Windows 2019 Domain Controllers Getting this Daily event 1023 NTDSPERF.DLL Not Found
I have 5 Windows 2019 Domain Controllers getting this error every day
Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 10/14/2020 8:19:46 PM
Event ID: 1023
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: SERV033.my.network.com
Description:
Windows cannot load the extensible counter DLL "C:\Windows\system32\ntdsperf.dll" (Win32 error code The specified module could not be found.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1023</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2020-10-15T00:19:46.284584900Z" />
<EventRecordID>3897</EventRecordID>
<Correlation />
<Execution ProcessID="4484" ThreadID="7372" />
<Channel>Application</Channel>
<Computer>SERV033.my.network.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Windows\system32\ntdsperf.dll</Data>
<Data Name="Win32Error">126</Data>
</EventData>
</Event>
The file is not in my windows\system32 folder on any of the 5 Domain controllers I checked on other Windows 2019 Server not there either.
Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 10/14/2020 8:19:46 PM
Event ID: 1023
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: SERV033.my.network.com
Description:
Windows cannot load the extensible counter DLL "C:\Windows\system32\ntdsperf.dll" (Win32 error code The specified module could not be found.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />
<EventID>1023</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2020-10-15T00:19:46.284584900Z" />
<EventRecordID>3897</EventRecordID>
<Correlation />
<Execution ProcessID="4484" ThreadID="7372" />
<Channel>Application</Channel>
<Computer>SERV033.my.network.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Library">C:\Windows\system32\ntdsperf.dll</Data>
<Data Name="Win32Error">126</Data>
</EventData>
</Event>
The file is not in my windows\system32 folder on any of the 5 Domain controllers I checked on other Windows 2019 Server not there either.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
There are a couple of suggestions in the link Michael provided that may resolve the issue. Have you tried them?
ASKER
I saw that link before I posted the question.
The file does not exist on the server so the lodctr commands will not work.
I ran this one
C:\Users\administrator.OUR>lodctr /R
Info: Successfully rebuilt performance counter setting from system backup store
the error still pops up after that command
The file does not exist on the server so the lodctr commands will not work.
I ran this one
C:\Users\administrator.OUR>lodctr /R
Info: Successfully rebuilt performance counter setting from system backup store
the error still pops up after that command
ASKER
C:\Users\administrator.OUR>lodctr /e c:\windows\system32\ntdsperf.dll
Unable to find initialization file /e
C:\Users\administrator.OUR>
The file is missing from the system. Where do I get the file from?
Unable to find initialization file /e
C:\Users\administrator.OUR>
The file is missing from the system. Where do I get the file from?
ASKER
I figured it out guys
I ran this program exctrlst.exe and deselected NTDSPERF from the monitoring list and now the error is no longer showing.
Still not sure why it is looking for a file that is not on my servers.
Thank you
I ran this program exctrlst.exe and deselected NTDSPERF from the monitoring list and now the error is no longer showing.
Still not sure why it is looking for a file that is not on my servers.
Thank you
ASKER
What should I remove?