Vssaccesscontrol Registry Shows A Username

Mysterchr

Member
Joined
Jul 15, 2011
Messages
9
Location
Morgantown WV
This is for Server 2008 SBS...In the reg. under the path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl I have three entries for NT Authority all with the value of 1 but I also have a username in there with the same value as the others. This user is a former admin here who has been gone for awhile and his account has been deleted. Lately I've noticed in the logs a lot of warnings with VSS being the source and the ID is 8227...Should I remove this entry? Tell me oh great geeks what should I do?
 
First of all check the VSS service, which ACCOUNT is used to start it? It should be NETWORK SERVICE.
Second, run this command:
Code:
C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\bin\stsadm.exe -o registerwsswriter

Finally, if the step above doesn't resolve your issue... you COULD delete that entry. Honestly the event id is a warning, so the process doesn't fail... anyway, if that entry is no longer used, you should be able to remove it. Maybe, export the entire registry first, then delete, then reboot, then verify :)
 
Back
Top