logo
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

Options
Go to last post Go to first unread
Lemonde  
#1 Posted : 31 May 2019 09:35:17(UTC)
Lemonde

Rank: Advanced Member

Groups: Registered
Joined: 08/01/2017(UTC)
Posts: 324
United Kingdom
Location: London

We are seeing the following on a machine recently upgraded from Windows 7 Pro to Windows 10 Pro:

Log Name: Application
Source: ESENT
Date: 31/05/2019 09:23:59
Event ID: 455
Task Category: Logging/Recovery
Level: Error
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
StartMenuExperienceHost (9540,R,98) TILEREPOSITORYS-1-5-21-SSID: Error -1023 (0xfffffc01) occurred while opening logfile C:\Users\user\AppData\Local\TileDataLayer\Database\EDB.log.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">455</EventID>
<Level>2</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-31T08:23:59.129043500Z" />
<EventRecordID>844</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>StartMenuExperienceHost</Data>
<Data>9540,R,98</Data>
<Data>TILEREPOSITORYS-1-5-21-643322192-3791837119-3815354684-500: </Data>
<Data>C:\Users\user\AppData\Local\TileDataLayer\Database\EDB.log</Data>
<Data>-1023 (0xfffffc01)</Data>
</EventData>
</Event>

The machine appears to have lost all of the MS Office configuration for the user - Outlook and Access need to be configured again...?
Sponsor
Lemonde  
#2 Posted : 31 May 2019 09:42:21(UTC)
Lemonde

Rank: Advanced Member

Groups: Registered
Joined: 08/01/2017(UTC)
Posts: 324
United Kingdom
Location: London

All of the following appeared in quick sucession in the event log after the upgrade completed:

Log Name: Application
Source: Microsoft-Windows-User Profiles Service
Date: 30/05/2019 14:02:13
Event ID: 1534
Task Category: None
Level: Warning
Keywords:
User: domain\user
Computer: Desktop-PC1.domain.local
Description:
Profile notification of event Upgrade for component {SSID} failed, error code is See Tracelogging for error details.


Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89b1e9f0-5aff-44a6-9b44-0a07a7ce5845}" />
<EventID>1534</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:02:13.027295300Z" />
<EventRecordID>657</EventRecordID>
<Correlation />
<Execution ProcessID="1996" ThreadID="4368" />
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security UserID="S-1-5-21-643322192-3791837119-3815354684-2149" />
</System>
<EventData Name="EVENT_PROFILE_NOTIFICATION_FAIL">
<Data Name="Event">Upgrade</Data>
<Data Name="Component">{SSID}</Data>
<Data Name="Error">See Tracelogging for error details</Data>
</EventData>
</Event>

Log Name: Application
Source: ESENT
Date: 30/05/2019 14:03:20
Event ID: 643
Task Category: Table/Column/Index Definition
Level: Warning
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
taskhostw (4252,D,50) WebCacheLocal: Out of date NLS sort version detected on the database 'C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat' for Locale 'en-US', index sort version: (SortId=00000000-0000-0000-0000-000000000000, Version=0006010100060101), current sort version: (SortId=00000001-57ee-1e5c-00b4-d0000bb1e11e, Version=0006020F0006020F).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">643</EventID>
<Level>3</Level>
<Task>5</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:03:20.918593000Z" />
<EventRecordID>658</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>taskhostw</Data>
<Data>4252,D,50</Data>
<Data>WebCacheLocal: </Data>
<Data>C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat</Data>
<Data>en-US</Data>
<Data>00000000-0000-0000-0000-000000000000</Data>
<Data>0006010100060101</Data>
<Data>00000001-57ee-1e5c-00b4-d0000bb1e11e</Data>
<Data>0006020F0006020F</Data>
</EventData>
</Event>

Log Name: Application
Source: ESENT
Date: 30/05/2019 14:03:20
Event ID: 614
Task Category: Table/Column/Index Definition
Level: Warning
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
taskhostw (4252,D,50) WebCacheLocal: Database 'C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat': The secondary index 'PartitionIdIndex' of table 'Containers' is out of date with sorting libraries. If used in this state (i.e. not rebuilt), it may appear corrupt or get further corrupted. If there is no later event showing the index being rebuilt, then please defragment the database to rebuild the index.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">614</EventID>
<Level>3</Level>
<Task>5</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:03:20.918593000Z" />
<EventRecordID>659</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>taskhostw</Data>
<Data>4252,D,50</Data>
<Data>WebCacheLocal: </Data>
<Data>C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat</Data>
<Data>PartitionIdIndex</Data>
<Data>Containers</Data>
</EventData>
</Event>

Log Name: Application
Source: ESENT
Date: 30/05/2019 14:03:29
Event ID: 522
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
StartMenuExperienceHost (5604,P,98) TILEREPOSITORYS-1-5-21-643322192-3791837119-3815354684-2149: An attempt to open the device with name "\\.\C:" containing "C:\" failed with system error 5 (0x00000005): "Access is denied. ". The operation will fail with error -1032 (0xfffffbf8).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">522</EventID>
<Level>2</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:03:29.246787600Z" />
<EventRecordID>660</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>StartMenuExperienceHost</Data>
<Data>5604,P,98</Data>
<Data>TILEREPOSITORYS-1-5-21-643322192-3791837119-3815354684-2149: </Data>
<Data>\\.\C:</Data>
<Data>C:\</Data>
<Data>-1032 (0xfffffbf8)</Data>
<Data>5 (0x00000005)</Data>
<Data>Access is denied. </Data>
</EventData>
</Event>

Log Name: Application
Source: ESENT
Date: 30/05/2019 14:03:29
Event ID: 455
Task Category: Logging/Recovery
Level: Error
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
StartMenuExperienceHost (5604,R,98) TILEREPOSITORYS-1-5-21-643322192-3791837119-3815354684-2149: Error -1023 (0xfffffc01) occurred while opening logfile C:\Users\user\AppData\Local\TileDataLayer\Database\EDB.log.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">455</EventID>
<Level>2</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:03:29.246787600Z" />
<EventRecordID>661</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>StartMenuExperienceHost</Data>
<Data>5604,R,98</Data>
<Data>TILEREPOSITORYS-1-5-21-643322192-3791837119-3815354684-2149: </Data>
<Data>C:\Users\user\AppData\Local\TileDataLayer\Database\EDB.log</Data>
<Data>-1023 (0xfffffc01)</Data>
</EventData>
</Event>

Log Name: Application
Source: ESENT
Date: 30/05/2019 14:03:54
Event ID: 640
Task Category: General
Level: Warning
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
taskhostw (4252,D,50) WebCacheLocal: Error -1919 validating header page on flush map file "C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm". The flush map file will be invalidated.
Additional information: [SignDbHdrFromDb:Create time:05/30/2019 13:03:53.715 Rand:53030417 Computer:] [SignFmHdrFromDb:Create time:05/30/2019 13:03:53.668 Rand:1701537027 Computer:] [SignDbHdrFromFm:Create time:05/30/2019 13:03:20.871 Rand:2850974935 Computer:] [SignFmHdrFromFm:Create time:05/30/2019 13:03:20.996 Rand:761013594 Computer:]
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">640</EventID>
<Level>3</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:03:54.043556200Z" />
<EventRecordID>662</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>taskhostw</Data>
<Data>4252,D,50</Data>
<Data>WebCacheLocal: </Data>
<Data>-1919</Data>
<Data>C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm</Data>
<Data>[SignDbHdrFromDb:Create time:05/30/2019 13:03:53.715 Rand:53030417 Computer:] [SignFmHdrFromDb:Create time:05/30/2019 13:03:53.668 Rand:1701537027 Computer:] [SignDbHdrFromFm:Create time:05/30/2019 13:03:20.871 Rand:2850974935 Computer:] [SignFmHdrFromFm:Create time:05/30/2019 13:03:20.996 Rand:761013594 Computer:]</Data>
</EventData>
</Event>

