I have a large 5 Terabyte Drive formatted GPT that I use as a data drive. Since this is a large amount of data to lose to a drive failure, I have an identical 5 Terabyte drive that I clone to once a day. The clones are always successful, however I always see the below error in the VSS log. The volume name always changes for each clone and does not appear to be on my system anywhere. Is there anything I need to do to resolve this or can it safely be ignored. Thanks.

Date      8/2/2015 10:20:28 PM 
Type      Warning
Event     12348 
Source    VSS

Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{3188c5ca-d23d-4766-bbd8-bb345cd8d036}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly.  Check security on the volume, and try the operation again.

Operation:
   Automatically choosing a diff-area volume
   Processing EndPrepareSnapshots

Context:
   Execution Context: System Provider

Hi hemm,

If your clones complete without any problem and you can verify them this error message is nothing to worry about.

I have done a quick search and I have found a Microsoft article that may help you resolve these errors in your event log

https://technet.microsoft.com/en-us/library/dd364979(v=ws.10).aspx

Kind Regards

Gosha

See our reviews on

I am also receiving this message (Volume Shadow Copy Service warning: VSS was denied access to the root of volume \\?\Volume{2b6b4f48-e67d-11e3-a5b7-14dae9245986}\. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly. Check security on the volume, and try the operation again.) each time I run an incremental backup. I am on Windows 7 Home Edition (service pack 1) and using Macrium Reflect level 6. I tried doing the following based on the Microsoft Technet article:

• Used the elevated Command Prompt to run as administrator.
• Typed in the following after the prompt: icacls c:\ /grant system:f (no space between the two slash marks)
• When I do this I get the following error msg: Invalid parameter "system:f"

@acjc1125

Thanks for posting. Please try this command from an elevated command prompt:

icacls \\?\Volume{2b6b4f48-e67d-11e3-a5b7-14dae9245986}\ /grant system:f

You can use copy and paste to use the above line. This uses the exact volume GUID path that's shown in the error. 

See here for info on running an elevated command prompt:

http://knowledgebase.macrium.com/display/KNOW/Running+an+elevated+command+prompt

Kind Regards

Nick

Macrium Support

See our reviews on

Thanks for the quick reply Nick.

 I tried using the command you suggested and it came back saying "Access is Denied" ... "Successfully processed of files; Failed processing 1 files". I doubled check to make sure I was running as administrator and it top of the command prompt box it states :Administrator: Command Prompt

Hi 

The volume: \\?\Volume{2b6b4f48-e67d-11e3-a5b7-14dae9245986}\  is not your drive C:. This is likely to be a reserved system or recovery partition that you cannot access. You possibly have a drive letter unnecessarily assigned to this volume. Please check this KB article on removing drive letters from partitions. Although this article relates to the MSR partition the steps can be used for any partition:

http://knowledgebase.macrium.com/display/KNOW/Removing+a+drive+letter+from+the+MS+System+Reserved+partition

Please note that the integrity of your images is not affected by this error. You can safely ignore it. 

Kind Regards

Nick

Macrium Support

See our reviews on

Once again thank you. I think I feel safer just ignoring the error given the integrity of the images are not affected by it.

+x

 

acjc1125 - 25 September 2015 4:05 PM

Once again thank you. I think I feel safer just ignoring the error given the integrity of the images are not affected by it.

I followed this to this point and agreed that I should ignore it as well, especially since the warning message re deleting drive letters was kinda scary.  But when I look at the log file for the system backup it reads: "Started 4/2/2018 1:21 PM v7.1.2917" with nothing else.  I am quite new, so please help.  Thanks