Event ID 1010 is logged every hour in the System log on a Windows 2000 Advanced Server-based computer (888044)



The information in this article applies to:

  • Microsoft Windows 2000 Advanced Server

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

On your Microsoft Windows 2000 Advanced Server-based computer, the following event is logged every hour in the System log:Event ID: 1010
Source: Perflib
Description:
The Collect Procedure for the "Tcpip" service in DLL "C:\WINNT\system32\Perfctrs.dll" generated an exception or returned an invalid status. Performance data returned by counter DLL will be not be returned in Perf Data Block. Exception or status code returned is DWORD 0.

RESOLUTION

To resolve this issue, follow the steps in Method 1. If the issue is not resolved, follow these steps in Method 2.

Method 1

To resolve this issue, you must disable all the services for the Compaq Insight Manager agents. To do this, follow these steps:
  1. Click Start, point to Programs, point to Administrative Tools, and then click Services.
  2. Click a Compaq service, such as Compaq Foundation Agent, and then click Properties on the Action menu.
  3. Under Service status, click Stop. In the Startup type list, click Disabled, and then click OK.
  4. Repeat steps 2 and 3 for all the other Compaq services that you find in Services.

    Note Additional Compaq services that you may find in Services include the following:
    • Compaq NIC Agent
    • Compaq Remote Monitor Service
    • Compaq Server Agent
    • Compaq Storage Agent
    • Compaq Web Agent
If this resolution does not resolve the issue, follow these steps in Method 2.

Method 2

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
  1. Click Start, click Run, type regedit, and then click OK.
  2. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Performance

  3. In the right pane, right-click Disable Performance Counters, click Delete, and then click Yes.
  4. Quit Registry Editor.
  5. Click Start, click Run, type regedt32, and then click OK.
  6. Locate and then click the following registry key:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Performance

  7. On the Security menu, click Permissions.
  8. Click Advanced, and then click the Auditing tab.
  9. Click Add, click CREATOR OWNER in the list, and then click OK.
  10. In the Access list, click to select the Successful check boxes next to the following options:
    • Set Value
    • Create Subkey
    • Create Link
    • Write DAC
    • Write Owner
    Then, click OK three times.
  11. Quit Registry Editor.
  12. Locate the Perfctrs.dll file. By default, Perfctrs.dll is located in the C:\Winnt\System32 folder. Make sure that the Perfctrs.dll file has a file date that is later than 09-Apr-2002. If the file date is not later than 09-Apr-2002, apply the hotfix that is mentioned in the following article:

    831877 Multiple memory leaks in the Remote Registry Service when you use performance counters

  13. Restart your computer.
The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.

Modification Type:MajorLast Reviewed:12/10/2004
Keywords:kbPerformance kb3rdparty kbtshoot KB888044 kbAudITPRO