Log Name: Application
Source: ESENT
Date: 30/05/2019 14:03:54
Event ID: 636
Task Category: General
Level: Warning
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
taskhostw (4252,D,50) WebCacheLocal: Flush map file "C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm" will be deleted. Reason: ReadHdrFailed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">636</EventID>
<Level>3</Level>
<Task>1</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:03:54.043556200Z" />
<EventRecordID>663</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>taskhostw</Data>
<Data>4252,D,50</Data>
<Data>WebCacheLocal: </Data>
<Data>C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.jfm</Data>
<Data>ReadHdrFailed</Data>
</EventData>
</Event>

Log Name: Application
Source: Application Error
Date: 30/05/2019 14:06:52
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
Faulting application name: backgroundTaskHost.exe, version: 10.0.18362.1, time stamp: 0x533f8404
Faulting module name: KERNELBASE.dll, version: 10.0.18362.145, time stamp: 0xef881ca4
Exception code: 0x00000004
Fault offset: 0x000000000003a839
Faulting process id: 0x1834
Faulting application start time: 0x01d516e889ca93ab
Faulting application path: C:\WINDOWS\system32\backgroundTaskHost.exe
Faulting module path: C:\WINDOWS\System32\KERNELBASE.dll
Report Id: b6ac4a82-2277-4af9-af0e-4f7dbfb5862a
Faulting package full name: Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe
Faulting package-relative application ID: App
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:06:52.492848700Z" />
<EventRecordID>665</EventRecordID>
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>backgroundTaskHost.exe</Data>
<Data>10.0.18362.1</Data>
<Data>533f8404</Data>
<Data>KERNELBASE.dll</Data>
<Data>10.0.18362.145</Data>
<Data>ef881ca4</Data>
<Data>00000004</Data>
<Data>000000000003a839</Data>
<Data>1834</Data>
<Data>01d516e889ca93ab</Data>
<Data>C:\WINDOWS\system32\backgroundTaskHost.exe</Data>
<Data>C:\WINDOWS\System32\KERNELBASE.dll</Data>
<Data>b6ac4a82-2277-4af9-af0e-4f7dbfb5862a</Data>
<Data>Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe</Data>
<Data>App</Data>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 30/05/2019 14:12:35
Event ID: 6005
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
The winlogon notification subscriber <Profiles> is taking long time to handle the notification event (Logoff).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
<EventID Qualifiers="32768">6005</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:12:35.601932100Z" />
<EventRecordID>682</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>Profiles</Data>
<Data>Logoff</Data>
<Binary>8603FE7F</Binary>
</EventData>
</Event>

Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 30/05/2019 14:12:54
Event ID: 6006
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: Desktop-PC1.domain.local
Description:
The winlogon notification subscriber <Profiles> took 79 second(s) to handle the notification event (Logoff).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
<EventID Qualifiers="32768">6006</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-30T13:12:54.725777600Z" />
<EventRecordID>683</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Desktop-PC1.domain.local</Computer>
<Security />
</System>
<EventData>
<Data>Profiles</Data>
<Data>79</Data>
<Data>Logoff</Data>
<Binary>00000000</Binary>
</EventData>
</Event>

Lemonde  
#3 Posted : 09 August 2019 11:36:47(UTC)
Lemonde

Rank: Advanced Member

Groups: Registered
Joined: 08/01/2017(UTC)
Posts: 324
United Kingdom
Location: London

This appears to be an issue with the Windows 10 TILE system database after an in-line upgrade from Windows 7.

Given that the database was not present before Windows 8, this is a new database on this system.

It appears that the user has somehow inherited a corrupted Tile database and we are recreating some users on the PC to see if we can get a clean Tile DB to resolve the issue.
Lemonde  
#4 Posted : 11 September 2019 07:37:05(UTC)
Lemonde

Rank: Advanced Member

Groups: Registered
Joined: 08/01/2017(UTC)
Posts: 324
United Kingdom
Location: London

We actually found that this disappeared when another user logged in from the domain - it was just the local user that had been upgraded that suffered permission problems writing to it's own local log files etc.

A newly created local user was also found not to inherit these errors.
Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.