DFS-N: Service Initialization

Microsoft.Windows.FileServer.DFSN.6.2.Service.InitializationState (UnitMonitor)

This object monitors the initialization of the DFS Namespace service (Distributed File System on Windows Server 2003) and creates an alert if the service fails to initialize.

Knowledge Base article:

Summary

This rule monitors the initialization of the DFS Namespace service and creates an alert if the service fails to initialize.

Causes

The DFS Namespace service failed to initialize. A service can fail to start for many reasons, including:

The service could not allocate the required memory.
The DFS filter driver is not loaded.

Resolutions

To resolve this issue, use the procedure below that is appropriate to the level of permissions and authority that you have.

If you are Operator (first tier technician) in Operations Manager, start the DFS Namespace service (Distributed File System on Windows Server 2003). To do so in the Operations console, click the Start DFS Namespace Service task.
If you have permission to logon to the affected server (first or second tier technician), logon to the server, close applications to free up memory, and then try restarting the DFS Namespace service. If this does not resolve the problem and there are no critical services or applications that are running successfully on the server, consider restarting the server.

To confirm that the DFS Namespace service is running, in the Operations console, click the Query DFS Namespace Service Status task. This monitor resets to a Healthy state after the service starts.

If these actions do not resolve the problem, it is likely that there are other problems that will require in-depth troubleshooting.

Element properties:

Target

Microsoft.Windows.FileServer.DFSN.6.2.Service

Parent Monitor

System.Health.AvailabilityState

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

DFS-N: DFS Namespace Service Failed to Initialize and is not Running

{0}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServer.DFSN.6.2.Service.InitializationState" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.FileServer.DFSN.6.2.Service" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.FileServer.DFSN.6.2.Service.InitializationState_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>System</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <RegExExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>ContainsSubstring</Operator>

            <Pattern>DfsSvc</Pattern>

          </RegExExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>GreaterEqual</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">14510</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>LessEqual</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">14522</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>System</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <RegExExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>ContainsSubstring</Operator>

            <Pattern>DfsSvc</Pattern>

          </RegExExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">14531</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">14533</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>