| Event Id | 8213 |
| Source | VSS |
| Description | Volume Shadow Copy Service error: The process that hosts the writer with name Cluster Service Writer and ID {41e12264-35d8-479b-8e5c-9b23d1dad37e} does not run under a user with sufficient access rights. Consider running this process under a local account which is either Local System, Administrator or Backup operator. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. |
| Event Information | According to Microsoft: CAUSE: This problem may occur if the Cluster service account is not an explicit member of the local Administrators group. In Windows Server 2003, the Cluster service uses the Volume Shadow Copy service to make sure that the backup of cluster configuration information is consistent for backup products that use it. The cluster backup writer that is used by Volume Shadow Copy service cannot start if the Cluster service account is not explicitly granted local administrative rights. The code does not parse users in the groups that are added to the local Administrators group. Earlier versions of Windows do not require the Cluster service account to be explicitly added to the local Administrators group. If the user is a member of a domain group that is a member of the local Administrators group, Windows 2000 Cluster service starts without problems. Upgrading to Windows Server 2003 does not change this behavior. Note When you configure a server cluster on a Windows Server 2003-based computer, the New Server Cluster Wizard adds the Cluster service account to the local Administrators group on the cluster node. It adds this account even if the account is an indirect member (that is, a member of a domain group that is a member of the local Administrators group). Therefore, if the computer was not upgraded from an earlier version of Windows, the Cluster service starts successfully, unless the Cluster service account has been removed manually from the local Administrators group. RESOLUTION: To resolve this problem, determine which account is used by the Cluster service, and then use one of the methods that follows. To determine the Cluster service account: 1. Click Start, click Run, type services.msc, and then click OK. 2. In the list, double-click Cluster Service. 3. Click the Log On tab, and then note the domain account name that appears in the This account box. |
| Reference Links | Cluster Service Does Not Start After You Upgrade to Windows Server 2003, Enterprise Edition |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.