How To Fix “Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface”

Reading Time: 3 minutes

It is not every day that you come across “Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface hr = 0x80070005, Access is denied.” but when you do – especially if you are one who is going after a clean event log – it can be a bit frustrating along the path to correcting it!

Generally we have seen this issue come up when a third-party backup process is configured. A quick adjustment to the security settings for the Volume Shadow Copy Service and a reboot can help correct the issue.

12345ErrorMessage : Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. This is often caused by incorrect security settings in either the writer or requestor process.

Solution 1: Update/Create Registry DWORD Key

This is generally the first and most effective way to resolve the Unexpected error querying for the IVssWriterCallback interface error.

  1. Open Service Manager ( Start –> Run –> services.msc )
  2. Scroll down to the Volume Shadow Copy service and make sure that it is running. If it is not running, right click and go into properties and update the execution to Automatic and reboot. If the service is running or if this did not correct the issue, continue.
  3. In the Volume Shadow Copy service, check the logon tab for which account is used for service execution ( .\AdministratorNetwork ServiceLocal System )
  4. Open registry editor ( Start –> run –> regedit )
  5. Navigate to registry key
    HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services>VSS>VssAccessControl
  6. Create a DWORD key entry and assign a value of 1. Key name is equal to the fully-qualified name of the system account being used by the Volume Shadow Copy service

    For the .\Administrator account, use the key .\Administrator
    For the Network Service account, use the key NT Authority\NetworkService
    For the Local System account, use the key NT Authority\SYSTEM.
volume-shadow-copy-services-vss-access-control
Registry Key DWORD Examples

Solution 2: That Didn’t Work – Try COM Security Settings

In some rare cases we have heard that Solution 1 does not correct the Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface error messages – in those situations it’s best to check in the Component Services for permissions.

  1. Open Component Services ( Start –> Run –> dcomcnfg )
  2. Expand Component Services –> Computers –> My Computer
  3. Right click My Computer and select Properties
  4. Select COM Security tab
  5. Look in Access Permissions option panel and select Edit Default
  6. Add SYSTEM and NETWORK SERVICE users ( if they are not already in there ) and grant them Local Access
  7. Reboot
volume-shadow-copy-services-com-settings

Please let us know if this was able to help in resolving your issue with Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface

Leave a Reply

Your email address will not be published. Required fields are marked *