Windows 2012 R2 Event Id 51 Durning Bakup

Windows 2012 R2 Standard 64 Bit

Had this error a week ago just replaced the UDB drive last night  this is a 2 TB USB external drive.

Last nights job ran ok no problems

Tonight 4 event 51 errors

Log Name:      System
Source:        disk
Date:          6/24/2015 7:31:07 PM
Event ID:      51
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      SERV011.FQDN.com
Description:
An error was detected on device \Device\Harddisk3\DR7 during a paging operation.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="disk" />
    <EventID Qualifiers="32772">51</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-06-24T23:31:07.450243800Z" />
    <EventRecordID>3960</EventRecordID>
    <Channel>System</Channel>
    <Computer>TGCS011.our.network.tgcsnet.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>\Device\Harddisk3\DR7</Data>
    <Binary>030080000100000000000000330004802D0100000E0000C000000000000000000000000000000000F363660000000000FFFFFFFF010000005800000802000003FE20101242032040000200003C00000000D9BD3701E0FFFF08AA973A01E0FFFF0000000000000000F0665B3A01E0FFFF0000000000000000A806201D000000008800000000001D2006A8000000010000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>


Any thoughts?

Thanks

Tom
LVL 23
Thomas GrassiSystems AdministratorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

noxchoGlobal Support CoordinatorCommented:
Here is a description of this event: https://support.microsoft.com/en-us/kb/244780

And here is given feedback from many users: http://www.eventid.net/display.asp?eventid=51&eventno=793&source=Disk&phase=1

In my experience if the event is not coming regularly and no other corresponding events are logged - you can safely ignore it. Especially when the drive to which this event refers shows itself healthy after CHKDSK and surface tests.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Thomas GrassiSystems AdministratorAuthor Commented:
noxcho

First thanks for responding.


I have other Windows 2012 Servers that this does not happen
It is not hardware problem

It is a timeout error and the timeout is from the backup software which is wbadmin

But I have found no way to modify the backup software

There should be a registry setting

Thoughts
0
noxchoGlobal Support CoordinatorCommented:
Even if you get this error - the backups do run properly, am I right? Or do I understand it wrong?

In the second link which I posted above one user wrote:
In my case, going to "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" and setting the value for "EnablePrefetcher" to 1 solved the problem.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

The Backup reports successful run but if we ignore errors then how is one to know for sure.

Microsoft should fix this don't you think.

I have one more Windows 2012 Server to build which will be almost exactly like this one in question and then will see for sure.

I saw that registry entry but the person who posted it did not give much information  

I will give that a try

Thanks
0
noxchoGlobal Support CoordinatorCommented:
We have discussed once this Event 51 a lot on this EE forum and there was exactly the same behavior where one of three servers were generating this event. And the backups were ok. It is telling that problem occurred during paging, not during backup.
Simply ignore it and use further the drive. Yes, MS should have fixed it like many other issues but as you know MS does not listen to us :)
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Yes it is very strange how one machine works fine and another does not.
All three of my Windows 2012 Server are Dell Power Edge 860
The one that works has more processes then the one that does not it is a WebServer  with SharePoint etc.
It has more memory than the other two maybe that's it?

I hope the reg fix works will see tonight after the backup runs.

Will post results.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho


While last night after the reg change no errors

Tonight they occurred again.

Has to be a software issue.

Thoughts
0
noxchoGlobal Support CoordinatorCommented:
Do you have a page file enabled? What size?
As I mentioned already even Microsoft says it is safe to ignore this event.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Yes Micorosoft says safe to ignore but that does not explain why the messages occur.
From Microsoft that is just an excuse for poor code
They need to open a line so us techs can contact them with issues like this.
But now adays they charge $500 per call way to much to get help on a bug they created.

Anyhow I do have Virtual Memory settings

Automatically manage paging file size for all drives is checked

System managed size    is checked

Total paging file size for all drives
Minimum allowed    16mb
Recommended          3583MB
Currently allocated    704 MB


If I uncheck Automatically manage paging file size for all drives

Then I can set No Paging File


What do you suggest?

