Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Comments for event ID 1015 currently in the processing queue.

Note: We have not reviewed this information yet so it is unfiltered, exactly how it was submitted by our contributors.

Event ID: 1015
Event Source: W3SVC
Event Type: Error
Event Description: A process serving application pool 'DefaultAppPool' was orphaned but the specified orphan action "c:\action.cmd" 12212 could not be executed. The data field contains the error number.
Comment: This I fixed quite easily:
* The error states that the AppPool was orphaned but doesn't mean that there was an error with Orphaning.
* The error indicates that there was an error executing the "OrphanActionEXE" Property... "c:\action.cmd" I could find any file called "c:\action.cmd" for now I have just created an empty action.cmd file on the c:\.

Error resolved :-)
Event ID: 1015
Event Source: MsEchangeFDS
Event Type: Error
Event Description: Process MSExchangeFDS.exe (PID=1104). Failed to read property Path from metabase object IIS://<your domain>/W3SVC/1/ROOT/OAB. OAB synchronization suspended.

Comment: Recreate this object
Event ID: 1015
Event Source: MSExchange ActiveSync
Event Type: Error
Event Description: Description: Exchange ActiveSync experienced a transient error when it tried to access Active Directory information for user "". Exchange ActiveSync will try this operation again. If this event occurs infrequently no user action is required. If this event occurs frequently check network connectivity using PING or PingPath. You can also use the Test-ActiveSyncConnectivity cmdlet. More information:

Microsoft.Exchange.Data.Directory.ADTransientException: Could not find any available Global Catalog in forest internal.asystech.com.
  at Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType ADObjectId domain String serverName Int32 port NetworkCredential credential)
  at Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType)
  at Microsoft.Exchange.Data.Directory.ADSession.GetConnection(String preferredServer Boolean isWriteOperation Boolean isNotifyOperation ADObjectId& rootId)
  at Microsoft.Exchange.Data.Directory.ADSession.GetReadConnection(String preferredServer ADObjectId& rootId)
  at Microsoft.Exchange.Data.Directory.ADSe
Comment:
Event ID: 1015
Event Source: MsiInstaller
Event Type: -
Event Description: -
Comment: Created a GPO to disable Computer Browser. Windows Installer wouldnt start.
The dependacy for MS Installer is Server and Workstation. The dependacy for Server is Computer Browser hence cant start MS Installer Index: 1591
Event ID: 1015
Event Source: MsiInstaller
Event Type: Warning
Event Description: Yet another puzzling appearance in the event log of my freshly nuked WINXP SP3 computer....


Event Type: Warning

Event Source: MsiInstaller
Event Category: None
Event ID: 1015
Date: 3/30/2010
Time: 4:05:40 PM
User: NT AUTHORITY\SYSTEM
Computer: COMPAQ-3AFA2BCD
Description:
The description for Event ID ( 1015 ) in Source ( MsiInstaller ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description see Help and Support for details. The following information is part of the event: 0x800706BA (NULL) (NULL) (NULL) (NULL)  .

Comment:
Event ID: 1015
Event Source: EvnAgnt
Event Type: Warning
Event Description: TraceLevel parameter not located in registry Default trace level used is 32.

Comment: I'm working with an ActiveX control in IE7 and 8 that opens a PDF.  I'm not certain this is related but I don't have this error prior to this task.
Event ID: 1015
Event Source: MsiInstaller
Event Type: -
Event Description: -
Comment: I ran into this issue while upgrading Office 2003 to Office 2007
Office 2007 upgrade failed. So I decided to remove Office2003
This also failed
In the application log I found multiple entry's of Failed to connect to server. Error: 0x800706BA

Solved this issue by doing the following
From the commandprompt do net stop winmgmt

Using Windows Explorer, rename the folder %windir%\System32\Wbem\Repository. (For example, %windir%\System32\Wbem\Repository_bad). %windir% represents the path to the Windows directory, which is typically C:\Windows.

Switch to Command Prompt window, and type the following and press ENTER after each line:
net start winmgmt

After rebooting the machine I had to wait a couple of mintues before windows installer service was available. Index: 1591
Event ID: 1015
Event Source: PerfLib
Event Type: Error
Event Description: Tipo evento: Errore
Origine evento: Perflib
Categoria evento: Nessuno
ID evento: 1023
Data: 02/09/2010
Ora: 9.16.49
Utente: N/D
Computer: TVSRV21I
Descrizione:
Impossibile caricare la DLL dei contatori flessibili PerfProc. Il codice di errore si trova nel primo DWORD nella sezione Dati.

Dati:
0000: 7e 00 00 00               ~...    

Comment:
Event ID: 1015
Event Source: search
Event Type: Warning
Event Description: Event ID 3013 for the Windows Search Service has been suppressed 996 time(s) since 22:45:27. This event is used to suppress Windows Search Service events that have occurred frequently within a short period of time.  See Event ID 3013 for further details on this event.
Comment:
Event ID: 1015
Event Source: IIS Advanced Logging Module
Event Type: Error
Event Description: Failed to read node configuration for path ''MACHINE/WEBROOT/APPHOST/WEBSITE''. Any requests at or below this path will not be logged.  HRESULT: 0x800700B7
Comment: This is a Win 2k8R2 machine  We are attempting to upload files through an ASP web application but it only records this error instead.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...