Event ID - 12348

Event Id12348
SourceVSS
DescriptionVolume Shadow Copy Service warning: VSS was denied access to the root of volume %1. Denying administrators from accessing volume roots can cause many unexpected failures, and will prevent VSS from functioning properly. Check security on the volume, and try the operation again. %2
Event Information According to Microsoft :

Cause :

This event is logged when VSS was denied to access to the root of volume..

Resolution :

Ensure that VSS has access to the volume root directory

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To ensure that Volume Shadow Copy Service (VSS) has access to the volume root directory:
  1. Open an elevated Command Prompt. Click Start , click All Programs , click Accessories , right-click Command Prompt , and then click Run as administrator .
  2. Type icacls [VolumeRootPath] /grant system:f at the command prompt, where is the path to the volume root directory.
Verify :

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To verify that the Volume Shadow Copy Service is started:
  1. Click Start , click Administrative Tools , and then click Services .
  2. In the results pane, double-click Volume Shadow Copy .
  3. In Service status , make sure that the status is Started . If the status is not Started , click Start .
  4. Make sure Startup type is set to Manual .
  5. Click OK .
Reference LinksEvent ID 12348 from VSS

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh