RE: Event errors after power outage crash

Manfred

I have just checked all the SBS's I manage with regard to your 4th
suggestion and none of them have Volume Shadow Copy or COM+ System
Application services running. They all set to manual, with only Distributed
Transaction Coordinator set to automatic.

"Manfred Zhuang [MSFT]" wrote:

Hello Customer,

Thank you for posting here.

From your post, I understand that after a power failure, three errors are
received every 5 minutes.

Firstly I would like to explain that this issue can be complex sine the
power failure might corrupt some system files. We may have to do a server
restore to completely resolve the problem. Your time and effort will be
appreciated.

Before doing so, let's try following steps to see if it helps:

Suggestion 1: Disable SharePoint Services Search Refresh timer job
==================
1. Open Central Administration > Operations > Timer Job Definitions.
2. Locate the "SharePoint Services Search Refresh" entry and click upon it.
3. Click the disable button.

Suggestion 2: Update the password for the Windows SharePoint Search service
account
===================
1. Open Central Administration > Operations > Services on Server.
2. Click Stop to stop the Windows SharePoint Service Search service.
3. Click Start to restart it.
4. In the Windows SharePoint Services Search Service Settings page, input
the password for each account.
5. Click OK.

Suggestion 3: Re-register VSS files
=================
1. Stop the Volume Shadow Copy service: Open a command prompt and change
directories to \WINDOWS\system32 (this is important when you begin
registering the DLLs):

net stop vss

2. Then register the following DLLs and services (be sure you're still in
the WINDOWS\system32 directory at your command prompt):

regsvr32 ole32.dll
regsvr32 vss_ps.dll
Vssvc /Register
regsvr32 /i swprv.dll
regsvr32 /i eventcls.dll
regsvr32 es.dll
regsvr32 stdprov.dll
regsvr32 vssui.dll
regsvr32 msxml.dll
regsvr32 msxml3.dll
regsvr32 msxml4.dll

Start the Volume Shadow Copy service by running "net start vss".

Suggestion 4: Check services
==========
1. Click Start-->Run, type services.msc and click OK.

2. Please check following services:

Volume Shadow Copy
COM+ System Application
Distributed Transaction Coordinator.

Please ensure they are started and the startup type is Automatically.

I hope the above information is helpful to you. However, if the issue
persists, please help me gather following information:

Please download the MPS Report tool from the following link and run it on
the SBS server, then send the generated CAB file to my mailbox
v-mzhuan@xxxxxxxxxxxxx for further investigation so that we can find what
the root cause is:

http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_SETUPPerf.EX

For your information:
http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F-
88B7-F9C79B7306C0&displaylang=en

Please try the above steps at your earliest convenience. If you have any
concern, please feel free to let me know.

