Event ID - 16

Event Id16
SourceVSS
DescriptionThe value with name %1 specified in registry (%2) is not of type REG_DWORD. The entry is ignored. It must have a valid username as name, be of type REG_DWORD, and value either '0' or '1'. Value '0' denies the username from running any VSS writer. Value '1' is used to allow it. %3
Event Information According to Microsoft :

Cause :

This event is logged when the value with name specified in registry is not of type REG_DWORD.

Resolution :

Ensure that the VssAccessControl key specifies a valid account

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To ensure that a valid account is specified for the VssAccessControl registry key and delete accounts that are not valid:

Caution : Incorrectly editing the registry might severely damage your system. Before making changes to the registry, you should back up any valued data.
  1. Click Start .
  2. In the Start Search box, type Regedit , and then press ENTER.
  3. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl .
  4. To delete an account that is not valid, right-click the name, and then click Delete .
  5. To add a new valid account, right-click VssAccessControl , click New , and then click DWORD (32-bit) Value .
  6. Give the registry entry the same name as the user account.
  7. Right-click the registry entry name, and then click Modify .
  8. Type 1 , and then click OK .
Note : You must set this value to 1. If you set it to 0, the Volume Shadow Copy Service is prevented from using the specific user account.

Verify :

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To verify that the Volume Shadow Copy Service is started:
  1. Click Start , click Administrative Tools , and then click Services .
  2. In the results pane, double-click Volume Shadow Copy .
  3. In Service status , make sure that the status is Started . If the status is not Started , click Start .
  4. Make sure Startup type is set to Manual .
  5. Click OK .
Reference LinksEvent ID 16 from VSS

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh