Earlier snapshots are deleted after you restore multiple copy-on-write snapshots in consecutive order in Windows Vista or in Windows Server 2008
Consider the following scenario:
- On a computer that is running Windows Server 2008 or Windows Vista, you configure a diff area on a volume. Additionally, you specify that snapshots will be created on another volume.
- You create copy-on-write snapshots for a volume.
- You restore these snapshots in order from the latest snapshot to the earliest snapshot.
In this scenario, all earlier snapshots are deleted unexpectedly after the second snapshot is restored. Additionally, the following Error event is logged in the System log:
Event ID: 29
Description: The shadow copies of volume
were aborted during detection.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB975803.