If the Cluster Service does NOT start and the Application event log records an event similar to the following, the Cluster Service account does NOT have permission to start the Volume Shadow Copy Service:
Event Type: Error
Event Source: VSS
Event Category: None
Event ID: 8213
Date: MM/DD/YYYY
Time: HH:MM:SS
User: N/A
Computer: <ComputerName>
Description: Volume Shadow Copy Service error: The process that hosts the writer with name Cluster Service Writer and
ID \{41e12264-35d8-479b-8e5c-9b23d1dad37e\} does not run under a user with sufficient access rights. Consider running this process under
a local account which is either Local System, Administrator or Backup operator. For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.
This behavior will occur if the Cluster Service account is NOT a member of the local administrators group, or does NOT explicitly have permission to start VSS.
To workaround this behavior, determine the Cluster Service account:
1. Open a CMD.EXE window.
2. Type the following command and press Enter:
reg query "HKLM\SYSTEM\CurrentControlSet\Services" /V ObjectName
NOTE: The Cluster Service account is the data value of ObjectName.
You can either add the Cluster Service account to the local Administrators group, or you can explicitly configure the VSS service to allow the Cluster Service account.
To configure the VSS service to grant access:
1. Open a CMD.EXE window.
2. Type the following command and press Enter, where domain.com is where the Cluster Service account is located:
reg ADD HKLM\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl /V "domain.com\value of ObjectName" /T REG_DWORD /F /D 1
