Volume Shadow Copies Disappearing

[Guest Ben]

I'm at service pack 2. I have enabled volume shadow copies on our d:

drive. C: drive is where the OS is installed. D: drive only contains

user files.

 

I am getting the following three application log events:

 

Event Type: Error

Event Source: VSS

Event Category: None

Event ID: 8193

Date: 2/17/2008

Time: 2:05:35 AM

User: N/A

Computer: MTSRV1

Description:

Volume Shadow Copy Service error: Unexpected error calling routine

IMultiInterfaceEventControl::GetSubscriptions. hr = 0x800401fd.

 

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 2d 20 43 6f 64 65 3a 20 - Code:

0008: 20 49 4e 43 53 45 43 48 INCSECH

0010: 30 30 30 30 30 33 31 37 00000317

0018: 2d 20 43 61 6c 6c 3a 20 - Call:

0020: 20 49 4e 43 53 45 43 48 INCSECH

0028: 30 30 30 30 30 32 39 32 00000292

0030: 2d 20 50 49 44 3a 20 20 - PID:

0038: 30 30 30 30 30 33 30 38 00000308

0040: 2d 20 54 49 44 3a 20 20 - TID:

0048: 30 30 30 30 35 35 39 36 00005596

0050: 2d 20 43 4d 44 3a 20 20 - CMD:

0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO

0060: 57 53 5c 53 79 73 74 65 WS\Syste

0068: 6d 33 32 5c 76 73 73 76 m32\vssv

0070: 63 2e 65 78 65 20 20 20 c.exe

0078: 2d 20 55 73 65 72 3a 20 - User:

0080: 4e 54 20 41 55 54 48 4f NT AUTHO

0088: 52 49 54 59 5c 53 59 53 RITY\SYS

0090: 54 45 4d 20 20 20 20 20 TEM

0098: 2d 20 53 69 64 3a 20 20 - Sid:

00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18

 

Event Type: Error

Event Source: VSS

Event Category: None

Event ID: 12291

Date: 2/17/2008

Time: 2:05:35 AM

User: N/A

Computer: MTSRV1

Description:

Volume Shadow Copy Service error: Error on creating/using the COM+

Writers publisher interface: BackupShutdown [0x8000ffff].

 

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 2d 20 43 6f 64 65 3a 20 - Code:

0008: 43 4f 52 53 4e 50 53 43 CORSNPSC

0010: 30 30 30 30 32 31 33 33 00002133

0018: 2d 20 43 61 6c 6c 3a 20 - Call:

0020: 43 4f 52 53 4e 50 53 43 CORSNPSC

0028: 30 30 30 30 32 30 39 35 00002095

0030: 2d 20 50 49 44 3a 20 20 - PID:

0038: 30 30 30 30 30 33 30 38 00000308

0040: 2d 20 54 49 44 3a 20 20 - TID:

0048: 30 30 30 30 35 35 39 36 00005596

0050: 2d 20 43 4d 44 3a 20 20 - CMD:

0058: 43 3a 5c 57 49 4e 44 4f C:\WINDO

0060: 57 53 5c 53 79 73 74 65 WS\Syste

0068: 6d 33 32 5c 76 73 73 76 m32\vssv

0070: 63 2e 65 78 65 20 20 20 c.exe

0078: 2d 20 55 73 65 72 3a 20 - User:

0080: 4e 54 20 41 55 54 48 4f NT AUTHO

0088: 52 49 54 59 5c 53 59 53 RITY\SYS

0090: 54 45 4d 20 20 20 20 20 TEM

0098: 2d 20 53 69 64 3a 20 20 - Sid:

00a0: 53 2d 31 2d 35 2d 31 38 S-1-5-18

 

Event Type: Error

Event Source: EventSystem

Event Category: (51)

Event ID: 4609

Date: 2/17/2008

Time: 2:05:35 AM

User: N/A

Computer: MTSRV1

Description:

The COM+ Event System detected a bad return code during its internal

processing. HRESULT was 80070057 from line 64 of d:\nt\com\complus\src

\events\tier1\subscription.cpp. Please contact Microsoft Product

Support Services to report this error.

 

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

 

 

I've been pouring over newsgroups and knowledge base searches. It

looks like most answers address pre-service pack 2 issues.

 

Thanks in advance.