Daily Errors in the System Event Log

Once a day, presumably due to scheduled maintenance task running, on our Windows 8.1 systems (set up with local accounts) we're seeing the following DistributedCom messages, ID 10010, logged:
The server {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} did not register with DCOM within the required timeout.
The server {1B1F472E-3221-4826-97DB-2C2324D389AE} did not register with DCOM within the required timeout.
The events are logged about 30 seconds apart.
A search of the registry reveals the first event is related to SkyDrive, specifically "Automatic Maintenance task to enable SkyDrive file sync to make progress while in Connected Standby" while the second seems to
also be related to sync maintenance ("SyncEngineCOMServer Class").
On a system with a local account, and on which no SkyDrive access is needed/wanted, what's the method to disable the software that's apparently still trying to access SkyDrive?
Thanks in advance.
-Noel
Detailed how-to in my eBooks:
Configure The Windows 7 "To Work" Options
Configure The Windows 8 "To Work" Options

Yes for anyone who actually came to this thread for the topic, going off on a tangent is confusing as at a glance we think what you are talking about is relative to the topic and we then have to waste time reading many irrelevant comments to figure out you're
going off a tangent. Thnks for that!
Really? You think going off topic AFTER arriving at the definitive answer is a real problem for you?
Then you complain that the off topic talk interferes with your totally unrelated question?
New to internet forums? Hint: Start your own thread.
To summarize this one: On a system where the user wants no part of SkyDrive / OneDrive, there's a scheduled task that remains and tries to access the online resources. Someone at Microsoft forgot to get rid of it when OneDrive is disabled.
Simple as that.
-Noel
Detailed how-to in my eBooks:
Configure The Windows 7 "To Work" Options
Configure The Windows 8 "To Work" Options

Similar Messages

Windows could not start the Cluster Service on Local computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 2.

Dear Technet,
Windows could not start the Cluster Service on Local computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 2.
My cluster suddenly went disappear. and tried to restart the cluster service. When trying to restart service this above mention error comes up.
even i tried to remove the cluster through power-shell still couldn't happen because of cluster service not running.
Help me please.. thank you.
Regards
Shamil

Hi,
Could you confirm which account when you start the cluster service? The Cluster service is a service that requires a domain user account.
The server cluster Setup program changes the local security policy for this account by granting a set of user rights to the account. Additionally, this account is made a member
of the local Administrators group.
If one or more of these user rights are missing, the Cluster service may stop immediately during startup or later, depending on when the Cluster service requires the particular
user right.
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Error dbconsole 11g (system event log) , and emca ?

Hi to all
i work on database 11g r1 on windows 7 64 bit ultimate , and i am new on dba , when i want to start dbconsole service it appear this error :
Windows could not start the OracleDBConsoleOracl on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the system vendor, and refer to service-specific error code 1 . wha is the problem ?
another question plz
If I have written this command (emca -config dbcontrol db -repos recreate) .. What exactly will happen? and what is (emca log) ?
thank you very much

I am not clear about your 1st question but in last queation you are going to Drops the current Database Control management repository and then recreates a new one.
http://docs.oracle.com/cd/B28359_01/server.111/b28319/emca.htm

Continuous "36888 Schannel Errors" in System Event Log when NOT connected to Internet

We are hoping someone will be able to assist with us this very strange issue please ?
We are using Windows 8.1 x64 Enterprise with Office 2013 and the latest Symantec Endpoint Proctecion v12.1.5 installed. They are managed using SCCM2012 in a large AD domain environment
When our workstations are NOT connected to the internet (only local intranet) the following errors appear in SYSTEM event log almost continuously (several times a minute).
Event ID:36888 User: SYSTEM OpCode:Info Level:Error Source:SChannel
"A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 70. The Windows Schannel error state is 11."
The process associated with these events is "Local Security Authority Process"
When an internet connection is enabled for these machines these 36888 errors will suddenly stop !.
An event "Error 36887 "A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 40." Is also occurring on these machines but only occasionally.
As a result, We suspect there must be a process continuously attempting to connect to an internet service and failing ?.
Some of the things we have tried so far;
- We have disabled all non-essential services (e.g. Windows Store Service) one by one but this didn't fix.
- We have tried disabling Tile updates on Start
- We have tried a bunch of different Group Policy settings to disable different combinations of TLS/SSL in IE config.
- We have searched the internet forums and tried some suggested fixes but this combination of error state and error code seems unique ?.
It doesn't happen on our Windows 7 x64 workstations that have much same apps & configuration.
Any advice or suggestions would be greatly appreciated !
Thanks.

Hi Makes006,
This Event ID 36888 occurs if a user tries to access a web site using HTTP but specifies an SSL port in the URL.
We can try clean boot to troubleshoot whether this issue is caused by a third party program .
How to perform a clean boot in Windows
http://support.microsoft.com/kb/929135
If there is no sensible impacts on operating the machines ,we can try to disable this log by modify the following registry key value to 0.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\EventLogging
For more information, please refer to the following link:
How to enable Schannel event logging in IIS
http://support.microsoft.com/kb/260729
Regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

NetBT 4321 Errors in Member Server's System Event Logs

Hi,
I've searched high and low and can't find a resolution to this issue. We have approximately 30 windows server 2003 servers, most R2, all SP2. We have 2 domain controllers - 10.0.0.10 & 10.0.0.11 (the first one holds the PDC role).
In the System event log of nearly all the member servers is the NetBT 4321 error, with the following text:
"The name "OURDOMAIN :1d" could not be registered on the Interface with IP address 10.0.0.43. The machine with the IP address 10.0.0.10 did not allow the name to be claimed by this machine."
On each machine the first IP mentioned is always that machine's IP (10.0.0.43 in this case), with the second one (the one not allowing 1d to be registered) being the PDC emulator's IP (10.0.0.10). Now I can understand why this is failing - these machines are all on the same subnet and I would guess that the domain (1d) should only be registered by the PDC emulator anyway. What I can't work out is why these errors started appearing about 3 months ago - we can't work out what, if any, change occured at that time.
We run a DNS-only environment (no WINS), 2k3 Native domain. We're looking to upgrade to a 2k8 Native domain (ie upgrading our DCs) but are wanting to get this niggling issue sorted first.
Any help would be much appreciated.
Regards,
Ben N.

Hi,
At some stage I've not been clear - no we most certainly don't have two IPs per server - the two IPs together above are the two domain controllers.
Here's the IPconfig:
DOMAIN CONTROLLER:
Windows IP Configuration
Host Name . . . . . . . . . . . . : svrdomain1
Primary Dns Suffix . . . . . . . : us.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : us.local
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP Network Team #1
Physical Address. . . . . . . . . : 00-0B-CD-23-12-F9
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 10.0.0.10
10.0.0.11
PROBLEMATIC SERVER:
Windows IP Configuration
Host Name . . . . . . . . . . . . : svrfile1
Primary Dns Suffix . . . . . . . : us.local
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : us.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter
Physical Address. . . . . . . . . : 00-50-56-89-14-79
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.43
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 10.0.0.10
10.0.0.11
Thanks,
Ben.

Reporting Services not automatically starting. System event log 7009, Application event: 18456

For the past month (since Oct 11,2012) reporting services (SSRS 2008R2) is not starting after the server is rebooted. The service is set to automatically start and starts manually without a problem. The system event log contains the following error:
Event ID 7009: A timeout was reached (30000 milliseconds) while waiting for the SQL Server Reporting Services (MSSQLSERVER) service to connect.
SQL logs :
The SQL logs has many "Event 18456 Login Failed, State 38" errors when the database engine starts. I assume clients conections are failing because the databases aren't online yet. None of these 18456 errors coorespond to the account reporting services
runs under.
The SQL logs indication Event 7009 occures before the "ReportingServer" database is online so im assuming there is a dependancy but I don't know how to avoid this.
This problem is occuring on a number of our servers running SSRS (if not all)
Any ideas?
Paul

