Event ID:2000 Errors in Event Log (108256)

SYMPTOMS

Windows NT logs between one and nine of the following messages per second in the SYSTEM EventLog.

    Date:     10/25/93          Event ID:  2000
    Time:     01:24:15 PM       Source:    Srv
    User:     N/A               Type:      Error
    Computer: <servername>      Category:  None

    Description:
    The server's call to a system service failed unexpectedly.

    Data (bytes):
    0000: 00 00 04 00 01 00 54 00   ......T.
    0008: 00 00 00 00 d0 07 00 c0   ....D..A
    0010: 00 00 00 00 0d 00 00 c0   .......A
    0018: 00 00 00 00 00 00 00 00   ........
    0020: 00 00 00 00 00 00 00 00   ........
    0028: c0 0b 00 00               A...

CAUSE

The event indicates that the server got STATUS_INVALID_PARAMETER (c0000008) when it called NtQueryInformationFile (bc0). This happens when the server tries to open a pipe named "\".

The problem is that if a Windows NT WOW or MVDM client application opens a file against a Windows NT server and that open fails, the clients WOW and MVDM both call a routine called IsCDROMFile that attempts to open and call QueryVolumeInformation of the file <server>\PIPE\ which fails on the server.

STATUS

Microsoft has confirmed this to be a problem in Windows NT and Windows NT Advanced Server version 3.1. This problem was corrected in the latest US Service Pack for Windows NT and Windows NT Advanced Server. For information on obtaining this update, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K