDATA2
Description:
Volume Shadow Copy Service error: Unexpected error
DeviceIoControl(\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} -
0000013C,0x0053c008,002A6A98,0,002A7AA0,4096,[0]). hr = 0x80070057.

Data:
0000: 49 4e 43 49 43 48 4c 48 INCICHLH
0008: 33 38 38 00 00 00 00 00 388.....
0010: 53 50 52 51 53 4e 50 43 SPRQSNPC
0018: 31 36 35 00 00 00 00 00 165.....


Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 7001
Date: 5/28/2004
Time: 11:59:00 AM
User: N/A
Computer: LEGDATA2
Description:
VssAdmin: Unable to create a shadow copy: The shadow copy provider had an
error. Please see the system and application event logs for more
information.
Command-line: 'C:\WINDOWS\system32\vssadmin.exe Create Shadow /AutoRetry=5
/For=\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030}\'.

Data:
0000: 41 44 4d 56 41 44 4d 43 ADMVADMC
0008: 38 31 32 00 00 00 00 00 812.....
0010: 41 44 4d 56 41 44 4d 43 ADMVADMC
0018: 37 35 32 00 00 00 00 00 752.....

--
Thanx
OregonSteve

"..You should never, never doubt what nobody is sure about." -Willy Wonka
3 answers Last reply
More about shadow copy errors
  1. Archived from groups: microsoft.public.win2000.file_system (More info?)

    Hi,

    I am working on Shadow Copy services at Microsoft.

    We'd like to gather more data from you:

    - Does this problem occur consistently?
    - Can you manually create a shadow copy for
    \\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} using vssadmin.exe?
    - Did this volume ever have any shadow copies? - vssadmin.exe list
    shadows can tell
    - Are there any special applications running on this machine which
    cause the volume to be dismounted intermittently - such as chkdsk /x
    - At the time this error happens, does the output of mountvol.exe
    contain this volume?

    Thanks,

    minglei

    "OregonSteve" <steven.r.smothers@state.or.us> wrote in message news:<#h7#Fe$REHA.1556@TK2MSFTNGP10.phx.gbl>...
    > Greetings-
    >
    > Windows Server 2003; Two file servers; Both are virtually identical in h/w
    > and configuration.
    >
    > On FileServer1, Shadow Copy works without fail, twice a day, as scheduled.
    > However, on FileServer2, the Shadow Copy errors out. We've
    > disabled/re-enabled it on the Shadow Copy tab of the Volume Properties.
    > We've changed the scheduled time. We've rebooted the server.
    >
    > In troubleshooting this, at one time we were unable to see the settings for
    > the instance of Shadow Copy and were getting a "RPC Service Unavailable"
    > message.
    >
    > Here are the Event Log entries:
    >
    > Event Type: Error
    > Event Source: VSS
    > Event Category: None
    > Event ID: 12289
    > Date: 5/28/2004
    > Time: 11:59:00 AM
    > User: N/A
    > Computer: LEGDATA2
    > Description:
    > Volume Shadow Copy Service error: Unexpected error
    > DeviceIoControl(\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} -
    > 0000013C,0x0053c008,002A6A98,0,002A7AA0,4096,[0]). hr = 0x80070057.
    >
    > Data:
    > 0000: 49 4e 43 49 43 48 4c 48 INCICHLH
    > 0008: 33 38 38 00 00 00 00 00 388.....
    > 0010: 53 50 52 51 53 4e 50 43 SPRQSNPC
    > 0018: 31 36 35 00 00 00 00 00 165.....
    >
    >
    > Event Type: Error
    > Event Source: VSS
    > Event Category: None
    > Event ID: 7001
    > Date: 5/28/2004
    > Time: 11:59:00 AM
    > User: N/A
    > Computer: LEGDATA2
    > Description:
    > VssAdmin: Unable to create a shadow copy: The shadow copy provider had an
    > error. Please see the system and application event logs for more
    > information.
    > Command-line: 'C:\WINDOWS\system32\vssadmin.exe Create Shadow /AutoRetry=5
    > /For=\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030}\'.
    >
    > Data:
    > 0000: 41 44 4d 56 41 44 4d 43 ADMVADMC
    > 0008: 38 31 32 00 00 00 00 00 812.....
    > 0010: 41 44 4d 56 41 44 4d 43 ADMVADMC
    > 0018: 37 35 32 00 00 00 00 00 752.....
  2. Archived from groups: microsoft.public.win2000.file_system (More info?)

    Greetings-

    Thanks for the post. I'll do my best to answer all your questions.

    - Does this problem occur consistently?
    Rougly 47 out of 50 times. We've had the server in production for
    approximately 4 weeks. It's had three successful shadow copies: the first
    one since it was configured, once when we were disabling/enabling the
    scheduled Shadow Copy AND the Shadow Copy Service, and weirdly enough, this
    morning.

    As part of the troubleshooting process, I removed the original scheduled
    event (2x a day @ noon and 7 PM) and created a new one (1x a day @ 6 AM)
    This has not helped.

    We are also getting the 12289 errors at times other than the scheduled
    Shadow Copy time. For instance, yesterday the error showed up at 05:07:07
    AM and 11:30:10 PM even though the schedule is set for 1x a day at 6 AM.

    - Can you manually create a shadow copy for
    \\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} using vssadmin.exe?
    Yes, I just did using the command line "vssadmin create shadow /For=e:
    /AutoRetry=5"

    - Did this volume ever have any shadow copies? - vssadmin.exe list shadows
    can tell
    As stated before we should've had three including today, but it lists only
    the one from this morning. There is a event in the System Log from 6/7/04
    indicating the other copies were deleted:

    Event Type: Error
    Event Source: VolSnap
    Event Category: None
    Event ID: 16
    Date: 6/7/2004
    Time: 4:40:37 AM
    User: N/A
    Computer: <SERVER>
    Description: The shadow copies of volume E: were aborted because volume E:,
    which contains shadow copy storage for this shadow copy, was force
    dismounted.
    Data:
    0000: 00 00 00 00 03 00 58 00 ......X.
    0008: 00 00 00 00 10 00 06 c0 .......À
    0010: 01 00 00 00 00 00 00 00 ........
    0018: 01 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........

    - Are there any special applications running on this machine which cause the
    volume to be dismounted intermittently - such as chkdsk /x
    The only thing(s) running when the errors are recorded at times OTHER than
    the scheduled time are backups (Tivoli and ntBackup) There are no
    applications running at the scheduled time when it fails.

    - At the time this error happens, does the output of mountvol.exe contain
    this volume?
    The above event log entry would indicate to me that the answer to this
    question is "NO"; Looking at the Event Log, this error has occurred 5
    times:

    Type Date Time Source Category Event User Computer
    Error 6/9/2004 4:43:21 AM VolSnap None 16 N/A <SERVER>
    Error 6/7/2004 4:40:37 AM VolSnap None 16 N/A <SERVER>
    Error 6/4/2004 8:09:24 AM VolSnap None 16 N/A <SERVER>
    Error 5/22/2004 4:32:37 AM VolSnap None 16 N/A <SERVER>
    Error 5/20/2004 4:32:14 AM VolSnap None 16 N/A <SERVER>

    A conflict with Tivoli? The setup is the same on our other File Server.
    Will the #833167 Hotfix fix it?


    --
    Thanx
    OregonSteve

    "..You should never, never doubt what nobody is sure about." -Willy Wonka
    "Minglei Xu" <mingleix@windows.microsoft.com> wrote in message
    news:f0506e93.0406031705.4ce16d79@posting.google.com...
    > Hi,
    >
    > I am working on Shadow Copy services at Microsoft.
    >
    > We'd like to gather more data from you:
    >
    > - Does this problem occur consistently?
    > - Can you manually create a shadow copy for
    > \\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} using vssadmin.exe?
    > - Did this volume ever have any shadow copies? - vssadmin.exe list
    > shadows can tell
    > - Are there any special applications running on this machine which
    > cause the volume to be dismounted intermittently - such as chkdsk /x
    > - At the time this error happens, does the output of mountvol.exe
    > contain this volume?
    >
    > Thanks,
    >
    > minglei
    >
    > "OregonSteve" <steven.r.smothers@state.or.us> wrote in message
    news:<#h7#Fe$REHA.1556@TK2MSFTNGP10.phx.gbl>...
    > > Greetings-
    > >
    > > Windows Server 2003; Two file servers; Both are virtually identical in
    h/w
    > > and configuration.
    > >
    > > On FileServer1, Shadow Copy works without fail, twice a day, as
    scheduled.
    > > However, on FileServer2, the Shadow Copy errors out. We've
    > > disabled/re-enabled it on the Shadow Copy tab of the Volume Properties.
    > > We've changed the scheduled time. We've rebooted the server.
    > >
    > > In troubleshooting this, at one time we were unable to see the settings
    for
    > > the instance of Shadow Copy and were getting a "RPC Service Unavailable"
    > > message.
    > >
    > > Here are the Event Log entries:
    > >
    > > Event Type: Error
    > > Event Source: VSS
    > > Event Category: None
    > > Event ID: 12289
    > > Date: 5/28/2004
    > > Time: 11:59:00 AM
    > > User: N/A
    > > Computer: <SERVER>
    > > Description:
    > > Volume Shadow Copy Service error: Unexpected error
    > > DeviceIoControl(\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} -
    > > 0000013C,0x0053c008,002A6A98,0,002A7AA0,4096,[0]). hr = 0x80070057.
    > >
    > > Data:
    > > 0000: 49 4e 43 49 43 48 4c 48 INCICHLH
    > > 0008: 33 38 38 00 00 00 00 00 388.....
    > > 0010: 53 50 52 51 53 4e 50 43 SPRQSNPC
    > > 0018: 31 36 35 00 00 00 00 00 165.....
    > >
    > >
    > > Event Type: Error
    > > Event Source: VSS
    > > Event Category: None
    > > Event ID: 7001
    > > Date: 5/28/2004
    > > Time: 11:59:00 AM
    > > User: N/A
    > > Computer: <SERVER>
    > > Description:
    > > VssAdmin: Unable to create a shadow copy: The shadow copy provider had
    an
    > > error. Please see the system and application event logs for more
    > > information.
    > > Command-line: 'C:\WINDOWS\system32\vssadmin.exe Create Shadow
    /AutoRetry=5
    > > /For=\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030}\'.
    > >
    > > Data:
    > > 0000: 41 44 4d 56 41 44 4d 43 ADMVADMC
    > > 0008: 38 31 32 00 00 00 00 00 812.....
    > > 0010: 41 44 4d 56 41 44 4d 43 ADMVADMC
    > > 0018: 37 35 32 00 00 00 00 00 752.....
  3. Archived from groups: microsoft.public.win2000.file_system (More info?)

    Greetings-

    Problem solved!!!! The issue was with the Tivoli Client. Even though it
    was the same as on the server that was working. My backup admin retrieved
    the new client and installed it and everything is working "smooth as butta".

    --
    Thanx
    OregonSteve

    "..You should never, never doubt what nobody is sure about." -Willy Wonka


    "OregonSteve" <steven.r.smothers@state.or.us> wrote in message
    news:O8Ll9tlTEHA.1048@tk2msftngp13.phx.gbl...
    > Greetings-
    >
    > Thanks for the post. I'll do my best to answer all your questions.
    >
    > - Does this problem occur consistently?
    > Rougly 47 out of 50 times. We've had the server in production for
    > approximately 4 weeks. It's had three successful shadow copies: the first
    > one since it was configured, once when we were disabling/enabling the
    > scheduled Shadow Copy AND the Shadow Copy Service, and weirdly enough,
    this
    > morning.
    >
    > As part of the troubleshooting process, I removed the original scheduled
    > event (2x a day @ noon and 7 PM) and created a new one (1x a day @ 6 AM)
    > This has not helped.
    >
    > We are also getting the 12289 errors at times other than the scheduled
    > Shadow Copy time. For instance, yesterday the error showed up at 05:07:07
    > AM and 11:30:10 PM even though the schedule is set for 1x a day at 6 AM.
    >
    > - Can you manually create a shadow copy for
    > \\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} using vssadmin.exe?
    > Yes, I just did using the command line "vssadmin create shadow /For=e:
    > /AutoRetry=5"
    >
    > - Did this volume ever have any shadow copies? - vssadmin.exe list shadows
    > can tell
    > As stated before we should've had three including today, but it lists only
    > the one from this morning. There is a event in the System Log from 6/7/04
    > indicating the other copies were deleted:
    >
    > Event Type: Error
    > Event Source: VolSnap
    > Event Category: None
    > Event ID: 16
    > Date: 6/7/2004
    > Time: 4:40:37 AM
    > User: N/A
    > Computer: <SERVER>
    > Description: The shadow copies of volume E: were aborted because volume
    E:,
    > which contains shadow copy storage for this shadow copy, was force
    > dismounted.
    > Data:
    > 0000: 00 00 00 00 03 00 58 00 ......X.
    > 0008: 00 00 00 00 10 00 06 c0 .......À
    > 0010: 01 00 00 00 00 00 00 00 ........
    > 0018: 01 00 00 00 00 00 00 00 ........
    > 0020: 00 00 00 00 00 00 00 00 ........
    >
    > - Are there any special applications running on this machine which cause
    the
    > volume to be dismounted intermittently - such as chkdsk /x
    > The only thing(s) running when the errors are recorded at times OTHER than
    > the scheduled time are backups (Tivoli and ntBackup) There are no
    > applications running at the scheduled time when it fails.
    >
    > - At the time this error happens, does the output of mountvol.exe contain
    > this volume?
    > The above event log entry would indicate to me that the answer to this
    > question is "NO"; Looking at the Event Log, this error has occurred 5
    > times:
    >
    > Type Date Time Source Category Event User Computer
    > Error 6/9/2004 4:43:21 AM VolSnap None 16 N/A <SERVER>
    > Error 6/7/2004 4:40:37 AM VolSnap None 16 N/A <SERVER>
    > Error 6/4/2004 8:09:24 AM VolSnap None 16 N/A <SERVER>
    > Error 5/22/2004 4:32:37 AM VolSnap None 16 N/A <SERVER>
    > Error 5/20/2004 4:32:14 AM VolSnap None 16 N/A <SERVER>
    >