Hi A141695,
For Event ID 7009, you can try to do the steps below to resolve it.
    1. Click Start, click Run, type regedit, and then click OK.
    2. Locate and then click the following registry subkey:
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
    3. Right-click Control, point to New, and then click DWORD Value.
    4. In the New Value #1 box, type ServicesPipeTimeout, and then press ENTER.
    5. Right-click ServicesPipeTimeout, and then click Modify.
    6. Click Decimal, type the number of milliseconds that you want to wait until the service times out, and then click OK.
For example, to wait 60 seconds before the service times out, type 60000.
Quit Registry Editor, and then restart the computer. For more information about it, please see:
http://www.sqlservercentral.com/Forums/Topic850540-1550-1.aspx#bm851211
http://myitforum.com/myitforumwp/2012/08/22/configmgr-2012-sms_srs_reporting_point-component-failure/
If you have any questions, please feel free to ask.
Regards,
Charlie Liao
TechNet Subscriber Support
If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.

Windows 8 system doesn't get internet, says system event log on service has some problem of STOP 0xC000021A error which system restarts very slowly

Hi, my system runs on windows 8 on hp laptop envy series. All of a sudden, system event log on service stopped, errors which prevented the system to log on services. It displayed error of STOP 0xC000021A when i use system restore to roll back to previous
configuration. Also when I tried to refresh my pc, it says i can't do changes as log in was switched to prevent the changes by notification.I don't know what to do next, I tried to put recovery dvds which I made when system was bought, now not at all working.
Internet is not active, not able to resolve by trouble shooting and system taking lot of time to get dsktop. Previously I used to get my desktop in 10 seconds. Now its 10 min. May be I m infected with virus. My files, they are there. I tried to transfer some
files by pendrive to another system, now the new system(where i put my files in another system) crashed, windows 7 system which does not display desktop, icons etc and not at all workable.
Also in my hp system, i m unable to open control panel. if its opened, it will not go off, when i use task manager, it says explorer and shuts down. I had to force restart the system. Please resolve something to get my hp laptop workable. I m waiting for
my MS thesis to be working on that. My files are locked and no way to transfer, I fear of infected by virus to another computer also.
Pls give instructions to hw to set my hp laptop at the earliest without losing any of the files. Idon't want to reinstall and lose all the data for timebeing. Else, inform me the option for copying data safely. I tried to change the adv startup and recovery
by changing the boot sequence by DVD but this also shows error 0xC000021A and asks us to see the details. I didn't understand all this. Pls help asap.
Thanks
venkata
STOP 0xC000021A

MV
If you can boot either from the win 8 dvd or in safe mode we need the DMP files
We do need the actual DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.
WE NEED AT LEAST TWO DMP FILES TO SPOT TRENDS AND CONFIRM THE DIAGNOSIS.
Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here
If you have any questions about the procedure please ask
Wanikiya and Dyami--Team Zigzag

I am trying to use automator to open a safari popup window that will automatically log me into whatever account and I attempted to type up an applescript that utilized the "System Events" function with no avail, any ideas?

I am trying to use automator to open a safari popup window that will automatically log me into whatever account and I attempted to type up an applescript that utilized the "System Events" function with no avail, any ideas?

Hi
In iMovie'11 (version 9.0.x)
on top menu row - Apple/iMovie/File/Edit/Cut (Can vary dep. on language - in Swedish Apple/iMovie/Arkiv/Redigera/Klipp . . . )
down Cut menu - Slow playback/Raspid Playback/Re-play in Slow Motion and onvards
Here one can select the Pre-Set speeds
Are you familiar with getting 'inspector' to run?
No - but I guess that Double Click on clip/sequense or ctrl-Click on it might open it.
Yours Bengt W

Windows 8.1 - Windows Couldn't connect to the System Event Notification Service service

I have an issue that has been bothering me for a while on new 8.1 computers. Standard users are not able to log into the computer on the first try consistently. They receive the error message: Group Policy client service failed the sign-in access is
denied. They are stuck at the logon screen.
If an administrator logs in (local or domain), they can log in but get a black desktop with two error messages. The first is Location is Not available - C:\Windows\system32\config\systemprofile\Desktop is unavailable. The second error message is a popup
balloon. It states "Failed to Connect to a Windows service. Windows couldn't connect to the System Event Notification Service service."
When a standard user attempts to log in, event viewer records three warnings. They are listed in order from oldest to newest
The winlogon notification subscriber <Profiles> was unavailable to handle a critical notification event. -Logged 9:14:44
The winlogon notification subscriber <GPClient> failed a critical notification event. - Logged 9:14:44
The winlogon notification subscriber <Profiles> was unavailable to handle a notification event. - Logged 9:14:49
After a reboot, users still have the issue. I noticed that the user profile services and system event notification service are not running though their startup type is automatic. They start after a minute or two.

Hi Joseph__Moody,
Based on your description ,I assume it is a domain environment .First of all ,I would suggest you to try to update all the machine .
"I have an issue that has been bothering me for a while on new 8.1 computers"
Do you mean all the Windows 8.1 machine share the same symptom or just a specific one ?Did the machine work correctly before ?When did the issue start to occur ?Have you installed any third party software before ?Can we operate the machine when we login with
an administrator account ?
If the issue occurred with the specific machine :
"The first is Location is Not available - C:\Windows\system32\config\systemprofile\Desktop is unavailable."
Please try the following suggestions if we can operate the machine when we login with the administrator account :
Open Windows Explorer and navigate to: C:\Windows\system32\config\systemprofile and verify if it has the Desktop folder there.If the folder doesn`t exit, we can copy from C:\users\Default\Desktop location(This folder is hidden by default).
We also can try the following suggestions to have a troubleshoot :
1.Run "sfc /scannow"or "dism /online /cleanup-image /restorehealth" to check the health of the system files.
2.Perform a full scan with an antivirus software.
3."They start after a minute or two."
I suspect there is a third party service confilct here. Please perform a clean boot to verify whether there is a third party conflict here .
How to perform a clean boot in Windows
https://support.microsoft.com/en-us/kb/929135
If the issue occurred with multiple machines in the domian ,I would suggest you to check whether you have configured any logon scripts and logon group policy .We can remove the machine from the domain to have a troubleshoot .
If the issue occurred recently ,we can perform a system restore to recover the machine to a previous normal point.
Best regards
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].

The NLS operation failed because the registry key Control Panel\International\User Profile cannot be opened. Error code is 2. Error message: The system cannot find the file specified.

H,
Since upgrading Windows server 2008 R2 to Server 2012 Standard edition, we get this repetitious critical error in the event log:
Event 1001
Op Code NLS initialization
The NLS operation failed because the registry key Control Panel\International\User Profile cannot be opened. Error code is 2. Error message: The system cannot find the file specified.
We originally found that the regional date settings after changing them in regional settings (DD/MM/YYYY) and they did not inherit properly from the upgrade but they are ok now.
I've looked at HKCU\.Default\Control Panel\International and nothing looks obviously wrong. Country codes, time & date formats are correct.
How do we ascertain the cause of this error and the specific registry key that might be problematic?

Hi,
This could be caused by firewall rules or security softwares.
http://www.tomshardware.com/forum/242579-44-hkcu-control-panel-international-opened
And in addition, the fix is worth a try.
Nothing happens when you double-click "Region" in Control Panel
http://support.microsoft.com/kb/2958845
Please Note: Since the first web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Mysterious repeat log entries in System events log

I tried unsuccessfully to share internet connection with 2 iMacs without router(That doesn't matter). But after this, my iMac (24" 2.8 GHz) not networked or on internet now shows this repeated log entries every minute:
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
This message gets repeated every minute on System events log. Daily, Monthly maintenance was not done automatically earlier today on this iMac (usually it did without any problem) which was on all-night.
I checked with Disk Utility, repaired permissions. Although no problems in working, this continuous log writings disturbs me.
Thanks for any help & Happy New Year!
Best.

Thanks, V.K. Did that (was asked password). System log showed after restart:
com.apple.launchd[1] (com.apple.InternetSharing[152]): Exited with exit code: 1
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
com.apple.launchd[1] (com.apple.InternetSharing153): Exited with exit code: 1
com.apple.launchd[1] (com.apple.InternetSharing): Throttling respawn: Will start in 10 seconds
Then it started again the same way as above - with each aditional line each time as shown above. Thanks for sticking with me on this. Hope you will offer other suggestions.
Best.

