LAN Overview
    Server Hardware
    Server Roles
Windows Event IDs



Windows Server Domain

Miscellaneous Server Event IDs

I have experienced various Windows Event Log entries that have sometimes taken a bit of effort to understand and resolve. Most of the time, a quick "Google" will point to a relevant Microsoft Knowledgebase article, at other times, there may be a number of solutions proposed. I have documented a number of Event IDs here and the fix that worked for me - your issue and resolution may be different, but hopefully, this page can provide a useful starting point.


Errors Warnings    
Event ID OS Version Description / Resolution Microsoft KB Ref. etc.



Windows Server


Volume Shadow Copy Service information: The COM Server with CLSID {463948d2-035d-4d1d-9bfc-473fece07dab} and name HWPRV cannot be started. [0x80070005, Access is denied.

iSCSI Target Storage (VDS/VSS) Provider

12292 Volume Shadow Copy Service error: Error creating the Shadow Copy Provider COM class with CLSID {463948d2-035d-4d1d-9bfc-473fece07dab} [0x80070005, Access is denied
Resolution New features introduced in Windows Server 2012 related to iSCSI: iSCSI Target Server and Storage Provider. "Out of the box", the credentials for these processes are not set correctly and this pair of errors will be recorded in the Event log every 15 minutes.

The storage providers require credential configuration after being enabled. This may be achieved in a number of ways as described in the Microsoft Storage Team blog. As described in the blog, I used DCOM Config to set the credentials to local administrator.


Windows Server


DFSN service has started performing complete refresh of metadata for namespace <namespace name>. This task can take time if the namespace has large number of folders and may delay namespace administration operations.

TechNet Thread

DFSN-Server ID 516 Flooding Event Log

Resolution This message means that namespace data is being refreshed, it is expected behavior and flagging it up as a warning is a BUG. The message should be informational only.

The message can't be individually disabled, but a custom event view can be created that suppresses this one event can be created as described in the TechNet thread







mailto: Webmaster

 Terms & Conditions