wsearch service will not start error 6801
We've got a situation where a user's indexing service will not start, or it starts but immediately shutsdown. We've tried rebuilding search catalog and setting the 'SetupCompletedSuccessfully' value in "HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS SEARCH" to 0 and even logging in with a new user to eliminate a possible profile issue. (I tried some other wild 'solutions' like running `fsutil resource setautoreset true c:\` and removing the .blf and .regtrans-ms files in C:\windows\system32\config\TxR. I also tried to repair the nlsdata*.dll files in C:\Windows\system32 with no change.) Here's some potentially useful information >sc query wsearch SERVICE_NAME: wsearch TYPE : 10 WIN32_OWN_PROCESS STATE : 1 STOPPED WIN32_EXIT_CODE : 6801 (0x1a91) SERVICE_EXIT_CODE : 0 (0x0) CHECKPOINT : 0x0 WAIT_HINT : 0x0 Log Name: System Source: Service Control Manager Date: 9/22/2011 10:35:13 AM Event ID: 7023 Task Category: None Level: Error Keywords: Classic User: N/A Computer: ComputerName.F.Q.D.N Description: The Windows Search service terminated with the following error: Transaction support within the specified resource manager is not started or was shut down due to an error. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7023</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-09-22T14:35:13.632525900Z" /> <EventRecordID>51018</EventRecordID> <Correlation /> <Execution ProcessID="532" ThreadID="3996" /> <Channel>System</Channel> <Computer>ComputerName.F.Q.D.N</Computer> <Security /> </System> <EventData> <Data Name="param1">Windows Search</Data> <Data Name="param2">%%6801</Data> </EventData> </Event> Log Name: System Source: Service Control Manager Date: 9/22/2011 10:35:13 AM Event ID: 7034 Task Category: None Level: Error Keywords: Classic User: N/A Computer: ComputerName.F.Q.D.N Description: The Windows Search service terminated unexpectedly. It has done this 17 time(s). Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" /> <EventID Qualifiers="49152">7034</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2011-09-22T14:35:13.632525900Z" /> <EventRecordID>51019</EventRecordID> <Correlation /> <Execution ProcessID="532" ThreadID="4944" /> <Channel>System</Channel> <Computer>ComputerName.F.Q.D.N</Computer> <Security /> </System> <EventData> <Data Name="param1">Windows Search</Data> <Data Name="param2">17</Data> </EventData> </Event> Log Name: Application Source: Microsoft-Windows-Search Date: 9/22/2011 10:35:09 AM Event ID: 1010 Task Category: Search service Level: Information Keywords: Classic User: N/A Computer: ComputerName.F.Q.D.N Description: The Windows Search Service has successfully removed the old search index. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" /> <EventID Qualifiers="16384">1010</EventID> <Version>0</Version> <Level>4</Level> <Task>1</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-09-22T14:35:09.000000000Z" /> <EventRecordID>27629</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ComputerName.F.Q.D.N</Computer> <Security /> </System> <EventData> <Data Name="ExtraInfo"> </Data> </EventData> </Event> Log Name: Application Source: Microsoft-Windows-Search Date: 9/22/2011 10:35:09 AM Event ID: 1004 Task Category: Search service Level: Information Keywords: Classic User: N/A Computer: ComputerName.F.Q.D.N Description: The Windows Search service is creating the new search index {Reason: Full Index Reset}. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" /> <EventID Qualifiers="16384">1004</EventID> <Version>0</Version> <Level>4</Level> <Task>1</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-09-22T14:35:09.000000000Z" /> <EventRecordID>27630</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ComputerName.F.Q.D.N</Computer> <Security /> </System> <EventData> <Data Name="ExtraInfo"> </Data> <Data Name="Reason">Full Index Reset</Data> </EventData> </Event> Log Name: Application Source: Microsoft-Windows-Search Date: 9/22/2011 10:35:12 AM Event ID: 1019 Task Category: Gatherer Level: Error Keywords: Classic User: N/A Computer: ComputerName.F.Q.D.N Description: Windows Search Service failed to process the list of included and excluded locations with the error <20, 0x80071a91, "">. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" /> <EventID Qualifiers="49152">1019</EventID> <Version>0</Version> <Level>2</Level> <Task>3</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-09-22T14:35:12.000000000Z" /> <EventRecordID>27632</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ComputerName.F.Q.D.N</Computer> <Security /> </System> <EventData> <Data Name="ExtraInfo"> </Data> <Data Name="Phase">20</Data> <Data Name="ErrorCode">0x80071a91</Data> <Data Name="Path"> </Data> </EventData> </Event> Log Name: Application Source: Microsoft-Windows-Search Date: 9/22/2011 10:35:12 AM Event ID: 1006 Task Category: Search service Level: Error Keywords: Classic User: N/A Computer: ComputerName.F.Q.D.N Description: The Windows Search Service has failed to create the new search index. Internal error <10, 0x80071a91, Failed to save Crawl Scope Manager changes: >. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Search" Guid="{CA4E628D-8567-4896-AB6B-835B221F373F}" EventSourceName="Windows Search Service" /> <EventID Qualifiers="49152">1006</EventID> <Version>0</Version> <Level>2</Level> <Task>1</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2011-09-22T14:35:12.000000000Z" /> <EventRecordID>27633</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ComputerName.F.Q.D.N</Computer> <Security /> </System> <EventData> <Data Name="ExtraInfo"> </Data> <Data Name="Phase">10</Data> <Data Name="HR">0x80071a91</Data> <Data Name="DiagnosticsInfo">Failed to save Crawl Scope Manager changes: </Data> </EventData> </Event> Something is hosed somewhere
September 22nd, 2011 6:00pm

1. Please copy the followng files from a working machine: C:\Windows\system32\KERNELBASE.dll and C:\Windows\system32\SearchIndexer.exe 2. Please test if this issue still occurs from the safe mode. 3. Does this issue still occur event if we reset the catalog to a small folder?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 26th, 2011 12:22pm

Hi Kevin Tu & thanks for taking the time to review this! I'm checking with our support team to see if the machine is still available. (They may have already reimaged it.) If not, I'll try your suggestions. Can you clarify on your last point, I'm not sure I understand what you mean by resetting 'the catalog to a small folder'.
September 26th, 2011 4:20pm

The machine hasn't been reimaged yet but the user isn't allowing us the time to try this. As soon as I have something worth sharing I'll update.
Free Windows Admin Tool Kit Click here and download it now
September 30th, 2011 7:05am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics