William Robertson
Guest
|
Posted:
Mon Nov 28, 2005 3:18 pm Post subject:
"Unknown" Volume Shadow Copy job running... |
|
|
Hi there
I have Volume Snapshots running on my HP NAS2000s server. The snapshots run
at 12:00am for my E Drive, and at 04:00am for my C Drive.
I have confirmed with the scheduled tasks on this server that there is
nothing scheduled to run at 02:00am... yet my System Event logs, apart from
showing the 12:00 and 04:00 snapshots, also shows the following at 02:00am:
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 28/11/2005
Time: 02:00:06 AM
User: NT AUTHORITY\SYSTEM
Computer: NAS2
Description:
The Volume Shadow Copy service was successfully sent a start control.
This obviously implies that a snapshot was run, but I'm damned if I know on
which partition it ran, or where it stored the shadow copy etc.
Is there anyway in which I can "interrogtae" more detail from the VSS
service to try and locate this ghost?
Thanks
William R. |
|