We rolled out serveral new 2008 R2 domain controllers and member servers and all of them are being monitored centrally via WMI. Each server is reporting sporadic Application Errors in the Application log with Event ID 1000. The event details are: Faulting application name: wmiprvse.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc794 Faulting module name: ole32.dll, version: 6.1.7600.16385, time stamp: 0x4a5be01a Exception code: 0xc0000005 Fault offset: 0x00000000000204e4 Faulting process id: 0x2d4 Faulting application start time: 0x01cab691b4815e8c Faulting application path: C:\Windows\system32\wbem\wmiprvse.exe Faulting module path: C:\Windows\system32\ole32.dll Report Id: 2a707d8c-2300-11df-b7f1-0050569f567a
All of the systems have Forefront Client Security 2007 SP1 deployed with the FCS-MOM2005 agent also installed. This is supposed to be supported on 2008 R2 as of 11/09 I believe. Ideas?
From the log i can see 0xc5 which is access denied message and the faulting module is ole32.dll.
I would like to suggest that you contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request. Because we find it seems to be application crash issue and we need to analyze the crash dump file to narrow down the root cause of the issue. Unfortunately, it is not effective for us to debug the crash dump file here in the forum.
To obtain the phone numbers for specific technology request please take a look at the web site listed below:
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.