Event ID 12348 — Volume Shadow Copy Service Operations

Applies To: Windows Server 2008 R2

The Volume Shadow Copy Service (VSS) provides the ability to create a point in time image (shadow copy) of one or more volumes that can be used to perform backups. The service is also used during restores of applications.

Event Details

Product: Windows Operating System
ID: 12348
Source: VSS
Version: 6.1
Symbolic Name: VSS_WARNING_ACCESS_DENIED_VOLROOT
Message: Volume Shadow Copy Service warning: VSS was denied access to the root of volume %1. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly. Check security on the volume, and try the operation again. %2

Resolve

Ensure that VSS has access to the volume root directory

If the Volume Shadow Copy Service (VSS) does not have access to the volume root directory, shadow copy creation on the volume will fail.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To ensure that VSS has access to the volume root directory:

  1. Open an elevated Command Prompt window. Click Start, click All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type icacls <VolumeRootPath> /grant system:f at the command prompt, where <VolumeRootPath> is the path to the volume root directory, for example, D:\.

For more information about the **icacls **command, see https://go.microsoft.com/fwlink/?LinkId=104873.

Verify

To verify that the Volume Shadow Copy Service (VSS) is operating correctly, retry the previous VSS operation.

Volume Shadow Copy Service Operations

File Services