Troubleshooting Event ID 2003 source perflib

Iv’e repetitively I have this events System Event, related to  “TermService” service.

Event Type:    Warning
Event Source:    Perflib
Event Category:    None
Event ID:    2003
Date:        07-05-2012
Time:        9:55:37
User:        N/A
Computer:    %Computer%
The configuration information of the performance library "C:\WINDOWS\system32\perfts.dll" 
for the "TermService" service does not match the trusted performance library information 
stored in the registry. The functions in this library will not be treated as trusted.

To stop this events from command prompt type

lodctr /T:TermService

To know more about command lodctr type lodctr /?

C:\>lodctr /?
    Updates Performance Monitor counter names and explain text for an extensible
    LODCTR [\\computername] filename
        computername is the name of the remote computer. Currently computername is ignored 
        until remote installation is supported. Local machine is used if computername is 
        not specified. filename is the name of the initialization file that contains the 
        counter name definitions and explain text for an extensible counter DLL.
    LODCTR /S:<FileName>
        save current perf registry strings and info to <FileName>
    LODCTR /R:<FileName>
        restore perf registry strings and info using <FileName>
Note: any arguments with spaces in the names must be enclosed within
Double Quotation marks.

Read more about this here

Hope that this information can be useful.


About rodvars
Been working in IT Services/Consulting for the past 15 years. My main areas of work are planning, development, managing and administration System infrastructures focusing on optimizing user processes, enforcing business security, performance enhancements, high availabilty and infrastucture scalability.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: