system service failed unexpectedly

error: system service failed unexpectedly

This particular error is from a Windows 2000 Server, setup as an application server. I am seeing the same error (with a different 'second' error code) on a windows NT4 application server. These events did not start at the same time. There is about a month's difference in time. To my knowledge, nothing has been installed or tweaked on either box.

For the Windows 2k Server, I am seeing two entries per day in the event viewer\system log. They are generally 8-15 minutes apart.

There are several entries per day on the NT4 box. Somedays 2, other days up to 8 entries.

Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2000
Date: 1/2/2006
Time: 5:44:07 PM
User: N/A
Computer: PMGBBS1
Description:
The server's call to a system service failed unexpectedly.

BYTES
Data:
0000: 00 00 04 00 01 00 54 00 ......T.
0008: 00 00 00 00 d0 07 00 c0 ....Ã..À
0010: 00 00 00 00 0d 00 00 c0 .......À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 1e 03 6e 03 ..n.

WORDS
Data:
0000: 00040000 00540001 00000000 c00007d0
0010: 00000000 c000000d 00000000 00000000
0020: 00000000 00000000 036e031e


I have been able to find some reference to c000000d, however, the machine is neither running PC-cillin, nor is Windows 95 loaded.

-> c000000d = "INVALID_PARAMETER ", and 028e0bc5: Caused by PC-cillin loaded on Windows 95 clients. See M192732.
Link :: http://www.eventid.net/display.asp?eventid=2000&eventno=1067&source=Srv&phase=1

I have also been able to find some reference to C000000D as meaning "STATUS_INVALID_PARAMETER ", One of the parameters is not valid.

NTSTATUS code : STATUS_INVALID_PARAMETER
Windows error code : ERROR_INVALID_PARAMETER ...
Link :: http://windowssdk.msdn.microsoft.co...secmgmt/security/management_return_values.asp

I have not found any reference to the second error code 036e031e.

I have spent all day searching google/MS KB with no luck.

How can I debug this ?
Is there a way to setup an audit so that I can determine what service failed and/or what process is triggering the call for that service which failed. ?

Thanks

Don

 

Hi,

Can you find c000000d at DrWatson log? If yes, copy and paste the content here.

C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\drwtsn32.log