MsiInstaller 1035 Events - VmmAgent

Hi,
I have 2 Hyper-V hosts, both on 2012 R2. I just added both to be managed by VMM 2012 R2. Every 30 minutes, MsiInstaller logs a 1035 event to advise that it has 'Reconfigured' the product and does so for each app installed on the server.
On one host, I removed it from VMM. As such, this stopped the 1035's being logged. So this points to the vmmagent.
Anyone else see this and/or have a fix?
Cheers
Regards,
Stan Svetec
Blog:
http://stansvetec.blogspot.com
Twitter: LinkedIn:

Hi ssvetec,
Please ensure that the hyper-v host and VMM server are up-to-date .
In addition , please check if the VMM 2012R2 was installed latest RollUp .
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

Similar Messages

Multiple errors from MsiInstaller with event id 1015 and text "Failed to connect to server. Error: 0x80070005"

Hi,
Every night I get a lot of warnings in the event log from MsiInstaller with event ID 1015 and text "Failed to connect to server. Error: 0x80070005". They are always followed by a new event 1035. Example:
Event 1015, MsiInstaller (Warning)
Failed to connect to server. Error: 0x80070005
Event 1035, MsiInstaller (Information)
Windows Installer reconfigured the product. Product Name: Microsoft Excel Mobile Viewer Components. Product Version: 14.0.4763.1000. Product Language: 0. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0.
I probably get around 50 of these each night, and the 1035 events are all related to various SharePoint components. The user in all cases is the sharepoint farm account.
I use SharePoint 2010 enterprise in a farm install on one virtual server. I have a private domain, and the database is on a separate server.
Does anyone have any idea why this happens? Other than the error in the event log I cannot see any issues with my installation. I have searched for this error and seen it related to user profile synchronisation, but profile sync is working fine for me. I
installed using the Technet guide and the user profile sync guide at
http://www.harbar.net/articles/sp2010ups.aspx
Thanks,
Mikael

Hey Trevor. Thanks. I wasn't sure which method it was failing on although I understood it was the Windows Installer Service that was getting called by the job. There are three things that are still interesting to me though:
The job succeeds anyway. How? Does it just continue to run the rest of its checks but fails on this one? If it doesn't fail on this one, why not? If it does fail here, but then continues, should we be concerned about the quality of the data in Manage Patch
Status?
Or... does it somehow succeed once it uses the DCOM rights which appear to clear the 10016 errors? What I've never been able to reconcile with these warnings is that we've granted DCOM rights to launch and activate the Windows Installer Service and
that definitely seems to make a difference to success or failure of the job - so why doesn't it clear these warnings?
Why does granting the file system permissions clear the FIM version of this job's warnings, but not for the Product Version Job? This is particularly vexing since granting the DCOM rights appears to resolve the 10016 errors in exactly the same manner for
both jobs.
All of this has led me to believe that there were missing permissions somewhere, probably on the file system, but I just haven't had any luck pinning that down. One reason why I continued to pursue a solution to this is that the job doesn't actually try
to install anything, it's just trying to use the Windows Installer Service to query the installed version, and the DCOM rights should be sufficient to invoke the service. But getting much further than this has proven pretty difficult since I'm not a dev and
I've kind of pushed my limited reflection skills and understanding of the Windows Installer Service to the limit. If anyone can chip in and make some progress from this point, it'd be great to join forces!

Tracking the source of 1035 events

Hi,
As you may be aware that when ever you query win32_product class, it does consistency check of the installed products and logs event 1035 in the application event log.
Any clue on how to track which application is querying this win32_product class?
Thanks

Just guess…
When query win32_product class.
constantly repeated System events: Event ID: 7035 and Event ID: 7036
can get some clues from details of those two event?
Best,
Howtodo

Editor stops working in Photoshop Elements 7.3

I am having probelms with the Photoshop Elements editor stopping working in Windows 7. It worked for awhile and worked fine in Windows XP. I have tried unistalling and reinstalling to no avail. Any ideas???

