Return
-
Title
EventID 1010 displayed in Application Logs of Exchange server the Spotlight Diagnostic Console -
Description
When Spotlight on Messaging Diagnostic Console is connected to Exchange Servers for monitoring the below is displayed in the Application logs:
Log Name: Application
Source: Microsoft-Windows-Perflib
Date: 3/28/2011 8:17:29 PM
Event ID: 1010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: ERCASP2.everestre.net
Description:
The Collect Procedure for the "PolicyAgent" service in DLL "C:\Windows\System32\ipsecsvc.dll" generated an exception or returned an invalid status. The performance data returned by the counter DLL will not be returned in the Perf Data Block. The first four bytes (DWORD) of the Data section contains the exception code or status code.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Perflib" Guid="{13B197BD-7CEE-4B4E-8DD0-59314CE374CE}" EventSourceName="Perflib" />
<EventID Qualifiers="49152">1010</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-03-29T00:17:29.000Z" />
<EventRecordID>523068</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>ERCASP2.everestre.net</Computer>
<Security />
</System>
<UserData>
<EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/ev -
Resolution
WORKAROUND
This is a Microsoft related issue and may be due to corrupt Performance Counter Library dealing with IPsec. The two below articles were found related to this issue, however are not official Microsoft Knowledge base articles. Customers may use at their own risk, Quest Software recommends contacting Microsoft Support for Assistance on this EventID 1010 in which the .dll referenced in Event 1010 is a Microsoft DLL.