Microsoft KB Archive/928384

= Event ID: 2003 warning messages that are related to performance counters are logged in the Application log on a Windows Server 2003-based computer =

Article ID: 928384

Article Last Modified on 10/11/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Datacenter x64 Edition
 * Microsoft Windows Server 2003, Standard x64 Edition
 * Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
 * Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems

-



SYMPTOMS
You find several event ID: 2003 warning messages that are logged in the Application log on a Microsoft Windows Server 2003-based computer. These messages are related to performance counters. Additionally, these messages resemble the following message:

The configuration information of the performance library &quot;C:\WINNT\system32\w3ctrs.dll&quot; for the &quot;W3SVC&quot; service does not match the trusted performance library information stored in the registry. The functions in this library will not be treated as trusted.

Note Typically, the warning messages are related to the W3svc driver service or to the Active Server Pages (ASP) service.



RESOLUTION
In this scenario, the event is generated for information purposes. Therefore, you can safely ignore the warning messages. Additionally, you can prevent these warning messages in certain scenarios by reregistering the service to update the validation code in the registry.

To reregister the performance counter libraries of the affected service, follow these steps:
 * 1) Click Start, click Run, type cmd, and then click OK.
 * 2) Type unlodctr, and then press ENTER.

Note represents the name of the affected service.
 * 1) Type lodctr, and then press ENTER.

Note represents the name of the .ini file for the driver that you want to reload. For example, if you want to reload the W3svc driver, you must type w3ctrs.ini.

Keywords: kbtshoot kbbug kbexpertiseadvanced kbexpertiseinter KB928384

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.