Microsoft-Windows-Kernel-EventTracing Error 2 happens twice at boot EX2013CU7

Not sure what it is.  The server is running Server 2012 R2 and it is a VM.  It has exchange and associated necessary features, roles, and prerequisites and nothing else installed.  I have uninstalled and reinstalled Exchange 2013 CU7 3 times
and each time this error has been present.  It happens twice at boot and seems to cause no problems.
Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
Source:        Microsoft-Windows-Kernel-EventTracing
Date:          12/23/2014 10:06:53 AM
Event ID:      2
Task Category: Session
Level:         Error
Keywords:      Session
User:          SYSTEM
Computer:      myserver.mydomain.local
Description:
Session "FastDocTracingSession" failed to start with the following error: 0xC0000035
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
    <EventID>2</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>2</Task>
    <Opcode>12</Opcode>
    <Keywords>0x8000000000000010</Keywords>
    <TimeCreated SystemTime="2014-12-23T17:06:53.273839900Z" />
    <EventRecordID>2</EventRecordID>
    <Correlation />
    <Execution ProcessID="3640" ThreadID="10016" />
    <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
    <Computer>Valis.PBJFS.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="SessionName">FastDocTracingSession</Data>
    <Data Name="FileName">
    </Data>
    <Data Name="ErrorCode">3221225525</Data>
    <Data Name="LoggingMode">9</Data>
  </EventData>
</Event>

Hi,
This Event can be ignored. To prevent this Event prompt, please follow steps below:
1. Set the MetricsSelfSelectionSelected value in the registry to
2.
2. Restart the
Windows Azure Telemetry Service service.
3. Stop the
WindowsAzure-GuestAgent-Metrics event trace session.
More details, please refer following blog:
Event ID 2: Session "WindowsAzure-GuestAgent-Metrics" failed to start with the following error: 0xC0000035
http://blogs.msdn.com/b/mast/archive/2014/07/09/event-id-2-session-quot-windowsazure-guestagent-metrics-quot-failed-to-start-with-the-following-error-0xc0000035.aspx
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

Similar Messages

  • Event ID: 4, Source: Microsoft-Windows-Kernel-EventTracing, maximum file size for session "ReadyBoot" has been reached.

    Hello,
    I upgraded my machine to Win7 x64 Pro about 3 weeks ago. My HW is an Asus mobo, Intel Q9450 w/8GB RAM. The boot drives are two Raptors configured as RAID01. All the drivers are the latest available from Intel, Asus and 3rd party vendors. My WEI is 5.9, limited by the disk transfer rates, otherwise 7.1 and 7.2 on the other indexes.
    I've been receiving these errors at boot;
    Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
    Source:        Microsoft-Windows-Kernel-EventTracing
    Date:          11/10/2009 7:51:03 AM
    Event ID:      4
    Task Category: Logging
    Level:         Warning
    Keywords:      Session
    User:          SYSTEM
    Computer:      herbt-PC
    Description:
    The maximum file size for session "ReadyBoot" has been reached. As a result, events might be lost (not logged) to file "C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl". The maximum files size is currently set to 20971520 bytes.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>4</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>1</Task>
        <Opcode>10</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2009-11-10T12:51:03.393985600Z" />
        <EventRecordID>28</EventRecordID>
        <Correlation />
        <Execution ProcessID="4" ThreadID="164" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>herbt-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="SessionName">ReadyBoot</Data>
        <Data Name="FileName">C:\Windows\Prefetch\ReadyBoot\ReadyBoot.etl</Data>
        <Data Name="ErrorCode">3221225864</Data>
        <Data Name="LoggingMode">0</Data>
        <Data Name="MaxFileSize">20971520</Data>
      </EventData>
    </Event>
    The image for PID 4 is listed as System.
    My searches have turned up similar events listed but no solutions.
    Any help would be appreciated.
    Cheers!

    Session "Circular Kernel Context Logger" failed to start with the following error: 0xC0000035
    As suggested above I assume this is a microsoft issue?  It has been discussed here and other forums for quite some time.  I never have seen a fix?  I wish when we received errors of this nature microsoft would tell us what they were.  How is this related to superfetch?  What is superfetch?  Why would superfetch have changed?
    BY THE WAY....  Superfetch is on(started) is on automatic and logs on as local system.  So this is not the cause of my issue.  Also what is readyboot?  Does the average computer really know what these programs/services or unique microsoft words/terms are?
    System
    Provider
    [ Name]
    Microsoft-Windows-Kernel-EventTracing
    [ Guid]
    {B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}
    EventID
    2
    Version
    0
    Level
    2
    Task
    2
    Opcode
    12
    Keywords
    0x8000000000000010
    TimeCreated
    [ SystemTime]
    2010-04-11T14:35:49.829600000Z
    EventRecordID
    25
    Correlation
    Execution
    [ ProcessID]
    4
    [ ThreadID]
    48
    Channel
    Microsoft-Windows-Kernel-EventTracing/Admin
    Computer
    Daddy-PC
    Security
    [ UserID]
    S-1-5-18
    EventData
    SessionName
    Circular Kernel Context Logger
    FileName
    ErrorCode
    3221225525
    LoggingMode
    268436608
    Windows7, Windows, Win7

  • Need Help Please Log Name: System Source: Microsoft-Windows-Kernel-Power Date: 11/10/2010 4:31:37 PM Event ID: 41 Task Category: (63)

    Log Name:      System
    Source:        Microsoft-Windows-Kernel-Power
    Date:          11/10/2010 4:31:37 PM
    Event ID:      41
    Task Category: (63)
    Level:         Critical
    Keywords:      (2)
    User:          SYSTEM
    Computer:      Felix-PC
    Description:
    The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
        <EventID>41</EventID>
        <Version>2</Version>
        <Level>1</Level>
        <Task>63</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000002</Keywords>
        <TimeCreated SystemTime="2010-10-11T06:31:37.175213500Z" />
        <EventRecordID>96455</EventRecordID>
        <Correlation />
        <Execution ProcessID="4" ThreadID="8" />
        <Channel>System</Channel>
        <Computer>Felix-PC</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="BugcheckCode">244</Data>
        <Data Name="BugcheckParameter1">0x3</Data>
        <Data Name="BugcheckParameter2">0xfffffa8002d20b30</Data>
        <Data Name="BugcheckParameter3">0xfffffa8002d20e10</Data>
        <Data Name="BugcheckParameter4">0xfffff80002fcd5d0</Data>
        <Data Name="SleepInProgress">false</Data>
        <Data Name="PowerButtonTimestamp">0</Data>
      </EventData>
    </Event>

        <Data Name="BugcheckCode">244</Data>
    244 (dez) = F4 (hex)
    Bug Check 0xF4: CRITICAL_OBJECT_TERMINATION -
    This indicates that a process or thread crucial to system operation has unexpectedly exited or been terminated.
    Cause
    Several processes and threads are necessary for the operation of the system. When they are terminated for any reason, the system can no longer function.
    Please copy the dmp files from the folder C:\Windows\Minidump first to your desktop, zip all dmp into 1 zip file and upload the zip file to your Skydrive [1] and post a link here, so that I can look at the dumps with the debugger and to to see the cause of
    the crash.
    André
    [1]
    http://social.technet.microsoft.com/Forums/en-US/w7itproui/thread/4fc10639-02db-4665-993a-08d865088d65
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\windows\currentversion\run. error's

    HKEYLOCALMACHINE\SOFTWARE\Microsoft\windows\currentversion\run. error's installing itunes and quicktime (both) it say "HKEYLOCALMACHINE\SOFTWARE\Microsoft\windows\currentversion\run. verify you have sufficient access to that key, or contact your support personnel" i do have access to that key i have full access! its been happening for a long time now?

    does any one els have the problem?

  • Question about the Filter type for the trace provide "Microsoft-Windows-Kernel-File"

    Hello all,
    I have moved this question from the Windows
    Server General Forum accorfing to the suggestion from Mr. Justin Gu 
    I have a question about the Filter function for the trace provider "Microsoft-Windows-Kernel-File".
    I can find the Filter function with the following operation.
    Mr. Justin Gu wrote:
    > You create a Data Collector Set for the trace provider "Microsoft-Windows-Kernel-File" and finish completely, then you > can right click it and select Properties.
    In the Properties dialog box, click Filter and
    then select ‘Edit…’. You will be> able
    to see the Filter type and Filter data in the Filter dialog box.
    What
    Kind of Filter can
    I use in this Filter dialog box?
    And, how can I set to exclude the some kind of datas?
    Could you give me your suggestion?
    Thank you.

    What
    Kind of Filter can
    I use in this Filter dialog box?
    And, how can I set to exclude the some kind of datas?
    Could you give me your suggestion?
    Thank you.
    I'm looking for the same information.

  • Microsoft-Windows-Folder Redirection Error 502. CSC database locked by another user

    Dear all,
    We are finalizing our Windows 7 migration where we migrated 500+ clients. In our enterprise concept we implemented RUP (Roaming User Profiles) and Redirected Folders for all
    users. The Redirected Folders have been by enabled by a single GPO which redirects all folders from
    AppData to
    Searches \\servername.domain.name\documents$\%username%.
    Problem:
    The RUP and Redirected folders solution works fine until a new user wants to logon. This new user has been migrated to RUP and Redirected on another system and
    he just wants to work on another workplace or gets a temporary pc. What happens is that redirected folders do not work. The user gets a message that the folder is not reachable and desktop is empty.
    Troubleshooting:
    Soon I found out that something was being locked. If we used a user account which had working Redirect Folders than this
    worked for that user. An event of 10 was logged in OfflineFiles area of EventViewer to reconnect the path which was configured in the GPO.
    This is example screenshot. It says "Error on Open Folder. \\server.domain.name\documents$\%username%\Desktop refers to a location that is unavailable. It could be on a hard disk
    on this computer, or a on a network. Check to make sure that the disk is properly inserted, or that you are connected to the Internet or your network, and then try again. If it still cannot be located, the information might have been moved to a different location."
    These symptoms happen randomly and not on all workstations. The pain here is when it happens on a portable computer. For desktop we disabled the "Disable Offline Files' in "Manage
    Offline Files" control panel and then reboot. After the reboot the folders are directed
    and it works without these errors... On portable computer we can't use this work around as they need to work offline.
    If I connect to the share without the FQDN like \\servername\documents$\%username%\Desktop than this works fine and user can access all folders. When I try the FQDN path which is
    configured in the GPO to redirect user to like \\servername.domain.name\documents$\%username%\Desktop than it fails with this message. I personally think because the C:\Windows\CSC database is locked by the previous user who has been logged on this system.
    An example of the event generated in the Applications Event viewer part (I removed some username and server path):
    Log Name:      Application
    Source:        Microsoft-Windows-Folder Redirection
    Date:          1-2-2011 17:40:11
    Event ID:      502
    Task Category: None
    Level:         Error
    Keywords:     
    User:          domain\ivan
    Computer:      computer.domain.name
    Description:
    Failed to apply policy and redirect folder "Videos" to "\\servername.domain.name\documents$\ivan\Documents\My Videos".
     Redirection options=0x1001.
     The following error occurred: "Can not create folder "\\\servername.domain.name\documents$\ivan\Documents\My Videos"".
     Error details: "Access is denied.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Folder Redirection" Guid="{7D7B0C39-93F6-4100-BD96-4DDA859652C5}" />
        <EventID>502</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2011-02-01T16:40:11.486983400Z" />
        <EventRecordID>2754</EventRecordID>
        <Correlation ActivityID="{3211E6FB-2801-456D-BE6E-66AAE150A4DC}" />
        <Execution ProcessID="968" ThreadID="5856" />
        <Channel>Application</Channel>
        <Computer>computer.domain.name</Computer>
        <Security UserID="S-1-5-21-3705223304-2632712944-1292073641-26755" />
      </System>
      <EventData Name="EVENT_FDEPLOY_FailedToApplyPolicy">
        <Data Name="FromFolder">Videos</Data>
        <Data Name="ToFolder">\\servername.domain.name\documents$\ivan\Documents\My Videos</Data>
        <Data Name="Options">0x1001</Data>
        <Data Name="Error">Can not create folder "\\servername.domain.name\documents$\ivan\Documents\My Videos"</Data>
        <Data Name="ErrorDetails">Access is denied.
    </Data>
      </EventData>
    </Event> 
    Something like this I see in the Application Eventviewer:
    Environment:
    Windows 7 Enterprise client with patches until 1-Nov-2010
    Windows Server 2008 R2 for the Documents$ share
    Windows Server 2003 R2 as the domain controller
    I have tried all different option even to rebuild the CSC database but this also was not helping. I hope we are not dealing with a bug.
    Any help is much appreciated.
    Best regards, Ivan Versluis http://www.networknet.nl

    Ivan and SteveDIG - Thanks for taking the time to post detailed information about what you have found.  I have found the same things over the past few months and have been working with Microsoft to resolve this.  Like Ivan, I have been told by
    MS that this is a design problem in Windows 7, but they did admit it is a bug and did not charge me for the case.  That was the good news.  The bad news was that the problem is so 'deep' in Windows 7 that it will not be fixed until Windows 8 and
    the CSC engineering team in Redmond has rejected several requests to fix this issue in Windows 7 from several customers.  I personally feel we should have hauled our TAM in over this, but that wasn't my call so we haven't attempted to get an attitude
    change from MS.
    <RANT> I find this completely outrageous.  Windows is supposed to be a multi-user operating system suitable for deployment to mobile workforces spread around the world and often using slow VPN links.  Offline folders, folder redirection,
    slow link detection, etc. are all great on paper and as I did the design work for the W7 solution I've just built I sold these advantages heavily.  I now have serious egg on my face and am not happy.  Like others here I missed this in testing as
    multiple users are a fringe for us, but still important, I unfortunately didn't think to specifically test for multiple users, though I tested the features thoroughly and was happy with the results when used on single user machines.</RANT>
    As identified above, this issue manifests when more than one user uses a machine and their Offline folders (all redirected folders are configured this way by default) are in an offline state when the first user logs off.  The second user cannot access
    this 'offline' share so folder redirection fails.  We get burnt as we have latency=0 configured for slow link detection with Offline folders so users always work offline.  This is partly because of WAN optimisers in the network that lie to Windows
    so the online/offline transition doesn't work on slow links (not MS's fault), and partly because it made sense for other reasons.
    The workaround Microsoft and I came up with for our environment was to use individual file shares for each user.  We had been using a common file share with each user folder under that file share.  Changing to an individual share for each users
    means the share is not locked by the previous user.
    Examples
    This would cause a problem if John then Emma logged on to the same machine. Folder redirection would fail for Emma:
    \\FileServer1\Users$\john
    \\FileServer1\Users$\emma
    So would this if DFS was used
    \\my.domain\users\john            (points to \\FileServer1\Users$\John)
    \\my.domain\users\emma          (points to \\FileServer1\Users$\Emma)
    This would fix the problem:
    \\FileServer1\John$
    \\FileServer1\Emma$
    Unfortunately we then figured we could move these shares behind DFS like so:
    \\my.domain\homes\john             (points to \\FileServer1\John$)
    \\my.domain\homes\emma          (points to \\FileServer1\emma$)
    This was wrong.  The problem returned.  I assume the share that is being locked is now the DFS root and not the user share.
    The operations team here is very reluctant to go with direct access to the file servers and not use DFS as that will create issues for them in the future when they need to make file server changes.  I sympathise with them but can't see an alternative
    at the moment as we are deploying W7 and can't stop.  If I'd picked this up earlier a third party product might have been the solution (MS actually suggested this when I opened my case).
    I hope the information about individual shares above is helpful to someone.  Otherwise I don't really have more to add but I needed the rant :-)
    <RANT>BTW.  Has anyone tested changing a user’s home directory path once it is cached?  Try it. Test a scenario where you move the user from one file server to another.  You will not enjoy the results.  I'll say no more
    than this as it is off topic, but it shows the lack of investment in the CSC feature in Windows.  Very disappointing</RANT>

  • Event ID 10016 - DCOM Error | Source - Microsoft-Windows-DistributedCOM | Level: Error

    Hi there... I am getting the above mentioned error with the
    Description: dows-DistributedCOM cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    Full message is -
    Log Name:      System
    Source:        Microsoft-Windows-DistributedCOM
    Date:          5/15/2012 1:18:44 PM
    Event ID:      10016
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          NT AUTHORITY\IUSR
    Computer:      Server.domain.com
    Description:
    The description for Event ID 10016 from source Microsoft-Windows-DistributedCOM cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on
    the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    application-specific
    Local
    Activation
    {2D527A8C-A4B6-4E74-A63F-E867360D401C}
    {B13EFBAE-7504-4938-9ED7-8E8B53E51221}
    NT AUTHORITY
    IUSR
    S-1-5-17
    LocalHost (Using LRPC)
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
        <EventID Qualifiers="49152">10016</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-05-15T19:18:44.000000000Z" />
        <EventRecordID>43121</EventRecordID>
        <Correlation />
        <Execution ProcessID="0" ThreadID="0" />
        <Channel>System</Channel>
        <Computer>Server.Domain.com</Computer>
        <Security UserID="S-1-5-17" />
      </System>
      <EventData>
        <Data Name="param1">application-specific</Data>
        <Data Name="param2">Local</Data>
        <Data Name="param3">Activation</Data>
        <Data Name="param4">{2D527A8C-A4B6-4E74-A63F-E867360D401C}</Data>
        <Data Name="param5">{B13EFBAE-7504-4938-9ED7-8E8B53E51221}</Data>
        <Data Name="param6">NT AUTHORITY</Data>
        <Data Name="param7">IUSR</Data>
        <Data Name="param8">S-1-5-17</Data>
        <Data Name="param9">LocalHost (Using LRPC)</Data>
      </EventData>
    </Event>
    Please let me know any solutions to fix....
    Steps, I did try from one of the blogs -
    Open Component Services. Got oStart --> Control Panel --> Administrative Tools --> Components Services. Expand the Component Services branch then expand Computers, My Computer and DCOM Config. Right-click on "sms agent host" (my case) and click
    Properties. Click on the Security tab and under “Launch and Activation Permissions” select "edit" and add user Local Service (Local lunch). Click OK, close the Component Services window.
    In the Launch Permission dialog box, make sure that the Everyone group has Remote Launch and Remote Activation permissions.
    In the Launch Permission dialog box, make sure that the SMS Reporting Users local group has following permissions:
    Local Launch / Remote Launch / Local Activation / Remote Activation
    Also added Remote Launch / Remote Activation permission for Network Service (for the SMS_Reporting_Point)
    Added Admin Group to the "ConfigMgr Remote Control Users"
    VT

    In addition, In the security policy the ‘Local Service’ need to be configured for the following Policies
    - Generate security audits
    - Create global objects
    - Replace a process level token
    - Adjust memory quotas for a process
    - Impersonate a client after authentication
    - Log on as a service
    - Bypass traverse checking
    Hope this helps.
    Regards,
    Yan Li
    hi,
    i m having similiar error but with another APPID 
    i did what u said in 1st part but i couldnt get what u mean in additional settings ? i couldnt do that. 
    Error details :
    Log Name:      System
    Source:        Microsoft-Windows-DistributedCOM
    Date:          7/2/2013 4:03:20 PM
    Event ID:      10016
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          LOCAL SERVICE
    Computer:      THINK
    Description:
    The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID 
    {7160A13D-73DA-4CEA-95B9-37356478588A}
     and APPID 
    {7160A13D-73DA-4CEA-95B9-37356478588A}
     to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
        <EventID Qualifiers="0">10016</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8080000000000000</Keywords>
        <TimeCreated SystemTime="2013-02-07T14:03:20.356793400Z" />
        <EventRecordID>1465</EventRecordID>
        <Correlation />
        <Execution ProcessID="868" ThreadID="2832" />
        <Channel>System</Channel>
        <Computer>THINK</Computer>
        <Security UserID="S-1-5-19" />
      </System>
      <EventData>
        <Data Name="param1">machine-default</Data>
        <Data Name="param2">Local</Data>
        <Data Name="param3">Activation</Data>
        <Data Name="param4">{7160A13D-73DA-4CEA-95B9-37356478588A}</Data>
        <Data Name="param5">{7160A13D-73DA-4CEA-95B9-37356478588A}</Data>
        <Data Name="param6">NT AUTHORITY</Data>
        <Data Name="param7">LOCAL SERVICE</Data>
        <Data Name="param8">S-1-5-19</Data>
        <Data Name="param9">LocalHost (Using LRPC)</Data>
        <Data Name="param10">Unavailable</Data>
        <Data Name="param11">Unavailable</Data>
      </EventData>
    </Event>

  • Windows 8.1 Microsoft-Windows-Kernel-PnP EventID 219

    This event shows up in event Viewer and I do not find a fix for it that applay for Windows 8.1.
    Can I use the Windows 7 hotfix?

    AS
    That depends on what the fix you mention is.  That error is because a PNP device failed to load/start.  BTW that is only a warning not an error so you can probably ignore it
    Wanikiya and Dyami--Team Zigzag

  • Backing up Leopard and Microsoft Windows XP to an Ext USB HD and booting

    I have successfully figured out how to use the latest CarbonCopyCloner to clone my OS X and Windows partitions to an external drive, and I can boot from the OS X partition.
    Does anyone know any tricks to get Windows to boot from a External USB drive?

    Assuming your library is in the default location, you just need to copy your iTunes music folder. Have a look though, to make sure it contains all your tracks; if you don't have iTunes set to copy files to your iTunes folder, they could be all over the place. Once you have your new Mac, ensure iTunes is set to copy added files to your iTunes folder (iTunes > Preferences > Advanced > General > "Copy files to iTunes Music Folder when adding to library"). Then, simply drag the folder containing your backup files into your iTunes window, and it'll copy them across and put them in your iTunes folder.

  • Kernel-EventTracing Failure Errors every 30 minutes

    A couple months ago I started getting the following error on one of my Windows 2012 Standard servers.  The errors occur about every 30 minutes.  I've searched high and low and can't find a solution for this.  Can anyone tell me where to look?
    Thanks,
    Joe
    Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
    Source:        Microsoft-Windows-Kernel-EventTracing
    Date:          6/11/2014 2:58:09 AM
    Event ID:      2
    Task Category: Session
    Level:         Error
    Keywords:      Session
    User:          NETWORK SERVICE
    Computer:      Server24.internal.com
    Description:
    Session "" failed to start with the following error: 0xC0000022
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>2</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>2</Task>
        <Opcode>12</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2014-06-11T07:58:09.331919500Z" />
        <EventRecordID>3533</EventRecordID>
        <Correlation />
        <Execution ProcessID="2840" ThreadID="4540" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>Server24.internal.com</Computer>
        <Security UserID="S-1-5-20" />
      </System>
      <EventData>
        <Data Name="SessionName">
        </Data>
        <Data Name="FileName">
        </Data>
        <Data Name="ErrorCode">3221225506</Data>
        <Data Name="LoggingMode">276824069</Data>
      </EventData>
    </Event>

    Hi,
    When exactly do you receive this error message? You could try to stop event trace session, please see:
    Session "WbadminInBuiltTracing" failed to start with the following error: 0xC0000035
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/02ac2078-ac0e-48d1-b3db-3f2e76319afb/session-wbadmininbuilttracing-failed-to-start-with-the-following-error-0xc0000035?forum=windowsbackup
    Regards,
    Mandy
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • ¿Why my Windows 7 Pro have Kernel-Power error 41?

    Hello, good morning, I installed Windows 7 Professional Edition and each time freezes and restarts, I open the event viewer and I see several critical events would like to see if someone can help me. They say "Event 41, Kernel-Power", I occasionally
    happen ... especially when browsing internet through a USB modem ZTE MF-193, but I have also occurred trying to play games like Half Life 1 or Warcraft 3. 
    My pc specs are as follows. According to the Direct X diagnostics are: 
    Time of this report: 4/5/2014, 07:24:38
           Machine name: FAMILY-PC
       Operating System: Windows 7 Professional 64-bit (6.1, Build 7600) (7600.win7_rtm.090713-1255)
               Language: Spanish (Regional Setting: Spanish)
    System Manufacturer: Intel
           System Model: DG41WV
                   BIOS: BIOS Date: 01/07/09 15:28:41 Ver: 08.00.10
              Processor: Pentium(R) Dual-Core  CPU      E5700  @ 3.00GHz (2 CPUs), ~3.0GHz
                 Memory: 2048MB RAM
    Available OS Memory: 1980MB RAM
              Page File: 1317MB used, 2643MB available
            Windows Dir: C:\Windows
        DirectX Version: DirectX 11
    DX Setup Parameters: Not found
       User DPI Setting: Using System DPI
     System DPI Setting: 96 DPI (100 percent)
        DWM DPI Scaling: Disabled
         DxDiag Version: 6.01.7600.16385 32bit Unicode
    System events in XML view say: 
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> 
      <EventID>41</EventID> 
      <Version>2</Version> 
      <Level>1</Level> 
      <Task>63</Task> 
      <Opcode>0</Opcode> 
      <Keywords>0x8000000000000002</Keywords> 
      <TimeCreated SystemTime="2014-04-05T11:11:43.116009800Z" /> 
      <EventRecordID>16184</EventRecordID> 
      <Correlation /> 
      <Execution ProcessID="4" ThreadID="8" /> 
      <Channel>System</Channel> 
      <Computer>Familia-PC</Computer> 
      <Security UserID="S-1-5-18" /> 
      </System>
    - <EventData>
      <Data Name="BugcheckCode">278</Data> 
      <Data Name="BugcheckParameter1">0xfffffa8001e65010</Data> 
      <Data Name="BugcheckParameter2">0xfffff88007225cb0</Data> 
      <Data Name="BugcheckParameter3">0x0</Data> 
      <Data Name="BugcheckParameter4">0xc</Data> 
      <Data Name="SleepInProgress">false</Data> 
      <Data Name="PowerButtonTimestamp">0</Data> 
      </EventData>
      </Event>
    another says:
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> 
      <EventID>41</EventID> 
      <Version>2</Version> 
      <Level>1</Level> 
      <Task>63</Task> 
      <Opcode>0</Opcode> 
      <Keywords>0x8000000000000002</Keywords> 
      <TimeCreated SystemTime="2014-03-27T10:45:49.941213100Z" /> 
      <EventRecordID>9491</EventRecordID> 
      <Correlation /> 
      <Execution ProcessID="4" ThreadID="8" /> 
      <Channel>System</Channel> 
      <Computer>Familia-PC</Computer> 
      <Security UserID="S-1-5-18" /> 
      </System>
    - <EventData>
      <Data Name="BugcheckCode">59</Data> 
      <Data Name="BugcheckParameter1">0xc0000005</Data> 
      <Data Name="BugcheckParameter2">0xfffff96000686d15</Data> 
      <Data Name="BugcheckParameter3">0xfffff88002a200d0</Data> 
      <Data Name="BugcheckParameter4">0x0</Data> 
      <Data Name="SleepInProgress">false</Data> 
      <Data Name="PowerButtonTimestamp">0</Data> 
      </EventData>
      </Event>
    And the latest says: 
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" /> 
      <EventID>41</EventID> 
      <Version>2</Version> 
      <Level>1</Level> 
      <Task>63</Task> 
      <Opcode>0</Opcode> 
      <Keywords>0x8000000000000002</Keywords> 
      <TimeCreated SystemTime="2014-04-03T15:16:12.334410200Z" /> 
      <EventRecordID>14621</EventRecordID> 
      <Correlation /> 
      <Execution ProcessID="4" ThreadID="8" /> 
      <Channel>System</Channel> 
      <Computer>Familia-PC</Computer> 
      <Security UserID="S-1-5-18" /> 
      </System>
    - <EventData>
      <Data Name="BugcheckCode">0</Data> 
      <Data Name="BugcheckParameter1">0x0</Data> 
      <Data Name="BugcheckParameter2">0x0</Data> 
      <Data Name="BugcheckParameter3">0x0</Data> 
      <Data Name="BugcheckParameter4">0x0</Data> 
      <Data Name="SleepInProgress">false</Data> 
      <Data Name="PowerButtonTimestamp">0</Data> 
      </EventData>
      </Event>
    I sincerely appreciate your support, I really like windows 7 but Windows XP I never thought such failures in the last hour I had 2 of them in the last 24 hours I've had 4 and in the last 7 days I've had 25. 
    It is a very distressing situation.

    YM
    These were called BCC116 and are related to a video timeout/failure
    "It's not a true crash, in the sense that the Blue Screen was initiated only because the combination of video driver and video hardware was being unresponsive, and not because of any synchronous processing exception".
    Since Vista, the "Timeout Detection and Recovery" (TDR) components of the OS video subsystem have been capable of doing some truly impressive things to try to recover from issues which would have caused earlier OS's like XP to crash.
    As a last resort, the TDR subsystem sends the video driver a "please restart yourself now!" command and waits a few seconds.
    If there's no response, the OS concludes that the video driver/hardware combo has truly collapsed in a heap, and it fires off that stop 0x116 BSOD.
    The first step is to install the newest video driver.
    If playing with video driver versions hasn't helped, make sure the box is not overheating.
     Try removing a side panel and aiming a big mains fan straight at the motherboard and GPU.
     Run it like that for a few hours or days - long enough to ascertain whether cooler temperatures make a difference.
    If so, it might be as simple as dust buildup and subsequently inadequate cooling.
    I would download cpu-z and gpu-z (both free) and keep an eye on the video temps
    For more information please read this blog  http://captaindbg.com/bug-check-0x116-video_tdr_error-troubleshooting-tips/
    http://msdn.microsoft.com/en-us/library/windows/hardware/ff557263%28v=vs.85%29.aspx
    Microsoft (R) Windows Debugger Version 6.3.9600.16384 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    Loading Dump File [C:\Users\Ken\Desktop\040514-15771-01.dmp]
    Mini Kernel Dump File: Only registers and stack trace are available
    ************* Symbol Path validation summary **************
    Response Time (ms) Location
    Deferred SRV*H:\symbols*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*H:\symbols*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows 7 Kernel Version 7600 MP (2 procs) Free x64
    Product: WinNt, suite: TerminalServer SingleUserTS
    Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
    Machine Name:
    Kernel base = 0xfffff800`02a53000 PsLoadedModuleList = 0xfffff800`02c90e50
    Debug session time: Sat Apr 5 07:08:35.611 2014 (UTC - 4:00)
    System Uptime: 0 days 0:25:10.484
    Loading Kernel Symbols
    Loading User Symbols
    Loading unloaded module list
    * Bugcheck Analysis *
    Use !analyze -v to get detailed debugging information.
    BugCheck 116, {fffffa8001e65010, fffff88007225cb0, 0, c}
    Unable to load image \SystemRoot\system32\DRIVERS\igdkmd64.sys, Win32 error 0n2
    *** WARNING: Unable to verify timestamp for igdkmd64.sys
    *** ERROR: Module load completed but symbols could not be loaded for igdkmd64.sys
    Probably caused by : igdkmd64.sys ( igdkmd64+23cb0 )
    Followup: MachineOwner
    1: kd> !analyze -v
    * Bugcheck Analysis *
    VIDEO_TDR_FAILURE (116)
    Attempt to reset the display driver and recover from timeout failed.
    Arguments:
    Arg1: fffffa8001e65010, Optional pointer to internal TDR recovery context (TDR_RECOVERY_CONTEXT).
    Arg2: fffff88007225cb0, The pointer into responsible device driver module (e.g. owner tag).
    Arg3: 0000000000000000, Optional error code (NTSTATUS) of the last failed operation.
    Arg4: 000000000000000c, Optional internal context dependent data.
    Debugging Details:
    FAULTING_IP:
    igdkmd64+23cb0
    fffff880`07225cb0 4889542410 mov qword ptr [rsp+10h],rdx
    DEFAULT_BUCKET_ID: GRAPHICS_DRIVER_TDR_FAULT
    CUSTOMER_CRASH_COUNT: 1
    BUGCHECK_STR: 0x116
    PROCESS_NAME: firefox.exe
    CURRENT_IRQL: 0
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    STACK_TEXT:
    fffff880`061000f8 fffff880`06d3ccbc : 00000000`00000116 fffffa80`01e65010 fffff880`07225cb0 00000000`00000000 : nt!KeBugCheckEx
    fffff880`06100100 fffff880`06d3c938 : fffff880`07225cb0 fffffa80`01e65010 fffffa80`034ebd50 fffffa80`03253010 : dxgkrnl!TdrBugcheckOnTimeout+0xec
    fffff880`06100140 fffff880`06c0ff07 : fffffa80`01e65010 00000000`00017a38 fffffa80`034ebd50 fffffa80`03253010 : dxgkrnl!TdrIsRecoveryRequired+0x114
    fffff880`06100170 fffff880`06c3dd7e : fffffa80`ffffffff 00000000`000179b8 fffff880`061002c0 00000000`00000000 : dxgmms1!VidSchiReportHwHang+0x40b
    fffff880`06100250 fffff880`06c23bb1 : fffffa80`034ee000 ffffffff`feced300 00000000`00000000 00000000`00000001 : dxgmms1!VidSchWaitForCompletionEvent+0x196
    fffff880`06100290 fffff880`06c3091c : 00000000`0000fea9 00000000`00000000 fffff880`06100798 fffffa80`01ef5010 : dxgmms1!VIDMM_GLOBAL::xWaitForAllEngines+0x1e9
    fffff880`06100390 fffff800`02f2fd38 : ffffffff`ffffffff ffffffff`ffffffff 00000000`00000000 00000000`00000000 : dxgmms1!VIDMM_MEMORY_SEGMENT::RotateCopyCallback+0xe0
    fffff880`06100400 fffff880`06c3594c : 00000000`0f5c0000 fffff880`061006d8 00000000`00000000 fffff8a0`00000002 : nt!MmRotatePhysicalView+0x6e8
    fffff880`06100640 fffff880`06c2feb8 : fffffa80`034eec60 00000000`00100000 00000000`00000000 00000000`00000000 : dxgmms1!VIDMM_PROCESS_HEAP::Rotate+0x148
    fffff880`061006d0 fffff880`06c21904 : fffffa80`034fdec0 fffff8a0`03643b00 00000000`00000001 fffff880`06100800 : dxgmms1!VIDMM_MEMORY_SEGMENT::EvictResource+0x6f8
    fffff880`06100840 fffff880`06c217e3 : fffffa80`034ee000 fffff880`06c2170a 00000000`00000000 fffffa80`02b253c0 : dxgmms1!VIDMM_GLOBAL::EvictAllAllocationInList+0x40
    fffff880`06100880 fffff880`06c1e70d : 00000000`0000005a 00000000`00000000 00000000`00000000 fffffa80`00000000 : dxgmms1!VIDMM_GLOBAL::EvictAllReclaimedAllocation+0x43
    fffff880`061008d0 fffff880`06c3865d : 00000000`00000000 fffff8a0`02dd8510 fffffa80`00000000 fffffa80`02b253c0 : dxgmms1!VIDMM_GLOBAL::PrepareDmaBuffer+0xc79
    fffff880`06100aa0 fffff880`06c38398 : fffff800`0401c080 fffff880`06c37d00 fffffa80`00000000 fffffa80`00000000 : dxgmms1!VidSchiSubmitRenderCommand+0x241
    fffff880`06100c90 fffff880`06c37e96 : 00000000`00000000 fffffa80`019de500 00000000`00000080 fffffa80`03253010 : dxgmms1!VidSchiSubmitQueueCommand+0x50
    fffff880`06100cc0 fffff800`02d68166 : 00000000`01b39914 fffffa80`03252620 fffffa80`017e8840 fffffa80`03252620 : dxgmms1!VidSchiWorkerThread+0xd6
    fffff880`06100d00 fffff800`02aa3486 : fffff800`02c3de80 fffffa80`03252620 fffff800`02c4bc40 fffff880`01246a90 : nt!PspSystemThreadStartup+0x5a
    fffff880`06100d40 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
    STACK_COMMAND: .bugcheck ; kb
    FOLLOWUP_IP:
    igdkmd64+23cb0
    fffff880`07225cb0 4889542410 mov qword ptr [rsp+10h],rdx
    SYMBOL_NAME: igdkmd64+23cb0
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: igdkmd64
    IMAGE_NAME: igdkmd64.sys
    DEBUG_FLR_IMAGE_TIMESTAMP: 4a01d55b
    FAILURE_BUCKET_ID: X64_0x116_IMAGE_igdkmd64.sys
    BUCKET_ID: X64_0x116_IMAGE_igdkmd64.sys
    ANALYSIS_SOURCE: KM
    FAILURE_ID_HASH_STRING: km:x64_0x116_image_igdkmd64.sys
    FAILURE_ID_HASH: {88759713-193a-fb8a-dab9-6846ea1a48f2}
    Followup: MachineOwner
    Wanikiya and Dyami--Team Zigzag

