General discussion

Locked

Read of USN log for NTFS volum d failed

By Able-Admin ·
Today I experienced a random shutdown of my PDC. thier was an error message displayed but I didn't have any time to read it before the alloted 30 seconds passed before shutdown.

At the time their was nothing to speak of running on the server however I did notice a large stream of activity between the dsl router and the pdc on the switch.


Now I seem to be getting this error in the Application Log:

Event ID 4149

Read of USN log for NTFS volume d: failed with error code 0xC0000022. Volume will remain offline until the Indexing Service (cisvc) is restarted.

Restarting the service only results in the message being relogged.

Found little info on microsoft.com

http://www.microsoft.com/windows2000/en/datacenter/help/default.asp?url=/windows2000/en/datacenter/help/ISMain-concepts_78.htm

thier only comment is "Contact Microsoft Product Support Services" unfortunatly I dont have $200 to give MS

Can anyone offer me any help or insight?

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Read of USN log for NTFS volum d failed

by Joseph Moore In reply to Read of USN log for NTFS ...

Ok. The USN Journal is "a log that records changes to files and directories on NTFS 5.0 formatted partitions."
Personally, I had not heard of this before! Learn something new every day!
So, the File Replication Service (NTFRS) monitors this log file.
My question to you is: is the File Replication service running? Personally I looked at some of my Win2K servers and I am not running it, but I do NOT have a Win2K DC in operation.
Looks like FRS is used to replicate scripts from one DC to another. And this log is used in the process.
So, if you are not replicating logon scripts around to different DCs, then try and stop the FRS service, and see if that helps.

Please read Technet article Q221111:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q221111
(please remove any spaces)
That article details the Registry structure for this whole mess.

hope this helps

Collapse -

Read of USN log for NTFS volum d failed

by Joseph Moore In reply to Read of USN log for NTFS ...

I also found this article that might really be the fix you need:

DelayUsnReadOnLowResource
The DelayUsnReadOnLowResource entry controls whether the USN journal, also known as the change-notification log, is examined under the following system conditions: low memory, high input/output (I/O), recent user activity, and running on battery power.

Summary
Type: REG_DWORD
Units: Boolean
Default: 1
Range: 0, 1


Remarks
Set the value of the DelayUsnReadOnLowResource entry to one to prevent the reading of the USN journal as long as any of the system conditions exist.

Since indexing does not occur during these conditions, there's no point in examining the USN journal unless the journal has a fixed size (MaxUsnLogSize) and is about to become full. When this happens, the data being written to the journal wraps around, and a beginning block (USNLogAllocationDelta) is deleted to make room for more data. As a result, change notifications may be lost. If this seems likely, Indexing Service gives checking the USN journal a higher priority even if you have set this entry.

Collapse -

Read of USN log for NTFS volum d failed

by Able-Admin In reply to Read of USN log for NTFS ...

Thanks for the help, but I ended up called MS and they're still baffled.

$200 down the drain I suppose

Collapse -

Read of USN log for NTFS volum d failed

by Able-Admin In reply to Read of USN log for NTFS ...

SOLVED!!!

Ready for this? Turns out the "system" account had been removed from the drives ACL. Thats it! $200 for that! oh well guess its solved now :)

Collapse -

Read of USN log for NTFS volum d failed

by dominic.lavoie In reply to Read of USN log for NTFS ...

Salut.

I have the same problem on my c drive. How can i verify the actual ACL and add the account if necessary?

Collapse -

Here is how to fix it

by snosko In reply to Read of USN log for NTFS ...

1) Right click on My Computer and go to Manage
2) Double Click on Disk Management
3) Right click on the drive you need to fix and click Properties
4) Click on the Security tab
5) Add the System account

Back to Windows Forum
6 total posts (Page 1 of 1)  

Related Discussions

Related Forums