VSS error: Failed resolving account Administrator with status 1376

On my domain controllers, the following errors occurred in my eventlog:

Log Name:      Application
Source:        VSS
Event ID:      8230
Task Category: None
Level:         Warning
Computer:      DomainController1
Description:  Volume Shadow Copy Service error: Failed resolving account Administrator with status 1376.
Check connection to domain controller and VssAccessControl registry key.
Operation:   Gathering Writer Data  
Executing Asynchronous Operation Context:  
Execution Context: Requestor  
Current State: GatherWriterMetadata
Error-specific details: 
Error: NetLocalGroupGetMemebers(Administrator), 0x80070560, The specified local group does not exist.

and:

Log Name:      Application
Source:        VSS
Event ID:      8230
Task Category: None
Level:         Warning
Computer:      DomainController1
Description:   Volume Shadow Copy Service error: Failed resolving account Administrator with status 1376.
Check connection to domain controller and VssAccessControl registry key.
Error-specific details:  
Error: NetLocalGroupGetMemebers(Administrator), 0x80070560, The specified local group does not exist.

The events appeared in my eventviewer after creating backups with Tivoli Storage Manager (TSM). Although the backup procedure was running fine, the events were annoying. So here’s how to fix it:

  1. Open your registry
  2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
  3. Delete the DWORD-key that corresponds to the account name in the events. In my case, it was Administrator (Failed resolving account Administrator with status 1376).

You may also like...

3 Responses

  1. Jan Peter Koen says:

    This worked! Thanks.

  2. Larry says:

    That will get rid of the error but what if that registry key is supposedly the solution to another problem that you have with VSS. In my case that was supposed to be the solution but the adminsitrator user isn’t resolving. I did try doing the fully qualified name, administrator@domain.local and didn’t get an error. has anyone tried this?

  3. Jin Pen Fa says:

    Great! Thanx! No problems found so far, so I guess this is a harmless, but helpful solution!

Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>