SupermanTB
asked on
Windows Server 2008 randomly freezing, VSS event ID 7036
I've got a Windows Server 2008 machine that is being used as a terminal server. Roughly every two or three weeks, the server freezes up and no one can access it. I restart the server and everything is fine until the next time it happens.
When I look at the Event Viewer, the last event before the freeze is Event ID 7036 saying The Application Experience service has entered the stopped state. I also notice an unusual amount of VSS Event ID 7036 indicating that VSS is starting and stopping. I don't have any backups set on this server and nothing I am aware of that would run VSS. It's just a terminal server and does not contain any data needing to be backed up.
I have tried enabling and then disabling VSS for the C: drive, which is the one and only partition for this server. I have manually stopped the VSS services only to have it started again somehow. When I look at all the VSS writers they are all in the stable state.
This problem appears to be very similar to this PAQ
https://www.experts-exchange.com/questions/27634720/VSS-causing-random-lockups-Server-2008.html?anchorAnswerId=39089244#a39089244
Any ideas?
When I look at the Event Viewer, the last event before the freeze is Event ID 7036 saying The Application Experience service has entered the stopped state. I also notice an unusual amount of VSS Event ID 7036 indicating that VSS is starting and stopping. I don't have any backups set on this server and nothing I am aware of that would run VSS. It's just a terminal server and does not contain any data needing to be backed up.
I have tried enabling and then disabling VSS for the C: drive, which is the one and only partition for this server. I have manually stopped the VSS services only to have it started again somehow. When I look at all the VSS writers they are all in the stable state.
This problem appears to be very similar to this PAQ
https://www.experts-exchange.com/questions/27634720/VSS-causing-random-lockups-Server-2008.html?anchorAnswerId=39089244#a39089244
Any ideas?
ASKER
I had previously stopped the service, which didn't help, but I didn't disable it. I just implemented that. I'll let you know.
Disabling will prevent it to start again .... if not dont worry we will disable by Registry and then start the machine for it to take affect ..... so will await your feedback
- Rancy
- Rancy
ASKER
After disabling VSS, the events have disappeared from the Event Viewer system section, however, under application, I now have a VSS error occurring very frequently
There are two VSS errors, Event ID 8193 & 13.
Log Name: Application
Source: VSS
Date: 4/18/2013 11:12:56 AM
Event ID: 13
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: term-server.domain.local
Description:
Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-d
]
Operation:
Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">13</EventID
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-04-18T15:
<EventRecordID>222741</Eve
<Channel>Application</Chan
<Computer>term-server.doma
<Security />
</System>
<EventData>
<Data>{e579ab5f-1cc4-44b4-
<Data>IVssCoordinatorEx2</
<Data>0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
</Data>
<Data>
Operation:
Instantiating VSS server</Data>
<Binary>2D20436F64653A2042
</EventData>
</Event>
Second Error
Log Name: Application
Source: VSS
Date: 4/18/2013 11:12:56 AM
Event ID: 8193
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: term-server.domain.local
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
.
Operation:
Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">8193</Event
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-04-18T15:
<EventRecordID>222742</Eve
<Channel>Application</Chan
<Computer>term-server.doma
<Security />
</System>
<EventData>
<Data>CoCreateInstance</Da
<Data>0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
</Data>
<Data>
Operation:
Instantiating VSS server</Data>
<Binary>2D20436F64653A2042
</EventData>
</Event>
There are two VSS errors, Event ID 8193 & 13.
Log Name: Application
Source: VSS
Date: 4/18/2013 11:12:56 AM
Event ID: 13
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: term-server.domain.local
Description:
Volume Shadow Copy Service information: The COM Server with CLSID {e579ab5f-1cc4-44b4-bed9-d
]
Operation:
Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">13</EventID
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-04-18T15:
<EventRecordID>222741</Eve
<Channel>Application</Chan
<Computer>term-server.doma
<Security />
</System>
<EventData>
<Data>{e579ab5f-1cc4-44b4-
<Data>IVssCoordinatorEx2</
<Data>0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
</Data>
<Data>
Operation:
Instantiating VSS server</Data>
<Binary>2D20436F64653A2042
</EventData>
</Event>
Second Error
Log Name: Application
Source: VSS
Date: 4/18/2013 11:12:56 AM
Event ID: 8193
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: term-server.domain.local
Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
.
Operation:
Instantiating VSS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">8193</Event
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2013-04-18T15:
<EventRecordID>222742</Eve
<Channel>Application</Chan
<Computer>term-server.doma
<Security />
</System>
<EventData>
<Data>CoCreateInstance</Da
<Data>0x80070422, The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
</Data>
<Data>
Operation:
Instantiating VSS server</Data>
<Binary>2D20436F64653A2042
</EventData>
</Event>
This will come as VSS is now disabled on the server :(
As per initial article which you shared it seem the issue was due to some 3rd party software provoking the VSS to try and start and perform some action which failed and was resolved by fixing that 3rd party software ...... so what all softwares do we have ?
- Rancy
As per initial article which you shared it seem the issue was due to some 3rd party software provoking the VSS to try and start and perform some action which failed and was resolved by fixing that 3rd party software ...... so what all softwares do we have ?
- Rancy
ASKER
There is no 3rd party software on this server that I can imagine using VSS.
It does have Carbonite, Microsoft Security Essentials, Malwarebytes. Those are the only ones that do any sort of scanning or backup.
It does have Carbonite, Microsoft Security Essentials, Malwarebytes. Those are the only ones that do any sort of scanning or backup.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
That process allowed me to identify Carbonite as the culprit for the VSS error. As soon as I disabled all Carbonite services from running on start up, the errors stopped. I'm not sure what Carbonite is doing enabling VSS. That shouldn't be happening. In any case, Carbonite isn't really necessary on this server, so I just uninstalled it.
I'll have to wait and see if this is indeed the cause of the server randomly freezing. It can take a week or two, so I'll check back in a little later.
Thanks for the assistance in identifying the VSS issue. I hope this is the cause of the random freezing.
I'll have to wait and see if this is indeed the cause of the server randomly freezing. It can take a week or two, so I'll check back in a little later.
Thanks for the assistance in identifying the VSS issue. I hope this is the cause of the random freezing.
- Rancy