VSS Errors in Event Log
|
Prev: Event ID: 7011 (NtFrs Service) + Server Freezes when Performing Disk Operations
Next: VSS Error - Catastrophic failure
From: Waggers on 3 Dec 2007 12:09 Following step 1.... The last line was regsrv32 msxml2r.dll I get the following error: msxml2r.dll was loaded, but the DllRegisterServer entry point was not found. This file can not be registered. Waggers "Waggers" <Waggers(a)newsgroup.nospam> wrote in message news:e53Q%23ybNIHA.5208(a)TK2MSFTNGP04.phx.gbl... > Many thanks for the info Manfred, > > This will take me a couple of days so I'll post back when I've done. > > Waggers > > > > > "Manfred Zhuang [MSFT]" <v-mzhuan(a)online.microsoft.com> wrote in message > news:UPH8jaYNIHA.4380(a)TK2MSFTNGHUB02.phx.gbl... >> Hello Waggers, >> >> Thank you for posting here. >> >> From your post, I understand that error 11 and error 12292 are found in >> event log. If I have misunderstood your concern, please feel free to >> correct me. >> >> Firstly I would like to confirm if Open File Manager is installed on the >> server. If yes, I suggest you temporarily uninstall it and check if the >> issue persists. >> >> If it does not work, let's move on: >> >> Step 1: >> ====== >> Click Start-->Run, type CMD and click OK. >> >> Then run following command one by one: >> >> C:\WINDOWS\system32>net stop vss >> >> C:\WINDOWS\system32>net stop swprv >> >> C:\WINDOWS\system32>vssvc /register >> >> C:\WINDOWS\system32>regsvr32 / swprv.dll >> >> C:\WINDOWS\system32>regsvr32 /i swprv.dll >> >> C:\WINDOWS\system32>regsvr32 /i eventcls.dll >> >> C:\WINDOWS\system32>regsvr32 es.dll >> >> C:\WINDOWS\system32>regsvr32 stdprov.dll >> >> C:\WINDOWS\system32>regsvr32 vssui.dll >> >> C:\WINDOWS\system32>regsvr32 msxml.dll >> >> C:\WINDOWS\system32>regsvr32 msxml3.dll >> >> C:\WINDOWS\system32>regsvr32 msxml4.dll >> >> C:\WINDOWS\system32>regsvr32 msxml2.dll >> >> C:\WINDOWS\system32>regsvr32 msxml2r.dll >> >> Restart the server and check if the issue persists. >> >> Step 2: >> ====== >> Checked the Path in the Registry Key >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-0 >> 0805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0 >> 000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} >> >> Check the string "TypeLib" value, the path should be >> %windir%\system32\EVENTCLS.DLL >> >> For example: C:\WINDOWS\system32\EVENTCLS.DLL >> >> If the path is wrong, please correct it. >> >> Step 3: >> ====== >> 1. Click Start-->Run, type regedit and click OK. >> 2. Search for following string: >> >> 790f2886-9889-4c99-8ef5-531add05d044 >> >> 3. Please export the key found for backup purpose. >> 4. Delete all the keys found in registry. >> 5. Restart the server and check if the issue persists. >> >> Step 4: Prepare a Clean Boot environment on the server. >> ================= >> 1. Click Start and Click Run, and in the "Open" line, type in "MSCONFIG" >> (without the quotation marks) and click OK. >> 2. Under the Service tab, check "Hide All Microsoft Services", and then >> click "Disable All" button. In this way, we can disable all the services >> which belong to third-party programs. >> 3. Under the Startup tab, click "Disable All" button. >> >> 4. Click OK. >> 5. Choose Yes to restart the computer. >> 6. Check "Don't show this message or launch the system configuration >> utility when Windows starts". >> 7. Please check if the issue persists. >> >> NOTE: We can check on Normal Startup in the General tab to roll back to >> Normal Mode after we get this issue resolved. >> >> I hope the above information is helpful to you. If the problem still >> occurs, please help me gather following information: >> >> 1. Please export following registry key, compress it and send it to >> v-mzhuan(a)microsoft.com: >> >> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\ >> >> 2. Please download the MPS Report tool from the following link and run it >> on the SBS server, then send the generated CAB file to my mailbox >> v-mzhuan(a)microsoft.com for further investigation so that we can find what >> the root cause is: >> >> http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 >> 15706/MPSRPT_SETUPPerf.EXE >> >> For your information: >> http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F- >> 88B7-F9C79B7306C0&displaylang=en >> >> Please try the above steps at your earliest convenience. If you have any >> concern, please feel free to let me know. >> >> Best regards, >> >> Manfred Zhuang(MSFT) >> Microsoft Online Newsgroup Support >> >> Get Secure! - www.microsoft.com/security >> >> ===================================================== >> This newsgroup only focuses on SBS technical issues. If you have issues >> regarding other Microsoft products, you'd better post in the >> corresponding >> newsgroups so that they can be resolved in an efficient and timely >> manner. >> You can locate the newsgroup here: >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx >> >> When opening a new thread via the web interface, we recommend you check >> the >> "Notify me of replies" box to receive e-mail notifications when there are >> any updates in your thread. When responding to posts via your newsreader, >> please "Reply to Group" so that others may learn and benefit from your >> issue. >> >> Microsoft engineers can only focus on one issue per thread. Although we >> provide other information for your reference, we recommend you post >> different incidents in different threads to keep the thread clean. In >> doing >> so, it will ensure your issues are resolved in a timely manner. >> >> For urgent issues, you may want to contact Microsoft CSS directly. Please >> check http://support.microsoft.com for regional support phone numbers. >> >> Any input or comments in this thread are highly appreciated. >> ===================================================== >> >> This posting is provided "AS IS" with no warranties, and confers no >> rights. >> -------------------- >> | From: "Waggers" <Waggers(a)newsgroup.nospam> >> | References: <OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl> >> <E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com> >> | Subject: Re: VSS Errors in Event Log >> | Date: Wed, 28 Nov 2007 08:25:43 -0000 >> | Lines: 52 >> | X-Priority: 3 >> | X-MSMail-Priority: Normal >> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 >> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 >> | X-RFC2646: Format=Flowed; Response >> | Message-ID: <uwuuFhZMIHA.5224(a)TK2MSFTNGP02.phx.gbl> >> | Newsgroups: microsoft.public.windows.server.sbs >> | NNTP-Posting-Host: no-dns-yet.demon.co.uk 62.49.123.35 >> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl >> | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78502 >> | X-Tomcat-NG: microsoft.public.windows.server.sbs >> | >> | Many thanks for the respomse. >> | >> | I, stupidly, forgot to mention the OS details. SBS 2003 Premim R2 (but >> | without ISA), all fully updated. >> | >> | Sorry, I don't know what RC2 is and, I can't see if SQL has SP2 >> installed >> | (do you know where I look?). However, I've just re-run Microsoft >> Update >> and >> | there is nothing listed. >> | >> | Waggers >> | >> | >> | >> | >> | "Kevin Weilbacher" <kw(a)DELETEkwsupport.com> wrote in message >> | news:E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com... >> | > Do you have Windows 2003 Server SP2 installed yet? >> | > If running RC2, have you installed SQl 2005 SP2 yet? >> | > >> | > -- >> | > Kevin Weilbacher [SBS MVP] >> | > "The days pass by so quickly now, the nights are seldom long" >> | > * >> | > >> | > "Waggers" <Waggers(a)newsgroup.nospam> wrote in message >> | > news:OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl... >> | >> Over the last few days I've started to see the following errors in >> the >> | >> Event Log. Can anyone give me a pointer on what they mean and how >> to >> fix >> | >> them? >> | >> >> | >> Critical Errors in Application Log >> | >> Source: VSS - Event ID: 11 - Last Occurrence: 27/11/2007 0547 - >> Total >> | >> Occurrences: 171 >> | >> Volume Shadow Copy Service information: The COM Server with >> CLSID >> | >> {790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be >> | >> started. [0x80070005] >> | >> >> | >> Source: VSS - Event ID: 12292 - Last Occurrence: 27/11/2007 >> 0547 >> - >> | >> Total Occurrences: 171 >> | >> Volume Shadow Copy Service error: Error creating the >> Shadow >> | >> Copy Provider COM class with CLSID >> {790f2886-9889-4c99-8ef5-531add05d044} >> | >> [0x80070005]. >> | >> >> | >> >> | >> Many thanks. >> | >> >> | >> >> | >> >> | >> >> | > >> | >> | >> | >> > >
From: Manfred Zhuang [MSFT] on 4 Dec 2007 00:34 Hello Waggers, Thank you for your reply. I understand that msxml2r.dll cannot be registered. It is normal that not all the files can be registered. Let's ignore it and continue the troubleshooting steps. I am sorry for not explaining clearly in my first reply. If you have any problem, please let me know. Best regards, Manfred Zhuang(MSFT) Microsoft Online Newsgroup Support Get Secure! - www.microsoft.com/security ===================================================== This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue. Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner. For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers. Any input or comments in this thread are highly appreciated. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Waggers" <Waggers(a)newsgroup.nospam> | References: <OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl> <E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com> <uwuuFhZMIHA.5224(a)TK2MSFTNGP02.phx.gbl> <UPH8jaYNIHA.4380(a)TK2MSFTNGHUB02.phx.gbl> <e53Q#ybNIHA.5208(a)TK2MSFTNGP04.phx.gbl> | Subject: Re: VSS Errors in Event Log | Date: Mon, 3 Dec 2007 17:09:49 -0000 | Lines: 267 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | X-RFC2646: Format=Flowed; Response | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 | Message-ID: <e1bWR9cNIHA.4880(a)TK2MSFTNGP03.phx.gbl> | Newsgroups: microsoft.public.windows.server.sbs | NNTP-Posting-Host: no-dns-yet.demon.co.uk 62.49.123.35 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:79664 | X-Tomcat-NG: microsoft.public.windows.server.sbs | | Following step 1.... The last line was regsrv32 msxml2r.dll I get the | following error: | | msxml2r.dll was loaded, but the DllRegisterServer entry point was not found. | This file can not be registered. | | Waggers | | | | | | "Waggers" <Waggers(a)newsgroup.nospam> wrote in message | news:e53Q%23ybNIHA.5208(a)TK2MSFTNGP04.phx.gbl... | > Many thanks for the info Manfred, | > | > This will take me a couple of days so I'll post back when I've done. | > | > Waggers | > | > | > | > | > "Manfred Zhuang [MSFT]" <v-mzhuan(a)online.microsoft.com> wrote in message | > news:UPH8jaYNIHA.4380(a)TK2MSFTNGHUB02.phx.gbl... | >> Hello Waggers, | >> | >> Thank you for posting here. | >> | >> From your post, I understand that error 11 and error 12292 are found in | >> event log. If I have misunderstood your concern, please feel free to | >> correct me. | >> | >> Firstly I would like to confirm if Open File Manager is installed on the | >> server. If yes, I suggest you temporarily uninstall it and check if the | >> issue persists. | >> | >> If it does not work, let's move on: | >> | >> Step 1: | >> ====== | >> Click Start-->Run, type CMD and click OK. | >> | >> Then run following command one by one: | >> | >> C:\WINDOWS\system32>net stop vss | >> | >> C:\WINDOWS\system32>net stop swprv | >> | >> C:\WINDOWS\system32>vssvc /register | >> | >> C:\WINDOWS\system32>regsvr32 / swprv.dll | >> | >> C:\WINDOWS\system32>regsvr32 /i swprv.dll | >> | >> C:\WINDOWS\system32>regsvr32 /i eventcls.dll | >> | >> C:\WINDOWS\system32>regsvr32 es.dll | >> | >> C:\WINDOWS\system32>regsvr32 stdprov.dll | >> | >> C:\WINDOWS\system32>regsvr32 vssui.dll | >> | >> C:\WINDOWS\system32>regsvr32 msxml.dll | >> | >> C:\WINDOWS\system32>regsvr32 msxml3.dll | >> | >> C:\WINDOWS\system32>regsvr32 msxml4.dll | >> | >> C:\WINDOWS\system32>regsvr32 msxml2.dll | >> | >> C:\WINDOWS\system32>regsvr32 msxml2r.dll | >> | >> Restart the server and check if the issue persists. | >> | >> Step 2: | >> ====== | >> Checked the Path in the Registry Key | >> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-0 | >> 0805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0 | >> 000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} | >> | >> Check the string "TypeLib" value, the path should be | >> %windir%\system32\EVENTCLS.DLL | >> | >> For example: C:\WINDOWS\system32\EVENTCLS.DLL | >> | >> If the path is wrong, please correct it. | >> | >> Step 3: | >> ====== | >> 1. Click Start-->Run, type regedit and click OK. | >> 2. Search for following string: | >> | >> 790f2886-9889-4c99-8ef5-531add05d044 | >> | >> 3. Please export the key found for backup purpose. | >> 4. Delete all the keys found in registry. | >> 5. Restart the server and check if the issue persists. | >> | >> Step 4: Prepare a Clean Boot environment on the server. | >> ================= | >> 1. Click Start and Click Run, and in the "Open" line, type in "MSCONFIG" | >> (without the quotation marks) and click OK. | >> 2. Under the Service tab, check "Hide All Microsoft Services", and then | >> click "Disable All" button. In this way, we can disable all the services | >> which belong to third-party programs. | >> 3. Under the Startup tab, click "Disable All" button. | >> | >> 4. Click OK. | >> 5. Choose Yes to restart the computer. | >> 6. Check "Don't show this message or launch the system configuration | >> utility when Windows starts". | >> 7. Please check if the issue persists. | >> | >> NOTE: We can check on Normal Startup in the General tab to roll back to | >> Normal Mode after we get this issue resolved. | >> | >> I hope the above information is helpful to you. If the problem still | >> occurs, please help me gather following information: | >> | >> 1. Please export following registry key, compress it and send it to | >> v-mzhuan(a)microsoft.com: | >> | >> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\ | >> | >> 2. Please download the MPS Report tool from the following link and run it | >> on the SBS server, then send the generated CAB file to my mailbox | >> v-mzhuan(a)microsoft.com for further investigation so that we can find what | >> the root cause is: | >> | >> http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 | >> 15706/MPSRPT_SETUPPerf.EXE | >> | >> For your information: | >> http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F- | >> 88B7-F9C79B7306C0&displaylang=en | >> | >> Please try the above steps at your earliest convenience. If you have any | >> concern, please feel free to let me know. | >> | >> Best regards, | >> | >> Manfred Zhuang(MSFT) | >> Microsoft Online Newsgroup Support | >> | >> Get Secure! - www.microsoft.com/security | >> | >> ===================================================== | >> This newsgroup only focuses on SBS technical issues. If you have issues | >> regarding other Microsoft products, you'd better post in the | >> corresponding | >> newsgroups so that they can be resolved in an efficient and timely | >> manner. | >> You can locate the newsgroup here: | >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx | >> | >> When opening a new thread via the web interface, we recommend you check | >> the | >> "Notify me of replies" box to receive e-mail notifications when there are | >> any updates in your thread. When responding to posts via your newsreader, | >> please "Reply to Group" so that others may learn and benefit from your | >> issue. | >> | >> Microsoft engineers can only focus on one issue per thread. Although we | >> provide other information for your reference, we recommend you post | >> different incidents in different threads to keep the thread clean. In | >> doing | >> so, it will ensure your issues are resolved in a timely manner. | >> | >> For urgent issues, you may want to contact Microsoft CSS directly. Please | >> check http://support.microsoft.com for regional support phone numbers. | >> | >> Any input or comments in this thread are highly appreciated. | >> ===================================================== | >> | >> This posting is provided "AS IS" with no warranties, and confers no | >> rights. | >> -------------------- | >> | From: "Waggers" <Waggers(a)newsgroup.nospam> | >> | References: <OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl> | >> <E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com> | >> | Subject: Re: VSS Errors in Event Log | >> | Date: Wed, 28 Nov 2007 08:25:43 -0000 | >> | Lines: 52 | >> | X-Priority: 3 | >> | X-MSMail-Priority: Normal | >> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | >> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 | >> | X-RFC2646: Format=Flowed; Response | >> | Message-ID: <uwuuFhZMIHA.5224(a)TK2MSFTNGP02.phx.gbl> | >> | Newsgroups: microsoft.public.windows.server.sbs | >> | NNTP-Posting-Host: no-dns-yet.demon.co.uk 62.49.123.35 | >> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl | >> | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78502 | >> | X-Tomcat-NG: microsoft.public.windows.server.sbs | >> | | >> | Many thanks for the respomse. | >> | | >> | I, stupidly, forgot to mention the OS details. SBS 2003 Premim R2 (but | >> | without ISA), all fully updated. | >> | | >> | Sorry, I don't know what RC2 is and, I can't see if SQL has SP2 | >> installed | >> | (do you know where I look?). However, I've just re-run Microsoft | >> Update | >> and | >> | there is nothing listed. | >> | | >> | Waggers | >> | | >> | | >> | | >> | | >> | "Kevin Weilbacher" <kw(a)DELETEkwsupport.com> wrote in message | >> | news:E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com... | >> | > Do you have Windows 2003 Server SP2 installed yet? | >> | > If running RC2, have you installed SQl 2005 SP2 yet? | >> | > | >> | > -- | >> | > Kevin Weilbacher [SBS MVP] | >> | > "The days pass by so quickly now, the nights are seldom long" | >> | > * | >> | > | >> | > "Waggers" <Waggers(a)newsgroup.nospam> wrote in message | >> | > news:OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl... | >> | >> Over the last few days I've started to see the following errors in | >> the | >> | >> Event Log. Can anyone give me a pointer on what they mean and how | >> to | >> fix | >> | >> them? | >> | >> | >> | >> Critical Errors in Application Log | >> | >> Source: VSS - Event ID: 11 - Last Occurrence: 27/11/2007 0547 - | >> Total | >> | >> Occurrences: 171 | >> | >> Volume Shadow Copy Service information: The COM Server with | >> CLSID | >> | >> {790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be | >> | >> started. [0x80070005] | >> | >> | >> | >> Source: VSS - Event ID: 12292 - Last Occurrence: 27/11/2007 | >> 0547 | >> - | >> | >> Total Occurrences: 171 | >> | >> Volume Shadow Copy Service error: Error creating the | >> Shadow | >> | >> Copy Provider COM class with CLSID | >> {790f2886-9889-4c99-8ef5-531add05d044} | >> | >> [0x80070005]. | >> | >> | >> | >> | >> | >> Many thanks. | >> | >> | >> | >> | >> | >> | >> | >> | >> | > | >> | | >> | | >> | | >> | > | > | | |
From: Waggers on 6 Dec 2007 03:54 I've now gone through the suggested steps 1 to 3. These are the errors that are now listed: EventID 12289 Volume Shadow Copy Service error: Unexpected error RegQueryValueExW(CLSID,,...). hr = 0x80070002. EventID 8193 Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80070057. EventID 11 Volume Shadow Copy Service information: The COM Server with CLSID {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and name VSSEvent cannot be started. [0x80070057] EventID 20 Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and Name VSSEvent is [0x80040154]. I'll try a clean boot tonight and see what happens! "Manfred Zhuang [MSFT]" <v-mzhuan(a)online.microsoft.com> wrote in message news:UPH8jaYNIHA.4380(a)TK2MSFTNGHUB02.phx.gbl... > Hello Waggers, > > Thank you for posting here. > > From your post, I understand that error 11 and error 12292 are found in > event log. If I have misunderstood your concern, please feel free to > correct me. > > Firstly I would like to confirm if Open File Manager is installed on the > server. If yes, I suggest you temporarily uninstall it and check if the > issue persists. > > If it does not work, let's move on: > > Step 1: > ====== > Click Start-->Run, type CMD and click OK. > > Then run following command one by one: > > C:\WINDOWS\system32>net stop vss > > C:\WINDOWS\system32>net stop swprv > > C:\WINDOWS\system32>vssvc /register > > C:\WINDOWS\system32>regsvr32 / swprv.dll > > C:\WINDOWS\system32>regsvr32 /i swprv.dll > > C:\WINDOWS\system32>regsvr32 /i eventcls.dll > > C:\WINDOWS\system32>regsvr32 es.dll > > C:\WINDOWS\system32>regsvr32 stdprov.dll > > C:\WINDOWS\system32>regsvr32 vssui.dll > > C:\WINDOWS\system32>regsvr32 msxml.dll > > C:\WINDOWS\system32>regsvr32 msxml3.dll > > C:\WINDOWS\system32>regsvr32 msxml4.dll > > C:\WINDOWS\system32>regsvr32 msxml2.dll > > C:\WINDOWS\system32>regsvr32 msxml2r.dll > > Restart the server and check if the issue persists. > > Step 2: > ====== > Checked the Path in the Registry Key > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-0 > 0805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0 > 000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} > > Check the string "TypeLib" value, the path should be > %windir%\system32\EVENTCLS.DLL > > For example: C:\WINDOWS\system32\EVENTCLS.DLL > > If the path is wrong, please correct it. > > Step 3: > ====== > 1. Click Start-->Run, type regedit and click OK. > 2. Search for following string: > > 790f2886-9889-4c99-8ef5-531add05d044 > > 3. Please export the key found for backup purpose. > 4. Delete all the keys found in registry. > 5. Restart the server and check if the issue persists. > > Step 4: Prepare a Clean Boot environment on the server. > ================= > 1. Click Start and Click Run, and in the "Open" line, type in "MSCONFIG" > (without the quotation marks) and click OK. > 2. Under the Service tab, check "Hide All Microsoft Services", and then > click "Disable All" button. In this way, we can disable all the services > which belong to third-party programs. > 3. Under the Startup tab, click "Disable All" button. > > 4. Click OK. > 5. Choose Yes to restart the computer. > 6. Check "Don't show this message or launch the system configuration > utility when Windows starts". > 7. Please check if the issue persists. > > NOTE: We can check on Normal Startup in the General tab to roll back to > Normal Mode after we get this issue resolved. > > I hope the above information is helpful to you. If the problem still > occurs, please help me gather following information: > > 1. Please export following registry key, compress it and send it to > v-mzhuan(a)microsoft.com: > > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\ > > 2. Please download the MPS Report tool from the following link and run it > on the SBS server, then send the generated CAB file to my mailbox > v-mzhuan(a)microsoft.com for further investigation so that we can find what > the root cause is: > > http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 > 15706/MPSRPT_SETUPPerf.EXE > > For your information: > http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F- > 88B7-F9C79B7306C0&displaylang=en > > Please try the above steps at your earliest convenience. If you have any > concern, please feel free to let me know. > > Best regards, > > Manfred Zhuang(MSFT) > Microsoft Online Newsgroup Support > > Get Secure! - www.microsoft.com/security > > ===================================================== > This newsgroup only focuses on SBS technical issues. If you have issues > regarding other Microsoft products, you'd better post in the corresponding > newsgroups so that they can be resolved in an efficient and timely manner. > You can locate the newsgroup here: > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > > When opening a new thread via the web interface, we recommend you check > the > "Notify me of replies" box to receive e-mail notifications when there are > any updates in your thread. When responding to posts via your newsreader, > please "Reply to Group" so that others may learn and benefit from your > issue. > > Microsoft engineers can only focus on one issue per thread. Although we > provide other information for your reference, we recommend you post > different incidents in different threads to keep the thread clean. In > doing > so, it will ensure your issues are resolved in a timely manner. > > For urgent issues, you may want to contact Microsoft CSS directly. Please > check http://support.microsoft.com for regional support phone numbers. > > Any input or comments in this thread are highly appreciated. > ===================================================== > > This posting is provided "AS IS" with no warranties, and confers no > rights. > -------------------- > | From: "Waggers" <Waggers(a)newsgroup.nospam> > | References: <OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl> > <E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com> > | Subject: Re: VSS Errors in Event Log > | Date: Wed, 28 Nov 2007 08:25:43 -0000 > | Lines: 52 > | X-Priority: 3 > | X-MSMail-Priority: Normal > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > | X-RFC2646: Format=Flowed; Response > | Message-ID: <uwuuFhZMIHA.5224(a)TK2MSFTNGP02.phx.gbl> > | Newsgroups: microsoft.public.windows.server.sbs > | NNTP-Posting-Host: no-dns-yet.demon.co.uk 62.49.123.35 > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78502 > | X-Tomcat-NG: microsoft.public.windows.server.sbs > | > | Many thanks for the respomse. > | > | I, stupidly, forgot to mention the OS details. SBS 2003 Premim R2 (but > | without ISA), all fully updated. > | > | Sorry, I don't know what RC2 is and, I can't see if SQL has SP2 > installed > | (do you know where I look?). However, I've just re-run Microsoft Update > and > | there is nothing listed. > | > | Waggers > | > | > | > | > | "Kevin Weilbacher" <kw(a)DELETEkwsupport.com> wrote in message > | news:E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com... > | > Do you have Windows 2003 Server SP2 installed yet? > | > If running RC2, have you installed SQl 2005 SP2 yet? > | > > | > -- > | > Kevin Weilbacher [SBS MVP] > | > "The days pass by so quickly now, the nights are seldom long" > | > * > | > > | > "Waggers" <Waggers(a)newsgroup.nospam> wrote in message > | > news:OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl... > | >> Over the last few days I've started to see the following errors in > the > | >> Event Log. Can anyone give me a pointer on what they mean and how to > fix > | >> them? > | >> > | >> Critical Errors in Application Log > | >> Source: VSS - Event ID: 11 - Last Occurrence: 27/11/2007 0547 - > Total > | >> Occurrences: 171 > | >> Volume Shadow Copy Service information: The COM Server with > CLSID > | >> {790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be > | >> started. [0x80070005] > | >> > | >> Source: VSS - Event ID: 12292 - Last Occurrence: 27/11/2007 > 0547 > - > | >> Total Occurrences: 171 > | >> Volume Shadow Copy Service error: Error creating the > Shadow > | >> Copy Provider COM class with CLSID > {790f2886-9889-4c99-8ef5-531add05d044} > | >> [0x80070005]. > | >> > | >> > | >> Many thanks. > | >> > | >> > | >> > | >> > | > > | > | > | >
From: Manfred Zhuang [MSFT] on 10 Dec 2007 04:18
Hello Customer, Thank you for your reply. I understand that the symptom changed. I suggest you try following steps to see if it works: Step 1: Register eventcls.dll ================== Click Start-->Run, type following command and click OK Regsvr32 %windir%\system32\EVENTCLS.DLL Step 2: Please install latest updates: ============= I would like to confirm what service pack has been installed on the SBS server. I suggest you install following update to see if it helps: NOTE: Please install them in the clean boot environment and check the issue after installing each update: Microsoft Windows Small Business Server 2003 Service Pack 1 (SP1) http://www.microsoft.com/downloads/details.aspx?FamilyID=b6f8a4c0-b707-4161- adeb-44f1b756119f&DisplayLang=en Windows Server 2003 may not start when the Volume Shadow Copy Service is enabled http://support.microsoft.com/kb/931312/en-us NOTE: KB931312 can update the VSS component to the latest version. After installing KB931312, please reboot the server and check the issue. Step 3: ======== Registered the following files Go to Command Prompt Go to C:\Windows\System 32 Prompt Net stop vss Net stop swprv regsvr32 ole32.dll/i regsvr32 vss_ps.dll Vssvc /Register regsvr32 /i swprv.dll regsvr32 /i eventcls.dll regsvr32 es.dll regsvr32 stdprov.dll regsvr32 vssui.dll regsvr32 msxml.dll regsvr32 msxml3.dll regsvr32 msxml4.dll Net start vss Net start swprv Reboot again and check. Proceed further if no luck. Step 4: Check the registry enters. It should be the like mentioned below ============================================ [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}]@="VssEvent" "AppID"="{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}" [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\InprocServer 32] @="C:\\WINNT\\system32\\ES.DLL" "ThreadingModel"="Both" [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\ProgID]@="Vs sEvent.1" [HKEY_CLASSES_ROOT\CLSID\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}\VersionIndep endentProgID]@="VssEvent" If you have done all these steps and still no luck. Try this Step 5: ======= Change the registry Value of "FactoryPreInstallInProgress" from 0x1 to 0x0 from this Registry key. [HKEY_LOCAL_MACHINE\SYSTEM\Setup] After that, please check if the issue persists. Best regards, Manfred Zhuang(MSFT) Microsoft Online Newsgroup Support Get Secure! - www.microsoft.com/security ===================================================== This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue. Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner. For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers. Any input or comments in this thread are highly appreciated. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Waggers" <Waggers(a)newsgroup.nospam> | References: <OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl> <E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com> <uwuuFhZMIHA.5224(a)TK2MSFTNGP02.phx.gbl> <UPH8jaYNIHA.4380(a)TK2MSFTNGHUB02.phx.gbl> | Subject: Re: VSS Errors in Event Log | Date: Thu, 6 Dec 2007 08:54:03 -0000 | Lines: 285 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3244 | X-RFC2646: Format=Flowed; Original | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3244 | Message-ID: <e83EPW#NIHA.4808(a)TK2MSFTNGP05.phx.gbl> | Newsgroups: microsoft.public.windows.server.sbs | NNTP-Posting-Host: no-dns-yet.demon.co.uk 62.49.123.35 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:80376 | X-Tomcat-NG: microsoft.public.windows.server.sbs | | I've now gone through the suggested steps 1 to 3. These are the errors that | are now listed: | | EventID 12289 | | Volume Shadow Copy Service error: Unexpected error | RegQueryValueExW(CLSID,,...). hr = 0x80070002. | | | | EventID 8193 | | Volume Shadow Copy Service error: Unexpected error calling routine | CoCreateInstance. hr = 0x80070057. | | | | EventID 11 | | Volume Shadow Copy Service information: The COM Server with CLSID | {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and name VSSEvent cannot be started. | [0x80070057] | | | | EventID 20 | | Volume Shadow Copy Service error: A critical component required by the | Volume Shadow Copy service is not registered. This might happened if an | error occurred during Windows setup or during installation of a Shadow Copy | provider. The error returned from CoCreateInstance on class with CLSID | {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and Name VSSEvent is [0x80040154]. | | | | | | I'll try a clean boot tonight and see what happens! | | | | | | | | | | "Manfred Zhuang [MSFT]" <v-mzhuan(a)online.microsoft.com> wrote in message | news:UPH8jaYNIHA.4380(a)TK2MSFTNGHUB02.phx.gbl... | > Hello Waggers, | > | > Thank you for posting here. | > | > From your post, I understand that error 11 and error 12292 are found in | > event log. If I have misunderstood your concern, please feel free to | > correct me. | > | > Firstly I would like to confirm if Open File Manager is installed on the | > server. If yes, I suggest you temporarily uninstall it and check if the | > issue persists. | > | > If it does not work, let's move on: | > | > Step 1: | > ====== | > Click Start-->Run, type CMD and click OK. | > | > Then run following command one by one: | > | > C:\WINDOWS\system32>net stop vss | > | > C:\WINDOWS\system32>net stop swprv | > | > C:\WINDOWS\system32>vssvc /register | > | > C:\WINDOWS\system32>regsvr32 / swprv.dll | > | > C:\WINDOWS\system32>regsvr32 /i swprv.dll | > | > C:\WINDOWS\system32>regsvr32 /i eventcls.dll | > | > C:\WINDOWS\system32>regsvr32 es.dll | > | > C:\WINDOWS\system32>regsvr32 stdprov.dll | > | > C:\WINDOWS\system32>regsvr32 vssui.dll | > | > C:\WINDOWS\system32>regsvr32 msxml.dll | > | > C:\WINDOWS\system32>regsvr32 msxml3.dll | > | > C:\WINDOWS\system32>regsvr32 msxml4.dll | > | > C:\WINDOWS\system32>regsvr32 msxml2.dll | > | > C:\WINDOWS\system32>regsvr32 msxml2r.dll | > | > Restart the server and check if the issue persists. | > | > Step 2: | > ====== | > Checked the Path in the Registry Key | > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-0 | > 0805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0 | > 000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000} | > | > Check the string "TypeLib" value, the path should be | > %windir%\system32\EVENTCLS.DLL | > | > For example: C:\WINDOWS\system32\EVENTCLS.DLL | > | > If the path is wrong, please correct it. | > | > Step 3: | > ====== | > 1. Click Start-->Run, type regedit and click OK. | > 2. Search for following string: | > | > 790f2886-9889-4c99-8ef5-531add05d044 | > | > 3. Please export the key found for backup purpose. | > 4. Delete all the keys found in registry. | > 5. Restart the server and check if the issue persists. | > | > Step 4: Prepare a Clean Boot environment on the server. | > ================= | > 1. Click Start and Click Run, and in the "Open" line, type in "MSCONFIG" | > (without the quotation marks) and click OK. | > 2. Under the Service tab, check "Hide All Microsoft Services", and then | > click "Disable All" button. In this way, we can disable all the services | > which belong to third-party programs. | > 3. Under the Startup tab, click "Disable All" button. | > | > 4. Click OK. | > 5. Choose Yes to restart the computer. | > 6. Check "Don't show this message or launch the system configuration | > utility when Windows starts". | > 7. Please check if the issue persists. | > | > NOTE: We can check on Normal Startup in the General tab to roll back to | > Normal Mode after we get this issue resolved. | > | > I hope the above information is helpful to you. If the problem still | > occurs, please help me gather