troubleshooting Question

Event ID 509 NTDS ISAM

Avatar of Siv
SivFlag for United Kingdom of Great Britain and Northern Ireland asked on
Server HardwareWindows Server 2012Dell
40 Comments2 Solutions5041 ViewsLast Modified:
Hi,
I have a server 2012r2 box which runs as a VM on Dell PowerEdge hardware.  Most days I get at least one entry saying the following in the logs:

Critical Errors in Event Logs in Last 24 Hours
                        
 NTDS ISAM      Event ID: 509
NTDS (668) NTDSA: A request to read from the file "C:\Windows\NTDS\ntds.dit" at offset 15065088 (0x0000000000e5e000) for 8192 (0x00002000) bytes succeeded, but took an abnormally long time (21 seconds) to be serviced by the OS. In addition, 4 other I/O requests to this file have also taken an abnormally long time to be serviced since the last message regarding this problem was posted 14920 seconds ago. This problem is likely due to faulty hardware. Please contact your hardware vendor for further assistance diagnosing the problem.
Last occurrence: 30 November 2014 10:55:11      Total occurrences: 1

Obviously this is quite alarming as you think that you may have disk faults developing.  The first time this came up I ran a disk check on the physical host server that this VM runs in and it found no faults on the server's hard disks?

I have looked into other reports of this on the web and can't see that any of the issues of this type relate to my hardware configuration (most seem to have occurred on Server 2008 and relate to hardware issues).

Is this one of those errors that just gets reported randomly and can be ignored or is there something else more serious going on?

I did wonder if it was only occurring when the server backup was going on, but that is not the case as some times the errors occur before or after the backup window?

Any help appreciated.

Siv
ASKER CERTIFIED SOLUTION
Dan McFadden
Technical Lead - Active Directory

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 2 Answers and 40 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 40 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros