Event ID 2000 on NT server

G

Guest

Guest
Archived from groups: microsoft.public.windowsnt.misc (More info?)

Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2000
Date: 04/05/2004
Time: 10:30:52
User: N/A
Computer: SRV-101560
Description:
The server's call to a system service failed unexpectedly.
Data:
0000: 00040000 00540001 00000000 c00007d0
0010: 00000000 c0000043 00000000 00000000
0020: 00000000 00000000 05180bc5


This error occurs multple times a day on one of our NT servers. It
seems to occur only during business hours and seems to be more
frequent when more people are working on the server. I couldn't find
any solution and the c0000043 word seems to be important, but I can't
find what it means.
Any ideas?
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsnt.misc (More info?)

--------------------
| From: m.vanschaaijk@gmx.net (Martijn van Schaaijk)
| Newsgroups: microsoft.public.windowsnt.misc
| Subject: Event ID 2000 on NT server
| Date: 4 May 2004 06:38:28 -0700
| Organization: http://groups.google.com
| Lines: 22
| Message-ID: <3fe16815.0405040538.12a8ca57@posting.google.com>
| NNTP-Posting-Host: 194.73.255.142
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1083677908 7311 127.0.0.1 (4 May 2004
13:38:28 GMT)
| X-Complaints-To: groups-abuse@google.com
| NNTP-Posting-Date: Tue, 4 May 2004 13:38:28 +0000 (UTC)
| Path:
cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08.phx.gbl!news-out.cwi
x.com!newsfeed.cwix.com!prodigy.com!news.glorb.com!postnews1.google.com!not-
for-mail
| Xref: cpmsftngxa10.phx.gbl microsoft.public.windowsnt.misc:347387
| X-Tomcat-NG: microsoft.public.windowsnt.misc
|
| Event Type: Error
| Event Source: Srv
| Event Category: None
| Event ID: 2000
| Date: 04/05/2004
| Time: 10:30:52
| User: N/A
| Computer: SRV-101560
| Description:
| The server's call to a system service failed unexpectedly.
| Data:
| 0000: 00040000 00540001 00000000 c00007d0
| 0010: 00000000 c0000043 00000000 00000000
| 0020: 00000000 00000000 05180bc5
|
|
| This error occurs multple times a day on one of our NT servers. It
| seems to occur only during business hours and seems to be more
| frequent when more people are working on the server. I couldn't find
| any solution and the c0000043 word seems to be important, but I can't
| find what it means.
| Any ideas?
|


Martijn -

c0000043 is sharing violation indicative. Basically what is taking place
here is the some files on the server are being accessed and locked and are
not unlocked for others to use.



In many cases this can only be determined correctly by analyzing a trace of
the network traffic between the client and the server while running the
application. However, a quick test can be performed by disabling this
optimization and not caching open files. To disable oplocks and caching
open files on the server as a test, follow these steps:


(Please note that the registry path may wrap)


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters



EnableOplocks REG_DWORD 0 or 1

Default: 1 (true)



Value Name: CachedOpenLimit

Data Type: REG_DWORD

Data: 0


Hope this helps,

Derek Wirch, MCSE+I (NT 4.0), MCP (Win2k)
Microsoft Exchange Support Engineer
Enterprise Messaging Support - Admin
Email: a-derekw@microsoft.com

Please respond in the group, so all users may benefit.

Even if you're on the right track, you'll get run over if you just sit
there.

SECURITY ANNOUNCEMENT:
Please subscribe to the FREE Microsoft® Security Notification Service on
http://register.microsoft.com/subscription/subscribeme.asp?ID=135 an e-mail
alert service geared toward IT professionals. We use this service to notify
subscribers when we release an important security bulletin or virus alert,
and also to make them aware that they might need to take action to guard
against a circulating threat. You should also bookmark Microsoft Security
Bulletin's page available at
http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/
to view all our bulletins. To insure you are current with all security
patches visit Windows Update at http://windowsupdate.microsoft.com to
install patches. Running the SCAN program from the Windows Update site will
keep you up-to-date.
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsnt.misc (More info?)

Thanks Derek,

I temporarily turned off the oplocks and the caching of open files.
The error has now disappeared. Hopefully I can find what application
caused the problem, but a first quick look seems to point at Domino.