following information: | > | > 1. Please export following registry key, compress it and send it to | > v-mzhuan(a)microsoft.com: | > | > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\ | > | > 2. Please download the MPS Report tool from the following link and run it | > on the SBS server, then send the generated CAB file to my mailbox | > v-mzhuan(a)microsoft.com for further investigation so that we can find what | > the root cause is: | > | > http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 | > 15706/MPSRPT_SETUPPerf.EXE | > | > For your information: | > http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F- | > 88B7-F9C79B7306C0&displaylang=en | > | > Please try the above steps at your earliest convenience. If you have any | > concern, please feel free to let me know. | > | > Best regards, | > | > Manfred Zhuang(MSFT) | > Microsoft Online Newsgroup Support | > | > Get Secure! - www.microsoft.com/security | > | > ===================================================== | > This newsgroup only focuses on SBS technical issues. If you have issues | > regarding other Microsoft products, you'd better post in the corresponding | > newsgroups so that they can be resolved in an efficient and timely manner. | > You can locate the newsgroup here: | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx | > | > When opening a new thread via the web interface, we recommend you check | > the | > "Notify me of replies" box to receive e-mail notifications when there are | > any updates in your thread. When responding to posts via your newsreader, | > please "Reply to Group" so that others may learn and benefit from your | > issue. | > | > Microsoft engineers can only focus on one issue per thread. Although we | > provide other information for your reference, we recommend you post | > different incidents in different threads to keep the thread clean. In | > doing | > so, it will ensure your issues are resolved in a timely manner. | > | > For urgent issues, you may want to contact Microsoft CSS directly. Please | > check http://support.microsoft.com for regional support phone numbers. | > | > Any input or comments in this thread are highly appreciated. | > ===================================================== | > | > This posting is provided "AS IS" with no warranties, and confers no | > rights. | > -------------------- | > | From: "Waggers" <Waggers(a)newsgroup.nospam> | > | References: <OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl> | > <E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com> | > | Subject: Re: VSS Errors in Event Log | > | Date: Wed, 28 Nov 2007 08:25:43 -0000 | > | Lines: 52 | > | X-Priority: 3 | > | X-MSMail-Priority: Normal | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 | > | X-RFC2646: Format=Flowed; Response | > | Message-ID: <uwuuFhZMIHA.5224(a)TK2MSFTNGP02.phx.gbl> | > | Newsgroups: microsoft.public.windows.server.sbs | > | NNTP-Posting-Host: no-dns-yet.demon.co.uk 62.49.123.35 | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl | > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78502 | > | X-Tomcat-NG: microsoft.public.windows.server.sbs | > | | > | Many thanks for the respomse. | > | | > | I, stupidly, forgot to mention the OS details. SBS 2003 Premim R2 (but | > | without ISA), all fully updated. | > | | > | Sorry, I don't know what RC2 is and, I can't see if SQL has SP2 | > installed | > | (do you know where I look?). However, I've just re-run Microsoft Update | > and | > | there is nothing listed. | > | | > | Waggers | > | | > | | > | | > | | > | "Kevin Weilbacher" <kw(a)DELETEkwsupport.com> wrote in message | > | news:E7E4B36D-8E2E-4536-9A0D-040D1AB42743(a)microsoft.com... | > | > Do you have Windows 2003 Server SP2 installed yet? | > | > If running RC2, have you installed SQl 2005 SP2 yet? | > | > | > | > -- | > | > Kevin Weilbacher [SBS MVP] | > | > "The days pass by so quickly now, the nights are seldom long" | > | > * | > | > | > | > "Waggers" <Waggers(a)newsgroup.nospam> wrote in message | > | > news:OXaI9XNMIHA.5208(a)TK2MSFTNGP04.phx.gbl... | > | >> Over the last few days I've started to see the following errors in | > the | > | >> Event Log. Can anyone give me a pointer on what they mean and how to | > fix | > | >> them? | > | >> | > | >> Critical Errors in Application Log | > | >> Source: VSS - Event ID: 11 - Last Occurrence: 27/11/2007 0547 - | > Total | > | >> Occurrences: 171 | > | >> Volume Shadow Copy Service information: The COM Server with | > CLSID | > | >> {790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be | > | >> started. [0x80070005] | > | >> | > | >> Source: VSS - Event ID: 12292 - Last Occurrence: 27/11/2007 | > 0547 | > - | > | >> Total Occurrences: 171 | > | >> Volume Shadow Copy Service error: Error creating the | > Shadow | > | >> Copy Provider COM class with CLSID | > {790f2886-9889-4c99-8ef5-531add05d044} | > | >> [0x80070005]. | > | >> | > | >> | > | >> Many thanks. | > | >> | > | >> | > | >> | > | >> | > | > | > | | > | | > | | > | | | |