Faulting Application Cscript on Windows 2008 DCs
Two of my Windows 2008 Enterprise DCs are both getting Event 1000 errors every 5 minutes in their Application logs. Type: Error Source: Application Error Event ID: 1000 Event Time: 2/10/2011 7:10:37 AM User: n/a Computer: CMSAdmin001.cmsprod.da.ocgov.com Description: Faulting application name: cscript.exe, version: 5.8.7600.16385, time stamp: 0x4a5bca2a Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325 Exception code: 0xc00000fd Fault offset: 0x0000000000004a23 Faulting process id: 0x1cf4 Faulting application start time: 0x01cbc934aabd2ae1 Faulting application path: C:\Windows\system32\cscript.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: e9befded-3527-11e0-93b2-00215ad07292 They both have SCOM 2007 R2 CU4 agents installed. I've stopped the HealthService on one for 10 minutes and the errors go away. Has anyone seen this behavior before? My guess is that it's a Windows 2008 issue, perhaps a memory leak maybe?Orange County District Attorney
February 10th, 2011 10:29am

Well, the health service will run monitoringhosts which in turn will run scripts by launching CSCRIPT.exe. Has the allow scripting policy been changed on those computers recently?Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
February 10th, 2011 11:46am

No, it doesn't look like we have changed any policies on these servers. The are in a child domain, that's the only difference for us.Orange County District Attorney
February 10th, 2011 12:54pm

Hi, Please try clearing the HealthService queue on the server and see how it works: 1. Stop System Center Management service. 2. Go to C:\Program Files\System Center Operations Manger 2007\, and rename the “Health Service State” folder. 3. Restart System Center Management service. Hope this helps. Thanks. Nicholas Li - MSFT Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
February 14th, 2011 8:31pm

Thanks for the suggestions Nicholas. I cleared the HealthService queue as you suggested however I'm still getting the errors. Also, after every error a Windows Error Report is generated too. Perhaps SP1 soon to be released might offer a fix.Orange County District Attorney
February 15th, 2011 10:47am

Hi, Thank you for your feedback. You can try to use Workflow Analyzer to check what are running on the agents: System Center Operations Manager 2007 R2 Authoring Resource Kit http://www.microsoft.com/downloads/en/details.aspx?FamilyID=9104AF8B-FF87-45A1-81CD-B73E6F6B51F0 In addition, please also ensure the management packs are up-to-date. Thanks. Nicholas Li - MSFT Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2011 2:56am

Hi, Thank you for your feedback. You can try to use Effective Configuration Viewer to check what are running on the agents: SC Ops Mgr 2007 Resource Kit – Effective Configuration Viewer http://www.microsoft.com/downloads/en/details.aspx?FamilyID=A9DB4DCA-6716-478D-89B9-42F27EBC76A8&displaylang=en In addition, please also ensure the management packs are up-to-date. Thanks. Nicholas Li - MSFT Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
February 21st, 2011 10:56am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics