Software

Ask something
Question Locked

Windows 2003 SP 2 Event ID 333

0 helpful
13 replies

by nabi.xhowdhury

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a exchange 2003 cluster in windows 2003 SP2. My Primary node stop working loggont an erron in event view
Source :Application Popup
Event ID:333
Description: An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry.

after restart it works fine 1/2 days but again the same pronlem

Is there any one who known the problem is

13 replies

by rhvielock

I have the same problem. Did you find a resolution?

Thanks

by sycon1

Having the same issue, anyone find a resolution?

by emerson.marchini

I have the same problem.
But my cluster of file server, with two nodes.
We see tha after aplication of sp2 in other cluster, the same problem occurs.
What happened? Anybody have a solution?

by sauravrohilla

1) update all the filter drivers.
2) update tcpip.sys.
3) check the reg size.
4) if you are using ram more than 4 Gb, use PAE.
5) if you are running SQL or Exchange, use 3GB with userva switch
6) also check for event id 2020, 2019,2021,2022

by sauravrohilla

1) update all the filter drivers.
2) update tcpip.sys.
3) check the reg size.
4) if you are using ram more than 4 Gb, use PAE.
5) if you are running SQL or Exchange, use 3GB with userva switch

by sauravrohilla

1) update all the filter drivers.
2) update tcpip.sys.
3) check the reg size.
4) if you are using ram more than 4 Gb, use PAE.
5) if you are running SQL or Exchange, use 3GB with userva switch.

by jc

You already know the solution ?

N?o we have 6 servers with this problem !! I think that it have been caused by my antivirus client (i upgrade them for the last version) but i 'm not sure.

by sauravrohilla

Quite possible JC that your antivirus could caused this, as most of the antivirus has their own filter drivers and event ID 333 is very much related to filter drivers and TCPIP.sys

Follow my instructions written in one of my reply to XABI's question,,,, that will surely resolve the problem,,,,run disk defragmentation and check reg, update TCPIP.sys and UPdATE ANTIVIRUS.

by kk_mb

I am an ex-Microsoft employee. Following solution had helped eliminating similar problem(Event ID 333, Application Pop up with many customer.
====================
To resolve this problem, modify the registry to increase the PoolUsageMaximum value and the PagedPoolSize value. To do this, follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
3. On the Edit menu, point to New, and then click DWORD Value.
4. In the New Value #1 box, type PoolUsageMaximum, and then press ENTER.
5. Right-click PoolUsageMaximum, and then click Modify.
6. In the Value data box, type 60, and then click OK.
(Setting the value at 60 informs the Memory Manager to start the trimming process at 60 percent of PagedPoolMax rather than the default setting of 80 percent. If a threshold of 60 percent is not enough to handle spikes in activity, reduce this setting to 50 percent or 40 percent.)

7. If the PagedPoolSize registry entry exists, go to step 8. If the PagedPoolSize registry entry does not exist, create it. To do this, follow these steps:
On the Edit menu, point to New, and then click DWORD Value.
In the New Value #1 box, type PagedPoolSize, and then press ENTER.
8. Right-click PagedPoolSize, and then click Modify.
9. In the Value data box, type ffffffff, and then click OK.
10. Exit Registry Editor, and then restart the computer.
======================

by bad_andy

I am on Windows Server 2003 x64 and am trying the solution above. I will let you know if it works.

by svinayaka

http://support.microsoft.com/kb/948496

MY CASE SYMPTOMS

1)You cannot create a Remote Desktop Protocol (RDP) connection to the server.
2)You experience slow network performance
3)You experience slow performance when you log on to the domain.
4)You experience intermittent RPC communications failures.
5)The server stops responding.
6)The server runs low on nonpaged pool memory

CAUSE

A)The TCP/IP Offload-enabled network adapter may consume lots of nonpaged pool memory. This may cause other problems in the operating system.
B)In some cases, the TCP/IP Offload-enabled network adapter may request large blocks of contiguous memory. This makes the computer stop responding when it tries to free the memory

This discussion is closed to new replies.