ZLM Event Log and System Event Log

I just created my base ZLM server using version 7.3 and updated a test SLES 10 server to use the 7.3 agent. The SLES server was running sp1 and running the 64-bit OS. I was able to successfully upgrade the server to sp2 but I noticed I don't get any entries in the event or system event log areas. This is under the Devices > Servers > Server name I could tell if the bundles installed successfully or the device was refreshed. I don't get anything now. Any thoughts or suggestions on how to fix this?

Oops. Sorry. Here is the output from rug ping
ZMD 7.3.0, Copyright (C) 2009 Novell, Inc.
Started at 4/15/2009 2:13:14 PM (uptime: 1 days, 23 hours, 33 minutes)
RSS size: 141440
Network Connected: Yes
Running on Mono 1.2.6
OS Target: SUSE Linux Enterprise Server 10.2 (x86_64)
Module Name | Description
-------------------+-------------------------------------------------
Image Agent Module | Novell ZENWorks Imaging Agent
Policy Manager | Manages policy enforcement on the device
Settings | Handles Settings refresh events.
TessModule | Tess Module
Inventory | Software and Hardware inventory module for Linux
NetworkManager | NetworkManager support
Package Management | Package Management module for Linux
RMModule | Remote Management module
ZENworks Server | SOAP methods used by a ZENworks server
Scheduled Actions | Scheduled Actions module for ZMD
XML-RPC interface | Export ZMD public interfaces over XML-RPC
log level is set to info
log-level | info | Logging level (off, fatal, error, warn, info, debug)

Lots of Anyconnect Error Message in Windows Event Log

Hi Community.
We have lots of Anyconnect Error Messages in the Windows Event Log. Following two examples.
Can anyone tell me why these errors appears and how do I fix them ? I already installed the newest Anyconnect on my machine.
Thanks in advance and Kind Regards Patrick
Example 1
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97564</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::logProbeFailure File: .\NetEnvironment.cpp Line: 1432 Invoked Function: CHttpProbeAsync::SendProbe Return Code: -27066354 (0xFE63000E) Description: HTTP_PROBE_ASYNC_ERROR_CANNOT_CONNECT HTTP (host: 109.164.211.237)</Data>
</EventData>
Example 2
<Provider Name="acvpnagent" />
<EventID Qualifiers="9216">2</EventID>
<Keywords>0x80000000000000</Keywords>
<EventRecordID>97565</EventRecordID>
<Channel>Cisco AnyConnect Secure Mobility Client</Channel>
- <EventData>
<Data>Function: CNetEnvironment::TestAccessToSG File: .\NetEnvironment.cpp Line: 1385 Invoked Function: CNetEnvironment::analyzeHttpResponse Return Code: -28966899 (0xFE46000D) Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target</Data>
</EventData>

HI and welcome to Discussions,
in my personal opinion there is not much for you to worry about.
The 'Windows Tool for the elimination of malware' is nothing you miss as long as you have a decent Anti-Virus Software running.
The update for the IE 7 might be missing an installed IE 7, which can do by downloading it yourself from Microsofts webpage.
If you don't use the IE but something like Firefox or Opera or Safari, than don't bother with these update.
Stefan

Operations Manager Failed to Access the Windows Event Log and management server is showing warning state

Hi,
I am monitoring AD server from SCOM 2012 R2. My management server goes into waning state. When i run Health explorer then it come back in the healthy state but after some time it again goes into warning state. After seeing alert i found that a alert is coming
again and again i.e. Operations Manager Failed to Access the Windows Event Log.The description of alert is mention below
The Windows Event Log Provider is still unable to open the DhcpAdminEvents event log on computer 'nc2vws12ad5.corp.nathcorp.com'.
The Provider has been unable to open the DhcpAdminEvents event log for 64080 seconds.
Most recent error details: The RPC server is unavailable.
Please suggest me how to resolve this so that my management server will again come back in healthy state.
Thanks
Abhishek

