Backup Exec failed to backup system state because of VSS issue

Hi, Everyone,

We have Symantec BE 11d installed at one server (Windows server 2003 std
sp2)) and BE remote agent installed on the Exchange server. Recently BE
failed to backup the system state for the Exchange server (Exchange server
2003 sp2).

The error log is as follows:
Backup - \\exchange servver name\Microsoft Information Store\First Storage
Group
V-79-57344-34110 - AOFO: Initialization failure on: "\\Exchange server
name\System?State". Advanced Open File Option used: Microsoft Volume Shadow
Copy Service (VSS).
VSS snapshot error. The Microsoft Volume Shaw Copy Service (VSS) snapshot
provider selected returned: "Unexprected provider error". Ensure that all
provider services are enabled and can be started. Check the Windows Event
Viewer for detail.


I did some research on the Backup Exec web site, the articles there seems
all point to VSS issue. I saw error application logs at the Exchange server.
Here are they:

Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 12292
Date: 11/7/2007
Time: 12:00:43 AM
User: N/A
Computer: S00150
Description:
Volume Shadow Copy Service error: Error creating the Shadow Copy Provider
COM class with CLSID {5fc845eb-f299-40f0-9725-34045f7ea8ba} [0x8007007e].

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 20 43 6f 64 65 3a 20 - Code:
0008: 43 4f 52 48 57 50 57 43 CORHWPWC
0010: 30 30 30 30 30 33 30 36 00000306
0018: 2d 20 43 61 6c 6c 3a 20 - Call:
0020: 43 4f 52 48 57 50 57 43 CORHWPWC
0028: 30 30 30 30 30 32 34 32 00000242
0030: 2d 20 50 49 44 3a 20 20 - PID:
0038: 30 30 30 30 35 31 33 32 00005132
0040: 2d 20 54 49 44 3a 20 20 - TID:
0048: 30 30 30 30 37 37 30 34 00007704
0050: 2d 20 43 4d 44 3a 20 20 - CMD:
0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
0060: 57 53 5c 53 79 73 74 65 WS\Syste
0068: 6d 33 32 5c 76 73 73 76 m32\vssv
0070: 63 2e 65 78 65 20 20 20 c.exe
0078: 2d 20 55 73 65 72 3a 20 - User:
0080: 4e 54 20 41 55 54 48 4f NT AUTHO
0088: 52 49 54 59 5c 53 59 53 RITY\SYS
0090: 54 45 4d 20 20 20 20 20 TEM
0098: 2d 20 53 69 64 3a 20 20 - Sid:
00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18


Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 11
Date: 11/7/2007
Time: 12:00:43 AM
User: N/A
Computer: S00150
Description:
Volume Shadow Copy Service information: The COM Server with CLSID
{5fc845eb-f299-40f0-9725-34045f7ea8ba} and name HWPRV cannot be started.
[0x8007007e]

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2d 20 43 6f 64 65 3a 20 - Code:
0008: 43 4f 52 48 57 50 57 43 CORHWPWC
0010: 30 30 30 30 30 32 39 38 00000298
0018: 2d 20 43 61 6c 6c 3a 20 - Call:
0020: 43 4f 52 48 57 50 57 43 CORHWPWC
0028: 30 30 30 30 30 32 34 32 00000242
0030: 2d 20 50 49 44 3a 20 20 - PID:
0038: 30 30 30 30 35 31 33 32 00005132
0040: 2d 20 54 49 44 3a 20 20 - TID:
0048: 30 30 30 30 37 37 30 34 00007704
0050: 2d 20 43 4d 44 3a 20 20 - CMD:
0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
0060: 57 53 5c 53 79 73 74 65 WS\Syste
0068: 6d 33 32 5c 76 73 73 76 m32\vssv
0070: 63 2e 65 78 65 20 20 20 c.exe
0078: 2d 20 55 73 65 72 3a 20 - User:
0080: 4e 54 20 41 55 54 48 4f NT AUTHO
0088: 52 49 54 59 5c 53 59 53 RITY\SYS
0090: 54 45 4d 20 20 20 20 20 TEM
0098: 2d 20 53 69 64 3a 20 20 - Sid:
00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18

Please help. Thank you very much in advance.
--
John AM

Hi, It seems no one has the similar problems. It is actually a VSS issue
which prevent our backup program from backing up the system state of our
Exchange server (Exchange server 2003 std sp2). I did a quick a check in this
forum, it seems a similar thread posted in Oct, but it did not get too much
responses either.
--
John AM


"John AM" wrote:

