Windows Server - "Volume Shadow Copy Service error 8139

Asked By Nancy Hartsell on 19-Jan-12 10:28 AM

Hi....I have a SBS 2008 and am getting "Volume Shadow Copy Service error Unexpected error calling routine ConvertStrinSidtoSid hr=0x800770539 Event ID 8193". Backup failed and the SBS report says I have 28 critial events on the server. This has just started happening. We have been using this server for over 18 with no issues, or very few. Any ideas on what is causing this error and how to resolve will help greatly. Thanks in advance....Nancy

Suchit shah replied to Nancy Hartsell on 19-Jan-12 11:12 AM

Please first of all go to the event log under Server Roles>File server, over there you will surely find the error and cause of the error .

one more thing you can check that service is Running properly. to check the service is running or properly ( Go to start -> Run-> service.msc) over there you can check that service is running or not

Would you please perform the following steps on the problematic server to test if it helps?
1. Net stop vss
2. Net stop swprv
3. Go to command prompt,

Cd %systemroot%\system32
regsvr32 /i swprv.dll
regsvr32 /i eventcls.dll
regsvr32 vssui.dll
Vssvc /Register
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll

For 64bit OS

Cd %systemroot%\syswow64
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll
regsvr32 msxml.dll
regsvr32 msxml4.dll

Nancy Hartsell replied to Suchit shah on 19-Jan-12 11:44 AM

Hello, here is what i found is the event log/server role/file server at the time of the failed backup.
I also tried to register the *.dll's but got the following errors
MSXML.DLL failed to load. The specific module could not be found
ES.DLL was loaded but the entry-point DllRegisterServer was not found

All other were ok
these are details from the event log

Log Name:    Application
Source:      VSS
Date:      1/18/2012 7:01:14 PM
Event ID:    8193
Task Category: None
Level:     Error
Keywords:    Classic
User:      N/A
Computer:    MTDC02.ServerName.local
Description:
Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid. hr = 0x80070539.

Operation:
OnIdentify event
Gathering Writer Data

Context:
   Execution Context: Shadow Copy Optimization Writer
   Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Name: Shadow Copy Optimization Writer
   Writer Instance ID: {0d00ac4e-8cec-439d-aca6-95e878e1f273}
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">8193</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-01-19T01:01:14.000Z" />
    <EventRecordID>677644</EventRecordID>
    <Channel>Application</Channel>
    <Computer>MTDC02.metaltechmfg.local</Computer>
    <Security />
</System>
<EventData>
    <Data>ConvertStringSidToSid</Data>
    <Data>0x80070539</Data>
    <Data>

Operation:
OnIdentify event
Gathering Writer Data

Context:
   Execution Context: Shadow Copy Optimization Writer
   Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f}
   Writer Name: Shadow Copy Optimization Writer
   Writer Instance ID: {0d00ac4e-8cec-439d-aca6-95e878e1f273}</Data>
    <Binary>2D20436F64653A20534543534543524330303030303838322D2043616C6C3A20534543534543524330303030303837352D205049443A202030303031323930342D205449443A202030303031313334342D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>

Log Name:    System
Source:      volsnap
Date:      1/18/2012 7:02:40 PM
Event ID:    33
Task Category: None
Level:     Information
Keywords:    Classic
User:      N/A
Computer:    MTDC02.ServerName.local
Description:
The oldest shadow copy of volume E: was deleted to keep disk space usage for shadow copies of volume E: below the user defined limit.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="volsnap" />
    <EventID Qualifiers="16390">33</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-01-19T01:02:40.004Z" />
    <EventRecordID>490948</EventRecordID>
    <Channel>System</Channel>
    <Computer>MTDC02.ServerName.local</Computer>
    <Security />
</System>
<EventData>
    <Data>\Device\HarddiskVolumeShadowCopy623</Data>
    <Data>E:</Data>
    <Binary>00000000020030000000000021000640020000000000000050000000000000000000000000000000</Binary>
</EventData>
</Event>

Log Name:    Application
Source:      VSS
Date:      1/18/2012 7:02:41 PM
Event ID:    12305
Task Category: None
Level:     Error
Keywords:    Classic
User:      N/A
Computer:    MTDC02.ServerName.local
Description:
Volume Shadow Copy Service error: Volume/disk not connected or not found. Error context: CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy623,0xc0000000,0x00000003,...).

Operation:
Processing PostFinalCommitSnapshots

Context:
   Execution Context: System Provider
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">12305</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-01-19T01:02:41.000Z" />
    <EventRecordID>677757</EventRecordID>
    <Channel>Application</Channel>
    <Computer>MTDC02.ServerName.local</Computer>
    <Security />
</System>
<EventData>
    <Data>CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy623,0xc0000000,0x00000003,...)</Data>
    <Data>

Operation:
Processing PostFinalCommitSnapshots

Context:
Execution Context: System Provider</Data>
<Binary>2D20436F64653A20494E434943484C4830303030303232322D2043616C6C3A2053505251534E504330303030303132352D205049443A202030303031303037362D205449443A202030303031303634342D20434D443A2020433A5C57696E646F77735C53797374656D33325C737663686F73742E657865202D6B2073777072762D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>

Log Name:    Application
Source:      VSS
Date:      1/18/2012 7:02:41 PM
Event ID:    12293
Task Category: None
Level:     Error
Keywords:    Classic
User:      N/A
Computer:    MTDC02.ServerName.local
Description:
Volume Shadow Copy Service error: Error calling a routine on a Shadow Copy Provider {b5946137-7b9f-4925-af80-51abd60b20d5}. Routine details PostFinalCommitSnapshots({78e634dc-d41a-4432-8621-b27dc6331276}, 3) [hr = 0x80042308].

Operation:
Executing Asynchronous Operation

Context:
   Current State: DoSnapshotSet
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">12293</EventID>
    <Level>2</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-01-19T01:02:41.000Z" />
    <EventRecordID>677758</EventRecordID>
    <Channel>Application</Channel>
    <Computer>MTDC02.ServerName.local</Computer>
    <Security />
</System>
<EventData>
    <Data>{b5946137-7b9f-4925-af80-51abd60b20d5}</Data>
    <Data>PostFinalCommitSnapshots({78e634dc-d41a-4432-8621-b27dc6331276}, 3)</Data>
    <Data>0x80042308</Data>
    <Data>

Operation:
Executing Asynchronous Operation

Context:
Current State: DoSnapshotSet</Data>
<Binary>2D20436F64653A20434F52534E50534330303030313238352D2043616C6C3A20434F52534E50534330303030313131372D205049443A202030303031323930342D205449443A202030303030393934382D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>

Log Name:    Application
Source:      VSS
Date:      1/18/2012 7:05:44 PM
Event ID:    8224
Task Category: None
Level:     Information
Keywords:    Classic
User:      N/A
Computer:    MTDC02.ServerName.local
Description:
The VSS service is shutting down due to idle timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="VSS" />
    <EventID Qualifiers="0">8224</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-01-19T01:05:44.000Z" />
    <EventRecordID>677767</EventRecordID>
    <Channel>Application</Channel>
    <Computer>MTDC02.ServerName.local</Computer>
    <Security />
</System>
<EventData>
    <Data>
    </Data>
    <Binary>2D20436F64653A2020434F525356434330303030303737352D2043616C6C3A2020434F525356434330303030303735372D205049443A202030303031323930342D205449443A202030303030393230342D20434D443A2020433A5C57696E646F77735C73797374656D33325C76737376632E6578652020202D20557365723A204E5420415554484F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>

Suchit shah replied to Nancy Hartsell on 19-Jan-12 12:07 PM

I think you have to try the steps solution which is given here

http://social.technet.microsoft.com/Forums/en/winserverfiles/thread/e2f86247-6a77-4bf3-a4f8-be7687c181b7

1. Net stop vss

2. Net stop swprv

3. Go to command prompt, for Windows Server 2008 X86

Cd %systemroot%\system32
regsvr32 /i swprv.dll
regsvr32 /i eventcls.dll
regsvr32 vssui.dll
Vssvc /Register
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll

For Windows Server 2008 64bit

Cd %systemroot%\syswow64
regsvr32 ole32.dll
regsvr32 vss_ps.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 msxml3.dll
regsvr32 msxml.dll
regsvr32 msxml4.dll

4. Check and Stop the following services:
a) Volume Shadow Copy Service.
b) Microsoft Software Shadow Copy Provider.
c) COM+ event system
d) COM+ System Application

5. Take the backup of the "Subscriptions" key
HKEY_LOCAL_MACHINE \Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscript
Delete the "Subscriptions" key. Delete just the Subscriptions subkey, leave the EventClasses key.

6. Expand and locate the following registry subtree
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VolSnap
Add DWord key with the name of MinDiffAreaFileSize with value 3000

7. Restart/Start the following services:
a) COM+ event system
b) COM+ System Application
c) Microsoft Software Shadow Copy Provider
d) Volume Shadow Copy
8. Reboot the machine.

Try this and let me know
also look here http://support.microsoft.com/kb/907574

kalpana aparnathi replied to Nancy Hartsell on 19-Jan-12 01:31 PM

hi,

Please check whether"Microsoft Software Shadow Copy Provider" service is started and set to Automatic. You can find it in Services.msc.