Event ID 8193

Hi Experts,

On one of my servers, Windows 2008 R2 + SP1 x64, there is an eror logged in the application's log from time to time.

Log Name:      Application
Source:        VSS
Date:          18-8-2012 20:02:11
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ILIHMGMT01.mydomain.local
Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-1194966028-1128717823-2729922094-1642.bak).  hr = 0x80070539, The security ID structure is invalid.

Everything looks fine using VSSadmin. I searchedthe registy for S-1-5-21-1194966028-1128717823-2729922094-1642.bak. I found it and deleted it. The error still comes back in the log.

The error always occurs between 8:00pm and 2:00am, and not every day.

Any suggestions on how to fix this? Or could I just ignore the error?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Try to delete all the .bak keys from the HKey_Local_Machine\Software\Microsoft\Windows NT\CurrentVersion\ProfileList in registry.
Please backup the registry key first.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:


    There were unresolvable SIDs in the 'Administrators' group on the SCVMM Source machine. These were deleted.
    Followed steps in 'KB947242 - A temporary profile is loaded after you log on to a Windows Vista-based system' to resolve issue where customer's profile was deleted from the system (in this case the profile was simply corrupt).

        Open regedit and locate 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList'
        Under the ProfileList subkey, delete any subkey that is named SID.bak.

Note SID is a placeholder for the security identifier (SID) of the user account that is experiencing the problem. The SID.bak subkey should contain a ProfileImagePath registry entry that points to the original profile folder of the user account that is experiencing the problem.

- Rancy
SvenIAAuthor Commented:
Thanks, that solved it for me!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.