LDM - Can't Read Disk

Microsoft.Windows.Client.Win10.OperatingSystem.LDMCantReadDisk.Alert (Rule)

Logical Disk Manager reports that the disk cannot be read.

Knowledge Base article:

Summary

This event indicates that the Logical Disk Manager was unable to read data from or write data to a dynamic disk.

This event could be caused by bad disk sectors, or could indicate a total failure of the disk.

The data integrity of the volumes residing on the disk might be affected by the failures. Any applications using these volumes might experience errors.

This event is posted to the system log by Dmio.sys. The system log might contain additional information from other storage drivers that indicates the cause of the failure.

Causes

Possible causes include:

Resolutions

Do one or more of the following:

1. Open the Disk Management snap-in.

2. Rescan the disks and then reactivate any disks with errors.

Resynchronize or regenerate the volume as necessary if the disk was a member of a mirrored or RAID-5 volume.

3. Run chkdsk on any reactivated volumes.

Additional

Sample Event:

Event Type: Information

Event Source: dmio

Event Category: None

Event ID: 29

Date: MM/DD/YYYY

Time: HH:MM:SS AM/PM

User: N/A

Computer: Computer_Name

Description:

dmio: Harddisk 9 read error at block 445136247: status 0xC000009A

Event Type: Warning

Event Source: dmio

Event Category: None

Event ID: 35

Date: MM/DD/YYYY

Time: HH:MM:SS AM/PM

User: N/A

Computer: Computer_Name

Description:

dmio: Disk Harddisk 9 block 445136247 (mountpoint F:): Uncorrectable read error

Event Type: Information

Event Source: dmio

Event Category: None

Event ID: 30

Date: MM/DD/YYYY

Time: HH:MM:SS AM/PM

User: N/A

Computer: Computer_Name

Description:

dmio: Harddisk2 write error at block 411779656: status 0xC000009A

Other relevant status codes are:

0xC000000E STATUS_NO_SUCH_DEVICE = A device which does not exist was specified.

0xC0000185 STATUS_IO_DEVICE_ERROR = The I/O device reported an I/O error.

Related Events:

External

For more information about hardware status codes, see Knowledge Base article 329075, “Dmio Reports Event ID 30 with Status of 0xC000009A,” at http://go.microsoft.com/fwlink/?LinkId=25824.

Element properties:

TargetMicrosoft.Windows.Client.Win10.OperatingSystem
CategoryEventCollection
EnabledFalse
Alert GenerateFalse
RemotableTrue
Event LogSystem

Member Modules:

ID Module Type TypeId RunAs 
EventDS DataSource Microsoft.Windows.EventProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Microsoft.Windows.Client.Win10.OperatingSystem.LDMCantReadDisk.Alert" Enabled="false" Target="Win10!Microsoft.Windows.Client.Win10.OperatingSystem" DiscardLevel="100" ConfirmDelivery="true" Remotable="true" Priority="Normal">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventSourceName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>DISK</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>31</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>