Volume Snapshot Driver Integrity

Applies To: Windows Server 2008 R2

Shadow Copies of Shared Folders uses the Volume Snapshot driver (Volsnap.sys) to create shadow copies in Windows. This driver uses storage space allocated on a volume to maintain a snapshot of the contents of the shared folders. This storage space is called the Diff Area.

Events

Event ID	Source	Message
4	VolSnap	The shadow copy of volume %2 could not be created due to insufficient resources for worker threads.
5	VolSnap	The shadow copy of volume %2 could not be created due to insufficient non-paged memory pool for a bitmap structure.
6	VolSnap	The shadow copy of volume %2 could not create a new paged heap.  The system may be low on virtual memory.
8	VolSnap	The flush and hold writes operation on volume %2 timed out while waiting for a release writes command.
9	VolSnap	The flush and hold writes operation on volume %2 timed out while waiting for file system cleanup.
15	VolSnap	The shadow copies of volume %2 were aborted because of insufficient paged heap.
21	VolSnap	The flush and hold operation for volume %2 was aborted because of low available system memory.

Related Management Information

Shadow Copies of Shared Folders

File Services