Go Back   Tech Support Forum > Microsoft Support > Windows 7 , Windows Vista Support

User Tag List

[SOLVED] Creating a Restore Point Error Message

This is a discussion on [SOLVED] Creating a Restore Point Error Message within the Windows 7 , Windows Vista Support forums, part of the Tech Support Forum category. Hi, I am presently running the Windows 7 Pro OS and I am continually having a problem creating a restore


Closed Thread
 
Thread Tools Search this Thread
Old 08-15-2014, 07:39 AM   #1
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Hi,

I am presently running the Windows 7 Pro OS and I am continually having a problem creating a restore point. I receive the following error message:The creation of a shadow copy has timed out. Try this operation again. (0x81000101). I would appreciate any assistance given to help resolve this problem.

Thanks
tenbearsioux is offline  
Sponsored Links
Advertisement
 
Old 08-15-2014, 09:21 AM   #2
TSF Moderator
Hardware Team
Networking Team
 
SpywareDr's Avatar
 
Join Date: Jun 2013
Location: Maryland, USA
Posts: 6,326
OS: W10P32, W8P32; W7U64; W7P64; XPP32; Zorin; Slax; Ubuntu; Kali (BackTrack); Android 4.4.2



Error Code 0x81000101 displayed. -- Cannot create system restore - Microsoft Community

?
SpywareDr is offline  
Old 08-15-2014, 10:15 AM   #3
Team Manager
Microsoft Support
 
Corday's Avatar
 
Join Date: Mar 2010
Location: Midlands of South Carolina
Posts: 25,361
OS: Windows10. In the past CP/M, DOS, Windows 95, 2000, 98SE, ME, Vista & Windows 7

My System


If trying the suggestions in Post #2, after disabling System Restore, reboot. When up an running, make sure there are no Restore points. Now reenable and reboot again. There might be a Restore point. If not try the manual method again.
__________________

The stability of an OS is in direct proportion to the stability of the user.
Corday is offline  
Sponsored Links
Advertisement
 
Old 08-17-2014, 12:40 PM   #4
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


SpywareDr,

Thanks for your reply. I tried all of the suggestions at the address you posted. No Joy. Any other suggestions?
tenbearsioux is offline  
Old 08-17-2014, 12:42 PM   #5
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Corday,

Thanks for your suggestion. I tried that also. No Joy. Is there anything that I can try. Getting Desperate.
tenbearsioux is offline  
Old 08-17-2014, 02:53 PM   #6
Team Manager
Microsoft Support
 
Corday's Avatar
 
Join Date: Mar 2010
Location: Midlands of South Carolina
Posts: 25,361
OS: Windows10. In the past CP/M, DOS, Windows 95, 2000, 98SE, ME, Vista & Windows 7

My System


In the link SpywareDr provided, there were many suggestions. Did you try them all, particularly making sure Volume Shadow Copy service was enabled?
__________________

The stability of an OS is in direct proportion to the stability of the user.
Corday is offline  
Old 08-17-2014, 09:58 PM   #7
Administrator
Manager, Microsoft Support
Acting Manager, Security
BSOD Kernel Dump Expert
Microsoft Windows Insider MVP
 
jcgriff2's Avatar

Microsoft Most Valuable Professional
 
Join Date: Sep 2007
Location: New Jersey Shore
Posts: 34,336
OS: Windows 10, 8.1 + Windbg :)



Hi -

Let's see if the VSS (Volume Shadow Copy Service) Admin CMD tool yields any clues.

Download the batch script and save to Documents folder.

https://sysnative.com/apps/jcgriff2/VSS..._2_.bat

RIGHT-click on the batch script, select "Run as Administrator"

A CMD screen will appear and scroll as 4 vssadmin commands are executed.

A Notepad will open upon completion (it may take a few minutes).

Save the Notepad to Documents. Upload it and attach to your next post.

Regards. . .

jcgriff2

`
jcgriff2 is offline  
Old 08-18-2014, 02:35 AM   #8
TSF Emeritus
 
Go The Power's Avatar
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hello,

After running the batch file that jcgriff2, can you please also do the following:

Command query
  1. Click on the button. Inside the search box type in CMD
  2. Right click on CMD => Choose Run as Administrator
  3. Inside the Command Prompt windows copy and paste the following commands
    sc qc vss >r&& sc queryex vss >>r &&notepad r
  4. Once finished a note pad file called R will open Please post the contents back into this thread.

Event Log Viewer
  1. Please download VEW.exe from Here and save it to your desktop.
  2. Go to your desktop and right click on VEW.exe and choose Run as Administrator
  3. Once open set the following settings
    • 'Select log to query'
      1. Tick Application
      2. Tick System
    • 'Select Type to list'
      1. Tick Critical
      2. Tick Error
      3. Tick Information
      4. Tick Warning
    • 'Number or date events'
      1. Tick Number of Events and set it to 20
  4. Click on Run
  5. Once completed a notepad file will open. Please copy and paste the contents of VEW.txt back into this thread.
Go The Power is offline  
Old 08-18-2014, 08:24 AM   #9
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by Corday View Post
In the link SpywareDr provided, there were many suggestions. Did you try them all, particularly making sure Volume Shadow Copy service was enabled?
I haven't tried this one, but I will. I will advise on results.
Thanks
tenbearsioux is offline  
Old 08-18-2014, 08:30 AM   #10
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by jcgriff2 View Post
Hi -

Let's see if the VSS (Volume Shadow Copy Service) Admin CMD tool yields any clues.

Download the batch script and save to Documents folder.

https://sysnative.com/apps/jcgriff2/VSS..._2_.bat

RIGHT-click on the batch script, select "Run as Administrator"

A CMD screen will appear and scroll as 4 vssadmin commands are executed.

A Notepad will open upon completion (it may take a few minutes).

Save the Notepad to Documents. Upload it and attach to your next post.

Regards. . .

jcgriff2

`
I will work on this today and get back to you with the results.

Thanks
tenbearsioux is offline  
Old 08-18-2014, 08:33 AM   #11
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by Go The Power View Post
Hello,

After running the batch file that jcgriff2, can you please also do the following:

Command query
  1. Click on the button. Inside the search box type in CMD
  2. Right click on CMD => Choose Run as Administrator
  3. Inside the Command Prompt windows copy and paste the following commands
    sc qc vss >r&& sc queryex vss >>r &&notepad r
  4. Once finished a note pad file called R will open Please post the contents back into this thread.

Event Log Viewer
  1. Please download VEW.exe from Here and save it to your desktop.
  2. Go to your desktop and right click on VEW.exe and choose Run as Administrator
  3. Once open set the following settings
    • 'Select log to query'
      1. Tick Application
      2. Tick System
    • 'Select Type to list'
      1. Tick Critical
      2. Tick Error
      3. Tick Information
      4. Tick Warning
    • 'Number or date events'
      1. Tick Number of Events and set it to 20
  4. Click on Run
  5. Once completed a notepad file will open. Please copy and paste the contents of VEW.txt back into this thread.
Thanks for the suggestion. I will work on this today along with that of jcgriff2 and post the results.
tenbearsioux is offline  
Old 08-18-2014, 11:17 AM   #12
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by jcgriff2 View Post
Hi -

Let's see if the VSS (Volume Shadow Copy Service) Admin CMD tool yields any clues.

Download the batch script and save to Documents folder.

https://sysnative.com/apps/jcgriff2/VSS..._2_.bat

RIGHT-click on the batch script, select "Run as Administrator"

A CMD screen will appear and scroll as 4 vssadmin commands are executed.

A Notepad will open upon completion (it may take a few minutes).

Save the Notepad to Documents. Upload it and attach to your next post.

Regards. . .

jcgriff2

`
Requested info.
Attached Files
File Type: txt $vssinfo.txt (1.1 KB, 63 views)
File Type: txt r.txt (850 Bytes, 63 views)
File Type: txt VEW.txt (34.5 KB, 66 views)
tenbearsioux is offline  
Old 08-18-2014, 11:18 AM   #13
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by tenbearsioux View Post
Requested info.
tenbearsioux is offline  
Old 08-19-2014, 03:49 AM   #14
TSF Emeritus
 
Go The Power's Avatar
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hello,

Can you please run the batch file that jcgriff2 posted, but this time run the batch file as an Administrator. The errors in the report indicate that the file was not ran as admin

Looking over the event logs a lot of the errors from VSS have the error code Access Denied.

How many accounts do you have on this computer? Are you running System Restore as an Administrator?

Can you please run the following command from Command Prompt as Admin:
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s >123&&notepad 123
Go The Power is offline  
Old 08-19-2014, 06:23 AM   #15
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by Go The Power View Post
Hello,

Can you please run the batch file that jcgriff2 posted, but this time run the batch file as an Administrator. The errors in the report indicate that the file was not ran as admin

Looking over the event logs a lot of the errors from VSS have the error code Access Denied.

How many accounts do you have on this computer? Are you running System Restore as an Administrator?

Can you please run the following command from Command Prompt as Admin:
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s >123&&notepad 123
I have only one account on this computer which is supposed to have access to everything. I will work on what you have suggested and get back to youl

Thanks
tenbearsioux is offline  
Old 08-19-2014, 11:06 AM   #16
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by Go The Power View Post
Hello,

Can you please run the batch file that jcgriff2 posted, but this time run the batch file as an Administrator. The errors in the report indicate that the file was not ran as admin

Looking over the event logs a lot of the errors from VSS have the error code Access Denied.

How many accounts do you have on this computer? Are you running System Restore as an Administrator?

Can you please run the following command from Command Prompt as Admin:
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s >123&&notepad 123
Power to Go

I have one account under my name and it is listed as administrator. I have tried numerous times to run the batch code as administrator, however, it runs everything but the list names at which point it never completes. If I open it from the site it completes with the results you have seen. Do I need to change my account? I will try to do the last suggestion and get back to you with the results. I tried to enter the above in the command prompt as admin:but it doesn't produce anything. Could you explain how to enter the above? Forgive my ignorance.
tenbearsioux is offline  
Old 08-20-2014, 01:18 AM   #17
TSF Emeritus
 
Go The Power's Avatar
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



Hello,

Before we start looking at the permissions for VSS lets make sure there are no file corruptions on your machine:

SFC /SCANNOW

  1. Click on the button. Inside the search box type in CMD
  2. Right click on CMD => Choose Run as Administrator
  3. Inside the Command Prompt windows copy and paste the following command SFC /SCANNOW
  4. Please wait for this to Finish before continuing with the rest of the steps.

Convert CBS.log to CBS.txt

  1. Click on the button => Inside the search box copy and paste the following command:
    Code:
    cmd /c copy %windir%\logs\cbs\cbs.log "%userprofile%\Desktop\cbs.txt"
  2. Press Enter
  3. Once this has completed please go to your Desktop and you will find CBS.txt => Please upload CBS.txt to this thread

Please Note:: if the file is too big to upload to you next post please upload via Dropbox or ge.tt
Go The Power is offline  
Old 08-20-2014, 09:32 AM   #18
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Per your request please find attached the info
Attached Thumbnails
Click image for larger version

Name:	SFC _ Scannow Results.PNG
Views:	141
Size:	13.5 KB
ID:	192081  
Attached Files
File Type: txt cbs.txt (1.78 MB, 61 views)
tenbearsioux is offline  
Old 08-21-2014, 09:36 PM   #19
TSF Emeritus
 
Go The Power's Avatar
 
Join Date: Mar 2007
Location: South Australia
Posts: 15,079
OS: Windows 8.1



That log looks good.

Please click on the Start button -> And type Services.msc (you can start typing this as soon as the start menu opens) -> right click on Services.msc -> Choose Run as Admin

Now inside the service list please find COM + event System -> Double click on it -> Makes sure 'Service status' is set to Running -> If the Start is NOT greyed out click on Start -> Set start up to type to Automatic ->Press OK

Now check the settings on the following Services:

Block Level Backup Engine Service
-Start up type = Manual
-Service status = Stopped

Microsoft Software Shadow Copy Provider
-Start up type = Manual
-Service status = Running > Click on Start to start running the service

Remote Procedure Call (RPC)l (you wont be able to change these settings. just report to me what they are)
-Start up type = Automatic
-Service Status = Running

System Event Notification Service
-Start up type = Automatic
-Service Status = Running

Volume Shadow Copy
-Start up type = Manual
-Service Status = Stop

PowersShell ACL
  • Click Start -> right click on Powershell.exe -> Choose run as admin
  • Inside the PowerShell windows copy the following command's
    get-acl "C:\Windows\system32\vssvc.exe" | format-list >2
  • Press Enter
    get-acl HKLM:\SYSTEM\CurrentControlSet\Services\vss | format-list>>
  • Press Enter
  • Type in notepad 2
  • Press Enter
  • You should now have a notepad file with a list of all the files inside the BIN folder along with all of their Security Permissions. Please post the contents back into this thread.
Go The Power is offline  
Old 08-22-2014, 08:41 AM   #20
Registered Member
 
tenbearsioux's Avatar
 
Join Date: Dec 2010
Location: Florida
Posts: 101
OS: Windows 10 PRO 64-bit

My System


Quote:
Originally Posted by Go The Power View Post
That log looks good.

Please click on the Start button -> And type Services.msc (you can start typing this as soon as the start menu opens) -> right click on Services.msc -> Choose Run as Admin

Now inside the service list please find COM + event System -> Double click on it -> Makes sure 'Service status' is set to Running -> If the Start is NOT greyed out click on Start -> Set start up to type to Automatic ->Press OK

Now check the settings on the following Services:

Block Level Backup Engine Service
-Start up type = Manual
-Service status = Stopped

Microsoft Software Shadow Copy Provider
-Start up type = Manual
-Service status = Running > Click on Start to start running the service

Remote Procedure Call (RPC)l (you wont be able to change these settings. just report to me what they are)
-Start up type = Automatic
-Service Status = Running

System Event Notification Service
-Start up type = Automatic
-Service Status = Running

Volume Shadow Copy
-Start up type = Manual
-Service Status = Stop

PowersShell ACL
  • Click Start -> right click on Powershell.exe -> Choose run as admin
  • Inside the PowerShell windows copy the following command's
    get-acl "C:\Windows\system32\vssvc.exe" | format-list >2
  • Press Enter
    get-acl HKLM:\SYSTEM\CurrentControlSet\Services\vss | format-list>>
  • Press Enter
  • Type in notepad 2
  • Press Enter
  • You should now have a notepad file with a list of all the files inside the BIN folder along with all of their Security Permissions. Please post the contents back into this thread.
I completed the first part and everything is set as you posted.
Please find the PowerShell text attached.
Thanks for your continued help!
Attached Files
File Type: txt PowerShell.txt (1.4 KB, 60 views)
tenbearsioux is offline  
Closed Thread

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar Threads
Thread Thread Starter Forum Replies Last Post
Computer runing to slow.
My comp HP Pavilion a1 123c opens any application or software slowly and internet sites also slow. OS X pro service pack3. System32. Total Physical Memory 1024 Mb. Available Ph. Mem.50.05Mb Total Virtual Mem. 2.00GB. Available Virtual Mem. 1.96Gb. I used AVG, Super antivirus free edition,...
Val852 Resolved HJT Threads 3 07-22-2013 08:35 PM
Create a restore point automatically
I am trying to set my computer to create a restore point when I log on and I am using the task scheduler to do this. When I come to the point when I have to choose the script the info I was given was to look for either the vbs or scrp script. The only ones I can find that are anywhere similar are...
shipboard Windows 7 , Windows Vista Support 9 06-10-2013 11:20 PM
Requested Logs for help with Infected Services.exe, Win64 Patched.A
Hello - Please find the logs you requested below and requested attachments. If I did anything wrong, please let me know and I will provide you with correct data posthaste. Thank you a million for your help. DDS (Ver_2012-11-20.01) - NTFS_AMD64 Internet Explorer: 8.0.7601.17514 ...
sld12day Inactive Malware Help Topics 10 02-09-2013 08:08 AM
Trojan:Win32/Sirefef.AN
Slow performance and constant pop up by the default windows anti-virus. -- DDS (Ver_2012-10-14.05) - NTFS_AMD64 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_32 Run by Miguel at 21:19:10 on 2012-10-15 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3032.1778 ....
em1 Resolved HJT Threads 11 10-27-2012 03:04 PM
FBI virus and Restore Point
i recently got that fake FBI virus so i ran my computer in safe mode with networking. im trying to get my restore point to go but it wont let me set a restore point. Any suggestions?
adamhelpme Inactive Malware Help Topics 2 10-16-2012 10:27 AM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is on
Smilies are on
[IMG] code is on
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Post a Question


» Site Navigation
 > FAQ
  > 10.0.0.2
Powered by vBadvanced CMPS v3.2.3


All times are GMT -7. The time now is 11:12 AM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
User Alert System provided by Advanced User Tagging v3.1.0 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 2001 - 2018, Tech Support Forum

Windows 10 - Windows 7 - Windows XP - Windows Vista - Trojan Removal - Spyware Removal - Virus Removal - Networking - Security - Top Web Hosts