Hello, I have having major troubles with this. After installing BE2012 SP1 and going through all the pain of this new not very good "upgrade" i still can not get the VSS Snapshot to work.
This is the Host server, was working before upgrade from 2012 R3. Server 2003 R2
I have a case open wiht support, but thats been 2 days without even a contact responce, anyone got some suggestions on how to fix this error or had the same problem?
Hi,
Open a command prompt and type: vssadmin list writers.
If any of the VSS writers are in failed/retrying (ie. not Running), you have 1 of 2 choices:
1. Restart the server in question.
2. Reregister the VSS *.dlls as per the TN below:
http://www.symantec.com/business/support/index?page=content&id=TECH70486
I take it you installed SP1a for BE 2012? If not, remove the SP you have and install this 1...
Thanks!
Hello Craig.
I did check the vss writers and they were all fine.
However, I rebooted the server anyway and then (after another failed job) re-registered the vss writers, and then (after another failed job) rebooted again.
This did not fix the issue.
Installed SP1a rebooted re-ran backup. Same fault.
OK...so it's Server 2003. Microsoft have released a couple of VSS ROllup Patches...best to Google that, download the latest update and install this on the server in question. Reboot and check again.
Thanks!
Yep, Also done that and rebooted. Same Fault.
NOTE: was working fine on BE2010 R3
Hi. When able, please collect the following diagnostic information using the native Windows command line tools for review. I understand that this is a lot of information to collect but it is essential. Thank you for your patience.
(1) C:\>VSSADMIN LIST VOLUMES
(2) C:\>VSSADMIN LIST WRITERS
(3) C:\>VSSADMIN LIST PROVIDERS
(4) C:\>VSSADMIN LIST SHADOWS
(5) C:\>VSSADMIN LIST SHADOWSTORAGE
(6) C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Services\VSS" /s
(7) C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore" /s
(8) C:\>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP" /s
(9) C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Services\MountMgr" /s
(10) C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Services\TrueCrypt" /s
(11) C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\control\hivelist" /s
(12) C:\>VER
(13) C:\>BCDEDIT /enum active
(14) C:\>MOUNTVOL
(15) C:\>DISKPART
(15)(a) DISKPART> LIST DISK
(15)(b) DISKPART> LIST VOLUME
(15)(c) DISKPART> LIST VDISK
(16) Question: Physical Machine or Virtual Machine?
1 & 2:
C:\>vssadmin list volumes
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Volume path: C:\
Volume name: \\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
Volume path: E:\
Volume name: \\?\Volume{5dbacac5-7d16-11de-a65f-0024e836a800}\
Volume path: K:\
Volume name: \\?\Volume{5dbacacf-7d16-11de-a65f-0024e836a800}\
C:\>vssadmin list writers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Writer name: 'System Writer'
Writer Id: {e8132975-6f93-4464-a53e-1050253ae220}
Writer Instance Id: {a37b0a19-aad7-4149-81cf-efeb2800cdd2}
State: [1] Stable
Last error: No error
Writer name: 'SqlServerWriter'
Writer Id: {a65faa63-5ea8-4ebc-9dbd-a0c4db26912a}
Writer Instance Id: {51b41fe4-2749-4c3a-92eb-2d65edad99d1}
State: [1] Stable
Last error: No error
Writer name: 'MSDEWriter'
Writer Id: {f8544ac1-0611-4fa5-b04b-f7ee00b03277}
Writer Instance Id: {3c57acb5-5875-45dd-93f9-ff55190c590e}
State: [1] Stable
Last error: No error
Writer name: 'Registry Writer'
Writer Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
Writer Instance Id: {fd95e242-0178-4e34-9614-489bf9b046db}
State: [1] Stable
Last error: No error
Writer name: 'Microsoft Exchange Writer'
Writer Id: {76fe1ac4-15f7-4bcd-987e-8e1acb462fb7}
Writer Instance Id: {056f6eb5-6b74-4c60-a571-669b1c65c7d4}
State: [1] Stable
Last error: No error
Writer name: 'IIS Metabase Writer'
Writer Id: {59b1f0cf-90ef-465f-9609-6ca8b2938366}
Writer Instance Id: {5afd04c2-eb74-47e0-b16b-3c65b63a8968}
State: [1] Stable
Last error: No error
Writer name: 'Event Log Writer'
Writer Id: {eee8c692-67ed-4250-8d86-390603070d00}
Writer Instance Id: {52a482d0-b8c7-40ce-99c3-0b28016722ae}
State: [1] Stable
Last error: No error
Writer name: 'WMI Writer'
Writer Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0}
Writer Instance Id: {3f14fa53-454b-4d98-9f08-deca174241bf}
State: [1] Stable
Last error: No error
Writer name: 'COM+ REGDB Writer'
Writer Id: {542da469-d3e1-473c-9f4f-7847f01fc64f}
Writer Instance Id: {9b128c59-8c61-410a-9fc8-4b0ec4aacfcf}
State: [1] Stable
Last error: No error
3 & 4:
C:\>vssadmin list providers
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Provider name: 'Microsoft Software Shadow Copy provider 1.0'
Provider type: System
Provider Id: {b5946137-7b9f-4925-af80-51abd60b20d5}
Version: 1.0.0.7
Provider name: 'DELL EqualLogic VSS HW Provider'
Provider type: Hardware
Provider Id: {d4689bdf-7b60-4f6e-9afb-2d13c01b12ea}
Version: 3.2.0.4726
C:\>vssadmin list shadows
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Contents of shadow copy set ID: {32b52d90-e0ce-4f41-889c-d29c628f6c6c}
Contained 1 shadow copies at creation time: 6/12/2012 12:00:04 PM
Shadow Copy ID: {a4567536-0267-4955-a6c6-72b55807de77}
Original Volume: (C:)\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1
Originating Machine: SERVER.DOMAIN.COM
Service Machine: SERVER.DOMAIN.COM
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessible
Attributes: Persistent, Client-accessible, No auto release, No writers,
Differential
Contents of shadow copy set ID: {280290b8-cad8-44c6-9508-275b067e630f}
Contained 1 shadow copies at creation time: 6/13/2012 12:00:04 PM
Shadow Copy ID: {18cd79a6-461b-4392-ad8f-3f42c43e2dda}
Original Volume: (C:)\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6
Originating Machine: SERVER.DOMAIN.COM
Service Machine: SERVER.DOMAIN.COM
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessible
Attributes: Persistent, Client-accessible, No auto release, No writers,
Differential
Contents of shadow copy set ID: {a3797ed1-7691-4971-8373-03888bb79b58}
Contained 1 shadow copies at creation time: 6/14/2012 12:00:07 PM
Shadow Copy ID: {bf4d6496-ad66-4a66-97d0-1686fbfc9c92}
Original Volume: (C:)\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy10
Originating Machine: SERVER.DOMAIN.COM
Service Machine: SERVER.DOMAIN.COM
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessible
Attributes: Persistent, Client-accessible, No auto release, No writers,
Differential
Contents of shadow copy set ID: {d8ddcb02-910f-4766-b172-8118c95f9332}
Contained 1 shadow copies at creation time: 6/15/2012 12:00:06 PM
Shadow Copy ID: {c1ebb7f0-3804-469c-86bc-ee0c2ad97cb7}
Original Volume: (C:)\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy38
Originating Machine: SERVER.DOMAIN.COM
Service Machine: SERVER.DOMAIN.COM
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessible
Attributes: Persistent, Client-accessible, No auto release, No writers,
Differential
Contents of shadow copy set ID: {19be5642-c2df-4636-8b22-f363dde14b23}
Contained 1 shadow copies at creation time: 6/18/2012 12:00:01 PM
Shadow Copy ID: {7be403b5-a4b3-4171-8608-44c99e7b878b}
Original Volume: (C:)\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy43
Originating Machine: SERVER.DOMAIN.COM
Service Machine: SERVER.DOMAIN.COM
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessible
Attributes: Persistent, Client-accessible, No auto release, No writers,
Differential
Contents of shadow copy set ID: {f5d9728d-0d57-4be6-b3bf-26f557748467}
Contained 1 shadow copies at creation time: 6/15/2012 12:00:01 PM
Shadow Copy ID: {7d32810c-4351-4ad5-b85f-bedfce23f4bd}
Original Volume: (E:)\\?\Volume{5dbacac5-7d16-11de-a65f-0024e836a800}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy37
Originating Machine: SERVER.DOMAIN.COM
Service Machine: SERVER.DOMAIN.COM
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessible
Attributes: Persistent, Client-accessible, No auto release, No writers,
Differential
Contents of shadow copy set ID: {73c251f4-ca9b-49ae-9766-88bd7c05f144}
Contained 1 shadow copies at creation time: 6/18/2012 12:00:03 PM
Shadow Copy ID: {751fa31b-b64b-4c76-821b-f71a2eb8a1f5}
Original Volume: (E:)\\?\Volume{5dbacac5-7d16-11de-a65f-0024e836a800}\
Shadow Copy Volume: \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy44
Originating Machine: SERVER.DOMAIN.COM
Service Machine: SERVER.DOMAIN.COM
Provider: 'Microsoft Software Shadow Copy provider 1.0'
Type: ClientAccessible
Attributes: Persistent, Client-accessible, No auto release, No writers,
Differential
C:\>
Tests 5,6, 7 and 8
C:\>VSSADMIN LIST SHADOWSTORAGE
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001 Microsoft Corp.
Shadow Copy Storage association
For volume: (C:)\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
Shadow Copy Storage volume: (C:)\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e69
63}\
Used Shadow Copy Storage space: 9.299 GB
Allocated Shadow Copy Storage space: 9.517 GB
Maximum Shadow Copy Storage space: UNBOUNDED
Shadow Copy Storage association
For volume: (E:)\\?\Volume{5dbacac5-7d16-11de-a65f-0024e836a800}\
Shadow Copy Storage volume: (E:)\\?\Volume{5dbacac5-7d16-11de-a65f-0024e836a8
00}\
Used Shadow Copy Storage space: 15.873 GB
Allocated Shadow Copy Storage space: 16.086 GB
Maximum Shadow Copy Storage space: 20 GB
C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Services\VSS" /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS
DependOnService REG_MULTI_SZ RPCSS
Description REG_SZ Manages and implements Volume Shadow Copies used fo
r backup and other purposes. If this service is stopped, shadow copies will be u
navailable for backup and the backup may fail. If this service is disabled, any
services that explicitly depend on it will fail to start.
DisplayName REG_SZ Volume Shadow Copy
ErrorControl REG_DWORD 0x1
ImagePath REG_SZ C:\WINDOWS\System32\vssvc.exe
ObjectName REG_SZ LocalSystem
Start REG_DWORD 0x3
Type REG_DWORD 0x10
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\{b5946137-7b9
f-4925-af80-51abd60b20d5}
(Default) REG_SZ Microsoft Software Shadow Copy provider 1.0
Type REG_DWORD 0x1
Version REG_SZ 1.0.0.7
VersionId REG_SZ {00000001-0000-0000-0007-000000000001}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\{b5946137-7b9
f-4925-af80-51abd60b20d5}\CLSID
(Default) REG_SZ {65EE1DBA-8FF4-4a58-AC1C-3470EE2F376A}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\{d4689bdf-7b6
0-4f6e-9afb-2d13c01b12ea}
(Default) REG_SZ DELL EqualLogic VSS HW Provider
Type REG_DWORD 0x3
Version REG_SZ 3.2.0.4726
VersionId REG_SZ {35fc25d1-28cb-4c3c-b6bb-4aef24ebd843}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Providers\{d4689bdf-7b6
0-4f6e-9afb-2d13c01b12ea}\CLSID
(Default) REG_SZ {5ea28b12-3213-4bee-8cdd-b6f935260aba}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
PagePoolTrimmingLevel REG_DWORD 0x1
TornComponentsBlockRevert REG_DWORD 0x1
MSDEVersionChecking REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings\PagePoolStats
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings\PagePoolStats\
Volume{5dbacac5-7d16-11de-a65f-0024e836a800}
OldestGeneration REG_DWORD 0x0
0 REG_DWORD 0x2a
1 REG_DWORD 0x104
2 REG_DWORD 0xc8
3 REG_DWORD 0xb1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings\PagePoolStats\
Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}
OldestGeneration REG_DWORD 0x0
0 REG_DWORD 0x40
1 REG_DWORD 0x14c
2 REG_DWORD 0x12c
3 REG_DWORD 0x164
4 REG_DWORD 0x94
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings\WritersBlockin
gRevert
{2707761B-2324-473D-88EB-EB007A359533} REG_SZ FRS2 Writer
{D76F5A28-3092-4589-BA48-2958FB88CE29} REG_SZ FRS Writer
{B2014C9E-8711-4C5C-A5A9-3CF384484757} REG_SZ AD Writer
{DD846AAA-A1B6-42a8-AAF8-03DCB6114BFD} REG_SZ ADAM Writer
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Volumes
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Volumes\Associations
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Volumes\Associations\{5
dbacac5-7d16-11de-a65f-0024e836a800}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Volumes\Associations\{5
dbacac5-7d16-11de-a65f-0024e836a800}\{5dbacac5-7d16-11de-a65f-0024e836a800}
MaxDiffSpace REG_SZ 21474836480
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Volumes\Associations\{5
dbacacf-7d16-11de-a65f-0024e836a800}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Volumes\Associations\{7
70e7ce8-760f-11de-b9a1-806e6f6e6963}
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Volumes\Associations\{7
70e7ce8-760f-11de-b9a1-806e6f6e6963}\{770e7ce8-760f-11de-b9a1-806e6f6e6963}
MaxDiffSpace REG_SZ -1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Enum
0 REG_SZ Root\LEGACY_VSS\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1
C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Control\BackupRestore" /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\AsrKeysNotToRe
store
Plug & Play REG_MULTI_SZ CurrentControlSet\Control\CriticalDeviceDatab
ase\
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\DllPaths
esebcli2 REG_SZ E:\bin\esebcli2.dll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBack
up
ASR Log File REG_MULTI_SZ %SystemRoot%\repair\asr.log
ASR Error File REG_MULTI_SZ %SystemRoot%\repair\asr.err
Client Side Cache REG_MULTI_SZ %SystemRoot%\csc\* /s
Internet Explorer REG_MULTI_SZ %UserProfile%\index.dat /s
Memory Page File REG_MULTI_SZ \Pagefile.sys
Microsoft Writer (Bootable State) REG_MULTI_SZ %SystemRoot%\Registrati
on\*.clb\0\*.crmlog /s
Mount Manager REG_MULTI_SZ \System Volume Information\MountPointManage
rRemoteDatabase
Netlogon REG_MULTI_SZ %SystemRoot%\netlogon.chg
Power Management REG_MULTI_SZ \hiberfil.sys
VSS Default Provider REG_MULTI_SZ \System Volume Information\*{3808876
B-C176-4e48-B7AE-04046E6CC752} /s
VSS Service DB REG_MULTI_SZ \System Volume Information\*.{7cc467ef-686
5-4831-853f-2a4817fd1bca}DB
VSS Service Alternate DB REG_MULTI_SZ \System Volume Information\*.{7c
c467ef-6865-4831-853f-2a4817fd1bca}ALT
Task Scheduler REG_MULTI_SZ %SYSTEMROOT%\Tasks\schedlgu.txt
Temporary Files REG_MULTI_SZ %TEMP%\* /s
Winlogon debug REG_MULTI_SZ %WINDIR%\debug\*
SUS Client REG_MULTI_SZ %SystemRoot%\SoftwareDistribution\* /s
Catalog Database REG_MULTI_SZ %SystemRoot%\System32\CatRoot2\* /s
MS Distributed Transaction Coordinator REG_MULTI_SZ C:\WINDOWS\system3
2\MSDTC\MSDTC.LOG\0C:\WINDOWS\system32\MSDtc\trace\dtctrace.log
BITS_metadata REG_MULTI_SZ C:\Documents and Settings\All Users\Applica
tion Data\Microsoft\Network\Downloader\*
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\HardwareKeys
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToResto
re
Plug & Play REG_MULTI_SZ CurrentControlSet\Control\CriticalDeviceDatab
ase\
Mount Manager REG_MULTI_SZ MountedDevices\
Fault Tolerance REG_MULTI_SZ Disk\
Installed Services REG_MULTI_SZ CurrentControlSet\Services\*
Active Directory Restore REG_MULTI_SZ CurrentControlSet\Services\NTDS\
Restore In Progress\\0CurrentControlSet\Services\NTDS\Parameters\New Database GU
ID
Pending Rename Operations REG_MULTI_SZ CurrentControlSet\Control\Sessi
on Manager\PendingFileRenameOperations
LDM Boot Information REG_MULTI_SZ CurrentControlSet\Services\dmio\boot
info\
Windows Setup REG_MULTI_SZ Setup\SystemPartition
Session Manager REG_MULTI_SZ CurrentControlSet\Control\Session Manager
\AllowProtectedRenames
ASR Information REG_MULTI_SZ CurrentControlSet\Control\ASR\
Removable Storage Manager REG_MULTI_SZ CurrentControlSet\Control\NTMS\
ImportDatabase
LDM Boot Information (dmboot) REG_MULTI_SZ CurrentControlSet\Services\
dmboot\
C:\>REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP" /s
ERROR: The system was unable to find the specified registry key or value.
C:\>
C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Services\MountMgr" /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MountMgr
DisplayName REG_SZ Mount Point Manager
ErrorControl REG_DWORD 0x1
Group REG_SZ System Bus Extender
Start REG_DWORD 0x0
Tag REG_DWORD 0x8
Type REG_DWORD 0x1
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MountMgr\Enum
0 REG_SZ Root\LEGACY_MOUNTMGR\0000
Count REG_DWORD 0x1
NextInstance REG_DWORD 0x1
C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\Services\TrueCrypt" /s
ERROR: The system was unable to find the specified registry key or value.
C:\>REG QUERY "HKLM\SYSTEM\CurrentControlSet\control\hivelist" /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\control\hivelist
\REGISTRY\MACHINE\HARDWARE REG_SZ
\REGISTRY\MACHINE\SECURITY REG_SZ \Device\HarddiskVolume1\WINDOWS\syst
em32\config\SECURITY
\REGISTRY\MACHINE\SOFTWARE REG_SZ \Device\HarddiskVolume1\WINDOWS\syst
em32\config\software
\REGISTRY\MACHINE\SYSTEM REG_SZ \Device\HarddiskVolume1\WINDOWS\system
32\config\system
\REGISTRY\USER\.DEFAULT REG_SZ \Device\HarddiskVolume1\WINDOWS\system3
2\config\default
\REGISTRY\MACHINE\SAM REG_SZ \Device\HarddiskVolume1\WINDOWS\system32\
config\SAM
\REGISTRY\USER\S-1-5-20 REG_SZ \Device\HarddiskVolume1\Documents and S
ettings\NetworkService\NTUSER.DAT
\REGISTRY\USER\S-1-5-20_Classes REG_SZ \Device\HarddiskVolume1\Documen
ts and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows
\UsrClass.dat
\REGISTRY\USER\S-1-5-19 REG_SZ \Device\HarddiskVolume1\Documents and S
ettings\LocalService\NTUSER.DAT
\REGISTRY\USER\S-1-5-19_Classes REG_SZ \Device\HarddiskVolume1\Documen
ts and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\U
srClass.dat
\REGISTRY\USER\S-1-5-21-4269811459-2733302078-1827968275-500 REG_SZ \D
evice\HarddiskVolume1\Documents and Settings\Administrator.GDH01\NTUSER.DAT
\REGISTRY\USER\S-1-5-21-4269811459-2733302078-1827968275-500_Classes REG_
SZ \Device\HarddiskVolume1\Documents and Settings\Administrator.GDH01\Local S
ettings\Application Data\Microsoft\Windows\UsrClass.dat
\REGISTRY\USER\S-1-5-21-4269811459-2733302078-1827968275-3988 REG_SZ \
Device\HarddiskVolume1\Documents and Settings\BackupExec\NTUSER.DAT
\REGISTRY\USER\S-1-5-21-4269811459-2733302078-1827968275-4932 REG_SZ \
Device\HarddiskVolume1\Documents and Settings\Symantec\NTUSER.DAT
C:\>VER
Microsoft Windows [Version 5.2.3790]
C:\>BCDEDIT /enum active
'BCDEDIT' is not recognized as an internal or external command,
operable program or batch file.
C:\>MOUNTVOL
Creates, deletes, or lists a volume mount point.
MOUNTVOL [drive:]path VolumeName
MOUNTVOL [drive:]path /D
MOUNTVOL [drive:]path /L
MOUNTVOL [drive:]path /P
MOUNTVOL /R
MOUNTVOL /N
MOUNTVOL /E
path Specifies the existing NTFS directory where the mount
point will reside.
VolumeName Specifies the volume name that is the target of the mount
point.
/D Removes the volume mount point from the specified directory.
/L Lists the mounted volume name for the specified directory.
/P Removes the volume mount point from the specified directory,
dismounts the volume, and makes the volume not mountable.
You can make the volume mountable again by creating a volume
mount point.
/R Removes volume mount point directories and registry settings
for volumes that are no longer in the system.
/N Disables automatic mounting of new volumes.
/E Re-enables automatic mounting of new volumes.
Possible values for VolumeName along with current mount points are:
\\?\Volume{770e7ce8-760f-11de-b9a1-806e6f6e6963}\
C:\
\\?\Volume{9ab808c3-7610-11de-9ac0-806e6f6e6963}\
D:\
\\?\Volume{63fee6d6-7b54-11de-8755-0024e836a804}\
F:\
\\?\Volume{5dbacac5-7d16-11de-a65f-0024e836a800}\
E:\
\\?\Volume{5dbacacf-7d16-11de-a65f-0024e836a800}\
K:\
C:\>DISKPART
Microsoft DiskPart version 5.2.3790.3959
Copyright (C) 1999-2001 Microsoft Corporation.
On computer: SERVERNAME
DISKPART> list disk
Disk ### Status Size Free Dyn Gpt
-------- ---------- ------- ------- --- ---
Disk 0 Online 136 GB 8033 KB
Disk 2 Online 200 GB 0 B
Disk 3 Online 3584 B 3584 B
Disk 4 Online 1300 GB 0 B
DISKPART> list volume
Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
Volume 0 E Exchange NTFS Partition 200 GB Healthy
Volume 1 K Live Data NTFS Partition 1300 GB Healthy
Volume 2 C NTFS Partition 136 GB Healthy System
Volume 3 F IUSB FAT Removeable 953 MB Healthy
Volume 4 D DVD-ROM 0 B Healthy
DISKPART> list vdisk
Microsoft DiskPart version 5.2.3790.3959
DISK - Prints out a list of disks.
PARTITION - Prints out a list of partitions on the current disk.
VOLUME - Prints out a list volumes.
DISKPART>
