Event ID - 28

Event Id28
SourceVSS
DescriptionVolume Shadow Copy Service error: The Microsoft Software Shadow Copy Provider (SWPRV) service is disabled. Please enable the service and try again. %1
Event Information According to Microsoft :

Cause :

This event is logged when Volume Shadow Copy Service error:

Resolution :

Ensure that the Microsoft Software Shadow Copy Provider service is enabled

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To ensure that the Microsoft Software Shadow Copy Provider service is enabled:
  1. Click Start , click Administrative Tools , and then click Services .
  2. In the results pane, double-click Microsoft Software Shadow Copy Provider .
  3. Make sure Startup type is set to Manual .
  4. Click OK .
Verify :

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To verify that the Volume Shadow Copy Service is started:
  1. Click Start , click Administrative Tools , and then click Services .
  2. In the results pane, double-click Volume Shadow Copy .
  3. In Service status , make sure that the status is Started . If the status is not Started , click Start .
  4. Make sure Startup type is set to Manual .
  5. Click OK .
Reference LinksEvent ID 28 from VSS

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.