- Remove From My Forums
-
Question
-
I just got a string of these events today. Never recieved them before. I don’t run windows automatic update either. The error is below. I checked the file that it tried to delete and found that its creation date was after the event
occured so the file must have finally deleted and allowed it to be recreated. The event repeated 30 times in 2 seconds. Does anyone know the cause / solution for this?Event Type: Error
Event Source: ESENT
Event Category: General
Event ID: 485
Date: 4/20/2010
Time: 10:02:55 AM
User: N/A
Computer: servernameDescription:
wuaueng.dll (880) SUS20ClientDataStore: An attempt to delete the file «C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb» failed with system error 5 (0x00000005): «Access is denied. «. The delete file operation will fail with error -1032 (0xfffffbf8).For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Answers
-
Hi ,
register the below files using regsvr32
regsvr32 %systemroot%\system32\wuapi.dll
regsvr32 %systemroot%\system32\wuaueng.dll
regsvr32 %systemroot%\system32\wuaueng1.dll
regsvr32 %systemroot%\system32\wucltui.dll
regsvr32 %systemroot%\system32\wups.dll
regsvr32 %systemroot%\system32\wups2.dll
regsvr32 %systemroot%\system32\wuweb.dll
regsvr32 %systemroot%\system32\softpub.dlland let us know if it resolved the problem
-
Marked as answer by
Tuesday, April 27, 2010 7:32 AM
-
Marked as answer by
Yesterday I found one of our client systems was showing some errors in the Application event log relating to the Automatic updates client (wuauclt). Upon further investigation I have found that a great many of our ~2000 client systems (all Windows XP SP3)
are showing the below errors in their event logs starting from roughly mid October:
—————————————————————————————————-
Event ID: 485
Source: ESENT
Error
wuauclt (3956) An attempt to delete the file «C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edbtmp.log» failed with system error 32 (0x00000020): «The process cannot access the file because it is being used by another process. «.
The delete file operation will fail with error -1032 (0xfffffbf8).
—————————————————————————————————-
Event ID: 486
Source: ESENT
Error
wuauclt (676) An attempt to move the file «C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb001A2.log» to «C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.log» failed with system error 183 (0x000000b7): «Cannot create a file when
that file already exists.». The move file operation will fail with error -1022 (0xfffffc02)
—————————————————————————————————-
Event ID: 413
Source: ESENT
Error
wuauclt (2392) Unable to create a new logfile because the database cannot write to the log drive. The drive may be read-only, out of disk space, misconfigured, or corrupted. Error -1811.
—————————————————————————————————-
Event ID: 492
Source: ESENT
Error
wuauclt (2392) The logfile sequence in «C:\WINDOWS\SoftwareDistribution\DataStore\Logs\» has been halted due to a fatal error. No further updates are possible for the databases that use this logfile sequence. Please correct the problem
and restart or restore from backup.
—————————————————————————————————-
We use WSUS internally for our clients and it appears they are still installing updates correctly at this time but this is definitely a concern. Has anyone else experience the above events and found a cause/fix for this? Appreciate any advice or helpful feedback
on the matter. Much appreciated.
Event 485,ESENT :
wuauclt (3172) An attempt to delete the file «C:\Windows\SoftwareDistribution\DataStore\Logs\edbtmp.log» failed with system error 32 (0x00000020): «The process cannot access the file because it is being used by another process».The delete file operation will fail with error -1032 (0xfffffbf8).
source : ESENT
event id : 485
computer : VIRTUALXP
category : general
Event 439, ESENT :
wuauclt (1208) Unable to write a shadowed header for file C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edp.Error — 1022.
Event id : 439
Category : Logging/Recovery
File : ESENT.dll
Event 490,ESENT :
wuauclt (1208) An attempt to open the file «C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edp» for read / write access failed with system error 1392 (0x00000570): » The file or directory is corrupted and unreadable».The open file operation will fail with error 1022 (0xfffffc02).
category : general
source : esent
event id : 490
svchost (1152) An attempt to open the file for read / write access failed with system error 32 (0x00000020): «The process cannot access the file because it is being used by another process». The open file operation will fail with error 1032 (0xfffffbf8)
