Sander's space

Just another site

Archive for the ‘Windows 2008 R2’ Category

Windows 2008 R2 COM+ Error

Posted by Sander on March 17, 2012


For some time now I have some issues with a server which could not update and on which the antivirus client would not start.

The underlying problem was only one component: COM+

After trying to manually start the service the following error was produced in the Application eventlog with EventID 4609 with source “EventSystem””

“The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80070002 from line 200 of d:\w7rtm\com\complus\src\events\tier2\service.cpp. This warning may be expected if the computer is low on resources. If the computer is not low on resources, and these warnings persist, it may indicate a problem in the COM+ Event System.”

The first problem I have noticed that the service was set to log on as “Local System” The default value for the service is “Local Service”. I changed this to “Local Service” and left the password field blank and tried to start the service manually. Again it failed and eventually it turned out to be an corrupted registry key (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem).

I took the following steps to resolve the problem:

  1. As this was a virtual machine I created a snapshot of the server.
  2. Exported the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole registry and saved it on another server
  3. Deleted the following subkeys under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole:
    • MachineAccessRestriction
    • MachineLaunchRestriction
  4. Exported the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem from a healthy Windows 2008 R2 server
  5. Exported the same key on the affected server and deleted it.
  6. Imported the registry key from the healthy server
  7. Rebooted the server

After rebooting the server all services were starting normally again.



Posted in Windows 2008 R2 | 7 Comments »