AZ Migrated server, DCOM error of VM Agent: unable to communicate with the computer .... using any of the configured protocols - azure

Migrated a Win 2008 R2 VM from on premise to Azure. (via Azure SiteRecovery tool)
Now the VM Win Event spam every few seconds a:
DCOM was unable to communicate with the computer YTO231080216052 using any of the configured protocols.
The string: YTO231080216052 I found in the registry under the Azure Agent (same as Hyper V integration services):
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters]
"HostName"="YTO231080216052"
"PhysicalHostName"="YTO231080216052"
"PhysicalHostNameFullyQualified"="YTO231080216052"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Virtual Machine\Guest]
"WireServerStatus"="Succeeded"
"GuestAgentVersion"="2.7.41491.1044"
"OsVersion"="Windows:Windows Server 2008 R2 Enterprise-Microsoft Windows NT 6.1.7601 Service Pack 1"
Full Event log XML
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 23/03/2022 11:06:04 AM
Event ID: 10009
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: myVM123
Description:
DCOM was unable to communicate with the computer YTO231080216052 using any of the configured protocols.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="49152">10009</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2022-03-23T17:06:04.000000000Z" />
<EventRecordID>82659</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>myVM123</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">YTO231080216052</Data>
<Binary>3C52656--removed--31363035327D3E</Binary>
</EventData>
</Event>
My Questions is how to solve this? Does the VM try to communicate (DCOM) with the host?
Notice in the device manger an unknown device:
VMBUS\{c376c1c3-d276-48d2-90a9-c04748072c60}
VMBUS\{c4e5e7d1-d748-4afc-979d-683167910a55}
MS claims "The unknown devices are harmless and can be safely ignored."
Does this related to the error message?

Related

Clicking Windows 10 > Settings > System closes settings app for new domain user

Been adding Win 10 PCs to domain since day one, never ran into this, so have some experience.
Fresh install of Win 10 (Feb 2020), started with a local user/admin. All good. Added first domain user. Log in as that new domain user, which is an admin. All fine. Click Settings (cog wheel) to change things as per normal under Settings > System and the Settings app blinks out.
Event log shows multiple errors, this one being key(?)
Log Name: Microsoft-Windows-AppModel-Runtime/Admin
Source: Microsoft-Windows-AppModel-Runtime
Date: 2/14/2020 3:12:38 PM
Event ID: 69
Task Category: None
Level: Error
Keywords: Process
User: SYSTEM
Computer: ****.domainnamehere.local
Description:
Failed with 0x490 modifying AppModel Runtime status for package windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy for user domainnamehere\UserNameHere (current status = 0x0, desired status = 0x20).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{f1ef270a-0d32-4352-ba52-dbab41e1d859}" />
<EventID>69</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000001</Keywords>
<TimeCreated SystemTime="2020-02-14T14:12:38.789060000Z" />
<EventRecordID>1343</EventRecordID>
<Correlation ActivityID="{23a0968a-e33b-0004-1ed4-a0233be3d501}" />
<Execution ProcessID="5720" ThreadID="1324" />
<Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
<Computer>computernamehere.domainnamehere.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ErrorCode">1168</Data>
<Data Name="PackageFullName">windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy</Data>
<Data Name="User">S-1-5-21-3229509536-3853329613-2519243864-1117</Data>
<Data Name="DesiredStatus">32</Data>
<Data Name="CurrentStatus">0</Data>
</EventData>
</Event>
And, yes, did do extensive searching via Google (now mostly results for ad-farms with little or no good info), and Duck Duck Go - likewise, nothing.
This is an iMac on BootCamp (as are ALL our desktops now and for years because we use them for different user tasks that can be Mac or Windows), and never had problems before.
Only difference is this machine uses an AMD video card, and all the others are NVIDIA.
Clicking Settings (cog wheel) for any other option works.
Win 10 1909 with all Feb 2020 updates.

