Event ID - 4425

Event Id4425
SourceMicrosoft-Windows-MSDTC
DescriptionMS DTC Tracing infrastructure : the infrastructure has reported that an attempt to trace an event has failed cause of lack of enough buffer space. The tracing infrastructure will retry tracing this event. The total number of times this has happened so far is equal to %1. Increasing the max number of memory buffers might rectify the situation.%0
Event Information According to Microsoft :

Cause :

This event is logged when the infrastructure has reported that an attempt to trace an event has failed cause of lack of enough buffer space.

Resolution :

Correct the low-resource condition

The event message indicates that the problem might be resolved by checking for and correcting a low-resource condition. To resolve this problem:
  • Check the system for a low-resource condition.
  • You can resolve a low-resource condition by increasing the page file size. A page file is a hidden file or files on the hard disk that the operating system uses to hold parts of programs and data files that do not fit in memory. Virtual memory comprises the paging file and physical memory or random access memory (RAM). Windows moves data from the paging file to memory as needed, and it moves data from memory to the paging file to make room for new data. Increasing the page file size usually does not require a restart of the computer.
  • You may be able to resolve a low-resource condition by ending unnecessary processes to free memory resources. Be careful when you end a process. If you end a process that is associated with an open program, the program will close and you will lose unsaved data. If you end a process that is associated with a system service, part of the system might not function properly.
If you continue to get this error, note any details in the event message, and then contact Microsoft Customer Service and Support (CSS).

To perform these procedures, you must have membership in Administrators , or you must have been delegated the appropriate authority.

Check the system for a low-resource condition

To check the system for a low-resource condition:
  1. Right-click the taskbar, and then click Task Manager .
  2. Click the Performance tab, and look for the amount of physical memory used under Memory and Physical Memory Usage History . If the amount of memory used is high, consider increasing the size of the page file.
Increase the size of the page file

To increase the size of the page file:
  1. Click Start , click Control Panel , and then double-click System .
  2. Under Tasks , click Advanced System Settings . If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue .
  3. Click the Advanced tab . Under Performance , click Settings .
  4. In the Performance Options dialog box, click the Advanced tab.
  5. Under Virtual Memory , click Change .
  6. Clear the Automatically manage paging file size for all drives check box.
  7. Under Drive [Volume Label] , click the drive that contains the paging file that you want to change.
  8. Click Custom size , type a new size in megabytes in the Initial size (MB) or Maximum size (MB) box, click Set , and then click OK .
Free memory to end a process

To free memory to end a process:
  1. Right-click the taskbar, and then click Task Manage r.
  2. Click the Processes tab, and then click Show processes from all users (at the bottom of the tab). If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue .
  3. Be careful when you end processes. If you end a process that is associated with an open program, the program will close and you will lose unsaved data. If you end a process that is associated with a system service, part of the system might not function properly.
Try to identify processes that are leaking memory by looking for a process with unusually high memory consumption. Select a process to end, and then click End Process . Verify :

To perform this procedure, you must have membership in Administrators , or you must have been delegated the appropriate authority.

To verify that the Microsoft Distributed Transaction Coordinator service (MSDTC) is running:
  1. Click Start , and then click Command Prompt .
  2. At the command prompt, type sc query msdtc , and then press ENTER.
  3. The system responds with information about the service. Confirm that these two items appear: SERVICE_NAME: msdtc and STATE : 4 RUNNING .
Reference LinksEvent ID 4425 from Source Microsoft-Windows-MSDTC

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.