MBAM Client fails - Event Log Error Message - 0x803d0008 A quota was exceeded.
We have a two-server MBAM setup in our enterprise. It has been in use for eight months with good results.
Lately I found some clients have never been able to contact the MBAM server. Neither compliance data or recovery keys are uploaded.
When checking the client's event log - I find the following admin messages:
Event ID 4
An error occurred while sending encryption status data.
Error code:
0x803d0008
Details:
A quota was exceeded.
Event ID 2
An error occured while applying MBAM policies.
Volume ID:\\?\Volume{7a6627e1-abf4-11e0-b703-5c260a5c8847}\
Error code:
0x803d0008
Details:
A quota was exceeded.
No Operational logs exist.
I would be very thankful for some advice on how to resolve this issue.
What I tried so far is:
-Added NoStartupDelay=1 and reduced the check-in frequency for the MBAM client.
-Added DisableMachineVerification=1 on the MBAM server
-Reinstalled the MBAM agent
-Restalled Visual C++ 2008 redist
June 13th, 2012 10:55am
Detailed XML view of the log messages:
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-MBAM" Guid="{1C6E854B-3DF3-4A6F-9401-F58F1D1C504D}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-06-11T12:43:01.224500900Z" />
<EventRecordID>269</EventRecordID>
<Correlation />
<Execution ProcessID="2704" ThreadID="6636" />
<Channel>Microsoft-Windows-MBAM/Admin</Channel>
<Computer>CLIENT_NAME.xxx.yyy.com</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="ErrorCode">0x803d0008</Data>
<Data Name="ErrorString">A quota was exceeded.</Data>
</EventData>
</Event>
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-MBAM" Guid="{1C6E854B-3DF3-4A6F-9401-F58F1D1C504D}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2012-06-11T06:05:45.867679900Z" />
<EventRecordID>268</EventRecordID>
<Correlation />
<Execution ProcessID="2704" ThreadID="3908" />
<Channel>Microsoft-Windows-MBAM/Admin</Channel>
<Computer>CLIENT_NAME.xxx.yyy.com</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="VolumeId">\\?\Volume{7a6627e1-abf4-11e0-b703-5c260a5c8847}\</Data>
<Data Name="ErrorCode">0x803d0008</Data>
<Data Name="ErrorString">A quota was exceeded.</Data>
</EventData>
</Event>
Free Windows Admin Tool Kit Click here and download it now
June 13th, 2012 10:56am
Hi,
Thanks for your sharing, it benefits us a lot.
Thanks.
Jeremy Wu
TechNet Community Support
June 14th, 2012 10:19pm