Errors being logged from Azure Worker Roles

I have several Azure (Classic) Cloud Service worker roles, with VM Size Extra small (1 core, 768 MB). I'm noticing frequent errors being logged (several times a day) to application insights. The errors seem to be from the Windows system itself whilst attempting to defrag drives. These errors don't seem to be of any consequence other than they're filling up logs unnecessarily. I'd like to get rid of them anyhow. Here's the raw XML for the errors logged...
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'>
<System>
<Provider Name='Microsoft-Windows-Defrag'/>
<EventID Qualifiers='32768'>257</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime='2019-03-29T04:23:21.000000000Z'/>
<EventRecordID>623</EventRecordID>
<Channel>Application</Channel>
<Computer>prod0</Computer>
<Security/>
</System>
<EventData>
<Data>(C:)</Data>
<Data>Neither Slab Consolidation nor Slab Analysis will run if slabs are less than 8 MB. (0x8900002D)</Data>
<Binary>2D0000896303000094010000AE0100002236B942D9B1BD381B0700000000000000000000</Binary>
</EventData>
</Event>
and...
<Event xmlns='http://schemas.microsoft.com/win/2004/08/events/event'>
<System>
<Provider Name='Microsoft-Windows-Defrag'/>
<EventID Qualifiers='32768'>257</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime='2019-03-29T04:23:20.000000000Z'/>
<EventRecordID>622</EventRecordID>
<Channel>Application</Channel>
<Computer>prod0</Computer>
<Security/>
</System>
<EventData>
<Data>SYSTEM</Data>
<Data>This operation is not supported on this filesystem. (0x89000020)</Data>
<Binary>00000000A40500005105000000000000629468641336AAB85B55B1B5B038000000000000</Binary>
</EventData>
</Event>
There's also another with the message...
The Collect Procedure for the "D:\Windows\System32\winspool.drv"
service in DLL "Spooler" generated an exception or returned an invalid
status. The performance data returned by the counter DLL will not be
returned in the Perf Data Block. The first four bytes (DWORD) of the
Data section contains the exception code or status code.
and operation_SyntheticSource: AzureDiag_WEL
Has anyone else encountered these errors and did you have a resolution for them?

Azure web role suddenly not starting

I have Web Application that was hosted in azure web role the application worked well suddenly the application stopped working it won't started but in cloud service it show running status.
I login azure web role in remote desktop and check it in event viewer it shows the following error message, I don't know why it will come?? Anybody knows please let me know.
Error message 1: IISW3SVC-WP
Log Name: Application
Source: Microsoft-Windows-IIS-W3SVC-WP
Date: 7/6/2016 11:34:58 AM
Event ID: 2297
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: RD00155DF89FB1
Description:
The worker process for application pool '731c10db-e31a-490a-b2ba-7250e7ff6c46' encountered an error 'Configuration file is not well-formed XML
' trying to read global module configuration data from file '\\?\D:\inetpub\temp\apppools\731c10db-e31a-490a-b2ba-7250e7ff6c46\731c10db-e31a-490a-b2ba-7250e7ff6c46.config', line number '3'. Worker process startup aborted.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-IIS-W3SVC-WP" Guid="{670080D9-742A-4187-8D16-41143D1290BD}" EventSourceName="W3SVC-WP" />
<EventID Qualifiers="49152">2297</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-07-06T11:34:58.000000000Z" />
<EventRecordID>517</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>RD00155DF89FB1</Computer>
<Security />
</System>
<EventData>
<Data Name="ApplicationPool">731c10db-e31a-490a-b2ba-7250e7ff6c46</Data>
<Data Name="ConfigException">Configuration file is not well-formed XML
</Data>
<Data Name="FileName">\\?\D:\inetpub\temp\apppools\731c10db-e31a-490a-b2ba- 7250e7ff6c46\731c10db-e31a-490a-b2ba-7250e7ff6c46.config</Data>
<Data Name="LineNumber">3</Data>
<Binary>0D000000</Binary>
</EventData>
</Event>
Error message 2: .Net Runtime
Log Name: Application
Source: .NET Runtime
Date: 7/6/2016 11:36:03 AM
Event ID: 1026
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: RD00155DF89FB1
Description:
Application: IISConfigurator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Runtime.InteropServices.COMException
Stack:
at Microsoft.Web.Administration.Interop.AppHostWritableAdminManager.GetAdminSection(String bstrSectionName, String bstrSectionPath)
at Microsoft.Web.Administration.Configuration.GetSectionInternal(ConfigurationSection section, String sectionPath, String locationPath)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.HostingEnvironment.ConfigureAnonymousAuthentication(String configPath)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.HostingEnvironment.Initialize(Boolean setupRewrite, String configPath)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.HostingEnvironment.Initialize(Boolean, System.String)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.IISConfigurator.Initialize()
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.WCFServiceHost.Open()
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.Program.StartForgroundProcess()
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.Program.DoActions(System.String[])
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.Program.Main(System.String[])
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name=".NET Runtime" />
<EventID Qualifiers="0">1026</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-07-06T11:36:03.000000000Z" />
<EventRecordID>543</EventRecordID>
<Channel>Application</Channel>
<Computer>RD00155DF89FB1</Computer>
<Security />
</System>
<EventData>
<Data>Application: IISConfigurator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Runtime.InteropServices.COMException
Stack:
at Microsoft.Web.Administration.Interop.AppHostWritableAdminManager.GetAdminSection(String bstrSectionName, String bstrSectionPath)
at Microsoft.Web.Administration.Configuration.GetSectionInternal(ConfigurationSection section, String sectionPath, String locationPath)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.HostingEnvironment.ConfigureAnonymousAuthentication(String configPath)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.HostingEnvironment.Initialize(Boolean setupRewrite, String configPath)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.HostingEnvironment.Initialize(Boolean, System.String)
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.IISConfigurator.Initialize()
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.WCFServiceHost.Open()
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.Program.StartForgroundProcess()
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.Program.DoActions(System.String[])
at Microsoft.WindowsAzure.ServiceRuntime.IISConfigurator.Program.Main(System.String[])
</Data>
</EventData>
</Event>
Error message 3: Application Error
Log Name: Application
Source: Application Error
Date: 7/6/2016 11:36:03 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: RD00155DF89FB1
Description:
Faulting application name: IISConfigurator.exe, version: 2.7.1198.742, time stamp: 0x5637c82c
Faulting module name: KERNELBASE.dll, version: 6.2.9200.17637, time stamp: 0x56980227
Exception code: 0xe0434352
Fault offset: 0x000000000004b418
Faulting process id: 0x1c04
Faulting application start time: 0x01d1d77a90ba3489
Faulting application path: E:\base\x64\IISConfigurator.exe
Faulting module path: D:\Windows\system32\KERNELBASE.dll
Report Id: d17be5a6-436d-11e6-93fb-00155df89fb1
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2016-07-06T11:36:03.000000000Z" />
<EventRecordID>544</EventRecordID>
<Channel>Application</Channel>
<Computer>RD00155DF89FB1</Computer>
<Security />
</System>
<EventData>
<Data>IISConfigurator.exe</Data>
<Data>2.7.1198.742</Data>
<Data>5637c82c</Data>
<Data>KERNELBASE.dll</Data>
<Data>6.2.9200.17637</Data>
<Data>56980227</Data>
<Data>e0434352</Data>
<Data>000000000004b418</Data>
<Data>1c04</Data>
<Data>01d1d77a90ba3489</Data>
<Data>E:\base\x64\IISConfigurator.exe</Data>
<Data>D:\Windows\system32\KERNELBASE.dll</Data>
<Data>d17be5a6-436d-11e6-93fb-00155df89fb1</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>
I have done external operation in that web role, I don't know whether it will throw the issue,
My web role application will call this one command file in service definition file when application start that file will run, this is the given code we start the command file in service definition file,
<Startup>
<Task commandLine="Startup.cmd" executionContext="elevated" />
</Startup>
When that command file will run it checks and reset the IIS every 4 days.
This is the commands executed in command file,
echo off
REM *** Prevent the IIS app pools from shutting down due to being idle.
%windir%\system32\inetsrv\appcmd set config -section:applicationPools -applicationPoolDefaults.processModel.idleTimeout:00:00:00
REM *** Prevent IIS app pool recycles from recycling on the default schedule of 1740 minutes (29 hours).
%windir%\system32\inetsrv\appcmd set config -section:applicationPools -applicationPoolDefaults.recycling.periodicRestart.time:96:00:00
exit /b 0

