Interesting. I'll mull that over. Kurt
On Fri, Mar 31, 2017 at 1:26 PM, Eric Morrison <eric.morri...@outlook.com> wrote: > Could be backup software doing some System state or VSS stuff. > > > > Sent from Mail for Windows 10 > > > > From: Kurt Buff > Sent: Friday, March 31, 2017 3:24 PM > To: ntsysadm > > > Subject: [NTSysADM] WTF? Way too many Volume/Disk GUIDs > > > > I've got a 2012R2 file server with some problems. It recently locked > up, and we had to force boot it through the VMware interface. > > It's got 13 drives with letters, plus the usual system reserved partition. > > Here are the volume GUIDs from PS: > # GWMI -namespace root\cimv2 -class win32_volume | select > driveletter, deviceid | sort deviceid | ft -auto > > driveletter deviceid > ----------- -------- > T: \\?\Volume{0b58699a-c6d4-11e5-80ef-005056b43cf4}\ > J: \\?\Volume{27499b01-b5b4-43d7-98ae-17dbd948607e}\ > G: \\?\Volume{3e50ec99-13b5-4d52-8091-2feeb695943f}\ > \\?\Volume{3ec25e24-a333-11e3-80b4-806e6f6e6963}\ > C: \\?\Volume{3ec25e25-a333-11e3-80b4-806e6f6e6963}\ > D: \\?\Volume{3ec25e29-a333-11e3-80b4-806e6f6e6963}\ > P: \\?\Volume{410169c9-33c3-11e6-80fb-005056b43cf4}\ > X: \\?\Volume{515ebcdb-5c2e-11e4-80d4-005056b43cf4}\ > K: \\?\Volume{79470a07-567a-11e4-80d3-005056b43cf4}\ > I: \\?\Volume{88aa852a-1610-4875-8265-bb3c0612e5ef}\ > W: \\?\Volume{a94520fe-16c6-11e6-80f7-005056b43cf4}\ > S: \\?\Volume{cba78efd-34cd-11e6-80fb-005056b43cf4}\ > U: \\?\Volume{cc4e4794-f6ef-4141-980a-87a984c191b5}\ > M: \\?\Volume{d1ddfc3d-fa04-11e6-8109-005056b43cf4}\ > > After the machine was back up and running, I started combing the > system eventlog, and noticed something weird - there were a lot of > volume GUIDs that didn't match my list above. > > I finally exported the system event log as a CSV file (it goes back as > far as January of 2016), and cut and sorted the output, and found 2891 > unique volume GUIDs! > > That's just insane, and I have no explanation for this. > > Does anyone here have a clue to what this is about? > > Kurt > >