Unfortunately each time I've rebooted the collection of logs is automatically stopped in the app. The most recent occurrence had the pool fail within 30 minutes.
I found the following error message in Event Viewer:
"Volume Shadow Copy Service error: Unexpected error CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy1\,0x80000000,0x00000003,...). hr = 0x80070001, Incorrect function. . Operation: Processing PreFinalCommitSnapshots Context: Execution Context: System Provider"
In this specific occurrence the time was 8/20 @ 5:56:41 pm CT. The event source was "VSS", the Event ID was "12289", the task category was none, and the event level was "Error". After this error occurred the pool was gone again (I haven't yet rebooted again due to other ongoing backup tasks that are a higher priority).
Less than a minute later there is a single additional event for the source "VSS" which was at time 5:57:36 pm CT. The Event ID, task category, and event level were the same as the previous event. The event details are nearly identical except the second error was ShadowCopy2 rather than ShadowCopy1.
"Volume Shadow Copy Service error: Unexpected error CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\,0x80000000,0x00000003,...). hr = 0x80070001, Incorrect function. . Operation: Processing PreFinalCommitSnapshots Context: Execution Context: System Provider"
There are three warnings/errors in the 15 minutes prior to the first event listed above and both of these events are for the source "Kernel-EventTracing". The first is a warning and the second event is an error.
The first event (warning) which occurred at 5:56:12 (event ID 4 with task category of "logging") is:
"The maximum file size for session "ReadyBoot" has been reached. As a result, events might be lost (not logged) to file "C:\WINDOWS\Prefetch\ReadyBoot\ReadyBoot.etl". The maximum files size is currently set to 20971520 bytes."
The second event (error) which occurred at 5:56:12 (event ID 3 with task category of "session") is:
"Session "ReadyBoot" stopped due to the following error: 0xC0000188"
The third event is an error for source CAPI2 which occurred at 5:56:31 (event ID 513 with task category of "none") is:
"
Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Access is denied. .
"
I suspect this information is not of much use without the more detailed log files but unfortunately for this occurrence this is all that I have available.
~John