DOCUMENT:Q130000 04-FEB-2002 [winnt] TITLE :Application Events 2000 & 3001 Appear While Monitoring SFM PRODUCT :Microsoft Windows NT PROD/VER::2000,3.5,3.51,4.0,4.5 OPER/SYS: KEYWORDS:kbenv ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Windows NT Advanced Server - Microsoft Windows NT Server versions 3.5, 3.51, 4.0 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Server - Microsoft BackOffice Small Business Server versions 4.0, 4.5 ------------------------------------------------------------------------------- SYMPTOMS ======== While you are monitoring Services for Macintosh (SFM) in Windows NT Server Performance Monitor, the following Application log events appear in Event Viewer: Event ID: 3001 Source: ATKCTRS Type: Error Description: Unable to open ATK for R access. Returning IO Status Block in Data. Event ID: 2000 Source SFMCTRS Type: Error Description: Unable to open driver containing SFM file server performance data. To view the MacFile counters from PERFMON.EXE, make sure the MacFile service has been started. CAUSE ===== These events indicate a problem with Performance Monitor not being able to communicate with the Appletalk Protocol. These events are logged in the Application event log while monitoring Appletalk or MacFile Server in Performance Monitor when: - SFM is not installed or started. - The Appletalk protocol device or File SFM service is stopped. - You have a bad network interface card (NIC) or network cabling. - Macintosh seed routing is enabled in SFM with incorrect or conflicting parameters. MORE INFORMATION ================ There are two counters that performance monitor contains which allows a user to monitor how SFM is behaving on a Windows NT server. In performance monitor, you can select MacFile Server and Appletalk. These are represented by the SFMCTRS.DLL and ATKCTRS.DLL files respectively. Occasionally when viewing a event log on a Windows NT Server you may notice events that have a source of SFMCTRS or ATKCTRS. If there are a large number of events it could be an indication of problems with the SFM on the server. Additional query words: prodnt perfmon ====================================================================== Keywords : kbenv Technology : kbWinNTsearch kbWinNT351search kbWinNT350search kbWinNT400search kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000DataServ kbwin2000DataServSearch kbwin2000Serv kbWinNTSsearch kbWinNTS400search kbWinNTS400 kbWinNTS351 kbWinNTS350 kbWinNTAdvSerSearch kbwin2000ServSearch kbwin2000Search kbWinNTS351search kbWinNTS350search kbAudDeveloper kbSBServSearch kbWinAdvServSearch kbWinDataServSearch kbSBServ400 kbSBServ450 Version : :2000,3.5,3.51,4.0,4.5 ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2002.