"Shadow Copies of volume C: aborted" (Event ID 36)...

A snapshot of my settings:

I see you are dual booting. Do you have any drivers for other file systems?

Apple-HFS driver gave me this error. Perhaps other do also. Have a look with autoruns and disable any you aren't sure about.

Thanks for the replies and information.

Yes, I do have Paragon ExtFS for Windows installed. It allows read / write to the ext4 file system from within Windows. I don't use it all of the time, but it installs a ParagonMounter service, which is set to automatic startup by default. The program won't work if ParagonMounter service is set to manual.

I guess that could then be the cause for the origin of the aborted shadow copies?, as well as my abnormal System Protection settings.

If that's the case, I'm not too worried about it. I don't feel a need for the shadow copies. My original intent was to address the Event ID 36 by either removing the "user imposed limit" it referenced, or disabling the shadow copies.

At this point, is there anything more I should do? I guess I could just safely ignore any Event ID 36 errors in the Windows System Event Viewer logs.

Hi,



The error wiil also crop up when you run Wise Diskcleaner's Advanced cleaning and let it create a restore point while have the feature disabled.
Possibly any other software that tries to do the same thing too.



Cheers,

fdegrove said:

Possibly any other software that tries to do the same thing too.

Macrium (and pretty much every backup software) uses VSS.

oxonsi said:

Yes, I do have Paragon ExtFS for Windows installed. It allows read / write to the ext4 file system from within Windows. I don't use it all of the time, but it installs a ParagonMounter service, which is set to automatic startup by default. The program won't work if ParagonMounter service is set to manual.

Funnily enough I replaced Apple HFS driver with Paragon HFS driver as it didn't cause the issue. Perhaps their EXTFS is less good or it could be a red-herring.

If you don't care to make restore points and whatever backup software you use works I'd not worry about it but the drivers are loaded earlier in the boot process. You'd have to stop the driver loading with autoruns not just disable the service.

I use Macrium Reflect to frequently save image files to an external hard drive. That works well for me. It is the main reason I feel OK with disabling System Restore.

Are shadow copies the same as restore points, or how are they related to one another?

I'm not inclined to remove ExtFS for Windows. I don't use it all of the time, but it is handy to have every once in a while.

Is there anything else you'd recommend doing to address the Event ID 36, or can I safely ignore?

Thanks for all the info!

What @f14tomcat says is correct. My Apple HFS driver broke VSS (so both restore points and Macrium).

If Macrium is working (and it tells you if it is not) then don't worry about it.

Hi,



The event log is generated by Windows itself in this case. It tries to create a restore point but it can't due to the imposed space limit.
That's why I suggested TS to look at the registry because something is not correct.
No big deal if left as is but still.


Cheers,

Thanks for the replies and info.

Yes, I just did an image backup with Macrium Reflect, and it reported successful completion.

I will take a look at the registry info fdegrove posted in reply #10 and compare it to mine. I'll see if I can determine why Windows thinks system protection is enabled.

Thanks again :)