Prev: Problems with DNS
Next: MORE MAJOR PROBLEMS PLEASE HELP
From: tct14 on 5 Jan 2010 09:09

I am using Backup Exex 12.5 on SBS 2008. For 6+ months my backups have
been running fine, but last week they began failing with the following:

Backup- SBS2008 - AOFO: Initialization failure on: "\\SBS2008\Microsoft
Information Store\First Storage Group". Advanced Open File Option used:
Microsoft Volume Shadow Copy Service (VSS).

V-79-10000-11226 - VSS Snapshot error. The Microsoft Volume Shadow Copy
Service (VSS) snapshot provider selected returned: "Unexpected provider
error". Ensure that all provider services are enabled and can be
started. Check the Windows Event Viewer for details.

I have been working with Symantec on the issue, but they told me it was
a Microsoft issue. They did suggest that I install Windows Server 2008
SP2 to re-register all dll's, which I did, but that did not resolve the
issue. I have checked that all of the services are enabled (Volume
Shadow Copy, Symantec SymSnap VSS Provider, Microsoft Software Shadow
Copy Provider, and some others they had me check).

I also receive the following errors in the system event logs:

Log Name: Application
Source: VSS
Date: 1/5/2010 7:07:45 AM
Event ID: 12292
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SBS2008.McClymond.local
Description:
Volume Shadow Copy Service error: Error creating the Shadow Copy
Provider COM class with CLSID {790f2886-9889-4c99-8ef5-531add05d044}
[0x8007007e].

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">12292</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-01-05T13:07:45.000Z" />
<EventRecordID>420278</EventRecordID>
<Channel>Application</Channel>
<Computer>SBS2008.McClymond.local</Computer>
<Security />
</System>
<EventData>
<Data>{790f2886-9889-4c99-8ef5-531add05d044}</Data>
<Data>0x8007007e</Data>
<Data>

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator</Data>

<Binary>2D20436F64653A20434F52534F46544330303030303038372D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303031323833362D205449443A202030303031323731322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>


and

Log Name: Application
Source: VSS
Date: 1/5/2010 7:07:45 AM
Event ID: 13
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SBS2008.McClymond.local
Description:
Volume Shadow Copy Service information: The COM Server with CLSID
{790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be
started. [0x8007007e]

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">13</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-01-05T13:07:45.000Z" />
<EventRecordID>420277</EventRecordID>
<Channel>Application</Channel>
<Computer>SBS2008.McClymond.local</Computer>
<Security />
</System>
<EventData>
<Data>{790f2886-9889-4c99-8ef5-531add05d044}</Data>
<Data>SW_PROV</Data>
<Data>0x8007007e</Data>
<Data>

Operation:
Obtain a callable interface for this provider
Add a Volume to a Shadow Copy Set

Context:
Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
Snapshot Context: 0
Execution Context: Coordinator</Data>

<Binary>2D20436F64653A20434F52534F46544330303030303038302D2043616C6C3A20434F52534F46544330303030303036352D205049443A202030303031323833362D205449443A202030303031323731322D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>


Any help would be greatly appreciated.


--
tct14
------------------------------------------------------------------------
tct14's Profile: http://forums.techarena.in/members/170958.htm
View this thread: http://forums.techarena.in/small-business-server/1289753.htm

http://forums.techarena.in

From: Larry Struckmeyer[SBS-MVP] on 5 Jan 2010 10:05
Hi:

Have you looked at this?

http://eventid.net/display.asp?eventid=12292&eventno=4714&source=VSS&phase=1

SBS BPA?

www.sbsbpa.com

Also, have you registered the VSS writer DLLs?

Register the following VSS .dlls

Please save the following commands as the .bat file

==========================

net stop "System Event Notification Service"

net stop "COM+ Event System"

net stop "Microsoft Software Shadow Copy Provider"

net stop "Volume Shadow Copy"

cd /d %windir%\system32

net stop vss

net stop swprv

regsvr32 /s ole32.dll

regsvr32 /s oleaut32.dll

regsvr32 /s vss_ps.dll

vssvc /register

regsvr32 /s /i swprv.dll

regsvr32 /s /i eventcls.dll

regsvr32 /s es.dll

regsvr32 /s stdprov.dll

regsvr32 /s vssui.dll

regsvr32 /s msxml3.dll

net start "System Event Notification Service"

net start "COM+ Event System"

net start "Microsoft Software Shadow Copy Provider"

net start "Volume Shadow Copy"

==========================

After run the .bat file and restart the server.

Also, here is a comprehensive list of possible issues:

http://www.gfi.com/blog/vss-troubleshooting/

-
Larry
Please post the resolution to your
issue so others may benefit
-
Get Your SBS Health Check at
www.sbsbpa.com


> I am using Backup Exex 12.5 on SBS 2008. For 6+ months my backups
> have been running fine, but last week they began failing with the
> following:
>
> Backup- SBS2008 - AOFO: Initialization failure on:
> "\\SBS2008\Microsoft Information Store\First Storage Group". Advanced
> Open File Option used: Microsoft Volume Shadow Copy Service (VSS).
>
> V-79-10000-11226 - VSS Snapshot error. The Microsoft Volume Shadow
> Copy Service (VSS) snapshot provider selected returned: "Unexpected
> provider error". Ensure that all provider services are enabled and can
> be started. Check the Windows Event Viewer for details.
>
> I have been working with Symantec on the issue, but they told me it
> was a Microsoft issue. They did suggest that I install Windows Server
> 2008 SP2 to re-register all dll's, which I did, but that did not
> resolve the issue. I have checked that all of the services are
> enabled (Volume Shadow Copy, Symantec SymSnap VSS Provider, Microsoft
> Software Shadow Copy Provider, and some others they had me check).
>
> I also receive the following errors in the system event logs:
>
> Log Name: Application
> Source: VSS
> Date: 1/5/2010 7:07:45 AM
> Event ID: 12292
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: SBS2008.McClymond.local
> Description:
> Volume Shadow Copy Service error: Error creating the Shadow Copy
> Provider COM class with CLSID {790f2886-9889-4c99-8ef5-531add05d044}
> [0x8007007e].
> Operation:
> Obtain a callable interface for this provider
> Add a Volume to a Shadow Copy Set
> Context:
> Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
> Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
> Snapshot Context: 0
> Execution Context: Coordinator
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="VSS" />
> <EventID Qualifiers="0">12292</EventID>
> <Level>2</Level>
> <Task>0</Task>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2010-01-05T13:07:45.000Z" />
> <EventRecordID>420278</EventRecordID>
> <Channel>Application</Channel>
> <Computer>SBS2008.McClymond.local</Computer>
> <Security />
> </System>
> <EventData>
> <Data>{790f2886-9889-4c99-8ef5-531add05d044}</Data>
> <Data>0x8007007e</Data>
> <Data>
> Operation:
> Obtain a callable interface for this provider
> Add a Volume to a Shadow Copy Set
> Context:
> Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
> Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
> Snapshot Context: 0
> Execution Context: Coordinator</Data>
> <Binary>2D20436F64653A20434F52534F46544330303030303038372D2043616C6C3A
> 20434F52534F46544330303030303036352D205049443A202030303031323833362D20
> 5449443A202030303031323731322D20434D443A2020433A5C57696E646F77735C7379
> 7374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F
> 524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Bina
> ry>
>
> </EventData>
>
> </Event>
>
> and
>
> Log Name: Application
> Source: VSS
> Date: 1/5/2010 7:07:45 AM
> Event ID: 13
> Task Category: None
> Level: Error
> Keywords: Classic
> User: N/A
> Computer: SBS2008.McClymond.local
> Description:
> Volume Shadow Copy Service information: The COM Server with CLSID
> {790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be
> started. [0x8007007e]
> Operation:
> Obtain a callable interface for this provider
> Add a Volume to a Shadow Copy Set
> Context:
> Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
> Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
> Snapshot Context: 0
> Execution Context: Coordinator
> Event Xml:
> <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
> <System>
> <Provider Name="VSS" />
> <EventID Qualifiers="0">13</EventID>
> <Level>2</Level>
> <Task>0</Task>
> <Keywords>0x80000000000000</Keywords>
> <TimeCreated SystemTime="2010-01-05T13:07:45.000Z" />
> <EventRecordID>420277</EventRecordID>
> <Channel>Application</Channel>
> <Computer>SBS2008.McClymond.local</Computer>
> <Security />
> </System>
> <EventData>
> <Data>{790f2886-9889-4c99-8ef5-531add05d044}</Data>
> <Data>SW_PROV</Data>
> <Data>0x8007007e</Data>
> <Data>
> Operation:
> Obtain a callable interface for this provider
> Add a Volume to a Shadow Copy Set
> Context:
> Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167}
> Class ID: {790f2886-9889-4c99-8ef5-531add05d044}
> Snapshot Context: 0
> Execution Context: Coordinator</Data>
> <Binary>2D20436F64653A20434F52534F46544330303030303038302D2043616C6C3A
> 20434F52534F46544330303030303036352D205049443A202030303031323833362D20
> 5449443A202030303031323731322D20434D443A2020433A5C57696E646F77735C7379
> 7374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F
> 524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Bina
> ry>
>
> </EventData>
>
> </Event>
>
> Any help would be greatly appreciated.
>
> http://forums.techarena.in
>


