Microsoft KB Archive/325727

Knowledge Base

Multiple Event ID 3009 and 3003 Events Appear After You Install Service Pack 3 for Windows 2000

Article ID: 325727

Article Last Modified on 10/30/2006

---

APPLIES TO

• Microsoft Windows 2000 Service Pack 2
• Microsoft Windows 2000 Service Pack 3
• Microsoft Windows 2000 Advanced Server
• Microsoft Windows 2000 Advanced Server

---

This article was previously published under Q325727

SYMPTOMS

When you restart the computer after you install Service Pack 3 (SP3) for Windows 2000 on a computer on which you have configured performance counters, one or more of the following events may be displayed in the application log of the event viewer:

• Event Type: Error
  Event Source: LoadPerf
  Event Category: None
  Event ID: 3009
  Date: date
  Time: time
  User: N/A
  Computer: computername
  
  Description:
  Installing the performance counter strings for Inetinfo failed. The Error code is DWORD 0 of the Record Data.
  
  Data:
  0000: 02 00 00 00 ....

• Event Type: Error
  Event Source: LoadPerf
  Event Category: None
  Event ID: 3003
  Date: date
  Time: time
  User: N/A
  Computer: computername
  
  Description:
  The SYSTEM\CurrentControlSet\Services\inetinfo\Performance key could not be opened or accessed in order to install counter strings. The Win32 status returned by the call is in the Record Data as DWORD 0.
  
  Data:
  0000: 02 00 00 00 ....

• Event Type: Error
  Event Source: LoadPerf
  Event Category: None
  Event ID: 3009
  Date: date
  Time: time
  User: N/A
  Computer: computername
  
  Description:
  Installing the performance counter strings for ASP failed. The Error code is DWORD 0 of the Record Data.
  
  Data:
  0000: 02 00 00 00 ....

• Event Type: Error
  Event Source: LoadPerf
  Event Category: None
  Event ID: 3003
  Date: date
  Time: time
  User: N/A
  Computer: computername
  
  Description:
  The SYSTEM\CurrentControlSet\Services\ASP\Performance key could not be opened or accessed in order to install counter strings.The Win32 status returned by the call is in the Record Data as DWORD 0.
  
  Data:
  0000: 02 00 00 00 ....

• Event Type: Error
  Event Source: LoadPerf
  Event Category: None
  Event ID: 3009
  Date: date
  Time: time
  User: N/A
  Computer: computername
  
  Description:
  Installing the performance counter strings for MSFTPSVC failed. The Error code is DWORD 0 of the Record Data.
  
  Data:
  0000: 02 00 00 00 ....

• Event Type: Error
  Event Source: LoadPerf
  Event Category: None
  Event ID: 3009
  Date: date
  Time: time
  User: N/A
  Computer: computername
  
  Description:
  Installing the performance counter strings for W3SVC failed. The Error code is DWORD 0 of the Record Data.
  
  Data:
  0000: 02 00 00 00 ....

• Event Type: Error
  Event Source: LoadPerf
  Event Category: None
  Event ID: 3003
  Date: date
  Time: time
  User: N/A
  Computer: computername
  
  Description:
  The SYSTEM\CurrentControlSet\Services\W3SVC\Performance key could not be opened or accessed in order to install counter strings.The Win32 status returned by the call is in the Record Data as DWORD 0.
  
  Data:
  0000: 02 00 00 00 ....

CAUSE

This behavior may occur in the following scenario:

1. You install Service Pack 2 (SP2) for Windows 2000 on a computer on which Internet Information Services (IIS) is not installed.
2. You install IIS.
3. You remove SP2 for Windows 2000.
4. You install SP3 for Windows 2000.

This behavior occurs because the Windows 2000 SP2 removal process reverts the registry settings for the following registry subkeys to their state from before the SP2 installation:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asp\performance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\inetinfo\performance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msftpsvc\performance
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\w3svc\performance

SP3 Setup expects these registry keys to be present because IIS is currently installed. Because these registry keys have been removed during the removal of SP2, the error messages listed in the "Symptoms" section of this article are generated when SP3 tries to update these registry entries with Loadperf calls.

RESOLUTION

To work around this problem, reinstall and then remove IIS. The reinstallation of IIS restores the critical performance-related registry subkeys.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

When you install SP3 for Windows 2000 in the following scenario, the error messages described in the "Symptoms" section of this article appear only one time -- after you finish the installation of SP3 and then restart the computer:

1. You install SP2 for Windows 2000 on a computer on which IIS is installed.
2. You install IIS.
3. You remove SP2 for Windows 2000.
4. You install SP3 for Windows 2000.

Two error events are generated (Event ID 3009 and Event ID 3003) for each service that provides IIS-related performance counters -- for example, the Inetinfo, ASP, MSFTPSVC, and W3SVC services.

Before you remove SP2 for Windows 2000, Microsoft recommends that you first remove all other Windows components that you installed after the installation of SP2.

Keywords: kberrmsg kbprb KB325727

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.