NFS: Server for NFS Driver Startup State

Microsoft.Windows.FileServices.Service.NFS.6.3.Server.StartupState.Service (UnitMonitor)

This object monitors the Server for NFS driver and generates an alert if the driver does not start, if the alert is enabled for this monitor.

Knowledge Base article:

Summary

This object monitors the Server for NFS driver and generates an alert if the driver does not start, if the alert is enabled for this monitor.

NFS clients discover NFS servers by querying the RPC Port Mapper service for a remote server. NFS clients can only discover and communicate with a computer running Server for NFS.

Causes

This monitor can enter a Critical health state for one of the following reasons:

Windows may be low on system resources and is unable to load the Services for Network File System (NFS) service (>Microsoft-Windows-ServicesForNFS-Server), driver (>Microsoft-Windows-ServicesForNFS-Server) or the RPC Port Mapper service (portmap).
An administrator stopped the Server for NFS service.

To determine the underlying cause, inspect the Windows System event log for messages from Source Microsoft-Windows-ServicesForNFS-Server with one of the following event IDs:

Event 4004 - Windows failed a request to load the Network File System (NFS) driver.
Event 4005 - Service Control Manager failed a request to start Server for NFS.
Event 4009 � Server for NFS stopped.
Event 4018 - Server for NFS received a failure from the NFS driver during phase 2 initialization.

Event 4018 has several possible causes including the following:

Trouble looking up SIDs
Trouble acquiring tokens
Memory allocation failures
Failure to create network endpoints or register with network stack
Failure reading the registry

If the health state is unknown, it means that monitoring has not yet begun for this object.

Resolutions

Increase available system resources

To increase available system resources, use the following procedure:

1. At an elevated command prompt on the affected server, type nfsadmin server stop to stop the Server for NFS service.

2. Type net stop portmap to stop the RPC Port Mapper service.

3. Close all programs and stop unnecessary services.

4. Type nfsadmin server start to start the Server for NFS service and the RPC Port Mapper service.

Note The Server for NFS service and the Server for NFS driver are dependent on the RPC Port Mapper service. Stopping the RPC Port Mapper service will also stop the Server for NFS service and its driver.

Verification

To verify Server for NFS startup status, use the following procedure:

1. At an elevated command prompt, type net start.

2. Verify that Server for NFS appears in the list of results.

This monitor automatically resets to a Healthy state after Server for NFS is restarted.

Additional

Event IDs 4004 and 4005 (http://go.microsoft.com/fwlink/?LinkId=186009)

Event ID 4009 (http://go.microsoft.com/fwlink/?LinkId=186004)

Event ID 4018 (http://go.microsoft.com/fwlink/?LinkId=186006)

For more information about configuring Server for NFS, see Services for Network File System (http://go.microsoft.com/fwlink/?LinkId=185983).

Element properties:

Target

Microsoft.Windows.FileServices.Service.NFS.6.3

Parent Monitor

Microsoft.Windows.FileServices.Service.NFS.6.3.Server.StartupState

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

MatchMonitorHealth

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

NFS: Server for NFS Driver Startup State

Event Description: {0}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServices.Service.NFS.6.3.Server.StartupState.Service" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.FileServices.Service.NFS.6.3" ParentMonitorID="Microsoft.Windows.FileServices.Service.NFS.6.3.Server.StartupState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.FileServices.Service.NFS.6.3.Server.StartupState.Service_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>Microsoft-Windows-ServicesForNFS-Server/Admin</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Microsoft-Windows-ServicesForNFS-NFSServerService</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">4004</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">4005</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">4009</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="UnsignedInteger">4018</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>Microsoft-Windows-ServicesForNFS-Server/Admin</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Microsoft-Windows-ServicesForNFS-NFSServerService</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">4007</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>