> Hi, Everyone,
>
> We have Symantec BE 11d installed at one server (Windows server 2003 std
> sp2)) and BE remote agent installed on the Exchange server. Recently BE
> failed to backup the system state for the Exchange server (Exchange server
> 2003 sp2).
>
> The error log is as follows:
> Backup - \\exchange servver name\Microsoft Information Store\First Storage
> Group
> V-79-57344-34110 - AOFO: Initialization failure on: "\\Exchange server
> name\System?State". Advanced Open File Option used: Microsoft Volume Shadow
> Copy Service (VSS).
> VSS snapshot error. The Microsoft Volume Shaw Copy Service (VSS) snapshot
> provider selected returned: "Unexprected provider error". Ensure that all
> provider services are enabled and can be started. Check the Windows Event
> Viewer for detail.
>
>
> I did some research on the Backup Exec web site, the articles there seems
> all point to VSS issue. I saw error application logs at the Exchange server.
> Here are they:
>
> Event Type: Error
> Event Source: VSS
> Event Category: None
> Event ID: 12292
> Date: 11/7/2007
> Time: 12:00:43 AM
> User: N/A
> Computer: S00150
> Description:
> Volume Shadow Copy Service error: Error creating the Shadow Copy Provider
> COM class with CLSID {5fc845eb-f299-40f0-9725-34045f7ea8ba} [0x8007007e].
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 2d 20 43 6f 64 65 3a 20 - Code:
> 0008: 43 4f 52 48 57 50 57 43 CORHWPWC
> 0010: 30 30 30 30 30 33 30 36 00000306
> 0018: 2d 20 43 61 6c 6c 3a 20 - Call:
> 0020: 43 4f 52 48 57 50 57 43 CORHWPWC
> 0028: 30 30 30 30 30 32 34 32 00000242
> 0030: 2d 20 50 49 44 3a 20 20 - PID:
> 0038: 30 30 30 30 35 31 33 32 00005132
> 0040: 2d 20 54 49 44 3a 20 20 - TID:
> 0048: 30 30 30 30 37 37 30 34 00007704
> 0050: 2d 20 43 4d 44 3a 20 20 - CMD:
> 0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
> 0060: 57 53 5c 53 79 73 74 65 WS\Syste
> 0068: 6d 33 32 5c 76 73 73 76 m32\vssv
> 0070: 63 2e 65 78 65 20 20 20 c.exe
> 0078: 2d 20 55 73 65 72 3a 20 - User:
> 0080: 4e 54 20 41 55 54 48 4f NT AUTHO
> 0088: 52 49 54 59 5c 53 59 53 RITY\SYS
> 0090: 54 45 4d 20 20 20 20 20 TEM
> 0098: 2d 20 53 69 64 3a 20 20 - Sid:
> 00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18
>
>
> Event Type: Error
> Event Source: VSS
> Event Category: None
> Event ID: 11
> Date: 11/7/2007
> Time: 12:00:43 AM
> User: N/A
> Computer: S00150
> Description:
> Volume Shadow Copy Service information: The COM Server with CLSID
> {5fc845eb-f299-40f0-9725-34045f7ea8ba} and name HWPRV cannot be started.
> [0x8007007e]
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 2d 20 43 6f 64 65 3a 20 - Code:
> 0008: 43 4f 52 48 57 50 57 43 CORHWPWC
> 0010: 30 30 30 30 30 32 39 38 00000298
> 0018: 2d 20 43 61 6c 6c 3a 20 - Call:
> 0020: 43 4f 52 48 57 50 57 43 CORHWPWC
> 0028: 30 30 30 30 30 32 34 32 00000242
> 0030: 2d 20 50 49 44 3a 20 20 - PID:
> 0038: 30 30 30 30 35 31 33 32 00005132
> 0040: 2d 20 54 49 44 3a 20 20 - TID:
> 0048: 30 30 30 30 37 37 30 34 00007704
> 0050: 2d 20 43 4d 44 3a 20 20 - CMD:
> 0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO
> 0060: 57 53 5c 53 79 73 74 65 WS\Syste
> 0068: 6d 33 32 5c 76 73 73 76 m32\vssv
> 0070: 63 2e 65 78 65 20 20 20 c.exe
> 0078: 2d 20 55 73 65 72 3a 20 - User:
> 0080: 4e 54 20 41 55 54 48 4f NT AUTHO
> 0088: 52 49 54 59 5c 53 59 53 RITY\SYS
> 0090: 54 45 4d 20 20 20 20 20 TEM
> 0098: 2d 20 53 69 64 3a 20 20 - Sid:
> 00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18
>
> Please help. Thank you very much in advance.
> --
> John AM

I have exactly the same problem on different servers...backupexec 11d
is installed on a small business server 2003. We try to backup a
win2k3 standard server over the network. The comand line "vssadmin
list writers" shows no errors on the remote machine...everthing is in
a stable state.

I really have no idea whats going on here. BackupExec 11d runs very
well for months...
All solutions from the symantec knowledge base didnt help.

kind regards, Oli

We've found out something new...it seems like the problem happens only
on systems which are built using a slipstream CD-ROM.
Our first test (reinstall SP2 for W2k3) works perfect. The case is
documented at Symantec KB (07-11-14): http://seer.entsupport.symantec.com/docs/293136.htm
regards Oli

In article <b39e9b34-f7c0-49f8-b9e6-
c4c37c11553d@o6g2000hsd.googlegroups.com>, mail@guenther-oliver.de
says...
> We've found out something new...it seems like the problem happens only
> on systems which are built using a slipstream CD-ROM.
> Our first test (reinstall SP2 for W2k3) works perfect. The case is
> documented at Symantec KB (07-11-14): http://seer.entsupport.symantec.com/docs/293136.htm
> regards Oli

Actually, we've found a number of servers in the last two weeks where
all backups fail, even NTBackup, and reapplying SP2 or just installing
Sp2 on machines that were Sp1 has fixed all of them.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

people, it's that damn acronis causing the problem!
you think it's gone and deleted but it isn't!
here's the fix: http://backupchain.com/How-to-fix-vo...-provider.html


i had this similar error btw:
Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {5fc845eb-f299-40f0-9725-34045f7ea8ba} and Name HWPRV is 0x80004002, No such interface supported

I have exactly the same problem on different servers. backup exec 11d is installed on a small business server 2008. We try to backup a win2k3 standard server over the network. The command line "administer list writers" shows no errors on the remote Machine. everything is in a stable state. But now i tried New Software that is starting to given the good response to my back up process on Acronis software.