Microsoft KB Archive/108256

From BetaArchive Wiki
Knowledge Base

Event ID:2000 Errors in Event Log

Article ID: 108256

Article Last Modified on 11/1/2006


  • Microsoft Windows NT Advanced Server 3.1
  • Microsoft Windows NT Workstation 3.1
  • Microsoft Windows NT Advanced Server 3.1

This article was previously published under Q108256


Windows NT logs between one and nine of the following messages per second in the SYSTEM EventLog.

    Date:     10/25/93          Event ID:  2000
    Time:     01:24:15 PM       Source:    Srv
    User:     N/A               Type:      Error
    Computer: <servername>      Category:  None

    The server's call to a system service failed unexpectedly.

    Data (bytes):
    0000: 00 00 04 00 01 00 54 00   ......T.
    0008: 00 00 00 00 d0 07 00 c0   ....D..A
    0010: 00 00 00 00 0d 00 00 c0   .......A
    0018: 00 00 00 00 00 00 00 00   ........
    0020: 00 00 00 00 00 00 00 00   ........
    0028: c0 0b 00 00               A...


The event indicates that the server got STATUS_INVALID_PARAMETER (c0000008) when it called NtQueryInformationFile (bc0). This happens when the server tries to open a pipe named "\".

The problem is that if a Windows NT WOW or MVDM client application opens a file against a Windows NT server and that open fails, the clients WOW and MVDM both call a routine called IsCDROMFile that attempts to open and call QueryVolumeInformation of the file <server>\PIPE\ which fails on the server.


Microsoft has confirmed this to be a problem in Windows NT and Windows NT Advanced Server version 3.1. This problem was corrected in the latest US Service Pack for Windows NT and Windows NT Advanced Server. For information on obtaining this update, query on the following word in the Microsoft Knowledge Base (without the spaces):


Additional query words: prodnt

Keywords: kbnetwork KB108256