Hi Abhishek,
As i mentioned earlier the Alert resolution says the same points.
Can you give details on the below ?
Is there really a log named "Dhcpadminevents" in the MS's Event viewer ?
Did you recently configure any new alert where you mentioned "Dhcpadminevents"
as a event log location ?
If yes then what is the target you selected for the rule / monitor there ?
Can you post the results for analysis ?
Gautam.75801

Error [0x80070003] The system cannot find the path specified

We have Windows 2012 Server hosting 2 VMs - Domain Controller & RDS. We have been doing Windows Server Backup incremental and have an ongoing issue with scheduled backups each night. The backup shows completed with warnings and generates
2 log files.
The first log files shows:
Backup of volume \\?\Volume{5d46f853-5db2-11e2-93e7-806e6f6e6963}\ succeeded.
Backup of volume C: succeeded.
Backup of volume F: succeeded.
Application backup
Writer Id: {66841CD4-6DED-4F4B-8F17-FD23F8DDC3DE}
Component: ACBCD71E-A8CA-4672-B951-52C1BE8444BE
Caption : Backup Using Child Partition Snapshot\FMLRDS1
Logical Path:
Writer Id: {66841CD4-6DED-4F4B-8F17-FD23F8DDC3DE}
Component: Host Component
Caption : Host Component
Logical Path:
The 2nd log file more often than not shows:
Backup of volume E: has failed. Backup failed as shadow copy on source volume got deleted. This might caused by high write activity on the volume. Please retry the backup. If the issue persists consider increasing shadow copy storage using 'VSSADMIN Resize
ShadowStorage' command.
Error in backup of E:\ during enumerate: Error [0x80070003] The system cannot find the path specified.
Application backup
Writer Id: {66841CD4-6DED-4F4B-8F17-FD23F8DDC3DE}
Component: 2B4A9541-C88B-442E-9A7A-6D8A27342C11
Caption : Backup Using Child Partition Snapshot\FMLDC1
Logical Path:
Error : 8078010D
Error Message : Enumeration of the files failed.
Detailed Error : 80070003
Detailed Error Message : (null)
We had been getting a successful backup once or twice a week which showed completed (with no mentioned of warnings) but now it regularly shows completed with warnings as noted above.
We did a manual full backup of the DC to a different external drive a few days ago and that completed without warnings and the backup shows: E: Completed 63.38 Full - VSS Copy Backup Successful, 8/27/13 3:35 PM - 4:43 PM. Data Transferred 63.38
On a side note, we can view the logs in the windows/logs/windowsserverbackup directory but when we attempt to view the details of a log file through the Local Backup Console for any log which shows completed with errors, we get a "MMC has detected an
error in the snapin and will unload and then it shows Object referenced not set to instance of an object." The manual backup noted above that was successful is able to be viewed through the Local Backup Console without this error.
Any idea as to why this is failing during the scheduled backups? This hosts a database that we need to have regular successful backups.

Hi,
First please follow the steps below to re-register dll files. Detailed information could be found here: http://support.microsoft.com/kb/940032:
1. Click Start, click Run, type cmd, and then click OK.
2. Type the following commands at a command prompt. Press ENTER after you type each command.
3. cd /d %windir%\system32
4. Net stop vss
5. Net stop swprv
6. regsvr32 ole32.dll
7. regsvr32 oleaut32.dll
8. regsvr32 vss_ps.dll
9. vssvc /register
10. regsvr32 /i swprv.dll
11. regsvr32 /i eventcls.dll
12. regsvr32 es.dll
13. regsvr32 stdprov.dll
14. regsvr32 vssui.dll
15. regsvr32 msxml.dll
16. regsvr32 msxml3.dll
17. regsvr32 msxml4.dll
Please let us know if any command failed to be performed with an error.
If issue still exists, have a try with the step it provided "VSSADMIN Resize ShadowStorage" to enlarge the shadow storage.
Also you could test to delete all old Shadow Copies by acccessing <Drive> Properties --> Shaodow Copies --> Delete Now. This will remove all your backup information so if it is not acceptable, just skip this step.
TechNet Subscriber Support in forum |If you have any feedback on our support, please contact [email protected]

Daily Errors in the System Event Log

Similar Messages

Maybe you are looking for