Server Service: Shared Folder Creation

Microsoft.Windows.FileServices.Service.SMB.6.3.CreateShareEvent (UnitMonitor)

This object monitors the recreation of shares upon startup of the Server service and generates an alert if a share is not successfully created.

Knowledge Base article:

Summary

This object monitors the recreation of shares upon startup of the Server service, and generates an alert if a share is not successfully created because the target path no longer exists.

Causes

This monitor can enter a Critical health state if the local path of the share no longer exists. This can occur if an administrator deletes the shared folder or if the volume hosting the folder becomes unavailable.

If the health state is unknown, it means that monitoring has not yet begun for this object.

Resolutions

To perform this procedure, you must be an Administrator on the local computer, or you must have been delegated the appropriate authority.

To resolve this issue, use one of the following procedures.

Recreate the local folder

At an elevated command prompt on the affected server type the following command, where [local path] is the path to the missing folder: md [local path].

Delete the share

If the folder is permanently unavailable, delete the share so that the Server service no longer attempts to recreate it. To do so, open an elevated command prompt on the affected server, and then type the following command, where [share] is the share name: net share [share] /delete.

After resolving this issue, reset the monitor in the Operations console to a Healthy state.

Additional

Server Event 2511 (http://go.microsoft.com/fwlink/?LinkId=183104)

Element properties:

Target

Microsoft.Windows.FileServices.Service.SMB.6.3

Parent Monitor

System.Health.ConfigurationState

Category

ConfigurationHealth

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.RepeatedEventLogManualReset2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

Server Service: Failed to Create Share

The following has occurred {0} times:
Event Description: {1}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServices.Service.SMB.6.3.CreateShareEvent" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.FileServices.Service.SMB.6.3" ParentMonitorID="SystemHealth!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.RepeatedEventLogManualReset2StateMonitorType" ConfirmDelivery="true">

  <Category>ConfigurationHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.FileServices.Service.SMB.6.3.CreateShareEvent.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Count$</AlertParameter1>

      <AlertParameter2>$Data/Context/Context/DataItem/EventDescription$</AlertParameter2>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="RepeatedEventRaised" MonitorTypeStateID="RepeatedEventRaised" HealthState="Error"/>

    <OperationalState ID="ManualResetEventRaised" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <RepeatedComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</RepeatedComputerName>

    <RepeatedLogName>System</RepeatedLogName>

    <RepeatedExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">2511</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Server</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </RepeatedExpression>

    <Consolidator>

      <ConsolidationProperties/>

      <TimeControl>

        <WithinTimeSchedule>

          <Interval>15</Interval>

        </WithinTimeSchedule>

      </TimeControl>

      <CountingCondition>

        <CountMode>OnNewItemNOP_OnTimerOutputRestart</CountMode>

      </CountingCondition>

    </Consolidator>

  </Configuration>

</UnitMonitor>