| Event Id | 6005 |
| Source | VSS |
| Description | Volume Shadow Copy Service: SQL Shadow Copy configuration error |
| Event Information | According to Microsoft : Explanation : When a shadow copy of a complex data store is taken, it is important that every volume that contains a part of the data store is included in the shadow copy set. Otherwise, the shadow copy set will be corrupt because it only contains some of the volumes, not the complete group. In addition, the security settings on the data store should allow the Local System account to connect. Possible causes include: 1.Volume Shadow Copy Service has discovered that all of the volumes that are necessary to perform a shadow copy of this data store are not included. 2.The Local System user account and the Administrators group have been removed from the administrators security group of the data store. Resolution : Do one or more of the following: 1.Include all the necessary volumes in the shadow copy set. 2.Add the Local System user account and the Administrators group to the administrators security group of the data store. |
| Reference Links | Event ID 6005 from Source VSS |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.