EPDR/360 Microsoft Volume Shadow Copy hangs server 2025

VidurajeViduraje
in WatchGuard EPDR/EDR/EPP

There is an issue in Server 2025 standard with latest patches installed.

Settings > Per-computer Settings > Shadow Copies

'Enable Windows Shadow Copies to create a backup of computer files every day
' was enabled.

All 3 servers hang on the login screen, the credential prompt does not come up. Servers require a forced reboot.
Once the option is disabled from EPDR/360, the servers work fine.

The support advice was to disable shadow copies option, make sure defender is disabled.

The hangs do not leave any log entries. The initial point entries related to VSS were two error event IDs.
8193
13

I've noticed a warning certificate issue and a perforlib issue when they were about to hang, but can't confirm they were directly related.

There has been a similar issue in 2024, but the installation is about two months old, All new Server 2025 DCs, WatchGuard Agent reinstalled twice.
https://techsearch.watchguard.com/KB?SFDCID=kA1Vr0000001dqXKAQ

Has anyone had a similar issue? What steps did you take to fix the issue? TIA.

Comments

  • David_CarroDavid_Carro WatchGuard Representative

    hello @Viduraje

    Please open a case to support, as they have a solution to your case.

    Kind regards,

    David Carro | Technical support
    WatchGuard Technologies, Inc. | www.watchguard.com

Sign In to comment.