- Service: Outlook - I received this event along with events 3003 and 3009 from the same source. The issue was Outlook 2003 on a 2003 server. Deleting the "HKLM\System\Current Control Set\Services\Outlook\Performance" registry key fixed the issue.
When using Citrix\Terminal Services, if you install Office 2003 you must login as an administrator to complete the configuration of the Performance Counters. An event ID 1000 will confirm the load\unload of performance counters. After that, all users should be able to launch Outlook without any errors being written to the event log.
As per Microsoft: "The performance counter could not unload the strings for the specified service. The registry might be corrupted". See MSW2KDB
for additional information about this event.
From a newsgroup post: "Every time you install something that turns on a performance counter and then uninstall it, you get all these errors in the event log since the counters are not turned off with the uninstall. You usually can find where to shut them off in the registry".
- Service: FileReplicaSet - This event was preceided by event 3012 (source LoadPerf) and event 41 (source WinMgmt). All performance counters were corrupted and not being loaded. Our solution was to reload default perfomance counters manually as per ME300956
. Please note, the Q article refers to registry Values: "FirstCounter", "FirstHelp", etc... should be "First Counter", "First Help" - there is a space in the Value Name. Also, use EXCTRLST.EXE to identify performance registry keys.
Reported as occuring after applying the suggestions in ME267831
This event occurred running Windows 2000 Server on a Dell Poweredge 4600. It was eliminated by running the following command:
lodctr /r: c:\winnt\system32\perfstringbackup.ini