Backups fail during the snapshot creation phase with the following error message:
DoSnapshotSet failed with error: 'Expected provider error. Check the event log for details.'
In the Windows Event Viewer, the following VSS error (ID: 12289) may appear in the Application log:
Source: VSS
ID: 12289
Date: [timestamp]
Description: "Volume Shadow Copy Service error: Unexpected error DeviceIoControl(\\?\Volume{[UUID]} - 0000000000000374,0x0053c028,000001856BC5C470,0,000001856BC5B460,4096,[0]). hr = 0x80070005, Access is denied. . Operation: Automatically choosing a diff-area volume Processing EndPrepareSnapshots Context: Execution Context: System Provider "
Additionally, one or more VSS writers may show a "Timed out [7] Failed" status. Rebooting the system may temporarily reset the writers, but they fail again on the next backup attempt.
This issue is typically caused by:
Conflicting or incompatible third-party software interfering with VSS operations.
Missing or incorrect exclusions in antivirus or endpoint protection software.
Review Installed Software
Uninstall or disable any incompatible applications that may conflict with VSS.
Verify Rapid Recovery Exclusions
Please make sure antivirus or endpoint protection software includes the recommended Rapid Recovery exclusions to prevent interference with snapshot operations.