Faulting Application Cscript on Windows 2008 DCs
Two of my Windows 2008 Enterprise DCs are both getting Event 1000 errors every 5 minutes in their Application logs.
Type: Error
Source: Application Error
Event ID: 1000
Event Time: 2/10/2011 7:10:37 AM
User: n/a
Computer: CMSAdmin001.cmsprod.da.ocgov.com
Description:
Faulting application name: cscript.exe, version: 5.8.7600.16385, time stamp: 0x4a5bca2a
Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325
Exception code: 0xc00000fd
Fault offset: 0x0000000000004a23
Faulting process id: 0x1cf4
Faulting application start time: 0x01cbc934aabd2ae1
Faulting application path: C:\Windows\system32\cscript.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: e9befded-3527-11e0-93b2-00215ad07292
They both have SCOM 2007 R2 CU4 agents installed. I've stopped the HealthService on one for 10 minutes and the errors go away. Has anyone seen this behavior before? My guess is that it's a Windows 2008 issue, perhaps a memory leak maybe?Orange County District Attorney
February 10th, 2011 10:29am
Well, the health service will run monitoringhosts which in turn will run scripts by launching CSCRIPT.exe. Has the allow scripting policy been changed on those computers recently?Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
February 10th, 2011 11:46am
No, it doesn't look like we have changed any policies on these servers. The are in a child domain, that's the only difference for us.Orange County District Attorney
February 10th, 2011 12:54pm
Hi,
Please try clearing the HealthService queue on the server and see how it works:
1.
Stop System Center Management service.
2.
Go to C:\Program Files\System Center Operations Manger 2007\, and rename the “Health Service State” folder.
3.
Restart System Center Management service.
Hope this helps.
Thanks.
Nicholas Li - MSFT
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
February 14th, 2011 8:31pm
Thanks for the suggestions Nicholas. I cleared the HealthService queue as you suggested however I'm still getting the errors. Also, after every error a Windows Error Report is generated too.
Perhaps SP1 soon to be released might offer a fix.Orange County District Attorney
February 15th, 2011 10:47am
Hi,
Thank you for your feedback.
You can try to use Workflow Analyzer to check what are running on the agents:
System Center Operations Manager 2007 R2 Authoring Resource Kit
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=9104AF8B-FF87-45A1-81CD-B73E6F6B51F0
In addition, please also ensure the management packs are up-to-date.
Thanks.
Nicholas Li - MSFT
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2011 2:56am
Hi,
Thank you for your feedback.
You can try to use Effective Configuration Viewer to check what are running on the agents:
SC Ops Mgr 2007 Resource Kit – Effective Configuration Viewer
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=A9DB4DCA-6716-478D-89B9-42F27EBC76A8&displaylang=en
In addition, please also ensure the management packs are up-to-date.
Thanks.
Nicholas Li - MSFT
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
February 21st, 2011 10:56am