Microsoft KB Archive/325727

= Multiple Event ID 3009 and 3003 Events Appear After You Install Service Pack 3 for Windows 2000 =

Article ID: 325727

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 2
 * Microsoft Windows 2000 Service Pack 3
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q325727



SYMPTOMS
When you restart the computer after you install Service Pack 3 (SP3) for Windows 2000 on a computer on which you have configured performance counters, one or more of the following events may be displayed in the application log of the event viewer:  

Event Type: Error

Event Source: LoadPerf

Event Category: None

Event ID: 3009

Date:

Time:

User: N/A

Computer:

Description:

Installing the performance counter strings for Inetinfo failed. The Error code is DWORD 0 of the Record Data.

Data:

0000: 02 00 00 00 ....

 

Event Type: Error

Event Source: LoadPerf

Event Category: None

Event ID: 3003

Date:

Time:

User: N/A

Computer:

Description:

The SYSTEM\CurrentControlSet\Services\inetinfo\Performance key could not be opened or accessed in order to install counter strings. The Win32 status returned by the call is in the Record Data as DWORD 0.

Data:

0000: 02 00 00 00 ....

 

Event Type: Error

Event Source: LoadPerf

Event Category: None

Event ID: 3009

Date:

Time:

User: N/A

Computer:

Description:

Installing the performance counter strings for ASP failed. The Error code is DWORD 0 of the Record Data.

Data:

0000: 02 00 00 00 ....

 

Event Type: Error

Event Source: LoadPerf

Event Category: None

Event ID: 3003

Date:

Time:

User: N/A

Computer:

Description:

The SYSTEM\CurrentControlSet\Services\ASP\Performance key could not be opened or accessed in order to install counter strings.The Win32 status returned by the call is in the Record Data as DWORD 0.

Data:

0000: 02 00 00 00 ....

 

Event Type: Error

Event Source: LoadPerf

Event Category: None

Event ID: 3009

Date:

Time:

User: N/A

Computer:

Description:

Installing the performance counter strings for MSFTPSVC failed. The Error code is DWORD 0 of the Record Data.

Data:

0000: 02 00 00 00 ....

 

Event Type: Error

Event Source: LoadPerf

Event Category: None

Event ID: 3009

Date:

Time:

User: N/A

Computer:

Description:

Installing the performance counter strings for W3SVC failed. The Error code is DWORD 0 of the Record Data.

Data:

0000: 02 00 00 00 ....

 

Event Type: Error

Event Source: LoadPerf

Event Category: None

Event ID: 3003

Date:

Time:

User: N/A

Computer:

Description:

The SYSTEM\CurrentControlSet\Services\W3SVC\Performance key could not be opened or accessed in order to install counter strings.The Win32 status returned by the call is in the Record Data as DWORD 0.

Data:

0000: 02 00 00 00 ....

</li></ul>

<div class="cause_section">

CAUSE
This behavior may occur in the following scenario:
 * 1) You install Service Pack 2 (SP2) for Windows 2000 on a computer on which Internet Information Services (IIS) is not installed.
 * 2) You install IIS.
 * 3) You remove SP2 for Windows 2000.
 * 4) You install SP3 for Windows 2000.

This behavior occurs because the Windows 2000 SP2 removal process reverts the registry settings for the following registry subkeys to their state from before the SP2 installation:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asp\performance

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\inetinfo\performance

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msftpsvc\performance

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w3svc\performance

SP3 Setup expects these registry keys to be present because IIS is currently installed. Because these registry keys have been removed during the removal of SP2, the error messages listed in the &quot;Symptoms&quot; section of this article are generated when SP3 tries to update these registry entries with Loadperf calls.

<div class="resolution_section">

RESOLUTION
To work around this problem, reinstall and then remove IIS. The reinstallation of IIS restores the critical performance-related registry subkeys.

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

<div class="moreinformation_section">

MORE INFORMATION
When you install SP3 for Windows 2000 in the following scenario, the error messages described in the &quot;Symptoms&quot; section of this article appear only one time -- after you finish the installation of SP3 and then restart the computer:
 * 1) You install SP2 for Windows 2000 on a computer on which IIS is installed.
 * 2) You install IIS.
 * 3) You remove SP2 for Windows 2000.
 * 4) You install SP3 for Windows 2000.

Two error events are generated (Event ID 3009 and Event ID 3003) for each service that provides IIS-related performance counters -- for example, the Inetinfo, ASP, MSFTPSVC, and W3SVC services.

Before you remove SP2 for Windows 2000, Microsoft recommends that you first remove all other Windows components that you installed after the installation of SP2.

Keywords: kberrmsg kbprb KB325727

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.