Event ID 55 in VM SBS 2011

Posted on 2012-08-31
Last Modified: 2015-09-12
I have a VM SBS 2011. Just out of the blue, I noticed there is an event ID 55 on 8/23. I've just been assigned this server. Just that one occurrence. I found a couple of answered question with recommended patch Another suggested is to dismount the volume, backup, reformat, re-image the HDD and re-mount.

Does the patch apply to my SBS 2011 VM?
What causes an event ID 55? Could it be a just a minor glitch since there is only one occurrence?
Since this error occurred in a VM environment, should I try the dismount/reformat volume route?

Question by:danielsie

    Author Comment

    CHKDSK result

    Checking file system on E:
    The type of the file system is NTFS.
    Volume label is Storage.

    A disk check has been scheduled.
    Windows will now check the disk.                        

    CHKDSK is verifying files (stage 1 of 5)...
      40448 file records processed.                                          File verification completed.
      9 large file records processed.                                      0 bad file records processed.                                        0 EA records processed.                                              0 reparse records processed.                                       CHKDSK is verifying indexes (stage 2 of 5)...
      44460 index entries processed.                                         Index verification completed.
      0 unindexed files scanned.                                           0 unindexed files recovered.                                       CHKDSK is verifying security descriptors (stage 3 of 5)...
      40448 file SDs/SIDs processed.                                         Cleaning up 63 unused index entries from index $SII of file 0x9.
    Cleaning up 63 unused index entries from index $SDH of file 0x9.
    Cleaning up 63 unused security descriptors.
    Security descriptor verification completed.
      2007 data files processed.                                            CHKDSK is verifying Usn Journal...
      36478744 USN bytes processed.                                             Usn Journal verification completed.
    CHKDSK is verifying file data (stage 4 of 5)...
      40432 files processed.                                                 File data verification completed.
    CHKDSK is verifying free space (stage 5 of 5)...
      23959068 free clusters processed.                                         Free space verification is complete.
    Windows has checked the file system and found no problems.

     209712127 KB total disk space.
     113715328 KB in 38291 files.
         11852 KB in 2008 indexes.
             0 KB in bad sectors.
        148671 KB in use by the system.
         65536 KB occupied by the log file.
      95836276 KB available on disk.

          4096 bytes in each allocation unit.
      52428031 total allocation units on disk.
      23959069 allocation units available on disk.

    Internal Info:
    00 9e 00 00 77 9d 00 00 73 9d 00 00 00 00 00 00  ....w...s.......
    b7 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    Event ID 55

    Log Name:      System
    Source:        Ntfs
    Date:          8/23/2012 11:55:01 AM
    Event ID:      55
    Task Category: (2)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      ---computer---
    The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume Storage.
    Event Xml:
    <Event xmlns="">
        <Provider Name="Ntfs" />
        <EventID Qualifiers="49156">55</EventID>
        <TimeCreated SystemTime="2012-08-23T18:55:01.362932100Z" />
        <Security />


    + System

      - Provider

       [ Name]  Ntfs
      - EventID 55

       [ Qualifiers]  49156
       Level 2
       Task 2
       Keywords 0x80000000000000
      - TimeCreated

       [ SystemTime]  2012-08-23T18:55:01.362932100Z
       EventRecordID 652720
       Channel System
       Computer ---computer---

    + EventData



    Binary data:

    In Words

    0000: 000C0000 00380002 00000002 C0040037
    0008: 00000000 C0000102 00000000 00000000
    0010: 00000000 00000000 001700BB 00000023
    0018: 00010000    

    In Bytes

    0000: 00 00 0C 00 02 00 38 00   ......8.
    0008: 02 00 00 00 37 00 04 C0   ....7..À
    0010: 00 00 00 00 02 01 00 C0   .......À
    0018: 00 00 00 00 00 00 00 00   ........
    0020: 00 00 00 00 00 00 00 00   ........
    0028: BB 00 17 00 23 00 00 00   »...#...
    0030: 00 00 01 00               ....

    LVL 52

    Expert Comment

    Event id 55 file system structure on the disk is corrupt within a Virtual Machine

    Event ID 55: file system on the volume might be corrupt

    Event ID from 1 to 999

    - Rancy
    LVL 35

    Expert Comment

    by:Cris Hanna
    The patch only applies to server 2003 so don't run it.  any other VM's running on this box?

    Author Comment

    Thanks I will check out those links.

    There was a sql server image. Just took it down 2 days ago.

    Accepted Solution

    I checked the Hyper-v logs and couldn't find anything pertaining to the Event ID 55 error. I checked the VM log file and found a few more event ID 55, attached. Judging from the time stamps, it looks like someone is trying to write to the disk and errorred out.

    I think I would have to dismount the volume, backup, format, restore, remount.
    LVL 6

    Expert Comment

    I had this exact issue reported to me last week, on an SBS 2011 VM that has been blue-screening since creation. I just ran a chkdsk on the affected SBS installation and all seems well since its latest reboot (fingers crossed). I'd give that a whirl as your first port of call.
    LVL 6

    Expert Comment

    Ah ignore me - if your chkdsk results are from the OS volume. I see from your screengrab it was run on E vol.

    Author Closing Comment

    my own suggestion worked

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
    I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
    This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now