Could be backup software doing some System state or VSS stuff. Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10
From: Kurt Buff<mailto:kurt.b...@gmail.com> Sent: Friday, March 31, 2017 3:24 PM To: ntsysadm<mailto:NTSysADM@lists.myitforum.com> Subject: [NTSysADM] WTF? Way too many Volume/Disk GUIDs I've got a 2012R2 file server with some problems. It recently locked up, and we had to force boot it through the VMware interface. It's got 13 drives with letters, plus the usual system reserved partition. Here are the volume GUIDs from PS: # GWMI -namespace root\cimv2 -class win32_volume | select driveletter, deviceid | sort deviceid | ft -auto driveletter deviceid ----------- -------- T: \\?\Volume{0b58699a-c6d4-11e5-80ef-005056b43cf4}\ J: \\?\Volume{27499b01-b5b4-43d7-98ae-17dbd948607e}\ G: \\?\Volume{3e50ec99-13b5-4d52-8091-2feeb695943f}\ \\?\Volume{3ec25e24-a333-11e3-80b4-806e6f6e6963}\ C: \\?\Volume{3ec25e25-a333-11e3-80b4-806e6f6e6963}\ D: \\?\Volume{3ec25e29-a333-11e3-80b4-806e6f6e6963}\ P: \\?\Volume{410169c9-33c3-11e6-80fb-005056b43cf4}\ X: \\?\Volume{515ebcdb-5c2e-11e4-80d4-005056b43cf4}\ K: \\?\Volume{79470a07-567a-11e4-80d3-005056b43cf4}\ I: \\?\Volume{88aa852a-1610-4875-8265-bb3c0612e5ef}\ W: \\?\Volume{a94520fe-16c6-11e6-80f7-005056b43cf4}\ S: \\?\Volume{cba78efd-34cd-11e6-80fb-005056b43cf4}\ U: \\?\Volume{cc4e4794-f6ef-4141-980a-87a984c191b5}\ M: \\?\Volume{d1ddfc3d-fa04-11e6-8109-005056b43cf4}\ After the machine was back up and running, I started combing the system eventlog, and noticed something weird - there were a lot of volume GUIDs that didn't match my list above. I finally exported the system event log as a CSV file (it goes back as far as January of 2016), and cut and sorted the output, and found 2891 unique volume GUIDs! That's just insane, and I have no explanation for this. Does anyone here have a clue to what this is about? Kurt