Thanks
0
noxchoGlobal Support CoordinatorCommented:
Try it with no paging file. If you have enough memory then paging is not necessary.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Last nights backup ran no event id 51

No paging set

Will keep eye over next couple days

I added another windows 2012 server with exact same hardware and that backup ran no problem

Will monitor them both

Will post with results

Thanks
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

No Event Id 51 tonight

But I got this instead

Log Name:      System
Source:        Microsoft-Windows-FilterManager
Date:          6/28/2015 7:31:24 PM
Event ID:      3
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      SERV011.FQDN.com
Description:
Filter Manager failed to attach to volume '\Device\Harddisk3\DR15'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>3</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2015-06-28T23:31:24.370839900Z" />
    <EventRecordID>6505</EventRecordID>
    <Correlation />
    <Execution ProcessID="3760" ThreadID="4824" />
    <Channel>System</Channel>
    <Computer>SERV011.FQDN.com</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0xc03a001c</Data>
    <Data Name="ExtraStringLength">22</Data>
    <Data Name="ExtraString">\Device\Harddisk3\DR15</Data>
  </EventData>
</Event>


Thoughts
0
noxchoGlobal Support CoordinatorCommented:
Here is the answer to this issue: http://www.mcbsys.com/blog/2012/12/filtermanager-event-id-3-during-backups/
The problem is that Windows Search is trying to search on the drive (a virtual container VHD which is used by MS Backup) which physically does not exist. Thus it is save to ignore this error.  Or you can disable Windows Search.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Yes I saw that article but no one had a solution there.
Same for the link with in that article
It has the exact issue I am having

When I look up the process Id it is gone.
 the process that the error reported is no longer running

The windows Search service is not installed


Thoughts
0
noxchoGlobal Support CoordinatorCommented:
Is this - \Device\Harddisk3\DR15</Data> - you backup storage drive? Or is it yet VHD container?

The Filter Manager can be also controlling the device drivers. https://msdn.microsoft.com/en-us/library/windows/hardware/ff541591%28v=vs.85%29.aspx

Maybe you want to update the USB drivers or reinstall them?
BTW, does this problem happen when you use different USB HDD?
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Yes this only happens when I run wbadmin

So yes this is the usb drive for backup storage.

This is a brand new drive

When it was installed on the server I did not use a cd to load drivers Windows 2012 knew the drive and added it with no problem

On the server went to device manager and tried to update the drivers

It reported back with this

Update Drive Software WD Elements 10B8 USB Drive
The Best driver software for your device is already installed

Windows has determined the driver software for your device is up to date.


Thoughts.
0
noxchoGlobal Support CoordinatorCommented:
Well, I would try with different drive of different model. I have seen this behavior with Toshiba USB drives and using different model drive showed no problem.
If this does not help - either reinstall the USB devices (in device manager delete the USB devices and then restart the server) or reinstall Windows.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Do you know what drives will work?

Can not seem to find a compatibility list any where.
0
noxchoGlobal Support CoordinatorCommented:
If the drive came with a CD where you get the drivers from - use it.
If no driver CD was with the drive then try simply reinstalling the USB devices. As suggested above - delete USB Controller. Reboot and see how it works.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

New problem


After disabling the Page File which gets rid of the event id 51 I now get these two errors

Log Name:      Application
Source:        Microsoft-Windows-PerfOS
Date:          6/29/2015 10:28:02 AM
Event ID:      2011
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SERV012.FQDN.com
Description:
Unable to collect System Pagefile performance data. The first four bytes (DWORD) of the Data section contains the status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-PerfOS" Guid="{F82FB576-E941-4956-A2C7-A0CF83F6450A}" EventSourceName="PerfOS" />
    <EventID Qualifiers="32768">2011</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-06-29T14:28:02.000000000Z" />
    <EventRecordID>966</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>SERV012.FQDN.com</Computer>
    <Security />
  </System>
  <EventData>
    <Binary>050000C0</Binary>
  </EventData>
</Event>


