VSS Issue, error 8193, vssadmin writers list blocked by group policy

Posted on 2015-02-06
Last Modified: 2015-02-12
I am having an issue with VSS.

I cannot run vssadmin from administrator command prompt. I get "blocked by group policy"

I am also getting the following error in event viewer:

Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...).  hr = 0x80070005, Access is denied.

   Initializing Writer

   Writer Class Id: {5382579c-98df-47a7-ac6c-98a6d7106e09}
   Writer Name: TermServLicensing
   Writer Instance ID: {73f2ffd0-644a-4f64-8146-87e64596afd6}
Question by:zwig2002
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2

Accepted Solution

roycbene earned 500 total points
ID: 40594696
Are you running AppLocker or something like Cryptoprevent? Have you checked permissions to the mentioned registry key? Do you have a .exe restriction policy in place?

Author Comment

ID: 40594706
It looks like cryptoprevent was run on the server. I am trying to undo the changes.

Expert Comment

ID: 40594709
That is the most common cause of this, in my experience. :)

Author Comment

ID: 40594717
Do you have a solution for undoing what cryptoprevent did?

Expert Comment

ID: 40594749
Add the .exe to the whitelist.

This should get you what you need. :)

Let me know if there is anything else I can do.

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Unable to ping a server in the same subnet 10 126
Robocopy parameters. 6 42
Remote start and stop of service 3 40
Editing a .bat file to point to a different directory 5 41
I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question