Error Id 4689
and before 593 Discussions on Event ID 4689 Ask a question about this event 4689: A process has exited On this page Description of this event Field level details Examples Discuss this event Mini-seminars on this event Event 4689 documents when a process ends. When you start a program you are creating a "process" that stays open until the program exits. This process is identified by the Process ID:. You can use this event to tell how long the program ran by correlating it to the earlier 4688 with the same Process ID. Free Security Log Quick Reference Chart Description Fields in 4689 Subject: The user and logon session that the program ran under. Security ID: The SID of the account. Account Name: The account logon name. Account Domain: The domain or - in the case of local accounts - computer name. Logon ID is a semi-unique (unique between reboots) number that identifies the logon session. Logon ID allows you to correlate backwards to the logon event (4624) as well as with other events logged during the same logon session. Process Information: Process ID: is a semi-unique (unique between reboots) number that identifies the process. Process ID allows you to correlate other events logged during the same process. To determine when the program started look for a previous event4688 with the same Process ID. Process Name: The full path of the executable Exit Status: the exit code of the process - normally 0. Top 10 Windows Security Events to Monitor Examples of 4689 A process has exited. Subject: Security ID: WIN-R9H529RIO4Y\Administrator Account Name: Administrator Account Domain: WIN-R9H529RIO4Y Logon ID: 0x1fd23 Process Information: Process ID: 0xed0 Process Name: C:\Windows\System32\notepad.exe Exit Status: 0x0 Keep me up-to-date on the Windows Security Log. Email*: Bad email address *We will NOT share this Mini-Seminars Covering Event ID 46
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about Stack Overflow the company Business Learn more about hiring developers or posting ads with us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute: https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4689 Sign up Here's how it works: Anybody can ask a question Anybody can answer The best answers are voted up and rise to the top Complus error (Event ID 4689) on server (IIS) up vote 2 down vote favorite 2 Yesterday I started getting server too busy errors on some websites we are hosting on our webserver. So I http://serverfault.com/questions/74548/complus-error-event-id-4689-on-server-iis logged on the server and took a look at the event viewer About 4 times / minute im getting this error: Log Name : Application Source : Complus Event ID : 4689 Error message: The run-time environment has detected an inconsistency in its internal state. This indicates a potential instability in the process that could be caused by the custom components running in the COM+ application, the components they make use of, or other factors. Error in d:\longhorn\com\complus\src\comsvcs\threads\stathread.cpp(300), hr = 80070008: CSTAThread: CoGetApartmentID failed I am wondering if anyone ever got that kind of issue and if yes what is it related to / how can I fix it? iis com share|improve this question edited Aug 16 '11 at 12:20 splattne 23.8k1686138 asked Oct 14 '09 at 20:52 user22984 add a comment| 1 Answer 1 active oldest votes up vote 1 down vote accepted If this makes any sense to you, COM+ is just like DBUS, it allows different applications to communicate internally with each other. It appears that you have a problem
in the COM+ application, the components they make use of, or other factors. %1%0Event InformationAccording to http://kb.eventtracker.com/evtpass/evtpages/EventId_4689_Microsoft-Windows-Complus_62572.asp Microsoft :CauseThis event is logged when the run-time environment http://smallvoid.com/article/winnt-com-event-system-config.html has detected an inconsistency in its internal state. ResolutionReport the internal error to MicrosoftVerifyYou can verify that your COM+ application is installed and working properly by using the Component Services administrative tool.To perform these procedures, error id you must have membership in Administrators, or you must have been delegated the appropriate authority.To open Component Services and verify that your application is installed:1.Click Start, and then click Run.2.Type comexp.msc, and then click OK. If the User Account Control dialog box appears, confirm error id 4689 that the action it displays is what you want, and then click Continue.3.To locate your application, click Component Services, click Computers, click My Computer, and then click COM+ Applications.In addition, you can verify that the COM+ operating system component is installed and working properly.To verify that COM+ is working properly:1.In the console tree of Component Services, click Services (Local).2.Scroll through the list of service names to find the following services: COM+ Event System (optional), COM+ System Application, DCOM Server Process Launcher, and Remote Procedure Call (RPC).3.Confirm that the status of each service is StartedReference LinksEvent ID 4689 from Source Microsoft-Windows-Complus Did this information help you to resolve the problem? Yes: My problem was resolved. No: The information was not helpful / Partially helpful. Comments: Captcha Refresh
Adminstrators:Full) to the COM+ Catalog (%windir%\Registration), and will generate the following errors in the Event Log: Event ID: 4609 Description: The COM+ Event System detected a bad return code during its internal processing. HRESULT was 80070005 from line xx of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp. Event ID: 778 Description: Error Code = 0x80004005 : Unspecified error COM+ Services Internals Information: File: d:\qxp_slp\com\com1x\src\shared\util\svcerr.cpp, Line: 1259 Comsvcs.dll file version: ENU 2001.12.4414.308 shp Event ID: 4689 Description: The run-time environment has detected an inconsistency in its internal state. This indicates a potential instability in the process that could be caused by the custom components running in the COM+ application, the components they make use of, or other factors. Error in d:\qxp_slp\com\com1x\src\comsvcs\package\cpackage.cpp(1184), hr = 80070005: InitEventCollector failed More Info MS KB909444 Note if the COM+ Catalog have become corrupt, then it can be re-built with the following steps: Reboot and start in Safemode Open a command prompt (cmd.exe) and execute the following commands: ren %windir%\System32\Clbcatq.dll Clbcatq.dll.bak del %windir%\Registration\*.* /s Start the registry editor and delete the following registry key: [HKEY_LOCAL_MACHINE \SOFTWARE \Microsoft \COM3] Reboot and start in Normal mode. Open a command prompt (cmd.exe) and execute this command: rmdir /s %windir%\Registration Open the Control Panel and double click Add/Remove Programs Select Add/Remove Components and click Next and it will reinstall COM+ Re-apply the necessary service packs and updates for COM+. More Info MS KB246499 More Info MS KB315296 More Info MS KB318731 More Info MS KB961938 Updated: 28 April 2012 Tags: Category: Windows 2000 / Win2k/Troubleshoot Windows 2003 / Win2k3/Troubleshoot Windows XP / WinXP/Troubleshoot Comments: Gary Ayre says: 14 September 2007 at 6:59 Outstanding mate had tried a lot to correct this COM+ catalogue prob with no luck....great stuff Cheers Reply Stuart Bale says: 17 October 2007 at 13:00 Brilliant! Very liitle