Hi

On one of my Windows 2003 server I have those error:

Event Type:    Error
Event Source:    Srv
Event Category:    None
Event ID:    2019
Date:        3/21/2005
Time:        4:22:06 AM
User:        N/A
Computer:    WINDEVSRV
Description:
The server was unable to allocate from the system nonpaged pool because the
pool was empty.


Event Type:    Error
Event Source:    Userenv
Event Category:    None
Event ID:    1053
Date:        3/21/2005
Time:        3:56:03 AM
User:        NT AUTHORITY\SYSTEM
Computer:    WINDEVSRV
Description:
Windows cannot determine the user or computer name. (Not enough storage is
available to complete this operation. ). Group Policy processing aborted.

Every time I see those error, the server crashed few hours after.  This
server has only a programmation software and a Mcafee Enterprise installed
and nothing else.

I want to know why I have those errors ?

Thanks

Hi totomaster,

look at
http://www.eventid.net/search.asp

you need:
arno

PS:

will bring up a page and then you click on the link like the one below,
there is your solution.

Details Comments and links for event id 2019 from source Srv

arno

Hello,

Based on my research, please see my inline:

1. Event ID 2019
=================
In most cases, Event ID 2019 is related to anti-virus installed on your
system, the system cannot allocate the non-paged pool for use due to the
anti-virus has exhausted it. I suggest you remove the anti-virus from the
system to check the status.

For more details, please refer to the following article:

272568 Event ID 2019 or 2020 or "Insufficient System Resources" error
returned
http://support.microsoft.com/?id=272568

2. Event ID 1053
================= This Event could occur by several causes:

A: This error typically indicates a handle or thread leak.
Please observe if the issue disappears after removing the anti-virus; on
other hand, what kind of program software is installed on the system?

Please refer to the following article to download and run pstat.exe on the
server, which one has used an excessive amount of Handles? You can issue
the command "pstat.exe > c:\test.txt" and send c:\test.txt to
v-r***@microsoft.com research.
Pstat.exe: Process and Thread Status
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/pstat-o.
asp

we can find which one used too many handles from the pstat result.

B. Please check if the following article has addressed the same scenario as
you have encountered, if you allow the win2k3 server to be a terminal
server, you may get Event ID 1053 in the Event Log:

User Cannot Create a Terminal Server Roaming Profile Path If a User with
the Same Name Has Logged On from Another Domain
<http://support.microsoft.com/?id=821929>

If this is the case, you need to contact our phone support engineer to get
the hotfix, please also to add following registry key and reboot the server
afterward.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server]

IgnoreRegUserConfigErrors =dword:1

WARNING: Using Registry Editor incorrectly can cause serious problems that
may require you to reinstall Windows. Microsoft cannot guarantee that
problems resulting from the incorrect use of Registry Editor can be solved.
Use Registry Editor at your own risk.

You can also use a tool called UPHclean.exe to clear the user profile :

User Profile Hive Cleanup Service
http://www.microsoft.com/downloads/details.aspx?FamilyID=1b286e6d-8912-4e18-
b570-42470e2f3582&displaylang=en


C: If the issue occurs when a user try to remotely manage a machine using
Computer Management, or anything that requires authentication, please check
the if the user in too many groups. For example, domain\user1 account is in
many groups, he may encounter this error when this user remote to the
server.

If this is the case, you may try changing the maxtokensize on  the affected
accounts per the KB article:

280830 Kerberos Authentication May Not Work If User Is a Member of Many
Groups
http://support.microsoft.com/?kbid=280830

In addition, Eventid.net is a very good resource as Arno has pointed out.

Any update, let us get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Hi Francois,

Based on my research on test.txt, I have found the MacAfee and IIS Admin
Service Helper have occupied many memories:

Please see the following list:
NOTE: the application name is based on my research, it is might not be the
exact application name.

Process name                memory            application

EnvoiFactureServeur.exe        11516            N/A

omaws32.exe                25000            Dell open manager

mcshield.exe                26076            MacAfee Internet Security suite.

inetinfo.exe                30584            IIS Admin Service Helper

inetinfo.exe is used primarily for debugging Microsoft Windows Server
Internet Information Services. This program is important for the stable and
secure running of your computer and should not be terminated.

EnvoiFactureServeur.exe and omaws32.exe, frankly, they are third-party
application which I am not very familiar with. Probably, you have a more
concern idea about these applications and can make a judgment.

The following is MacAfee Internet Security suite, I suggest you remove
MacAfee Internet Security suite to check the status.

Any update, let us get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

For other readers, Francois has emailed me the test.txt via email, for
privacy reason, I have not posted in the public. Thanks!

Hi Francois,

I have received the MPSreport, I have found the following infomraiton from
the system log:
Event ID 2013
Data 3/26/2005
The C: disk is at or near capacity.  You may need to delete some files.

This message indicated that your C drive is out of space, which is the
possible cuase for Event ID 1053 (Not enough storage is available to
complete this operation. ) in the application log.

Please check your drive C and remove some unused files to release more
spaces since it will cause many problems if the space is not enough on the
system drive. I have found the paging file is located on your C partition,
which is set to C partition space is 9.77 GB, free space is    3.55 GB,
however, your paging file is located on C partition is set to "Total
Virtual Memory    7.85 GB".  I suggest you move the paging file to D partition
which has more than 200G space by using the steps below:

1.    Right click My Computer to choose Properties
2.    Click Advanced->Click Settings button under Performance
3.    Click Advanced page and hit the Change button
4.    Highlight C partition to choose No paging file, then click Set button
5.    Highlight D partition (or other partition), specify the page file size
or choose System manager size, then hit Set button.
6.    Restart the machine to take effect.

I believe the suggestions help. Any update, let us get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Thanks Rebecca

""Rebecca Chen [MSFT]"" wrote:

Show quoteHide quote

You are welcome!

Futher questions or you have any update, let's get  in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Hi Francois,

I am glad to hear everything is going fine at your end!

If there is anything we can help, please feel free to post in the newsgroup.

Have a nice week!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Backups fail
NDS vs NTFS File Scan (F) Capabilities
upgrade Workgroup to Windows 2003 server.
ntbackup fails with insufficient memory error 8017
Desktop Background on Win2003 Remote Desktop
Ntbackup monitoring tool ?
kerberos error
Replace Hard Disk (Windows Server 2003)
Hiding mapped drive letters
Urgent Help needed