Event ID - 26

Event Id	26
Source	VSS
Description	Volume Shadow Copy Service error: Either the COM+ Event System service (EventSystem) or the COM+ System Application service (COMSysApp) is disabled. Please enable the service and try again. %1
Event Information	According to Microsoft : Cause : This event is logged when Volume Shadow Copy Service error. Resolution : Ensure that the COM+ Event System service is started You should check whether the system is running in Safe mode. When your computer is in safe mode, you will see the words Safe Mode in the corners of the display. If it is in Safe mode, restart it in Normal mode. If it is not in Safe mode, you should check whether the COM+ Event System is running. To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To check that the COM+ Event System service is started: Click Start , click Administrative Tools , and then click Services . In the results pane, double-click COM+ Event System . In Service status , make sure that the status is Started . If the status is not Started , click Start . Make sure Startup type is set to Automatic . Click OK . Verify : To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority. To verify that the Volume Shadow Copy Service is started: Click Start , click Administrative Tools , and then click Services . In the results pane, double-click Volume Shadow Copy . In Service status , make sure that the status is Started . If the status is not Started , click Start . Make sure Startup type is set to Manual . Click OK .
Reference Links	Event ID 26 from VSS

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught