We are seeing the following on a Windows 2008 R2 Exchange 2007 box:
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 27/06/2018 10:26:51
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User: domain\username
Computer: %COMPUTERNAME%.domain.suffix
Description:
Session "WbadminUIInBuiltTracing" failed to start with the following error: 0xC0000035
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2018-06-27T09:26:51.426647100Z" />
<EventRecordID>63</EventRecordID>
<Correlation />
<Execution ProcessID="9300" ThreadID="9760" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>%COMPUTERNAME%.domain.suffix</Computer>
<Security UserID="S-1-5-21-643322192-3791837119-3815354684-500" />
</System>
<EventData>
<Data Name="SessionName">WbadminUIInBuiltTracing</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225525</Data>
<Data Name="LoggingMode">2</Data>
</EventData>
</Event>
Does anyone know what action we need to take?
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 27/06/2018 10:26:51
Event ID: 2
Task Category: Session
Level: Error
Keywords: Session
User: domain\username
Computer: %COMPUTERNAME%.domain.suffix
Description:
Session "WbadminUIInBuiltTracing" failed to start with the following error: 0xC0000035
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>2</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>12</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2018-06-27T09:26:51.426647100Z" />
<EventRecordID>63</EventRecordID>
<Correlation />
<Execution ProcessID="9300" ThreadID="9760" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>%COMPUTERNAME%.domain.suffix</Computer>
<Security UserID="S-1-5-21-643322192-3791837119-3815354684-500" />
</System>
<EventData>
<Data Name="SessionName">WbadminUIInBuiltTracing</Data>
<Data Name="FileName">
</Data>
<Data Name="ErrorCode">3221225525</Data>
<Data Name="LoggingMode">2</Data>
</EventData>
</Event>
Does anyone know what action we need to take?
0