Event ID - 1001

Event Id1001
SourceMicrosoft-Windows-PerfNet
DescriptionUnable to collect Network Services performance data. The DLL failed to load because it cannot successfully communicate with network service devices.
Event InformationAccording to Microsoft :
Cause :
The Workstation service is not running
The Redirector service that is part of the Workstation service is required for proper functioning of Network Performance Counters on a workstation.
Membership in the target system's local Administrators group is required to view service settings.
Resolution :
Restart the Workstation service
Membership in the target system's local Administrators group is required to change service settings.
To restart the Workstation service:
  1. On the target system, click Start. In the Start Search text box, type compmgmt.msc, and then press Enter. Microsoft Management Console will start.
  2. In the navigation tree, expand Services and Applications and click Services.
  3. In the Services list, right-click Workstation, and then click Start.
Note : The Workstation service should be configured to start automatically. If the Startup Type is blank or Manual, you should change its startup type to avoid encountering the same error after the system restarts.
To change the Workstation service startup type:
  1. On the target system, click Start. In the Start Search text box, type compmgmt.msc, and then press Enter. Microsoft Management Console will start.
  2. In the navigation tree, expand Services and Applications and click Services.
  3. In the Services list, right-click Workstation, and then click Properties.
  4. On the General tab, select Automatic in the Startup type drop-down list.
  5. Click OK.
Cause :
The Server service is not running
The Server service is required for proper functioning of Network Performance Counters on a server.
Membership in the target system's local Administrators group is required to view service settings.
Resolution :
Restart the Server service
Membership in the target system's local Administrators group, or equivalent, is the minimum required to change service settings.
To restart the Server service:
  1. On the target system, click Start. In the Start Search text box, type compmgmt.msc, and then press Enter. Microsoft Management Console will start.
  2. In the navigation tree, expand Services and Applications and click Services.
  3. In the Services list, right-click Server, and then click Start.
Note: The Server service should be configured to start automatically. If the Startup Type is blank or Manual, you should change its startup type to avoid encountering the same error after the system restarts.
To change the Server service startup type:
  1. On the target system, click Start. In the Start Search text box, type compmgmt.msc, and then press Enter. Microsoft Management Console will start.
  2. In the navigation tree, expand Services and Applications and click Services.
  3. In the Services list, right-click Server, and then click Properties.
  4. On the General tab, select Automatic in the Startup type drop-down list.
  5. Click OK.
Cause :
The Remote Registry service is not running on a remote system
In order to collect performance counters remotely, the Remote Registry service must be running on the destination system.
Membership in the destination system's local Administrators group is required to change service settings.
Resolution :
Enable the Remote Registry service
Membership in the target system's local Administrators group is the minimum required to change service settings.
To enable the Remote Registry service:
  1. On the target system, click Start.
  2. In the Start Search text box, type compmgmt.msc, and then press Enter. Microsoft Management Console will start.
  3. In the navigation tree, expand Services and Applications and click Services.
  4. In the Services list, rightclick Remote Registry, and then click Properties.
  5. In the Startup type drop-down list, click Automatic, and then click OK.
  6. If the service does not start automatically, right-click Remote Registry in the services list, and then click Start.
Cause :
The File and Printer Sharing firewall exception is not enabled on a remote Windows Vista system
On systems running Windows Vista, the File and Printer Sharing firewall exception must be enabled on the destination system.
Membership in the destination computer's local Administrators group is required to change firewall settings.
Resolution :
Enable the File and Printer Sharing firewall exception on a remote system running Windows Vista
Membership in the target system's local Administrators group is required to change firewall settings.
To enable the File and Printer Sharing firewall exception:
  1. On the target system, click Start, and then click Control Panel.
  2. In the Control Panel search box, type firewall.
  3. In the search results, double-click Windows Firewall.
  4. In Windows Firewall, click Change settings.
  5. On the Exceptions tab, click the File and Printer Sharing check box.
Cause :
The application is running as a user with insufficient privileges
Resolution :
Run the application as a user with sufficient privileges
By default, an application runs with the same privileges as the user who started it. You can configure services to run as the local system account or as a specific user. You can also start an application as Administrator, but in Windows Vista or Windows Server 2008 with User Account Control enabled, you must confirm that you want to start the application each time it runs if it is configured to run as Administrator.
Consider running services that collect performance counter data as the local system account to resolve privilege issues.
If for security reasons you do not want to run the application or service as the local system account, you can add the user the application runs as to the Performance Log Users group and assign the group the Log on as a Batch Job user right to enable performance counter collection each time the application runs.
Membership in the destination computer's local Administrators group is required to complete these procedures.
  • Add a user to the Performance Log Users group
  • Assign the Log on as a batch job user right to the Performance Log Users group
Cause :
The list of counters is corrupt
Resolution :
Rebuild the list of available counters
Membership in the local Administrators group is required to complete this procedure.
To rebuild the list of counters in the registry:
  1. Click Start, expand All Programs, and expand Accessories.
  2. Right-click Command Prompt, and then click Run as administrator.
  3. At the command prompt, type lodctr /r, and then press ENTER.
Verify :
You can use Windows Reliability and Performance Monitor to verify that netowkr performance counters are properly collected and displayed in a Performance Monitor graph. In addition, you can use the typeperf command to get a list of the available counters on the local system.
Membership in the local Administrators group is required to complete these procedures.
  • View counters in Performance Monitor
  • View a list of counters using the typeperf command
Reference LinksEvent ID 1001 from Source Microsoft-Windows-PerfNet

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh