Mysterchr Posted September 1, 2011 Posted September 1, 2011 This is for Server 2008 SBS...In the reg. under the path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl I have three entries for NT Authority all with the value of 1 but I also have a username in there with the same value as the others. This user is a former admin here who has been gone for awhile and his account has been deleted. Lately I've noticed in the logs a lot of warnings with VSS being the source and the ID is 8227...Should I remove this entry? Tell me oh great geeks what should I do? Quote
ICTCity Posted September 1, 2011 Posted September 1, 2011 First of all check the VSS service, which ACCOUNT is used to start it? It should be NETWORK SERVICE. Second, run this command: C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\bin\stsadm.exe -o registerwsswriter Finally, if the step above doesn't resolve your issue... you COULD delete that entry. Honestly the event id is a warning, so the process doesn't fail... anyway, if that entry is no longer used, you should be able to remove it. Maybe, export the entire registry first, then delete, then reboot, then verify :) Quote -------------------------------------------------------- Tu peux aussi crire en franais. Du kannst auch auf Deutsch schreiben. Puoi scrivere anche in italiano. --------------------------------------------------------
Recommended Posts