I started seeing the following error in my Windows Server 2012 event application logs somewhat recently, possibly after installing some Windows updates.
Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 2018/11/11 14:02:21
Event ID: 1008
Task Category: None
Level: Error
Keyword: Classic
Explanation:
The Open Procedure for service Remote Access in DLL "C:Windows\System32\rasctrs.dll" failed.
Performance data for this service will not be available.
The first four bytes (DWORD) of the Data section contains the error code
Event XML:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
<EventID Qualifiers="49152">1008</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-11-11T05:02:21.000000000Z" />
<EventRecordID>35760</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>COMP1.TEST.LOCAL</Computer>
<Security />
</System>
<UserData>
<EventXML xmlns="Perflib">
<param1>RemoteAccess</param1>
<param2>C:\Windows\System32\rasctrs.dll</param2>
<binaryDataSize>8</binaryDataSize>
<binaryData>0200000000000000</binaryData>
</EventXML>
</UserData>
</Event>
There is also a similar error for the BITS (bitsperf.dll) service.
I want to get rid of this error and have tried the entering the following commands (which are commonly mentioned in other forums and websites). However, they do not seem to have any effect.
C:\Windows\system32\lodctr.exe /R
C:\Windows\SysWOW64\lodctr.exe /R
C:\Windows\System32\wbem\winmgmt.exe /RESYNCPERF
C:\Windows\SysWOW64\wbem\winmgmt.exe /RESYNCPERF
lodctr /T:TermService
In the registry I've also checked the read permissions in HKLM\SYSTEM\CurrentControlSet\Services\ but they are the same as the other services.
I've also seen recommendations that people disable the performance counters for the above services. But to me this feels like it isn't really solving the error insofar as it is hiding it?
I should also mention that the server is in a closed environment (no internet access).
Is there anything else I can do to get rid of this error?
0 Answers