Microsoft KB Archive/176979

= Event 2000 Errors with STATUS_DELETE_PENDING Status =

Article ID: 176979

Article Last Modified on 12/6/2003

-

APPLIES TO


 * Microsoft Windows NT Workstation 3.5
 * Microsoft Windows NT Workstation 3.51
 * Microsoft Windows NT Workstation 4.0 Developer Edition
 * Microsoft Windows NT Server 3.5
 * Microsoft Windows NT Server 3.51
 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows 95
 * Microsoft Network Client 3.1

-



This article was previously published under Q176979



SYMPTOMS
The Windows NT System Event log may write Event 2000 errors with a status code of C0000056 (STATUS_DELETE_PENDING). A network trace reveals that errors occur when a Server Message Block (SMB) C transact2 Findnext file returns an invalid handle. This error condition can result when you use the DELTREE command from a DOS or Windows 95 client.



CAUSE
Applications that do not or cannot use the CloseSearch SMB (DOS applications or older applications that do not make Win32 calls) do not have a method for closing searches after they complete. In order to handle this situation, the LanmanServer service uses several search time parameters to clear the search handle and reclaim the memory allocated to the search buffers.

For a complete discussion on these and other parameters, please see the following Microsoft Knowledge Base article:

165815 How To Troubleshoot Event ID 2009 Errors



RESOLUTION
The only resolution is to use a client that uses the Win32 API and properly handles the CloseSearch SMB. For example, the Windows NT Workstation "del directory_name /s" command does not have this problem.

For DOS or Windows 95 clients using the DELTREE command, an Event 2000 may be written to the System Event log. These errors may be ignored as the server recovers from the error properly.

Keywords: KB176979

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.