none
Windows 7 RC 7100 x64: Error code: 0xC0000022 Kernel-Event Tracing

    Question

  • Been getting these entries in the Event Viewer:


    Log Name:      Microsoft-Windows-Kernel-EventTracing/Admin
    Source:        Microsoft-Windows-Kernel-EventTracing
    Date:          5/30/2009 9:52:34 AM
    Event ID:      2
    Task Category: Session
    Level:         Error
    Keywords:      Session
    User:          LOCAL SERVICE
    Computer:      123456
    Description:
    Session "" failed to start with the following error: 0xC0000022
    Event Xml:
    <Event xmlns="
    http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
        <EventID>2</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>2</Task>
        <Opcode>12</Opcode>
        <Keywords>0x8000000000000010</Keywords>
        <TimeCreated SystemTime="2009-05-30T16:52:34.921302300Z" />
        <EventRecordID>21</EventRecordID>
        <Correlation />
        <Execution ProcessID="1232" ThreadID="1604" />
        <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
        <Computer>123456654</Computer>
        <Security UserID="S-1-5-19" />
      </System>
      <EventData>
        <Data Name="SessionName">
        </Data>
        <Data Name="FileName">
        </Data>
        <Data Name="ErrorCode">3221225506</Data>
        <Data Name="LoggingMode">268443650</Data>
      </EventData>
    </Event>


    Anybody have a clue??

    I don't have anything but Windows 7 RC 7100 x64 installed, all of the current updates, etc....
    GA P35 DQ6 Mb, Intel Wolfdale 8600 3.33Ghz C2D CPU., 4x2Gb Mushkin DDR2 1066 PC2 8500 Ascents Memory Mods., PNY-nVidia GE Force 8800 GTS (640MB), 4-Western Digital Caviar SATA(2) HDD's (internal), 1 EIDE-USB External; Hauppauge PVR 1600 TV tuner, Dual Monitor: (1) Standard up top, (1) WideScreen below; Altec Lansign Speakers...
    Saturday, May 30, 2009 5:16 PM

Answers

  • Are you having any issues with the installation?
    Have you checked Task Manager to find out what the name of the offending process is?  To do this, open up Task Manager (right click on the Task Bar) and select the Processes tab.

    Then click on the View menu item, then on the Select columns menu item.
    Place a check mark in the box next to "PID (Process Identifier) and click OK
    Then scroll down the list of PID's until you find 1232

    What image name is associated with PID 1232?

    FYI - PID's can change, so it's best to check as soon as possible after the error occurs.

    You may be able to get the Thread ID from the Threads tab for that process by using Process Explorer (free here:  http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx )  That thread name could give us some added information to check.
    - John
    Sunday, May 31, 2009 11:16 AM

All replies

  • Are you having any issues with the installation?
    Have you checked Task Manager to find out what the name of the offending process is?  To do this, open up Task Manager (right click on the Task Bar) and select the Processes tab.

    Then click on the View menu item, then on the Select columns menu item.
    Place a check mark in the box next to "PID (Process Identifier) and click OK
    Then scroll down the list of PID's until you find 1232

    What image name is associated with PID 1232?

    FYI - PID's can change, so it's best to check as soon as possible after the error occurs.

    You may be able to get the Thread ID from the Threads tab for that process by using Process Explorer (free here:  http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx )  That thread name could give us some added information to check.
    - John
    Sunday, May 31, 2009 11:16 AM
  • Hey john,

    I was having the same problem as the OP butand my event id was 612. when i check the PID in the task manager i found that the name of the process was Service host: Local system. 

    i dont know much about this sort of stuff. but what i can tell you is that i have two processes in my Task Manager with very similar names:

    1) service host: local system (12)                [and the PID is 536]

    2) Service host:local system (network restricted) (11)      [PID 612] - the problematic one. 

    any ideas what iu can do to solve this?

    Wednesday, October 02, 2013 11:18 AM