none
OpLocks and SMB2

    Question

  • I have a client who is using an application on the server that requires Oplocks and SMB2 to be disabled.

    He is receiving some interesting eventlog errors once this was done and I was wondering if anyone could shed any light on these.

    He is holding of on changing this in case he causes extra problems.

    Cliff

    ** Event 1035 with SMB2 Enabled (default settings) **

    Log Name:      Application
    Source:        MsiInstaller
    Date:          11/09/2013 12:07:15
    Event ID:      1035
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          SYSTEM
    Computer:      ComputerName
    Description:
    Windows Installer reconfigured the product. Product Name: Windows Small Business Server 2011 Standard ClientAgent. Product Version: 6.1.7900.1. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 0.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1035</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-09-11T11:07:15.000000000Z" />
        <EventRecordID>31298</EventRecordID>
        <Channel>Application</Channel>
        <Computer>ComputerName</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data>Windows Small Business Server 2011 Standard ClientAgent</Data>
        <Data>6.1.7900.1</Data>
        <Data>1033</Data>
        <Data>0</Data>
        <Data>Microsoft Corporation</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
        <Binary>7B33303332424337442D453731332D343532442D414146372D4635454430373332323643387D3030303032323333363966336661303635323930623462383863363333616133656663633030303030393034</Binary>
      </EventData>
    </Event>

    ***********************************************************************************************************************************************************

    ** Event 1035 with SMB2 Disabled (via sc.exe settings) **

    Log Name:      Application
    Source:        MsiInstaller
    Date:          10/09/2013 22:44:32
    Event ID:      1035
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          SYSTEM
    Computer:      ComputerName
    Description:
    Windows Installer reconfigured the product. Product Name: Windows Small Business Server 2011 Standard ClientAgent. Product Version: 6.1.7900.1. Product Language: 1033. Manufacturer: Microsoft Corporation. Reconfiguration success or error status: 1603.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1035</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-09-10T21:44:32.000000000Z" />
        <EventRecordID>31204</EventRecordID>
        <Channel>Application</Channel>
        <Computer>ComputerName</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data>Windows Small Business Server 2011 Standard ClientAgent</Data>
        <Data>6.1.7900.1</Data>
        <Data>1033</Data>
        <Data>1603</Data>
        <Data>Microsoft Corporation</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
        <Binary>7B33303332424337442D453731332D343532442D414146372D4635454430373332323643387D3030303032323333363966336661303635323930623462383863363333616133656663633030303030393034</Binary>
      </EventData>
    </Event>

    ** EVENT 1042 with SMB2 Enabled (default settings) **

    Log Name:      Application
    Source:        MsiInstaller
    Date:          11/09/2013 12:07:15
    Event ID:      1042
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          SYSTEM
    Computer:      ComputerName
    Description:
    Ending a Windows Installer transaction: \\DomainName\SysVol\DomainName\ClientAgent\machine\clientagentx86.msi. Client Process Id: 2996.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1042</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-09-11T11:07:15.000000000Z" />
        <EventRecordID>31299</EventRecordID>
        <Channel>Application</Channel>
        <Computer>ComputerName</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data>\\DomainName\SysVol\DomainName\ClientAgent\machine\clientagentx86.msi</Data>
        <Data>2996</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
      </EventData>
    </Event>

    **************************************************************************************************************************************************

    ** Event 1042 with SMB2 Disabled (via sc.exe settings) **

    Log Name:      Application
    Source:        MsiInstaller
    Date:          10/09/2013 22:44:32
    Event ID:      1042
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          SYSTEM
    Computer:      ComputerName
    Description:
    Ending a Windows Installer transaction: C:\Windows\TEMP\\SBSCSE32.msi. Client Process Id: 3036.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">1042</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-09-10T21:44:32.000000000Z" />
        <EventRecordID>31205</EventRecordID>
        <Channel>Application</Channel>
        <Computer>ComputerName</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data>C:\Windows\TEMP\\SBSCSE32.msi</Data>
        <Data>3036</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
      </EventData>
    </Event>

    ** Event 11316 Occurs when SMB2 Disabled (via sc.exe settings) / Replaces Normal Info Event 11728 **

    Log Name:      Application
    Source:        MsiInstaller
    Date:          10/09/2013 15:25:45
    Event ID:      11316
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          SYSTEM
    Computer:      ComputerName
    Description:
    Product: Windows Small Business Server 2011 Standard ClientAgent -- Error 1316. A network error occurred while attempting to read from the file: C:\Windows\TEMP\clientagentx86.msi
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MsiInstaller" />
        <EventID Qualifiers="0">11316</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-09-10T14:25:45.000000000Z" />
        <EventRecordID>31128</EventRecordID>
        <Channel>Application</Channel>
        <Computer>ComputerName</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data>Product: Windows Small Business Server 2011 Standard ClientAgent -- Error 1316. A network error occurred while attempting to read from the file: C:\Windows\TEMP\clientagentx86.msi</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>(NULL)</Data>
        <Data>
        </Data>
        <Binary>7B33303332424337442D453731332D343532442D414146372D4635454430373332323643387D</Binary>
      </EventData>
    </Event>

    Friday, October 04, 2013 1:56 PM

Answers

  • Hi,

    Before going further, would you please enable Windows Installer logging to check what you get?

    Detailed operations, please refer to the following KB.

    How to enable Windows Installer logging

    http://support.microsoft.com/kb/223300

    Regarding those detailed descriptions for Event Id that you provided, there Error 1316 we can find in the events. It points out: ”A network error occurred while attempting to read from the file: C:\Windows\TEMP\clientagentx86.msi”. The event description says it is a "network error", however, as we see above, the file is on the C: drive on this computer. That would suggest this file has been deleted/moved/renamed while installation was in progress. So, please check this .msi file and make sure the file correctly. Meanwhile, this error could mean that there is existing application that is blocking new installations. Please check if there are any instanced installed that would be blocking your new installation.

    Please refer to the next KB and get more details.

    You receive an "error 1603: A fatal error occurred during installation" error message when you try to install a Windows Installer package

    http://support.microsoft.com/kb/834484

    In addition, regarding Event 1042, as the event description indicates, this is simply a notification that the installer is ending the installation process. Commonly, other events that related to MSInstaller provide the reason for the installation failure.

    For Event 1035, please refer to the following article.

    Event ID 1035 — Windows Installer Application Installation

    http://technet.microsoft.com/en-us/library/cc735597(v=WS.10).aspx

    Also, please refer to the KB and a solved question for Event 1035.

    Event log message indicates that the Windows Installer reconfigured all installed applications

    http://support.microsoft.com/kb/974524

    What could be causing MsiInstaller to continuously reconfigure applications (EventID 1035)?

    http://serverfault.com/questions/43067/what-could-be-causing-msiinstaller-to-continuously-reconfigure-applicationseven

    Hope this helps.

    Best regards,

    Justin Gu

    Tuesday, October 08, 2013 3:30 AM
    Moderator

All replies

  • Hi,

    Before going further, would you please enable Windows Installer logging to check what you get?

    Detailed operations, please refer to the following KB.

    How to enable Windows Installer logging

    http://support.microsoft.com/kb/223300

    Regarding those detailed descriptions for Event Id that you provided, there Error 1316 we can find in the events. It points out: ”A network error occurred while attempting to read from the file: C:\Windows\TEMP\clientagentx86.msi”. The event description says it is a "network error", however, as we see above, the file is on the C: drive on this computer. That would suggest this file has been deleted/moved/renamed while installation was in progress. So, please check this .msi file and make sure the file correctly. Meanwhile, this error could mean that there is existing application that is blocking new installations. Please check if there are any instanced installed that would be blocking your new installation.

    Please refer to the next KB and get more details.

    You receive an "error 1603: A fatal error occurred during installation" error message when you try to install a Windows Installer package

    http://support.microsoft.com/kb/834484

    In addition, regarding Event 1042, as the event description indicates, this is simply a notification that the installer is ending the installation process. Commonly, other events that related to MSInstaller provide the reason for the installation failure.

    For Event 1035, please refer to the following article.

    Event ID 1035 — Windows Installer Application Installation

    http://technet.microsoft.com/en-us/library/cc735597(v=WS.10).aspx

    Also, please refer to the KB and a solved question for Event 1035.

    Event log message indicates that the Windows Installer reconfigured all installed applications

    http://support.microsoft.com/kb/974524

    What could be causing MsiInstaller to continuously reconfigure applications (EventID 1035)?

    http://serverfault.com/questions/43067/what-could-be-causing-msiinstaller-to-continuously-reconfigure-applicationseven

    Hope this helps.

    Best regards,

    Justin Gu

    Tuesday, October 08, 2013 3:30 AM
    Moderator
  • Many thanks

    I will get the client to check today, its strange that this error goes away when you reset the OPLocks and SMB2 registry keys.

    Cliff

    Friday, October 11, 2013 5:46 AM