Multiple Event ID 3009 and 3003 Events Appear After You Install Service Pack 3 for Windows 2000 (325727)


The information in this article applies to:

  • Microsoft Windows 2000 Server SP2
  • Microsoft Windows 2000 Server SP3
  • Microsoft Windows 2000 Advanced Server SP2
  • Microsoft Windows 2000 Advanced Server SP3
This article was previously published under Q325727

SYMPTOMS

When you restart the computer after you install Service Pack 3 (SP3) for Windows 2000 on a computer on which you have configured performance counters, one or more of the following events may be displayed in the application log of the event viewer:
  • Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3009
    Date: date
    Time: time
    User: N/A
    Computer: computername

    Description:
    Installing the performance counter strings for Inetinfo failed. The Error code is DWORD 0 of the Record Data.

    Data:
    0000: 02 00 00 00 ....
  • Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3003
    Date: date
    Time: time
    User: N/A
    Computer: computername

    Description:
    The SYSTEM\CurrentControlSet\Services\inetinfo\Performance key could not be opened or accessed in order to install counter strings. The Win32 status returned by the call is in the Record Data as DWORD 0.

    Data:
    0000: 02 00 00 00 ....
  • Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3009
    Date: date
    Time: time
    User: N/A
    Computer: computername

    Description:
    Installing the performance counter strings for ASP failed. The Error code is DWORD 0 of the Record Data.

    Data:
    0000: 02 00 00 00 ....
  • Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3003
    Date: date
    Time: time
    User: N/A
    Computer: computername

    Description:
    The SYSTEM\CurrentControlSet\Services\ASP\Performance key could not be opened or accessed in order to install counter strings.The Win32 status returned by the call is in the Record Data as DWORD 0.

    Data:
    0000: 02 00 00 00 ....
  • Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3009
    Date: date
    Time: time
    User: N/A
    Computer: computername

    Description:
    Installing the performance counter strings for MSFTPSVC failed. The Error code is DWORD 0 of the Record Data.

    Data:
    0000: 02 00 00 00 ....
  • Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3009
    Date: date
    Time: time
    User: N/A
    Computer: computername

    Description:
    Installing the performance counter strings for W3SVC failed. The Error code is DWORD 0 of the Record Data.

    Data:
    0000: 02 00 00 00 ....
  • Event Type: Error
    Event Source: LoadPerf
    Event Category: None
    Event ID: 3003
    Date: date
    Time: time
    User: N/A
    Computer: computername

    Description:
    The SYSTEM\CurrentControlSet\Services\W3SVC\Performance key could not be opened or accessed in order to install counter strings.The Win32 status returned by the call is in the Record Data as DWORD 0.

    Data:
    0000: 02 00 00 00 ....

CAUSE

This behavior may occur in the following scenario:
  1. You install Service Pack 2 (SP2) for Windows 2000 on a computer on which Internet Information Services (IIS) is not installed.
  2. You install IIS.
  3. You remove SP2 for Windows 2000.
  4. You install SP3 for Windows 2000.
This behavior occurs because the Windows 2000 SP2 removal process reverts the registry settings for the following registry subkeys to their state from before the SP2 installation:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asp\performance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\inetinfo\performance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msftpsvc\performance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w3svc\performance

SP3 Setup expects these registry keys to be present because IIS is currently installed. Because these registry keys have been removed during the removal of SP2, the error messages listed in the "Symptoms" section of this article are generated when SP3 tries to update these registry entries with Loadperf calls.

RESOLUTION

To work around this problem, reinstall and then remove IIS. The reinstallation of IIS restores the critical performance-related registry subkeys.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

When you install SP3 for Windows 2000 in the following scenario, the error messages described in the "Symptoms" section of this article appear only one time -- after you finish the installation of SP3 and then restart the computer:
  1. You install SP2 for Windows 2000 on a computer on which IIS is installed.
  2. You install IIS.
  3. You remove SP2 for Windows 2000.
  4. You install SP3 for Windows 2000.
Two error events are generated (Event ID 3009 and Event ID 3003) for each service that provides IIS-related performance counters -- for example, the Inetinfo, ASP, MSFTPSVC, and W3SVC services.

Before you remove SP2 for Windows 2000, Microsoft recommends that you first remove all other Windows components that you installed after the installation of SP2.
Modification Type:MajorLast Reviewed:12/19/2003
Keywords:kberrmsg kbprb KB325727
©2003 Microsoft Corporation. All rights reserved.