Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows Registry
SYMPTOMS
When you use the Ultrasound tool to monitor the File Replication Service (FRS) and to track sharing violations on a server that is running Microsoft Windows Server 2003 or Microsoft Windows 2000, a sharing violation may occur. However, you cannot verify the sharing violation by using the following tools to display the open handles on the server:
- The net file or net files command
- The Oh.exe tool
Certain sharing violations that are logged to the
Current sharing violations (member) view or that are logged to the
Current sharing violations (replica set) view of the Ultrasound tool may be incorrect.
RESOLUTION
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To resolve this issue, configure the Ultrasound tool to monitor the event logs for occurrences of sharing violation event ID 13573 when the tool tracks sharing violations. To do this, install the latest version of Ntfrs.exe on the server, and then add the Enable Sharing Violation Logging
registry entry to the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ntfrs\Parameters
After you perform this procedure, the Ultrasound tool logs sharing violations that are based on the occurrence of event ID 13573 to the new
Current sharing violations (events) view. However, the Ultrasound tool still logs sharing violations to the
Current sharing violations (member) view and to the
Current sharing violations (replica set) view. For a more accurate view of the sharing violations that are reported by the Ultrasound tool, view the sharing violations that are logged to the
Current sharing violations (events) view.
To install the latest version of Ntfrs.exe on the server, install one of the following hotfixes, depending on the operating system that you are running:
- If you are running Windows Server 2003, install the hotfix that is described in the following article in the Microsoft Knowledge Base:
823230 Issues that are resolved in the pre-Service Pack 1 release of Ntfrs.exe
- If you are running Windows 2000 Server, install the hotfix that is described in the following article in the Microsoft Knowledge Base:
815473 File Replication Service does not log errors on sharing violations
To add the Enable Sharing Violation Logging
registry entry, follow these steps:
- Click Start, click Run, type regedit, and then click OK.
- Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ntfrs\Parameters
- On the Edit menu, point to New, and then click DWORD Value.
- Type Enable Sharing Violation Logging, and then press ENTER.
- On the Edit menu, click Modify.
- In the Value data box, type 1, and then click OK.
- Quit Registry Editor.