Consolidation and Acquisitions

<?xml:namespace prefix = o ns = "Urn:schemas-microsoft-com:office:office"/>

Windows2kserver Common error collection and interpretation in the system log

Article last modified on 2002-2-5

--------------------------------------------------------

The information article applies to:

Microsoft Windows Advanced Server

--------------------------------------------------------

error log 1:

Description:

Source "Perflib": The Service "PerfDisk" in DLL "C:/winnt/system32/perfdisk.dll" in the open process takes longer than the determined wait time.

Explanation:

The complete log is probably:

Workaround:

I think this error may be related to slow disk read speed or other applications frequently reading hard drives. You can adjust the time-out value.

Please download the Microsoft Extensible Performance Counter List tool to the following connection:

Http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/exctrlst-o.asp

It can help you. error log 2:

Description:

Source "Ftpctrs": FTP performance statistics cannot be collected.

Explanation:

The complete log is probably:

This EventID1000 explanation is given in the article "Info:events for Performance Monitor Extensions (Q226494)":

Event id:1000
Detail text:access to performance data is denied to (username) as attempted from (calling module name)

Interpretation:the following key is checked for security access:

Workaround:

Simply disable off FTP to collect performance data.

Important notes:

The above two issues are all about performance counters, we have the following recommendations:

If you see a log with an event ID of 1000, you first have to look for questions about permissions;

If you see a log with an event ID of 1003, you may have a corrupted or incorrect version of the DLL;

If you see a log with an event ID of 2002, you may need to adjust the value of the open time in the registry.

ask for help:

If you want to know what these event logs mean, go to the following connection query and simply fill in the EventID and event Source:

Http://www.eventid.net/search.asp

error log 3:

Description:

Phenomenon:

Event Type: Error

Event Source: Server

Event Type: None

Event id:2506

Date: 2002-1-25

Event: 8:54:43

User: N/A

Computer: Zhengyun

Describe:

The value IRPStackSize in the registry key lanmanserver/parameters of the server is invalid. The value is ignored and processing continues.

Data:

0000:57 xx ...

See:

"Event ID 2506 Error Message when you Start Windows Q238316"

error log 4:

Description:

Phenomenon:

Event Type: Error

Event Source: EventLog

Event Type: None

Event id:6008

Date: 2002-1-25

Event: 10:50:01

User: N/A

Computer: Zhengyun

Describe:

The last time the system 10:44:27 was closed on 2002-1-25 was unexpected.

Data:

0000:d2 07 01 00 05 00 19 00ò ....

0008:0A 2c 1b XX 2d:,...-.

0010:d2 07 01 00 05 00 19 00ò ....

0018:02 2c 1b XX 2d:,...-.

Explain:

Event Message:

The previous system shutdown at name is unexpected.

Source	Event Log	Event ID	Event Type
EventLog	System	6008	Error

Explanation:

This event indicates the inconsistency exists between the Browser service and the Server service.

User Action:

Contact the person with administrative rights on your computer if this message was in the event log in event Viewer more th An 6 times. Otherwise, stopping and restarting the server would eliminate the error.

error log 5:

Description:

Phenomenon:

Event Type: Warning

Event Source: MRXSMB

Event Type: None

Event id:3019

Date: 2002-2-2

Event: 12:00:24

User: N/A