Best regards,

Manfred Zhuang(MSFT)
Microsoft Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Event errors after power outage crash
| thread-index: Acfl5Vn5MFhBrGDrTQCR7Q0wB8j7Vg==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?QnJhZCBDaHJpc3RpZQ==?=
<BradChristie@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Event errors after power outage crash
| Date: Thu, 23 Aug 2007 17:26:02 -0700
| Lines: 107
| Message-ID: <7BFA1E88-5937-4405-BA01-4A032F380C9C@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:58558
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Had a power outage. UPS was coping fine, but soon after shut down had
started
| all power to the server was lost. Now I have these three errors every 5
| minutes.
|
| Event Type: Error
| Event Source: VSS
| Event Category: None
| Event ID: 11
| Date: 24/08/2007
| Time: 10:00:41 am
| User: N/A
| Computer: SERVER2
| Description:
| Volume Shadow Copy Service information: The COM Server with CLSID
| {4e14fba2-2e22-11d1-9964-00c04fbbb345} and name CEventSystem cannot be
| started. [0x800401f0]
| Data:
| 0000: 2d 20 43 6f 64 65 3a 20 - Code:
| 0008: 57 52 54 57 52 54 49 43 WRTWRTIC
| 0010: 30 30 30 30 33 30 34 34 00003044
| 0018: 2d 20 43 61 6c 6c 3a 20 - Call:
| 0020: 57 52 54 57 52 54 49 43 WRTWRTIC
| 0028: 30 30 30 30 33 30 31 32 00003012
| 0030: 2d 20 50 49 44 3a 20 20 - PID:
| 0038: 30 30 30 30 35 30 32 38 00005028
| 0040: 2d 20 54 49 44 3a 20 20 - TID:
| 0048: 30 30 30 30 35 35 36 30 00005560
| 0050: 2d 20 43 4d 44 3a 20 20 - CMD:
| 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog
| 0060: 72 61 6d 20 46 69 6c 65 ram File
| 0068: 73 5c 43 6f 6d 6d 6f 6e s\Common
| 0070: 20 46 69 6c 65 73 5c 4d Files\M
| 0078: 69 63 72 6f 73 6f 66 74 icrosoft
| 0080: 20 53 68 61 72 65 64 5c Shared\
| 0088: 57 65 62 20 53 65 72 76 Web Serv
| 0090: 65 72 20 45 78 74 65 6e er Exten
| 0098: 73 69 6f 6e 73 5c 31 32 sions\12
| 00a0: 5c 42 49 4e 5c 6d 73 73 \BIN\mss
| 00a8: 65 61 72 63 68 2e 65 78 earch.ex
| 00b0: 65 22 20 20 20 20 20 20 e"
| 00b8: 2d 20 55 73 65 72 3a 20 - User:
| 00c0: 4e 54 20 41 55 54 48 4f NT AUTHO
| 00c8: 52 49 54 59 5c 4c 4f 43 RITY\LOC
| 00d0: 41 4c 20 53 45 52 56 49 AL SERVI
| 00d8: 43 45 20 20 20 20 20 20 CE
| 00e0: 2d 20 53 69 64 3a 20 20 - Sid:
| 00e8: 53 2d 31 2d 35 2d 31 39 S-1-5-19
|
|
| Event Type: Error
| Event Source: VSS
| Event Category: None
| Event ID: 8193
| Date: 24/08/2007
| Time: 10:00:41 am
| User: N/A
| Computer: SERVER2
| Description:
| Volume Shadow Copy Service error: Unexpected error calling routine
| CoCreateInstance. hr = 0x800401f0.
| Data:
| 0000: 2d 20 43 6f 64 65 3a 20 - Code:
| 0008: 57 52 54 57 52 54 49 43 WRTWRTIC
| 0010: 30 30 30 30 33 30 35 30 00003050
| 0018: 2d 20 43 61 6c 6c 3a 20 - Call:
| 0020: 57 52 54 57 52 54 49 43 WRTWRTIC
| 0028: 30 30 30 30 33 30 31 32 00003012
| 0030: 2d 20 50 49 44 3a 20 20 - PID:
| 0038: 30 30 30 30 35 30 32 38 00005028
| 0040: 2d 20 54 49 44 3a 20 20 - TID:
| 0048: 30 30 30 30 35 35 36 30 00005560
| 0050: 2d 20 43 4d 44 3a 20 20 - CMD:
| 0058: 22 43 3a 5c 50 72 6f 67 "C:\Prog
| 0060: 72 61 6d 20 46 69 6c 65 ram File
| 0068: 73 5c 43 6f 6d 6d 6f 6e s\Common
| 0070: 20 46 69 6c 65 73 5c 4d Files\M
| 0078: 69 63 72 6f 73 6f 66 74 icrosoft
| 0080: 20 53 68 61 72 65 64 5c Shared\
| 0088: 57 65 62 20 53 65 72 76 Web Serv
| 0090: 65 72 20 45 78 74 65 6e er Exten
| 0098: 73 69 6f 6e 73 5c 31 32 sions\12
| 00a0: 5c 42 49 4e 5c 6d 73 73 \BIN\mss
| 00a8: 65 61 72 63 68 2e 65 78 earch.ex
| 00b0: 65 22 20 20 20 20 20 20 e"
| 00b8: 2d 20 55 73 65 72 3a 20 - User:
| 00c0: 4e 54 20 41 55 54 48 4f NT AUTHO
| 00c8: 52 49 54 59 5c 4c 4f 43 RITY\LOC
| 00d0: 41 4c 20 53 45 52 56 49 AL SERVI
| 00d8: 43 45 20 20 20 20 20 20 CE
| 00e0: 2d 20 53 69 64 3a 20 20 - Sid:
| 00e8: 53 2d 31 2d 35 2d 31 39 S-1-5-19
|
|
| Event Type: Error
| Event Source: Windows SharePoint Services 3
| Event Category: Timer
| Event ID: 6398
| Date: 24/08/2007
| Time: 10:00:42 am
| User: N/A
| Computer: SERVER2
| Description:
| The Execute method of job definition
| Microsoft.SharePoint.Search.Administration.SPSearchJobDefinition (ID
| dfb5888c-13cd-4344-937b-6854f8404a98) threw an exception. More
information is
| included below.
| Attempted to perform an unauthorized operation.
|


.