by lunarg on August 8th 2016, at 12:31

When performing a backup using VSS, a warning is logged in the Application event log of Windows with ID 8230 while taking the VSS snapshot. The backup may subsequently fail.

The warning states:

Volume Shadow Copy Service error: Failed resolving account Administrator with status 1376. Check connection to domain controller and VssAccessControl registry key. 

   PrepareForSnapshot Event

   Execution Context: Writer
   Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Name: Registry Writer
   Writer Instance ID: {0c8f797c-42cb-410d-a2c3-2877a6c93e38}

Error-specific details:
   Error: NetLocalGroupGetMemebers(Administrator), 0x80070560, The specified local group does not exist.

As the warning states, the VSS access control, as configured in the registry, references a group that does not exist (in this case: the "Administrator").

The solution is to remove the nonexisting group from the registry key:

  1. Open the Registry Editor (regedit).
  2. Navigate to the key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\VssAccessControl
  3. Remove the faulty reference (in this case: "Administrator").

A reboot is not required. After the removal, try performing a new backup. The warning should no longer appear.