These two errors are back to back on a VM - I think it was because the ISO for the DVD is on a remote share and it became unavailable as the system was restarted.
Can anyone confirm that?
[code=markup]Log Name: System
Source: Disk
Date: 30/10/2022 13:30:04
Event ID: 51
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: DC0.domain.local
Description:
An error was detected on device \Device\Harddisk1\DR1 during a paging operation.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Disk" />
<EventID Qualifiers="32772">51</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-10-30T13:30:04.923878100Z" />
<EventRecordID>485824</EventRecordID>
<Channel>System</Channel>
<Computer>DC0.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>\Device\Harddisk1\DR1</Data>
<Binary>030080000100000000000000330004802D0100000E0000C0000000000000000000000000000000008191000000000000FFFFFFFF010000005800000802000001FD20101242032040000200003C000000A0590CD20D8BFFFF78F6DFD90D8BFFFF000000000000000010DC7EDA0D8BFFFF0000000000000000008000000000000088000000000000008000000000010000000000000000000000000000000000000000000000000000</Binary>
</EventData>
</Event>
Log Name: System
Source: Microsoft-Windows-FilterManager
Date: 30/10/2022 13:30:25
Event ID: 3
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: DC0.domain.local
Description:
Filter Manager failed to attach to volume '\Device\HarddiskVolume16'. This volume will be unavailable for filtering until a reboot. The final status was 0xC03A001C.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-FilterManager" Guid="{f3c5e28e-63f6-49c7-a204-e48a1bc4b09d}" />
<EventID>3</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-10-30T13:30:25.552933100Z" />
<EventRecordID>485826</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="420" />
<Channel>System</Channel>
<Computer>DC0.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FinalStatus">0xc03a001c</Data>
<Data Name="ExtraStringLength">24</Data>
<Data Name="ExtraString">\Device\HarddiskVolume16</Data>
</EventData>
</Event>[/code]
Posted by: andrewt2m - 30 October 2022 14:29:39
I think it is also the same situation for this error:
[code=markup]Log Name: Application
Source: ESENT
Date: 30/10/2022 13:24:28
Event ID: 413
Task Category: Logging/Recovery
Level: Error
Keywords: Classic
User: N/A
Computer: DC0.domain.local
Description:
svchost (3020,R,98) SoftwareUsageMetrics-Api: Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1032.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">413</EventID>
<Level>2</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-10-30T13:24:28.314169100Z" />
<EventRecordID>87934</EventRecordID>
<Channel>Application</Channel>
<Computer>DC0.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>svchost</Data>
<Data>3020,R,98</Data>
<Data>SoftwareUsageMetrics-Api: </Data>
<Data>-1032</Data>
</EventData>
</Event>[/code]
