problem sending event log errors

[Guest]

In the past 2-3 days, when I send event errors by clicking on the link to
microsoft, I either get a blank where the acknowledgement is, or the "We're
sorry, no info" blurb. It's unusual for me to get this repeatedly.

I was wondering if it's ms or something with my configuration. I have some
errors that concern me and it's disconcerting not to even get a page with
possible explanations or reassurances. I understand that it will happen
occasionally, but I haven't gotten anything for several days.

sonsie

 

[Gerry Cornell]

Nancy

Microsoft receive many Error Reports. Some they have no information
which will assist the user and some they have answers for but their
system is not able to respond to with answers. So you will get many
"No further information" replies.

Post copies of the Reports and there are a number of person here
who will try to help. Please post only Warning and Error Reports and not
Information Reports. If reports recur post only one copy saying that it
repeats.

You can access Event Viewer by selecting Start, Administrative Tools,
Event Viewer. When researching the meaning of the error, information
regarding Event ID, Source and Description are important.

HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427&Product=winxp

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Double click the button and close Event
Viewer. Now start your message (email) and do a paste into the body of
the message. This will paste the info from the Event Viewer Error Report
complete with links into the message. Make sure this is the first paste
after exiting from Event Viewer.



--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

Thank you Gerry - here are the warning/error events. I've put any notes I've
written in double brackets.

APPLICATION EVENT LOG

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 1/15/2006
Time: 6:20:04 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
A provider, HiPerfCooker_v1, has been registered in the WMI namespace,
Root\WMI, to use the LocalSystem account. This account is privileged and the
provider may cause a security violation if it does not correctly impersonate
user requests.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning [[this one x2 on 1/18, x2 on 1/19]]
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 1/18/2006
Time: 2:26:15 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
A provider, OffProv10, has been registered in the WMI namespace,
Root\MSAPPS10, but did not specify the HostingModel property. This provider
will be run using the LocalSystem account. This account is privileged and
the provider may cause a security violation if it does not correctly
impersonate user requests. Ensure that provider has been reviewed for
security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: ASP.NET 1.1.4322.0
Event Category: Setup
Event ID: 1020
Date: 1/19/2006
Time: 4:44:58 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
Updates to the IIS metabase were aborted because IIS is either not installed
or is disabled on this machine. To configure ASP.NET to run in IIS, please
install or enable IIS and re-register ASP.NET using aspnet_regiis.exe /i.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 62
Date: 1/19/2006
Time: 4:46:36 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
WMI ADAP was unable to process the .NET CLR Data performance library since
one of the data blobs reported to have classes but had zero size

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 62
Date: 1/19/2006
Time: 4:46:36 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
WMI ADAP was unable to process the .NET CLR Networking performance library
since one of the data blobs reported to have classes but had zero size

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


SECURITY EVENT LOG - [[several repeated warnings since 1/16]]

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 1/18/2006
Time: 1:06:04 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: XXX-XXXXX-XXX
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


SYSTEM EVENT LOG

Event Type: Error [[I don't recall being in safe mode]]
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/16/2006
Time: 12:48:11 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting to
start the service EventSystem with arguments "" in order to run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning [[several of these in past few days]]
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 1/17/2006
Time: 11:59:35 PM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error - several of these, the latest being 1/20
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/18/2006
Time: 5:27:53 PM
User: XXX-XXXXX-XXX\nancy
Computer: XXX-XXXXX-XXX
Description:
The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with DCOM
within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


These have also been 10-15 'information' events in the past 4-5 days which I
haven't seen before.

Thank you for any help you can give me.

sonsie

 

[Gerry Cornell]

Sonsie

I would seek help in this newsgroup:
microsoft.public.inetserver.iis

I have no experience with this type of error.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Thank you Gerry - here are the warning/error events. I've put any notes
I've
written in double brackets.

APPLICATION EVENT LOG

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 1/15/2006
Time: 6:20:04 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
A provider, HiPerfCooker_v1, has been registered in the WMI namespace,
Root\WMI, to use the LocalSystem account. This account is privileged and
the
provider may cause a security violation if it does not correctly
impersonate
user requests.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning [[this one x2 on 1/18, x2 on 1/19]]
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 1/18/2006
Time: 2:26:15 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
A provider, OffProv10, has been registered in the WMI namespace,
Root\MSAPPS10, but did not specify the HostingModel property. This
provider
will be run using the LocalSystem account. This account is privileged and
the provider may cause a security violation if it does not correctly
impersonate user requests. Ensure that provider has been reviewed for
security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: ASP.NET 1.1.4322.0
Event Category: Setup
Event ID: 1020
Date: 1/19/2006
Time: 4:44:58 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
Updates to the IIS metabase were aborted because IIS is either not
installed
or is disabled on this machine. To configure ASP.NET to run in IIS, please
install or enable IIS and re-register ASP.NET using aspnet_regiis.exe /i.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 62
Date: 1/19/2006
Time: 4:46:36 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
WMI ADAP was unable to process the .NET CLR Data performance library since
one of the data blobs reported to have classes but had zero size

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 62
Date: 1/19/2006
Time: 4:46:36 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
WMI ADAP was unable to process the .NET CLR Networking performance library
since one of the data blobs reported to have classes but had zero size

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


SECURITY EVENT LOG - [[several repeated warnings since 1/16]]

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 1/18/2006
Time: 1:06:04 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: XXX-XXXXX-XXX
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


SYSTEM EVENT LOG

Event Type: Error [[I don't recall being in safe mode]]
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/16/2006
Time: 12:48:11 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting
to
start the service EventSystem with arguments "" in order to run the
server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning [[several of these in past few days]]
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 1/17/2006
Time: 11:59:35 PM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error - several of these, the latest being 1/20
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/18/2006
Time: 5:27:53 PM
User: XXX-XXXXX-XXX\nancy
Computer: XXX-XXXXX-XXX
Description:
The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with
DCOM
within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


These have also been 10-15 'information' events in the past 4-5 days which
I
haven't seen before.

Thank you for any help you can give me.

sonsie

 

[Guest]

ok, thank you for pointing me in the right direction, Gerry.

sonsie

Sonsie

I would seek help in this newsgroup:
microsoft.public.inetserver.iis

I have no experience with this type of error.

--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Thank you Gerry - here are the warning/error events. I've put any notes
I've
written in double brackets.

APPLICATION EVENT LOG

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 1/15/2006
Time: 6:20:04 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
A provider, HiPerfCooker_v1, has been registered in the WMI namespace,
Root\WMI, to use the LocalSystem account. This account is privileged and
the
provider may cause a security violation if it does not correctly
impersonate
user requests.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning [[this one x2 on 1/18, x2 on 1/19]]
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 1/18/2006
Time: 2:26:15 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
A provider, OffProv10, has been registered in the WMI namespace,
Root\MSAPPS10, but did not specify the HostingModel property. This
provider
will be run using the LocalSystem account. This account is privileged and
the provider may cause a security violation if it does not correctly
impersonate user requests. Ensure that provider has been reviewed for
security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: ASP.NET 1.1.4322.0
Event Category: Setup
Event ID: 1020
Date: 1/19/2006
Time: 4:44:58 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
Updates to the IIS metabase were aborted because IIS is either not
installed
or is disabled on this machine. To configure ASP.NET to run in IIS, please
install or enable IIS and re-register ASP.NET using aspnet_regiis.exe /i.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 62
Date: 1/19/2006
Time: 4:46:36 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
WMI ADAP was unable to process the .NET CLR Data performance library since
one of the data blobs reported to have classes but had zero size

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 62
Date: 1/19/2006
Time: 4:46:36 AM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
WMI ADAP was unable to process the .NET CLR Networking performance library
since one of the data blobs reported to have classes but had zero size

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


SECURITY EVENT LOG - [[several repeated warnings since 1/16]]

Event Type: Failure Audit
Event Source: Security
Event Category: Policy Change
Event ID: 615
Date: 1/18/2006
Time: 1:06:04 PM
User: NT AUTHORITY\NETWORK SERVICE
Computer: XXX-XXXXX-XXX
Description:
IPSec Services: IPSec Services failed to get the complete list of network
interfaces on the machine. This can be a potential security hazard to the
machine since some of the network interfaces may not get the protection as
desired by the applied IPSec filters. Please run IPSec monitor snap-in to
further diagnose the problem.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


SYSTEM EVENT LOG

Event Type: Error [[I don't recall being in safe mode]]
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 1/16/2006
Time: 12:48:11 PM
User: NT AUTHORITY\SYSTEM
Computer: XXX-XXXXX-XXX
Description:
DCOM got error "This service cannot be started in Safe Mode " attempting
to
start the service EventSystem with arguments "" in order to run the
server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning [[several of these in past few days]]
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 1/17/2006
Time: 11:59:35 PM
User: N/A
Computer: XXX-XXXXX-XXX
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....‚..€
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........


Event Type: Error - several of these, the latest being 1/20
Event Source: DCOM
Event Category: None
Event ID: 10010
Date: 1/18/2006
Time: 5:27:53 PM
User: XXX-XXXXX-XXX\nancy
Computer: XXX-XXXXX-XXX
Description:
The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with
DCOM
within the required timeout.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


These have also been 10-15 'information' events in the past 4-5 days which
I
haven't seen before.

Thank you for any help you can give me.

sonsie