    > A conflict with Tivoli? The setup is the same on our other File Server.
    > Will the #833167 Hotfix fix it?
    >
    >
    > --
    > Thanx
    > OregonSteve
    >
    > "..You should never, never doubt what nobody is sure about." -Willy Wonka
    > "Minglei Xu" <mingleix@windows.microsoft.com> wrote in message
    > news:f0506e93.0406031705.4ce16d79@posting.google.com...
    > > Hi,
    > >
    > > I am working on Shadow Copy services at Microsoft.
    > >
    > > We'd like to gather more data from you:
    > >
    > > - Does this problem occur consistently?
    > > - Can you manually create a shadow copy for
    > > \\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} using vssadmin.exe?
    > > - Did this volume ever have any shadow copies? - vssadmin.exe list
    > > shadows can tell
    > > - Are there any special applications running on this machine which
    > > cause the volume to be dismounted intermittently - such as chkdsk /x
    > > - At the time this error happens, does the output of mountvol.exe
    > > contain this volume?
    > >
    > > Thanks,
    > >
    > > minglei
    > >
    > > "OregonSteve" <steven.r.smothers@state.or.us> wrote in message
    > news:<#h7#Fe$REHA.1556@TK2MSFTNGP10.phx.gbl>...
    > > > Greetings-
    > > >
    > > > Windows Server 2003; Two file servers; Both are virtually identical in
    > h/w
    > > > and configuration.
    > > >
    > > > On FileServer1, Shadow Copy works without fail, twice a day, as
    > scheduled.
    > > > However, on FileServer2, the Shadow Copy errors out. We've
    > > > disabled/re-enabled it on the Shadow Copy tab of the Volume
    Properties.
    > > > We've changed the scheduled time. We've rebooted the server.
    > > >
    > > > In troubleshooting this, at one time we were unable to see the
    settings
    > for
    > > > the instance of Shadow Copy and were getting a "RPC Service
    Unavailable"
    > > > message.
    > > >
    > > > Here are the Event Log entries:
    > > >
    > > > Event Type: Error
    > > > Event Source: VSS
    > > > Event Category: None
    > > > Event ID: 12289
    > > > Date: 5/28/2004
    > > > Time: 11:59:00 AM
    > > > User: N/A
    > > > Computer: <SERVER>
    > > > Description:
    > > > Volume Shadow Copy Service error: Unexpected error
    > > > DeviceIoControl(\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030} -
    > > > 0000013C,0x0053c008,002A6A98,0,002A7AA0,4096,[0]). hr = 0x80070057.
    > > >
    > > > Data:
    > > > 0000: 49 4e 43 49 43 48 4c 48 INCICHLH
    > > > 0008: 33 38 38 00 00 00 00 00 388.....
    > > > 0010: 53 50 52 51 53 4e 50 43 SPRQSNPC
    > > > 0018: 31 36 35 00 00 00 00 00 165.....
    > > >
    > > >
    > > > Event Type: Error
    > > > Event Source: VSS
    > > > Event Category: None
    > > > Event ID: 7001
    > > > Date: 5/28/2004
    > > > Time: 11:59:00 AM
    > > > User: N/A
    > > > Computer: <SERVER>
    > > > Description:
    > > > VssAdmin: Unable to create a shadow copy: The shadow copy provider had
    > an
    > > > error. Please see the system and application event logs for more
    > > > information.
    > > > Command-line: 'C:\WINDOWS\system32\vssadmin.exe Create Shadow
    > /AutoRetry=5
    > > > /For=\\?\Volume{3848f961-a0a7-11d8-bbd1-505054503030}\'.
    > > >
    > > > Data:
    > > > 0000: 41 44 4d 56 41 44 4d 43 ADMVADMC
    > > > 0008: 38 31 32 00 00 00 00 00 812.....
    > > > 0010: 41 44 4d 56 41 44 4d 43 ADMVADMC
    > > > 0018: 37 35 32 00 00 00 00 00 752.....
    >
    >
Ask a new question

Read More

Windows Server 2003 Windows