  • Error in pc editor after installing microsoft windows 2013

    After we have installed microsoft windows 2013 attached error message is appearing in the po, header text.  What action can be taken to solve this?   Thanks in Advance.

    Hi,
    you must upgrade the SAPGUI version at last level the patch available.
    Regards
    Luix

  • Microsoft Windows Kernal Power

    I have a computer that has bluescreened twice without anything happening. Both times it is reported that no one is using the laptop. It's just sitting there not doing anything. I looked at the Event Viewer and there are Kernal-Power events, and then Kernal-Processor-Power
    events. The most recent gave me these details:
    - System 
      - Provider 
       [ Name]  Microsoft-Windows-Kernel-Power 
       [ Guid]  {331C3B3A-2005-44C2-AC5E-77220C37D6B4} 
       EventID 41 
       Version 2 
       Level 1 
       Task 63 
       Opcode 0 
       Keywords 0x8000000000000002 
      - TimeCreated 
       [ SystemTime]  2015-04-09T19:18:11.102008100Z 
       EventRecordID 29574 
       Correlation 
      - Execution 
       [ ProcessID]  4 
       [ ThreadID]  8 
       Channel System 
       Computer LIZ2-PC 
      - Security 
       [ UserID]  S-1-5-18 
    - EventData 
      BugcheckCode 0 
      BugcheckParameter1 0x0 
      BugcheckParameter2 0x0 
      BugcheckParameter3 0x0 
      BugcheckParameter4 0x0 
      SleepInProgress false 
      PowerButtonTimestamp 0 
    I'm trying to assess why these blue screens are occurring so I can do some preventative work on it. Be it replacing the computer or the RAM, this issue is slowing productivity and I need to rectify it before it halts productivity.

    We do need the actual log files (called a DMP files) as they contain the only record
    of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.  
    Please follow our instructions for finding and uploading the files we need to help you fix your computer. They can be found here
    As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as ‘Answered’ as the previous
    steps should be helpful for many similar scenarios.  
    If the issue still persists and you want to return to this question, please reply this post directly so we will be notified to follow it up. You
    can also choose to unmark the answer as you wish.  
    In addition, we’d love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar
    problems.  
    Thanks!
    Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
    the thread.

  • Windows 7 rc error event id 6008

    Hey ppl, I've notice people on this forum with similar problems but not exactly the same as mine... I've been using win 7 RC x86 for the past month and it worked great. About 4 days ago it started randomly crashing but with no blue screen of death. It crashed like someone pulled the plug on the machine so my monitor shows a black screen getting no video input however my power light on my pc stays on... After it happened 3 times in one day i did a clean install... It worked great for a day and then happened again... It happens at random time intervals and except for one time, while i am not using the pc... It is getting really annoying now, I will prob try another clean install but it may just happen the same way again... I tried the memory test and it returned with no problems... And I did not install much applications since the last time i re installed... just office, photoshop and nero 8... I have my power setting set to never turn the monitor off nor the hard drive and i don't use a screen saver...normally when i leave the machine i just turn my monitor off...
    Here is the error i got in event viewer...
    Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="EventLog" />
      <EventID Qualifiers="32768">6008</EventID>
      <Level>2</Level>
      <Task>0</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2009-08-31T05:10:39.000000000Z" />
      <EventRecordID>2701</EventRecordID>
      <Channel>System</Channel>
      <Computer>Jason-PC</Computer>
      <Security />
      </System>
    - <EventData>
      <Data>9:08:59 PM</Data>
      <Data>‎8/‎30/‎2009</Data>
      <Data />
      <Data />
      <Data>12379</Data>
      <Data />
      <Data />
      <Binary>D907080000001E00150008003B004F00D907080001001F00050008003B004F003C0000003C000000000000000000000000000000000000000100000000000000</Binary>
      </EventData>
      </Event>
    I use an amd athlon 64 dual core 5000+ (2.6GHz) with 4GB ram...
    Thanks for the future help....

    there is no %systemroot%\minidump folder...
    this is what i get in the event logs for the crashes
    firstly under critical
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
      <EventID>41</EventID>
      <Version>2</Version>
      <Level>1</Level>
      <Task>63</Task>
      <Opcode>0</Opcode>
      <Keywords>0x8000000000000002</Keywords>
      <TimeCreated SystemTime="2009-09-02T04:02:20.300000000Z" />
      <EventRecordID>3132</EventRecordID>
      <Correlation />
      <Execution ProcessID="4" ThreadID="8" />
      <Channel>System</Channel>
      <Computer>Jason-PC</Computer>
      <Security UserID="S-1-5-18" />
      </System>
    - <EventData>
      <Data Name="BugcheckCode">0</Data>
      <Data Name="BugcheckParameter1">0x0</Data>
      <Data Name="BugcheckParameter2">0x0</Data>
      <Data Name="BugcheckParameter3">0x0</Data>
      <Data Name="BugcheckParameter4">0x0</Data>
      <Data Name="SleepInProgress">false</Data>
      <Data Name="PowerButtonTimestamp">0</Data>
      </EventData>
      </Event>
    and under error
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="EventLog" />
      <EventID Qualifiers="32768">6008</EventID>
      <Level>2</Level>
      <Task>0</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2009-09-02T04:02:34.000000000Z" />
      <EventRecordID>3128</EventRecordID>
      <Channel>System</Channel>
      <Computer>Jason-PC</Computer>
      <Security />
      </System>
    - <EventData>
      <Data>8:00:33 PM</Data>
      <Data>‎9/‎1/‎2009</Data>
      <Data />
      <Data />
      <Data>141</Data>
      <Data />
      <Data />
      <Binary>D9070900020001001400000021001A03D9070900030002000400000021001A033C0000003C0000000000000000000000000000000000000001000000DB010000</Binary>
      </EventData>
      </Event>
    that's all i find....

  • Kernel Power error after Win 7 and RAM upgrade

    Hello,
    I posted earlier on the subject of win7 and ram upgrades.  I did both and it seemed to go fine.  I did the ram first ... replaced a 667Mhz 1gb with a 800Mhz 2gb.  A couple of days later the computer just shut itself down and restarted.  Since then it has done it another 5 times, seemingly at random.  Yesterday I decided to spend some time looking into it and found the 'event log'.  All the shutdowns are recorded as 'critical'.  A search on the web/here showed other occurences of the fault associated with drivers as much as anything.
    After I did the win update I did update almost every driver with ones from this site.
    Other than the shutdowns the only issues I have which are of very mild concern are the length of time the fingerprint reader takes to be present and that occasionally the cursor is unavailable for about a minute after logging on. When you try and control it it jumps about anywhere but where you want it to go.   I rolled back the alps driver and that seems to have sorted the cursor issue.
    So, details of the shutdown from the event log are as follows.
    Log Name:      System
    Source:        Microsoft-Windows-Kernel-Power
    Date:          16/01/2011 16:21:31
    Event ID:      41
    Task Category: (63)
    Level:         Critical
    Keywords:      (2)
    User:          SYSTEM
    Computer:      (removed by me)
    Description:
    The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."
    There's more (I've shown it all below) but it's not that important.  When I looked into it I found details of the problem on the microsoft knowledge base.  Its described here http://support.microsoft.com/kb/2028504.
    I believe I fit into scenario 3 for cause and resolution.
    So, it seems that win7 and mixed speed ram may be a problem on some computers ... probably only a tiny number, but it looks like the HP3507 is one of them.  I did see somewhere that I could down speed from 667 to 266 which might help with memory compatability but I can't see anywhere on the the insydeH20 bios where to do it.  BIOS is version F18 .... upgraded from F15 as part of the Win7/RAM ugrade.  
    Before I swap back to the 'old' memory I'll see if anybody here can come up with any ideas.  It may be that I have to sell off the expensive 2gb memory (ddr2 800mhz 200 pin) for £39.99 from maplin at a bargain price and get 2gb of 667Mhz from somewhere.
    The full 'detail' regarding the fault is below.
    Bye for now.
    Phil
    Log Name:      SystemSource:        Microsoft-Windows-Kernel-Power
    Date:          16/01/2011 16:21:31
    Event ID:      41
    Task Category: (63)
    Level:         Critical
    Keywords:      (2)
    User:          SYSTEM
    Computer:      (removed by me)
    Description:
    The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly."
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
        <EventID>41</EventID>
        <Version>2</Version>
        <Level>1</Level>
        <Task>63</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000002</Keywords>
        <TimeCreated SystemTime="2011-01-16T16:21:31.187617000Z" />
        <EventRecordID>194889</EventRecordID>
        <Correlation />
        <Execution ProcessID="4" ThreadID="8" />
        <Channel>System</Channel>
        <Computer>Home_Laptop</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="BugcheckCode">0</Data>
        <Data Name="BugcheckParameter1">0x0</Data>
        <Data Name="BugcheckParameter2">0x0</Data>
        <Data Name="BugcheckParameter3">0x0</Data>
        <Data Name="BugcheckParameter4">0x0</Data>
        <Data Name="SleepInProgress">false</Data>
        <Data Name="PowerButtonTimestamp">0</Data>
      </EventData>
    </Event>

    Hi DWeiland and Schwede,
    Thanks for your replies. Yes I did the runtime engine registry change and also mass compiled the LV7.1 folder and my sourcecode. I still see the problem as I have set the LV adapter as Lv 7.1.1 runtime engine. Now I have changed it to LV7.1 development system. With this setting, it is not giving any error. Thus I don’t see any problem now. The older version of the code had the adapter as the runtime engine for some reason, now I have changed the setting to the development system. I hope that it shouldn’t be a problem.
    Thanks again!
    Thank you,
    Sasi

Maybe you are looking for