计算机: LAPTOP-K9B8BF8V
卷影复制服务信息: 无法启动 CLSID 为 {4e14fba2-2e22-11d1-9964-00c04fbbb345} 、名称为 CEventSystem 的 COM 服务器。[0x8007045b, 系统正在关机。
事件 Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">13</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-04-24T06:13:36.2033126Z" />
<EventRecordID>5080</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>LAPTOP-K9B8BF8V</Computer>
<Security />
</System>
<EventData>
<Data>{4e14fba2-2e22-11d1-9964-00c04fbbb345}</Data>
<Data>CEventSystem</Data>
<Data>0x8007045b, 系统正在关机。
</Data>
</Data>
<Binary>2D20436F64653A20575254575254494330303030343932332D2043616C6C3A20575254575254494330303030343931362D205049443A202030303030353037322D205449443A202030303030363630382D20434D443A2020433A5C57494E444F57535C73797374656D33325C737663686F73742E657865202D6B204E6574776F726B53657276696365202D70202D732043727970745376632D20557365723A204E616D653A204E5420415554484F524954595C4E4554574F524B20534552564943452C205349443A532D312D352D3230</Binary>
</EventData>
</Event>
Please confirm the following questions:
1.Is the VSS service started normally?
2.Is the COM+event system service started normally?
3.Is the Microsoft Volume Shadow Provider service started normally?
4.Run the vssadmin list providers command to view the list of VSS providers
Here is an article about the CryptSVC bug causing this issue.You can try to stop CryptSVC manually in the service or create a task before restarting or shutting down W10.
https://answers.microsoft.com/en-us/windows/forum/all/windows-10-vss-event-id-13/cf3f6a83-85a7-4865-9aef-dd308487229e
Best Regards,
Wesley Li