From: "Robbin Meng [MSFT]" on 7 Jan 2010 02:47

Hi,

Thanks for your post and Larry's good input.

In addition to regsiter the VSS dll files, I wonder if you have ever installed Symantec Norton Ghost and if the software is up to date now? as I found some previous cases are caused by Symantec
Norton Ghost VSS entries. Based on research of the error message from Event 12292, "The COM Server with CLSID {790f2886-9889-4c99-8ef5-531add05d044} and name SW_PROV cannot be
started. [0x8007007e]", the Provider ID: {262b716e-bb23-41b5-aaef-e2c15e767167} means 'Symantec Software VSS Provider'.

So please make sure all the Symantec software are updated with latest patches and double check and make sure there are NO multiple jobs were set to run at exactly the same time.

If the issue persists, let's run "vssadmin list providers " and then disable 3rd party invalid VSS providers.

Followed the below steps to remove 3rd party invalid VSS providers like Symantec or Acronis etc.
1. Go to :
HKLM\System\CurrentControlSet\Services\VSS\Providers

2. Click on the key in the left pane, and if the word e.g. Acronis appears in the right pane it's the key you want. Export it to somewhere convenient as a backup.
3. Then delete it from the registry. The key may also be present in one or more of the ControlSet00n branches; export and remove them as well.

Now run "vssadmin list providers" again and the 3rd party invalid VSS providers(e.g. Acronis) entry should have gone.

Once this key was gone, run Backup again to test. However, if the issue still occurs, to resolve it in a more efficient manner, you may still need to contact Symantec for more information and keep them
posted with our latest troubleshooting results if necessary.

Used following KB article to isolate if its a problem with third party provider
http://support.microsoft.com/default.aspx?scid=kb;EN-US;941956


More related information found just for your reference:

Failed to take a snapshot
http://social.microsoft.com/Forums/en-US/whssoftware/thread/5057969b-3f2a-40a7-9865-dd6ada05962e/


Volume Shadow Copy Service - Exchange Writer Failure
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24433889.html

sb600c + BackupExec 12.5 + iSCSI = VSS ERROR
http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1262848382212+28353475&threadId=1378108

Norton Ghost 14
http://radified.com/cgi-bin/yabb2/YaBB.pl?num=1205071186


Hope this helps. Also, if you have any questions or concerns, please do not hesitate to let me know.



Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

==================================================================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/community/discussion/richui/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-2008-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================



 | 
Pages: 1
Prev: Problems with DNS
Next: MORE MAJOR PROBLEMS PLEASE HELP