Log Name:      Application
Source:        Microsoft-Windows-Perflib
Date:          6/29/2015 10:28:02 AM
Event ID:      1010
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      SERV012.FQDN.com
Description:
The Collect Procedure for the "C:\Windows\System32\perfos.dll" service in DLL "PerfOS" generated an exception or returned an invalid status. The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the exception code or status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
    <EventID Qualifiers="49152">1010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-06-29T14:28:02.000000000Z" />
    <EventRecordID>967</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>TGCS012.our.network.tgcsnet.com</Computer>
    <Security />
  </System>
  <UserData>
    <EventXML xmlns="Perflib">
      <param1>C:\Windows\System32\perfos.dll</param1>
      <param2>PerfOS</param2>
      <binaryDataSize>4</binaryDataSize>
      <binaryData>E6030000</binaryData>
    </EventXML>
  </UserData>
</Event>
0
noxchoGlobal Support CoordinatorCommented:
IMHO it is just a report that due to missing paging file the system performance is not ideal. You can enable it again on some different drive.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

I have two internal drives

C for the OS and E is just for storage

I can set it on E and will see what happens.
0
noxchoGlobal Support CoordinatorCommented:
Yep. Lets do it. But the instrcutions about USB still remain.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Restating the DC's have to wait


Will try to schedule that later today
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Update

Last night both DC's ran with no error

Will keep eye on this over next few days
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Update

It happened now on the third Windows 2012 Server which was the first Windows 2012 Server I built and has been working fine for over a month now.

I changed the Paging and updated the registry as I did on the other two 2012 Servers.

This proves that it is a Windows 2012 WBADMIN issue

Thoughts
0
noxchoGlobal Support CoordinatorCommented:
Bug from Microsoft. WMADMIN just makes the event occur. But where exactly the problem is - knows only MS.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Yes back in the day you could call Microsoft to report problems and if they found a bug they would wave the cost of the call. Wonder if they still do that?

This is the latest version of the OS System they should be looking at things like this.

Will post results after tonight's backup
0
noxchoGlobal Support CoordinatorCommented:
Microsoft is too busy with new versions of OS in competition with Apple. :)
But this Event 51 was also in Windows 2008R2 as far as I know.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

Yes they are

I have 2 Windows 208 servers been running them for a long time now and never seen this error.

I am betting it has something to due with the bytes per sector change they made from 512 to 4096

I sent you a message did you get it?
0
noxchoGlobal Support CoordinatorCommented:
Yep, I got it. Will give a look.
All the drives are now having this 4K sector. But as I said you can try with different drive.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Would be nice if Microsoft had a hardware compatibility list like the did in the past.
0
noxchoGlobal Support CoordinatorCommented:
Dream further :)
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho

They are back

after two days of no event 51 on server 1 had 5 of them

We need to fix this do you have a drive that you can suggest?

Thanks
0
noxchoGlobal Support CoordinatorCommented:
Get any available USB drive, maybe of lower capacity. I cannot tell which exact drive will not have this problem. Thus all we can do it trying some of them. If you have a USB docking station - also good.
0
Thomas GrassiSystems AdministratorAuthor Commented:
These are 1 TB or larger drives.

Backup images require disk space

I would get bigger if I was going to get another drive not smaller.

What brand and model would you use in my case?
0
noxchoGlobal Support CoordinatorCommented:
First brand that comes to my mind is Seagate - being a competitor of WD they must show them. Select one of the appropriate size and speed.
According to the disk space-  if you do not take backups of entire data but only smaller partitions - will the event show up? If yes then you can check with smaller drives as well.
0
Thomas GrassiSystems AdministratorAuthor Commented:
Will look into Seagate drives over the weekend

thanks
0
Thomas GrassiSystems AdministratorAuthor Commented:
Noxcho,

Five days no errors

Going to close this for now if it reoccurs will open new issue

Thanks for your help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.