Drive Snapshot - VSS

Drive Snapshot offers the possibility to use the Windows build in Volume Snapshot Copy Service (VSS) for the creation of consistent images.

Main advantage compared to the internal Drive Snapshot Driver is the ability to image a running MS Exchange server, and also to image several partitions at the same time.
(See below for technical Details).


By using VSS, several drives can be imaged at the same time:

Technical Details

Since Windows XP Windows implements a 'Volume ShadowCopy Service' (VSS), that essentially provides the same service as the build in Snapshot driver - that is a consistent snapshot of one (or more) partitions at a fixed point in time.
Additionally, it defines and implements a broadcast similar to: 

To everybody who cares about VSS: would you please go into a consistent state, bring transactions to a recoverable state, etc., and than please be write for some (short) time because I'm going to make a backup.

At this time, the current state of the disk is frozen, and made available for backup programs until.
Changes to the drive while the backup is active are written to some reserved space on the disk, until the backup finishes and tells VSS to release the buffers.

VSS advantages

VSS disadvantages

Implementation of VSS vs.
internal driver

As both drivers have their pros and cons, by default the VSS driver is only used if

else the internal driver is used.
You may change this by using the [Advanced Options] dialog, or from command line by


Using Volume Shadow Copy Service (VSS) with and without explicit usage of writers

The Volume Shadow Copy Service (VSS) of Windows has been available since Windows XP/2003.
It can be used by application to create a shadow copy of one or more partitions.
The components that communicate with the VSS are called VSS writer.
You can before and after a backup perform actions.
A list of the available system writers can obtained by the command:

vssadmin list writers

Snapshot can use VSS in two different modes.

VSS without explicit usage of writers

  • Creates a shadow copy, that contains a konsistent copy of all existing data.
  • Snapshot uses this mode automatically if more then one partition is selected, or MS Exchange is detected.
    (in Windows SBS2003 the necessary Exchange writer is disabled by default, and must be enabled; see
  • writers are not used in an explicit way, and no specific actions are taken.
  • Transaction logs on an Exchange server will not be truncated after the backup, and a Hyper-V host does not notify the virtual machines running on the scheduled backup.

  • VSS with and without explicit usage of writers

  • Snapshot uses this mode only if instructed (Advanced Backup Options dialog).
    In this mode all started VSS writers are notified about the starting backup, and can go ahead and carry out special operations
    They are also notified about successful backup, and may perform custom actions, like truncating transaction logfiles.
  • In this mode a Hyper-V Server would stop virtual machines running on it for a short time until the the shadow copy has been taken.
  • An Exchange server will - after snapshot signals a successful backup - truncate transaction logs
  • Each writer is responsible for each owns actions.
  • Snapshot has no effect on the actions carried out by the writers.
    A detailed control of the Writers is possible by using the command line, for example if you already have a dedicated Exchange backup feature and do not want that snapshot triggers the deletion of the transaction logs:  
    Copyright 2001-2018     Tom Ehlert Software