Buona Giornata a tutti Sorriso

In questo post vedremo come risolvere gli eventi id 8193 e 20 durante l’esecuzione di un backup del system state

Event Type: Error
Event Source: VSS
Event ID: 20

Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy Service is not registered. This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider. The error returned from CoCreateInstance on class with CLSID {faf53cc4-bd73-4e36-83f1-2b23f46e513e} and Name VSSEvent is [0x80040154].

Event Type: Error
Event Source: VSS
Event ID: 8193

Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040154.

The problem occurs also he tried to run the ntbackup from the server where occurs the issue, i tried to use ntbackup

 

Come primo step procederemo alla registrazione delle seguenti Dll presenti in c:\windows\system32:

 
regsvr32 ole32.dll

regsvr32 vss_ps.dll

Vssvc /Register

regsvr32 /i swprv.dll

regsvr32 /i eventcls.dll

regsvr32 es.dll

regsvr32 stdprov.dll

regsvr32 vssui.dll

regsvr32 msxml.dll

regsvr32 msxml3.dll

regsvr32 msxml4.dll

Reboot del server


Esporta e cancella la seguente chiave di registro:

"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\"

Riavvia il servizio COM+ Event System

Esegui un backup di test, se il problema persiste esporta la seguente chiave di registro:

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{BB07BACD-CD56-4e63-A8FF-CBF0355FB9F4}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}

Verifica che l’ownerSID sia settato a “S-1-5-18” in tutte le classID

 

"Active"=dword:00000001

"EventClassID"="{BB07BACD-CD56-4e63-A8FF-CBF0355FB9F4}"

"EventClassName"="EventSystem.EventObjectChange2"

"OwnerSID"="S-1-5-18"

"FiringInterfaceIID"="{7701A9C3-BD68-438f-83E0-67BF4F53A422}"

"Description"="Subscribe to this event class to receive object change notifications."

"TypeLib"="c:\\windows\\system32\\es.dll"

"PublisherID"="{BB07BACD-CD56-4e63-A8FF-CBF0355FB9F4}"

"EventClassPartitionID"="{00000000-0000-0000-0000-000000000000}"

"EventClassApplicationID"="{00000000-0000-0000-0000-000000000000}"

"AllowInprocActivation"=dword:00000000

"FireInParallel"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{D0565000-9DF4-11D1-A281-00C04FCA0AA7}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}]

"Active"=dword:00000001

"EventClassID"="{D0565000-9DF4-11D1-A281-00C04FCA0AA7}"

"EventClassName"="EventSystem.EventObjectChange"

"OwnerSID"="S-1-5-18"

"FiringInterfaceIID"="{F4A07D70-2E25-11D1-9964-00C04FBBB345}"

"Description"="Subscribe to this event class to receive object change notifications."

"TypeLib"="c:\\windows\\system32\\es.dll"

"PublisherID"="{D0564C30-9DF4-11D1-A281-00C04FCA0AA7}"

"EventClassPartitionID"="{00000000-0000-0000-0000-000000000000}"

"EventClassApplicationID"="{00000000-0000-0000-0000-000000000000}"

"AllowInprocActivation"=dword:00000000

"FireInParallel"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{ECABB0C3-7F19-11D2-978E-0000F8757E2A}-{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}-{00000000-0000-0000-0000-000000000000}]

"Active"=dword:00000001

"EventClassID"="{ECABB0C3-7F19-11D2-978E-0000F8757E2A}"

"EventClassName"="ComEvents.ComServiceEvents"

"OwnerSID"="S-1-5-18"

"TypeLib"="COMSVCS.DLL"

"AllowInprocActivation"=dword:ffffffff

"FireInParallel"=dword:00000000

"EventClassPartitionID"="{41E90F3E-56C1-4633-81C3-6E8BAC8BDD70}"

"EventClassApplicationID"="{00000000-0000-0000-0000-000000000000}"

"AllowPerUserInprocActivation"=dword:00000000

"AllowPerUserActivateAsActivator"=dword:00000000

"AllowPerUserMoniker"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{ECABB0C6-7F19-11D2-978E-0000F8757E2A}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}]

"Active"=dword:00000001

"EventClassID"="{ECABB0C6-7F19-11D2-978E-0000F8757E2A}"

"EventClassName"="ComEvents.ComSystemAppEventData"

"OwnerSID"="S-1-5-18"

"TypeLib"="COMSVCS.DLL"

"AllowInprocActivation"=dword:ffffffff

"FireInParallel"=dword:ffffffff

"EventClassPartitionID"="{00000000-0000-0000-0000-000000000000}"

"EventClassApplicationID"="{00000000-0000-0000-0000-000000000000}"

"AllowPerUserInprocActivation"=dword:00000000

"AllowPerUserActivateAsActivator"=dword:00000000

"AllowPerUserMoniker"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\EventClasses\{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}]

"Active"=dword:00000001

"EventClassID"="{FAF53CC4-BD73-4E36-83F1-2B23F46E513E}"

"EventClassName"="VssEvent"

"OwnerSID"="S-1-5-18"

"TypeLib"="C:\\WINDOWS\\system32\\eventcls.dll"

"AllowInprocActivation"=dword:ffffffff

"FireInParallel"=dword:00000000

"EventClassPartitionID"="{00000000-0000-0000-0000-000000000000}"

"EventClassApplicationID"="{00000000-0000-0000-0000-000000000000}"

"AllowPerUserInprocActivation"=dword:00000000

"AllowPerUserActivateAsActivator"=dword:00000000

"AllowPerUserMoniker"=dword:00000000

 

Esegui un backup di test, se il problema si dovesse ripresentare esporta e cancella la chiave di registro "Subscriptions"

HKLM\Software\Microsoft\EventSystem\{26c409cc-ae86-11d1-b616-00805fc79216}\Subscriptions

Delete the "Subscriptions" key

Restart/Start the following services

"COM+ event system"

"COM+ System Application"

"Microsoft Software Shadow Copy Provider"

"Volume Shadow Copy"

 
Riavvia il server ed esegui un backup test

Grazie a tutti del vostro prezioso tempo Sorriso

Gianluca Maestri
Sr Support Engineer
Microsoft Enterprise Platform Support