Role environment . FAILED TO INITIALIZE

I have a number of Azure Web Sites running on single-instance, Standard S2 tiers (each site on it's own instance). The sites are in different regions and they run completely different and independent code. I have noticed that if I view the eventlog.xml file on any of my sites, I see a number of Role environment . FAILED TO INITIALIZE events showing up. Here is an extract from the file:
<Event>
<System>
<Provider Name="Windows Azure Runtime 2.5.0.0"/>
<EventID>1013</EventID>
<Level>0</Level>
<Task>0</Task>
<Keywords>Keywords</Keywords>
<TimeCreated SystemTime="2015-05-06T07:07:35Z"/>
<EventRecordID>976923406</EventRecordID>
<Channel>Application</Channel>
<Computer>RD000XXXXXE</Computer>
<Security/>
</System>
<EventData>
<Data>4008</Data>
<Data>w3wp</Data>
<Data>Role environment . INITIALIZING</Data>
</EventData>
</Event>
<Event>
<System>
<Provider Name="Windows Azure Runtime 2.5.0.0"/>
<EventID>1013</EventID>
<Level>0</Level>
<Task>0</Task>
<Keywords>Keywords</Keywords>
<TimeCreated SystemTime="2015-05-06T07:07:36Z"/>
<EventRecordID>976923937</EventRecordID>
<Channel>Application</Channel>
<Computer>RD000XXXXXE</Computer>
<Security/>
</System>
<EventData>
<Data>4008</Data>
<Data>w3wp</Data>
<Data>Role environment . INITIALED RETURNED. HResult=-2147024891</Data>
</EventData>
</Event>
<Event>
<System>
<Provider Name="Windows Azure Runtime 2.5.0.0"/>
<EventID>1015</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>Keywords</Keywords>
<TimeCreated SystemTime="2015-05-06T07:07:36Z"/>
<EventRecordID>976924062</EventRecordID>
<Channel>Application</Channel>
<Computer>RD000XXXXXE</Computer>
<Security/>
</System>
<EventData>
<Data>4008</Data>
<Data>w3wp</Data>
<Data>Role environment . FAILED TO INITIALIZE. hr: -2147024891</Data>
</EventData>
</Event>
I have also noticed that these events coincide with a brief outage of the site (just a minute or two). These events seem to be random. Sometimes there can be 20 events in an hour. Other times it can go for days without a single event.
I am trying to understand what is causing these events and how (or if) I can prevent them. I would prefer not to have my sites go down at all. I can probably mitigate the issue by having multiple instances for each site but even so, I would at least like to have a good answer as to what is going on here.
Note: these sites are deployed to Azure Websites, not Cloud Services (i.e. not Web or Worker Roles).
These events are written when you reference Azure Diagnostics in your web app. It is not recommended to use this in case of web app. It makes sense to use it in cloud services, but not in case of web apps.
This can affect the application sometimes.

Unhealthy WorkerRole on Windows Azure

I have terrible problem with WorkerRole instance on Windows Azure. I have a Windows Azure projct that contains WebRole and WorkerRole.
The problem is, the WorkerRole instance is Unhealthy. The Error on a server:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-02-18T21:29:18.000Z" />
<EventRecordID>864</EventRecordID>
<Channel>Application</Channel>
<Computer>RD00155D3A4A2E</Computer>
<Security />
</System>
<EventData>
<Data>WaHostBootstrapper.exe</Data>
<Data>6.0.6002.18488</Data>
<Data>505cf7da</Data>
<Data>ntdll.dll</Data>
<Data>6.0.6002.18520</Data>
<Data>4e811810</Data>
<Data>c0000374</Data>
<Data>00000000000acb47</Data>
<Data>ae8</Data>
<Data>01ce0e1ef01200d9</Data>
</EventData>
</Event>
Faulting application WaHostBootstrapper.exe
Can somebody help me ?
p.s Project works perfect on local machine.
If it works on your machine but failed on the cloud it might because you miss some assemblies or dependency component.
You can enable the IntelliTrace when deploying so that later you can download the debug file and this might includes the actual exception/error for your worker role. http://msdn.microsoft.com/en-us/library/windowsazure/ff683671.aspx

Resources