First, yes, I used original media to reinstall after I did an Uninstall and both of these were done from an Administrator account. This is my laptop and I am the only person with an account on it… it is both Admin account and user account.
There are several: (I have also included some Info items that were not red icons but show info and trail for PSE)
Error      3/14/2012 5:41:08 PM    Application Error              1000      (100) * This one occurred several times
Faulting application name: PhotoshopElementsEditor.exe, version: 7.0.0.0, time stamp: 0x48cff252
Faulting module name: dldotwds.ds, version: 0.0.0.0, time stamp: 0x46e06550
Exception code: 0xc0000005
Fault offset: 0x00007448
Faulting process id: 0x30c0
Faulting application start time: 0x01cd02338bf86f7c
Faulting application path: C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsEditor.exe
Faulting module path: C:\Windows\Twain_32\Dell\968 AIO Printer\dldotwds.ds
Report Id: ca34f011-6e26-11e1-8ea4-88532e7ad3ba
Information         3/14/2012 5:41:11 PM     Windows Error Reporting 1001      None * This one occurred several times
Fault bucket 1082857846, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: PhotoshopElementsEditor.exe
P2: 7.0.0.0
P3: 48cff252
P4: dldotwds.ds
P5: 0.0.0.0
P6: 46e06550
P7: c0000005
P8: 00007448
P9:
P10:
Attached files:
C:\Users\Melinda Steele\AppData\Local\Temp\WERC4F8.tmp.WERInternalMetadata.xml
These files may be available here:
C:\Users\Melinda Steele\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_PhotoshopElement_d4ba4d 6fb853a6a5a756c1f759f4afe7db3aee35_229be89e
Analysis symbol:
Rechecking for solution: 0
Report Id: 76fd538d-6e1c-11e1-8ea4-88532e7ad3ba
Report Status: 0
Error      3/14/2012 5:38:42 PM    Application Hang              1002      (101)
The program PhotoshopElementsOrganizer.exe version 7.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 267c
Start Time: 01cd0231eaa78af3
Termination Time: 8
Application Path: C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsOrganizer.exe
Report Id:
Information        3/14/2012 4:26:35 PM    MsiInstaller         1042      None
Ending a Windows Installer transaction: D:\Adobe Photoshop Elements\Adobe Photoshop Elements 7.0 (en_us).msi. Client Process Id: 9020.
Information        3/14/2012 4:26:43 PM    MsiInstaller         11707    None
Product: Adobe Photoshop Elements 7.0 -- Installation operation completed successfully.
Information        3/14/2012 4:26:43 PM    MsiInstaller         1033      None
Windows Installer installed the product. Product Name: Adobe Photoshop Elements 7.0. Product Version: 7.0. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Installation success or error status: 0.
Information        3/14/2012 4:22:36 PM    System Restore 8194      None
Successfully created restore point (Process = C:\Windows\system32\msiexec.exe /V; Description = Installed Adobe Photoshop Elements 7.0.).
Information        3/14/2012 4:22:14 PM    MsiInstaller         1040      None
Beginning a Windows Installer transaction: D:\Adobe Photoshop Elements\Adobe Photoshop Elements 7.0 (en_us).msi. Client Process Id: 9020.
Information        3/14/2012 4:21:04 PM    MsiInstaller         1035      None
Windows Installer reconfigured the product. Product Name: Adobe Photoshop Elements 7.0. Product Version: 7.0. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Reconfiguration success or error status: 0.
Information        3/14/2012 4:21:04 PM    MsiInstaller         11728    None
Product: Adobe Photoshop Elements 7.0 -- Configuration completed successfully.
Information        3/14/2012 4:20:57 PM    MsiInstaller         1034      None
Windows Installer removed the product. Product Name: PhotoshopdotcomInspirationBrowser. Product Version: 0.0.0. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Removal success or error status: 0.
Information        3/14/2012 4:20:57 PM    MsiInstaller         11724    None
Product: PhotoshopdotcomInspirationBrowser -- Removal completed successfully.
Information        3/14/2012 4:20:50 PM    MsiInstaller         1042      None
Ending a Windows Installer transaction: D:\Adobe Photoshop Elements\Adobe Photoshop Elements 7.0 (en_us).msi. Client Process Id: 2640.
Information        3/14/2012 4:17:14 PM    Adobe Active File Monitor 7.0      2573      (1)
The description for Event ID 2573 from source Adobe Active File Monitor 7.0 cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:   (*Nothing was after this statement)
Information        3/14/2012 4:17:11 PM    MsiInstaller         1040      None
Beginning a Windows Installer transaction: D:\Adobe Photoshop Elements\Adobe Photoshop Elements 7.0 (en_us).msi. Client Process Id: 2640.
Information        3/14/2012 4:15:56 PM    MsiInstaller         1035      None
Windows Installer reconfigured the product. Product Name: Adobe Photoshop Elements 7.0. Product Version: 7.0. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Reconfiguration success or error status: 1602.
Information        3/14/2012 4:15:56 PM    MsiInstaller         11729    None
Product: Adobe Photoshop Elements 7.0 -- Configuration failed.
Information        3/14/2012 4:15:31 PM    MsiInstaller         1035      None
Windows Installer reconfigured the product. Product Name: Adobe Photoshop Elements 7.0. Product Version: 7.0. Product Language: 1033. Manufacturer: Adobe Systems Incorporated. Reconfiguration success or error status: 1602.
Information        3/14/2012 4:15:31 PM    MsiInstaller         11729    None
Product: Adobe Photoshop Elements 7.0 -- Configuration failed.
Information        3/14/2012 4:07:46 PM    Windows Error Reporting              1001      None
Fault bucket 1082857846, type 1
Event Name: APPCRASH
Response: Not available
Cab Id: 0
Problem signature:
P1: PhotoshopElementsEditor.exe
P2: 7.0.0.0
P3: 48cff252
P4: dldotwds.ds
P5: 0.0.0.0
P6: 46e06550
P7: c0000005
P8: 00007448
P9:
P10:
Attached files:
C:\Users\Melinda Steele\AppData\Local\Temp\WERDEED.tmp.WERInternalMetadata.xml
These files may be available here:
C:\Users\Melinda Steele\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_PhotoshopElement_d4ba4d 6fb853a6a5a756c1f759f4afe7db3aee35_1fddf26d
Analysis symbol:
Rechecking for solution: 0
Report Id: bbd850c4-6e19-11e1-8ea4-88532e7ad3ba
Report Status: 0
Melinda S

Unable to update iTunes: Related to Bonjour error "WSARecvMsg error 87"

I am running iTunes 9.2.0.61 on Windows 7 Ultimate x64. For some time, I have been unable to update iTunes to the latest version beyond what I have, regardless of what the latest version is.
Using Apple Software Update, I get the following error during the update:
"Errors occurred while installing the updates. If the problem persists, choose Tools > Download Only and try installing manually."
Accompanying this error in the Application log in Event Viewer are a few errors:
Event ID: Source: Occurrences:
100 Bonjour Service 7
11920 MsiInstaller 1
Event ID 100 from Bonjour Service has the following message:
Log Name: Application
Source: Bonjour Service
Date: 10/31/2010 8:51:05 AM
Event ID: 100
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WILL7
Description:
The description for Event ID 100 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
WSARecvMsg failed (87)
The specified resource type cannot be found in the image file
Log Name: Application
Source: Bonjour Service
Date: 10/31/2010 8:51:05 AM
Event ID: 100
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WILL7
Description:
The description for Event ID 100 from source Bonjour Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
WSARecvMsg failed (87)
The specified resource type cannot be found in the image file
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Bonjour Service" />
<EventID Qualifiers="0">100</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-10-31T12:51:05.000000000Z" />
<EventRecordID>16990</EventRecordID>
<Channel>Application</Channel>
<Computer>WILL7</Computer>
<Security />
</System>
<EventData>
<Data>WSARecvMsg failed (87)
</Data>
</EventData>
</Event>
Here is the error for event 11920 from MsiInstaller:
Log Name: Application
Source: MsiInstaller
Date: 10/31/2010 8:51:06 AM
Event ID: 11920
Task Category: None
Level: Error
Keywords: Classic
User: WILL7\swsander
Computer: WILL7
Description:
Product: Bonjour -- Error 1920. Service 'Bonjour Service' (Bonjour Service) failed to start. Verify that you have sufficient privileges to start system services.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="MsiInstaller" />
<EventID Qualifiers="0">11920</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-10-31T12:51:06.000000000Z" />
<EventRecordID>16991</EventRecordID>
<Channel>Application</Channel>
<Computer>WILL7</Computer>
<Security UserID="S-1-5-21-2626302321-2836749625-3976135476-1001" />
</System>
<EventData>
<Data>Product: Bonjour -- Error 1920. Service 'Bonjour Service' (Bonjour Service) failed to start. Verify that you have sufficient privileges to start system services.</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>(NULL)</Data>
<Data>
</Data>
<Binary>7B34314246304445342D354241452D344238382D414644332D383641333042323232313 8367D</Binary>
</EventData>
</Event>
I checked my Services console and Bonjour was started. I can also stop and start it without issue. I searched for these errors, but most of what I found was trouble getting the Bonjour service to start and as you can see, this is not my issue.
I have also tried to update iTunes with Bonjour stopped and disabled and with my Eset NOD32 Antivirus software disabled, but neither of these steps made any difference. I do not have a third-party firewall on my PC, but I am using Windows firewall. I have also tried disabling the Windows firewall, but this made no difference.
Any help would be appreciated.

More information:
Found this in the System log in Windows Event Viewer. There are many occurrences coinciding with the times I have been trying to update iTunes and/or Bonjour.
Log Name: System
Source: Service Control Manager
Date: 10/31/2010 9:44:14 AM
Event ID: 7024
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: WILL7
Description:
The Bonjour Service service terminated with service-specific error The parameter is incorrect..
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7024</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2010-10-31T13:44:14.338716200Z" />
<EventRecordID>94955</EventRecordID>
<Correlation />
<Execution ProcessID="876" ThreadID="4212" />
<Channel>System</Channel>
<Computer>WILL7</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Bonjour Service</Data>
<Data Name="param2">%%87</Data>
</EventData>
</Event>
Message was edited by: scottws

Process msiexec.exe initiated Server restart due to complete/configure MS Office Pro Plus 2013

Hello once again, today we had a strange issue. It appears that a plugin for Office Pro Plus 2013 or indeed Office itself initiated a restart of the Remote Desktop Server it was installed on. This is obviously not an ideal situation as it ends up terminating
sessions of all users that are connected to the server.
This is the text from the Event Log:
The process msiexec.exe has initiated the restart of computer XXXXXXXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x80030002
Shutdown Type: restart
Comment: The Windows Installer initiated a system restart to complete or continue the configuration of 'Microsoft Office Professional Plus 2013'.
The Event ID is 1074 / Source is User32 /
Is there a way to prevent this happening in future.

Hello Dave,
I started having the same issue on our Remote Desktop Server, Windows 2008 R2 with Office Pro Plus 2013 connecting to O365 mailboxes. The server has been set up for months and only started this behaviour. When I trawled through the logs and found
the entry you list I also checked the application log at the same time. In the Application log I found an entry with source MsiInstaller and event id 11728 detailing that an install was in progress. I could see on the Geenral TAB of this entry
that a single user had initiated this install. It should be noted that the user was not an Administrator, however they were new. When I logged on as the user and opened outlook it did come up with a window saying it was completing the install and
asked them to reboot. It does this every time you open outlook unless you open it in safemode.
I tried a number of things to fix it:
1. Disable add-ins. (No effect)
2. Reset outlook profile. (No Effect)
3. Deleted user profile from the Remote Desktop Server, renamed the relevant profile in "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" and renamed the folder in "c:\users". (No effect)
My next step was going to be to delete the users profile completely. Before I did that I created a new test user and logged on to see if it was affecting all new users. I logged on with the user and it did not have a problem.
Strangely now when I log on as the original user having the issue the problem is gone.
I will monitor the situation, but at the moment it is fixed.
Tony
"This is the stickiest situation since sticky the stick insect got stuck on a sticky bun"

Exchange User Account Managment Task locking AD account

User's AD account is locking within minutes. Windows logs show calling computer as the Exchange 2010 CAS server ( which is part of the CAS array). We have disabled all mailbox features ( Active Sync, Mapi, OWA, POP, IMAP) The
account still locks up within minutes and with same Windows event. There are no 1035 events on the CAS showing any brute force attacks and no other Logs referencing this event at all . The ISS logs show an old Samsung Phone that the user
had months ago and it broke. It doesn't make sense that it will be blocking the account even when Active Sync is disabled for testing. I have gone ahead and blocked it anyway and removed it from the mailbox using MAPI MFC. I did check server
for Conflicker but did not see any thing odd in the registry. What can be causing this lockout ? Also the user does not have any tasks configured or passwords saved on the computer.
Windows Log:
og Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          9/17/2014 9:09:03 AM
Event ID:      4740
Task Category: User Account Management
Level:         Information
Keywords:      Audit Success
User:          N/A
Computer:      DOmainController.DOmain.local
Description:
A user account was locked out.
Subject:
Security ID:  SYSTEM
Account Name:  DOMAINCONTROLLER$
Account Domain:  Domain Name
Logon ID:  0x3e7
Account That Was Locked Out:
Security ID:  Domain Name\User
Account Name:  windows user name
Additional Information:
Caller Computer Name: Exchange 2010 CAS server
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54878625-5237-4999-A5DA-4t567j328C30G}" />
    <EventID>4740</EventID>
    <Version>0</Version>
    <Level>0</Level>
    <Task>13824</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8020000000000000</Keywords>
    <TimeCreated SystemTime="2014-09-17T13:09:03.021253500Z" />
    <EventRecordID>331284493</EventRecordID>
    <Correlation />
    <Execution ProcessID="492" ThreadID="1036" />
    <Channel>Security</Channel>
    <Computer>DomainController.domain.local</Computer>
    <Security />
</System>
<EventData>
    <Data Name="TargetUserName">Username</Data>
    <Data Name="TargetDomainName">Exchange 2010 CAS Server</Data>
    <Data Name="TargetSid">S-1-5-21-4059915145-90934678-67520089-8930</Data>
    <Data Name="SubjectUserSid">S-1-5-18</Data>
    <Data Name="SubjectUserName">DomainControler$</Data>
    <Data Name="SubjectDomainName">DOmain Name</Data>
    <Data Name="SubjectLogonId">0x3e7</Data>
</EventData>
</Event>
IIS Log Entry for the Old Phone which was removed now using MAPI MFC and Blocked. Note 10.88.11.2 is Load Balancers IP (changed in this post)
ault.eas Cmd=Sync&User=DomainName%5CDomainUserName&DeviceId=SEC1772877030523&DeviceType=SAMSUNGSCHI535 80 Domain\Username 10.88.11.2 SAMSUNG-SCH-I535/101.403 401 1 1909 0

Hello,
Ad replication has been tested with no issues.
The Test account locks up only if we intentionally enter the bad password. This was done to see that if our disabling of the Mailbox feature on the actuall production account would prevent locks due to request coming to exchange for that feature,
with a bad password. Apparently account will lock even if the mailbox feature is disabled. For example: if OWA if disabled for a mailbox entering the incorrect password for the account will lock the account.
So, currently we have done a work around; since the user has no pc to log in to - only uses Ipad and Iphone - we have changed the user name in AD. The account is not locking in but I am still seeing these eneteries in the IIS logs coming from his old phone
for the old username ( which broke and was trashed- this also tells us that if we revert to the actual username for the account it will lock). Also, disabling active sync for the user when user name was not changed did not have
any impact and request coming to active sync would still lock the account.
What should we do to prevent exchange from trying to respond to this request to active sync, from an old device ?   - the device was blocked on the account and removed through MFC when the issue surfaced but it did not fix the situation:
Request on IIS logs:
2014-09-18 00:01:07 10.97.10.20 POST /Microsoft-Server-ActiveSync/default.eas Cmd=Sync&User=Domain Name%5CUsername&DeviceId=SEC1342789030523&DeviceType=SAMSUNGSCHI535 80 DOmain Name\Username 10.1.10.46 SAMSUNG-SCH-I535/101.403 401 1 1909 0
Block Command Used:
[PS] C:\Windows\system32>Set-CASMailbox -Identity: "[email protected]" -ActiveSyncBlockedDeviceIDs: "SEC1342789030523"
Confirmed its listed as blocked:Get-CASMailbox Username | Select ActiveSyncAllowedDeviceIDs, ActiveSyncBlockedDeviceIDs
Note: ( Allowed devices are non since at that time we had removed all current active sync devices attached to the account to see if any of them were responsible for the bad request )
ActiveSyncAllowedDeviceIDs                                  ActiveSyncBlockedDeviceIDs
{SEC1342789030523}

Event ID 1035

I have this event every 15min
Log Name:      Application
Source:        MSExchangeFrontEndTransport
Date:          6/10/2014 2:56:49 μμ
Event ID:      1035
Task Category: SmtpReceive
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      server
Description:
Inbound authentication failed with error LogonDenied for Receive connector Client Frontend server. The authentication mechanism is Login. The source IP address of the client who tried to authenticate to Microsoft Exchange is [127.0.0.1].

Hi Tosiadis
Thank you for your question.
By my understand , the exchange server checked the healthmailbox properties and found that there were few healthmailboxes have the different UPN.
I suggest you change the Healthmailbox UPN to a default domain name
You can refer to the following link:
http://support.microsoft.com/kb/2952691
if any questions. please let me know.
Best regard,
Jim xu

Exchange 2007 a lot of event id 1035!!!!!!

Hi to all
The last two days i have start receive a lot of 1035 warnings messages in my event log.
Event Type: Warning
Event Source: MSExchangeTransport
Event Category: SmtpReceive
Event ID: 1035
Date: 25/11/2014
Time: 9:22:10 πμ
User: N/A
Computer: xxxxxxxxxxxxxxx
Description:
Inbound authentication failed with error LogonDenied for Receive connector Default xxxxxxxxxxxxxxx. The authentication mechanism is Ntlm. The source IP address of the client who tried to authenticate to Microsoft Exchange is [191.237.193.88].
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
From the http://whatismyipaddress.com/ip/191.237.193.88 i found that ip is from Mirosoft.
So far noone has complain that was unable to receive or send email.
Why i receive all of this warnings????
Thanks and regards.

Hi Vagelisr
Thank you for your question.
Event id 1035 means your exchange server cannot authenticate with the remote exchange server. Your exchange server requires authentication to route internal user messages between server, it may cause by the following three reason:
•The Exchange server is experiencing Time synchronization issues
•The Exchange server is experiencing Service Principal Name (SPN) issues
•The required TCP/UDP ports for the Kerberos protocol are blocked by the firewall.
You can refer to the following link to troubleshooting:
https://support.microsoft.com/kb/979174
If not, you can refer to the following link to modify the IP range of the default receive connector and the way of authentication:
http://www.exchangefreaks.com/EVENT-ID-1035-showing-up-on-an-Exchange-2007-Server-t135392.html
You can also create a new receive connector with the IP address of the exchange server , you can refer to the following link:
http://technet.microsoft.com/en-us/library/bb125159.aspx
If there are any questions, please let me know.
Best Regard,
Jim

Win32_NTLogEvent sometimes returns null for the Message field even though the event does contain a message

This does not happen often but it does happen. We have an application that regular runs WMI queries to collect windows events. However, on a particular machine, on particular events, the windows event description that comes from the Win32_NTLogEvent.Message
field is null. The event does indeed have a description and that can clearly be seen in the Event Viewer.
One particular event that causes the problem is
Event Type: Information
Event Source: MsiInstaller
Event Category: None
Event ID: 1035
Date:  4/21/2010
Time:  8:51:53 AM
User:  NT AUTHORITY\SYSTEM
Computer: COMP201002
Description:
Windows Installer reconfigured the product. Product Name: 32 Bit HP BiDi Channel Components Installer. Product Version: 1.1.0.2. Product Language: 1033. Reconfiguration success or error status: 0.
As you can see, the description exists. However, the field returned by WMI is null.
Any way i can diagnose the problem to see what's going on? Is this a WMI bug?

Hi markoueis, I suggest you first check these links for troubleshooting WMI as the issue can be caused by WMI on the particular machine:
http://www.microsoft.com/technet/scriptcenter/topics/help/wmi.mspx
How to troubleshoot WMI-related issues in Windows XP SP2
http://support.microsoft.com/kb/875605
You can also try restart WMI service and see the result. If this does not work, you can try the steps in the following article to rebuild repository:
WMI Troubleshooting: The Repository on Vista / Server 2008
http://blogs.technet.com/b/askperf/archive/2008/07/11/wmi-troubleshooting-the-repository-on-vista-server-2008.aspx
Hope this helps!
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Training and Event (PE) Tables

I would be grateful if someone could give me a copy or tell me how I can get a list of all the tables in PE - Training and Event Management.
Thanks

HRP1000 & HRP1001 are the main tables.And the rest are
Prices (Infotype 1021)
Availability Indicators (Infotype 1023)
Capacity (Infotype 1024)
Depreciation Meter/Validity (Infotype 1025)
Business Event Info (Infotype 1026)
Site-Dependent Additional Info (Infotype 1027)
Address (Infotype 1028)
Business Event Type Info (Infotype 1029)
Procedure (Infotype 1030)
Mail Address (Infotype 1032)
Name Format (Infotype 1034)
Schedule (Infotype 1035)
Costs (Infotype 1036)
Billing/Allocation Info (Infotype 1037)
Business Event Blocks (Infotype 1041)
Schedule Model (Infotype 1042)
Demand (Infotype 1060)
Web Link (Infotype 1061)
Knowledge Link (Infotype 1062)
Business Event Group Info (Infotype 1063)
to get the db table name just pre-fix HRP before the Infotype Number.
~Suresh

DB13offline backup erERRORMESSAGE: Error -1035 in dmdb6bkp.c(1498):SQL1035N

We have received the below msg when we took offline backup.
Job started
Step 001 started (program RSDBAJOB, variant &0000000000251, user ID SAGARK)
Execute logical command DB6_DBBACKUP On host eccprod
Parameters:PRD OFFLINE TO /prdback/sapbackup BUFFERS 0 BUFFERSIZE 0 PARALLELISM 0
Job started
Step 001 started (program RSDBAJOB, variant &0000000000250, user ID SAGARK)
Execute logical command DB6_DBBACKUP On host eccprod
Parameters:PRD OFFLINE TO /prdback/sapbackup BUFFERS 0 BUFFERSIZE 0 PARALLELISM 0
set connect partition: 0
deactivate db PRD...
ERRORMESSAGE: Error 1495 in dmdb6bkp.c(1092):
SQL1495W Deactivate database is successful, however, there is still
a connection to the database.
Making database backup...
Database      = PRD
Backup Mode   = FULL
Backup Options= OFFLINE
Buffer size   = AUTOMATIC
buffers     = AUTOMATIC
Parallelism   = AUTOMATIC
numLocations = 1
location[0]   = /prdback/sapbackup
util priority = 0
ERRORMESSAGE: Error -1035 in dmdb6bkp.c(1498):
SQL1035N The database is currently in use. SQLSTATE=57019
Stopping database manager...
ERRORMESSAGE: Error -6036 in dmdb6bkp.c(1299):
SQL6036N START or STOP DATABASE MANAGER command is already in
progress.
Starting database manager...
ERRORMESSAGE: Error -6036 in dmdb6bkp.c(1308):
SQL6036N START or STOP DATABASE MANAGER command is already in
progress.
External program terminated with exit code 2
DB6_DBBACKUP returned error status E
TemSe: I/O error
set connect partition: 0
deactivate db PRD...
ERRORMESSAGE: Error 1495 in dmdb6bkp.c(1092):
SQL1495W Deactivate database is successful, however, there is still
a connection to the database.

Hello Mohan,
Please ensure you are using the latest available version of dmdb6bkp.
Did the backup eventual;ly complete?
However there had been some issues to deactivate/activate the database .
As note 594353 states , this is normal and on occurance of this event
the corresponding action is retried up to 10 times .
You can check this via
1. db2diag.log
2. List history backup commands
3. db2ckbkp                       ... DB2 Check backup command
You can ensure that the backup did complete.
Please update if the backup still fails.
Regards,
Paul

SQL Server 2012 Installed KB2793634 and it completed successfully but display error in the event log

Hi
Running SQL Server 2012 with SP1 on Windows 7 x64 SP1
One of the machines that this is installed displayed that the Windows Installer was starting repeatedly, like every 30 secs
I installed KB2793634 and everything completed successfully. No errors in any of the Summary, Detail, etc and all check marks at the end. I went throught the event viewer and in the application log and saw the following
Product: SQL Server 2012 Database Engine Services - Update '{4023B523-7241-4B6D-83A4-92105B0A3DC8}' could not be installed. Error code 1642. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the
following link for instructions on turning on logging support:
Is this something with the KB. How do I find what the issue is and what do I do to fix it? Or is this a real error?
I brought up SQL Server and the issue that the KB resolves seems to been resolved. I can connect to the instance just fine, the version of the KB has been applied to the instance so now it is at 11.0.3128
Any information will be greatly appreciated.

Hi,
According to the description, I know the patch that was successfully installed after the msiinstaller error.
1. Per
KB304888 and mentioned the possibility that the hotfix was launched a second time after the initial successful update.
I suspect if you have installed any hotfixes or Cumulative updates after installing Service Pack 1 for SQL Server 2012.
Reference:
http://support.microsoft.com/kb/2793634
2. Check the application log. Is the error happening intermittently?
Thanks.
Tracy Cai
TechNet Community Support

Integration Event webservice problem

Hi there
i'm trying to create a java client to check all contacts deleted in crmod. For that i've created a workflow rule that creates an integration event, everytime a contact is deleted.
Now when i try to get those events i'm getting this message: org.xml.sax.SAXException: Invalid element in crmondemand.xml.IntegrationEvent.SiebelMessage - ListOfContact
     at org.apache.axis.encoding.ser.BeanDeserializer.onStartChild(BeanDeserializer.java:258)
     at org.apache.axis.encoding.DeserializationContext.startElement(DeserializationContext.java:1035)
     at org.apache.axis.message.SAX2EventRecorder.replay(SAX2EventRecorder.java:165)
     at org.apache.axis.message.MessageElement.publishToHandler(MessageElement.java:1141)
     at org.apache.axis.message.RPCElement.deserialize(RPCElement.java:236)
     at org.apache.axis.message.RPCElement.getParams(RPCElement.java:384)
     at org.apache.axis.client.Call.invoke(Call.java:2467)
     at org.apache.axis.client.Call.invoke(Call.java:2366)
     at org.apache.axis.client.Call.invoke(Call.java:1812)
     at crmondemand.ws.IntegrationEvent.Default_BindingStub.getEvents(Default_BindingStub.java:249)
     at TesteIntEvent.main(TesteIntEvent.java:40)
This is the piece of code that i'm using:
Default_BindingStub stub = new Default_BindingStub(url, service);
IntegrationEventWS_GetEvents_Input input = new IntegrationEventWS_GetEvents_Input();
IntegrationEventWS_GetEvents_Output output = new IntegrationEventWS_GetEvents_Output();
output = stub.getEvents(input);
the error occurs in the last line. Does anyone has an ideia of what is happening?
thanks in advance.

This is not answer of your question but alternate option.
If your requirement is just to check the contact deleted, use the Deleted Item Service API.
NO need to overload integration event queue. Though it can be done by IE also but for that you need to create the Queue, WF etc, not the efficient way.
Dinesh

Business Event change after follow up

I've changed entries in table T778T for specific infotypes relating to a business event, such as 1035 and 1024, in the thinking that after I've gone into infotype 1026 of a followed up BE and unticked 'follow up' to change the status back to firmly booked, it would allow those infotypes to be changed. However, when I try to change 1024 for instance, I get an error message of 'No change to business event possible, archived attendance records exist'. Does anyone know if there's a route around this message and changing the event infotypes?
Thanks

Hi Sunil,
I doubt if one can change the shopping cart after the quote has been accepted.But as far as restarting of workflow upon change in a shopping cart is concerned, it can be controlled using the authorization level (1 to 4) for a perticular role. "4" is the hightest authorization and "1" is the least.It is maintained in -Personalization oject key- BBP_WFL_SECURITY in TCODE-PFCG.
Once the quote is accepted , the PO can be created using the price mentioned in accepted quotation.
In bid invitation document which is created from a shopping cart, line item can be edited but no further line item can be added in this bid invitation doc.
I hope this info will be useful for you.
Regards,
Amit
[email protected]

MsiInstaller 1035 Events - VmmAgent

Similar Messages

Maybe you are looking for