XADM: ESEPERF!CollectPerformanceData Causes Winlogon to Stop Responding and Generate an Error Message on a Blue Screen with Int21a (297828)



The information in this article applies to:

  • Microsoft Exchange Server 5.5
  • Microsoft Exchange Server 5.5 SP1
  • Microsoft Exchange Server 5.5 SP2
  • Microsoft Exchange Server 5.5 SP3
  • Microsoft Exchange Server 5.5 SP4
  • Microsoft Windows NT Server 4.0
  • Microsoft Windows NT Server 4.0 SP1
  • Microsoft Windows NT Server 4.0 SP2
  • Microsoft Windows NT Server 4.0 SP3
  • Microsoft Windows NT Server 4.0 SP4
  • Microsoft Windows NT Server 4.0 SP5
  • Microsoft Windows NT Server 4.0 SP6
  • Microsoft Windows NT Server 4.0 SP6a

This article was previously published under Q297828

SYMPTOMS

If you use Performance Monitor to collect data from the Database performance object on Windows NT 4.0-based servers that are running Exchange Server 5.5, you may receive an error message on a blue screen.

CAUSE

Windows NT 4.0 uses the Winlogon.exe process to collect performance data for programs that are runnning on the server. This problem can occur if a problem in Eseperf.dll, a dynamic link library (DLL) that Winlogon.exe uses to collect performance data from the Exchange Server Extensiable Storeage Engine (ESE), causes an access violation in the Winlogon process. Because Winlogon is considered a critical service for Windows NT 4.0, the server displays an error message on a blue screen when this service becomes unavailable.

This problem only occurs on computers that are running Windows NT 4.0. Microsoft Windows 2000 is not dependent on Winlogon to collect performance-related data, so Windows 2000 does not display an error message on a blue screen.

RESOLUTION

A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to computers that are experiencing this specific problem. This fix may receive additional testing. Therefore, if you are not severely affected by this problem, Microsoft recommends that you wait for the next Microsoft Exchange Server 5.5 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The typical support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this fix should have the following file attributes or later:

Component: JET

File nameVersion
Eseperf.dll5.5.2655.4

NOTE: Because of file dependencies, this fix requires Microsoft Exchange Server version 5.5 Service Pack 4.

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange Server version 5.5.

Modification Type:MinorLast Reviewed:10/6/2005
Keywords:kbHotfixServer kbQFE kbbug kbExchange550preSP5fix kbfix kbQFE KB297828