Hi all...
Hope you can help...
We have just provisioned a test Sharepoint Environment and noticed on all of
our new Sharepoint servers, (2 Web Front End and 2 Application Servers) a
strange error is shown in the event log when starting the Document
Conversions Load Balancer service...
The Sharepoint servers are running on Server 2008 Std SP2 x64 with all the
latest updates installed and including .Net framework 3.5 sp1...
The version of MOSS running on that machine is Office Server 2007 SP2
version 12.0.6425.1000...
When the service is started immediatley the following is shown in the
Application Event Viewer:
Log Name: Application
Source: Office SharePoint Server
Date: 09/09/2009 14:21:18
Event ID: 8198
Task Category: Load Balancer Service
Level: Error
Keywords: Classic
User: N/A
Computer: WFE3.blah.blah.com
Description:
The description for Event ID 8198 from source Office SharePoint Server
cannot be found. Either the component that raises this event is not installed
on your local computer or the installation is corrupted. You can install or
repair the component on the local computer.
If the event originated on another computer, the display information had to
be saved with the event.
The following information was included with the event:
2
fe80::68fd:6c18:30fc:a4e8%13
the message resource is present but the message is not found in the
string/message table
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Office SharePoint Server" />
<EventID Qualifiers="0">8198</EventID>
<Level>2</Level>
<Task>1566</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-09-09T13:21:18.000Z" />
<EventRecordID>2311</EventRecordID>
<Channel>Application</Channel>
<Computer>WFE3.blah.blah.com</Computer>
<Security />
</System>
<EventData>
<Data>2</Data>
<Data>fe80::68fd:6c18:30fc:a4e8%13</Data>
</EventData>
</Event>
Any idea what may be causing this error? I have tried a search of Technet an
also other tech sites and nothing is mentioned of this Event Id anywhere...
Another related error generated at roughly the same time within the Security
event log is this one below regarding an audit failure:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 09/09/2009 14:00:57
Event ID: 4656
Task Category: File System
Level: Information
Keywords: Audit Failure
User: N/A
Computer: WFE3.blah.blah.com
Description:
A handle to an object was requested.
Subject:
Security ID: LOCAL SERVICE
Account Name: LOCAL SERVICE
Account Domain: NT AUTHORITY
Logon ID: 0x3e5
Object:
Object Server: Security
Object Type: File
Object
Name: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\enterprisesec.config .cch.new
Handle ID: 0x0
Process Information:
Process ID: 0xe24
Process Name: C:\Program Files\Microsoft Office
Servers\12.0\Bin\Microsoft.Office.Server.Conversions.LoadBalancer.exe
Access Request Information:
Transaction ID: {00000000-0000-0000-0000-000000000000}
Accesses: READ_CONTROL
SYNCHRONIZE
WriteData (or AddFile)
AppendData (or AddSubdirectory or CreatePipeInstance)
WriteEA
ReadAttributes
WriteAttributes
Access Mask: 0x120196
Privileges Used for Access Check: -
Restricted SID Count: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing"
Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>4656</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12800</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2009-09-09T13:00:57.398Z" />
<EventRecordID>696470</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="84" />
<Channel>Security</Channel>
<Computer>WFE3.blah.blah.com</Computer>
<Security />
</System>
<EventData>
<Data Name="SubjectUserSid">S-1-5-19</Data>
<Data Name="SubjectUserName">LOCAL SERVICE</Data>
<Data Name="SubjectDomainName">NT AUTHORITY</Data>
<Data Name="SubjectLogonId">0x3e5</Data>
<Data Name="ObjectServer">Security</Data>
<Data Name="ObjectType">File</Data>
<Data
Name="ObjectName">C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\en terprisesec.config.cch.new</Data>
<Data Name="HandleId">0x0</Data>
<Data Name="TransactionId">{00000000-0000-0000-0000-000000000000}</Data>
<Data Name="AccessList">%%1538
%%1541
%%4417
%%4418
%%4420
%%4423
%%4424
</Data>
<Data Name="AccessMask">0x120196</Data>
<Data Name="PrivilegeList">-</Data>
<Data Name="RestrictedSidCount">0</Data>
<Data Name="ProcessId">0xe24</Data>
<Data Name="ProcessName">C:\Program Files\Microsoft Office
Servers\12.0\Bin\Microsoft.Office.Server.Conversions.LoadBalancer.exe</Data >
</EventData>
</Event>
Could this be permissions based somewhere?
Any information on the above error would be very gratefully recieved...
Kind regards,
Carl
|
