The server's call to a system service failed unexpectedly. Event ID 2000
I have the fallowing occruing about every 5 seconds any ideas? Here is the message
This is the only event ID's I have on this server. Everything else looks clean.
Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2000
Date: 6/21/2005
Time: 11:09:00 AM
User: N/A
Computer: FILESRV
Description:
The server's call to a system service failed unexpectedly.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00040000 00540001 00000000 c00007d0
0010: 00000000 c00000bb 00000000 00000000
0020: 00000000 00000000 04c20337
This is the only event ID's I have on this server. Everything else looks clean.
Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2000
Date: 6/21/2005
Time: 11:09:00 AM
User: N/A
Computer: FILESRV
Description:
The server's call to a system service failed unexpectedly.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00040000 00540001 00000000 c00007d0
0010: 00000000 c00000bb 00000000 00000000
0020: 00000000 00000000 04c20337
ASKER
I looked that one over it seems to apply more to WIndows NT4.0 however I did look into it this server is a Windows 2003 server with no printers connected to it.
Are there any shares on the server that map to other resources?
ASKER
There are shares on the machine yes but only the local shares. its not shareing resources from another deivces.
Shares are all on the local HD.
Shares are all on the local HD.
Ok..this is interesting. Is anything on the server suffering because of this problem? Are there any other logs - at a point in time just before all these errors showed up?
ASKER
No nothing apears to be suffering from the issue. Just concerning hoping this is not the start of something else more major. I have looked through the event logs and dont' see any other problems other than the one mentioned above.
I hear you...
Did you go back before these errors started in the logs to see what things might be there? If there are that many errors on this, I would be surprised if you could go that far back unless you save your logs regularly.
Have you added any software lately?
Did you go back before these errors started in the logs to see what things might be there? If there are that many errors on this, I would be surprised if you could go that far back unless you save your logs regularly.
Have you added any software lately?
ASKER
Unfortuneatly I don't have any logs prior to this message.
There has been no newly installed software other than of course the Microsoft secuirty patches that come out.
Configuration has not changed been the same for about a year now.
There has been no newly installed software other than of course the Microsoft secuirty patches that come out.
Configuration has not changed been the same for about a year now.
Did SP1 get installed via Automatic Updates?
Are there any SAMBA/Linux boxes in your network?
ASKER
There are no linux boxes on that network.
Windows 2003 SP1 did get automatically installed via Windows update.
I'm checking out the KB articles listed on event.net now maybe its a buffer issue as some of them suggest. I'll report back with those anwers. Thanks for everyones help.
Windows 2003 SP1 did get automatically installed via Windows update.
I'm checking out the KB articles listed on event.net now maybe its a buffer issue as some of them suggest. I'll report back with those anwers. Thanks for everyones help.
ASKER
Ok did some further checking still not seeing what this might be. The q articles at event.net did not seem to relate. The closest one was the one about printing which I had already looked at. There are no printers attached to this machine nor any shared printers. There are some shares but they are shares off the local HD not off any removeable media or from any other server.
Confused.
Confused.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
OK looks like I found the problem though I have no idea why
If I remove
http://support.microsoft.com/default.aspx?kbid=896422
Everything is fine.
If I remove
http://support.microsoft.com/default.aspx?kbid=896422
Everything is fine.
Amendment: I'd like to uninstall them, but for some reason there are no uninstall options in Add/Remove programs, so currently I can't. Having looked through the KBs, my suspicion is that it may be KB896422 (http://www.microsoft.com/technet/security/bulletin/MS05-027.mspx)... unfortunately I can't confirm this.
karmstrong, do you have the above updates installed, and are you able to uninstall them?
karmstrong, do you have the above updates installed, and are you able to uninstall them?
ASKER
yes i am able to uninstall KB896422 and since I have my server works fine without that patch.
Sorry, missed your reply between my posts.
I'm glad we have isolated the problem... I now just need to find a way to uninstall the patch from my system!!
I'm glad we have isolated the problem... I now just need to find a way to uninstall the patch from my system!!
Hi there
I came across, because i have the exactly same problem. I was lucky, i could remove KB896422 via Add Remove Programs in Control Panel, and the problem is solved.
It is posible to remove it mannualy, http://www.microsoft.com/technet/security/bulletin/MS05-027.mspx describes how to. Go to section General Information and expand Security Update Information and then expand Windows Server 2003 (all versions) and go down to the section Removal Information.
Hope this helps
I came across, because i have the exactly same problem. I was lucky, i could remove KB896422 via Add Remove Programs in Control Panel, and the problem is solved.
It is posible to remove it mannualy, http://www.microsoft.com/technet/security/bulletin/MS05-027.mspx describes how to. Go to section General Information and expand Security Update Information and then expand Windows Server 2003 (all versions) and go down to the section Removal Information.
Hope this helps
ASKER
It seems more people are having this same issue and its all solved by removing this particular patch. The question becomes what does this patch do that causes this erorr and why?
lol, no that's a new question entirely ;)
However, the patch replaces srv.sys with a new version. And Microsoft obviously didn't test it very well, as it causes the errors. As for the exact details of what is broken by the patch and why, that is something for Microsoft or someone with a lot of time one their hands to work out!!
However, the patch replaces srv.sys with a new version. And Microsoft obviously didn't test it very well, as it causes the errors. As for the exact details of what is broken by the patch and why, that is something for Microsoft or someone with a lot of time one their hands to work out!!
same issue on win2k3 sp1 - updated patches anyone talk to ms on this?
ASKER
This one I finally resolved by re appling service pack 1 to the windows 2003 server now everything works fine and I don't see the erorr message anymore and yes the patch is once again installed.
I also heard this message comes up if you have the RC version of SP1 and not the RTM installed.
I also heard this message comes up if you have the RC version of SP1 and not the RTM installed.
As far as I can see above, I answered the question... so why would the points be refunded?
>>yes i am able to uninstall KB896422 and since I have my server works fine without that patch<<
Closed, 500 points refunded.
modulo
Community Support Moderator
modulo
Community Support Moderator
http://support.microsoft.com/default.aspx?scid=kb;en-us;134759