Microsoft-Windows-Complus
165 events across 2 channels
Event ID 774: The mtstocom launching routine has started
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 775: The mtstocom launching routine has completed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 776: The mtstocom migration utility is attempting to retry populating the packages collection because it failed its first attempt
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 779: MSMQ Workgroup configuration does not provide sender identity for a COM+ application that has security enabled
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 780: MSMQ Message Authentication disabled for a COM+ application that has security enabled
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 781: The COM+ sub system is suppressing duplicate event log entries for a duration of param1 seconds
#Fields #
| Name | Description |
|---|---|
param1 | |
param2 | |
param3 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"guid": "{0f177893-4a9c-4709-b921-f432d67f43d5}",
"event_source_name": "COM+",
"event_id": 781,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2023-11-06T06:25:46.553578+00:00",
"event_record_id": 1443,
"correlation": {},
"execution": {
"process_id": 4608,
"thread_id": 0
},
"channel": "Application",
"computer": "WinDev2310Eval",
"security": {
"user_id": ""
}
},
"event_data": {
"param1": "86400",
"param2": "SuppressDuplicateDuration",
"param3": "Software\\Microsoft\\COM3\\Eventlog"
},
"message": ""
}
Event ID 781: The COM+ sub system is suppressing duplicate event log entries for a duration of param1 seconds
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
param3 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"guid": "{0F177893-4A9C-4709-B921-F432D67F43D5}",
"event_source_name": "",
"event_id": 781,
"version": 0,
"level": 4,
"task": 0,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-05-29T06:39:23.7676036+00:00",
"event_record_id": 672,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "telemetry-DC-a.cell-a.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"param1": "86400",
"param2": "SuppressDuplicateDuration",
"param3": "Software\\Microsoft\\COM3\\Eventlog"
},
"message": "The COM+ sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\\Software\\Microsoft\\COM3\\Eventlog."
}
Event ID 782: The average call duration has exceeded the configured threshold
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 783: The average call duration has exceeded 10 minutes
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4434: A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4435: A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call
#Event ID 4440: The CRM log file was originally created on a computer with a different name
#Fields #
| Name | Description |
|---|---|
param1 | |
Data |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"guid": "{0F177893-4A9C-4709-B921-F432D67F43D5}",
"event_source_name": "",
"event_id": 4440,
"version": 0,
"level": 3,
"task": 28,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-05-28T05:00:28.5642615+00:00",
"event_record_id": 237,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "telemetry-DC-d.cell-d.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"param1": "WIN2022-SRV-X64\n\nServer Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}\nServer Application Instance ID:\n{1C357822-8AF1-4D1B-B11D-67C3FC967D1E}\nServer Application Name: System Application\nComsvcs.dll file version: ENU 2001.12.10941.16384 shp"
},
"message": "The CRM log file was originally created on a computer with a different name. It has been updated with the name of the current computer. If this warning appears when the computer name has been changed then no further action is required. WIN2022-SRV-X64\r\n\r\nServer Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}\r\nServer Application Instance ID:\r\n{1C357822-8AF1-4D1B-B11D-67C3FC967D1E}\r\nServer Application Name: System Application\r\nComsvcs.dll file version: ENU 2001.12.10941.16384 shp"
}
Event ID 4452: Failures have occurred during migration of MTS packages and program settings to COM+ applications and program settings
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4458: A registry value was changed while installing the following component into a COM+ Application
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4459: Controlled registration of this component failed
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4460: You have installed an application which contains one or more private components into the base partition
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4464: During controlled registration of this component the component cancelled registry redirection
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4465: The
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
param3 UnicodeString |
Event ID 4689: The run-time environment has detected an inconsistency in its internal state
#Fields #
| Name | Description |
|---|---|
param1 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"guid": "{0f177893-4a9c-4709-b921-f432d67f43d5}",
"event_source_name": "COM+",
"event_id": 4689,
"version": 0,
"level": 2,
"task": 21,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-15T04:24:38.887589+00:00",
"event_record_id": 5813,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"param1": "Recover\r\n\r\nServer Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}\r\nServer Application Instance ID:\r\n{4A26DC83-5659-44C6-A647-673BD2933877}\r\nServer Application Name: System Application\r\nThe serious nature of this error has caused the process to terminate.\r\nError Code = 0x8004d027 : MSDTC was unable to read its configuration information.\r\n\r\nCOM+ Services Internals Information:\r\nFile: com\\complus\\src\\comsvcs\\crm\\recoveryclerk2.cpp, Line: 1772\r\nComsvcs.dll file version: ENU 2001.12.10941.16384 shp"
},
"message": ""
}
Event ID 4792: The current registration database is corrupt
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4819: Error creating security descriptor
#Event ID 4820: Failed to initialize registration database server
#Event ID 4821: Failed to initialize registration database API
#Event ID 4823: COM Replication: An unexpected error occurred
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 4864: You have attempted to install an application which contains one or more imported components into a non-base partition
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 5379: The server process has lost its connection with MS-DTC
#Fields #
| Name | Description |
|---|---|
param1 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"guid": "{0f177893-4a9c-4709-b921-f432d67f43d5}",
"event_source_name": "COM+",
"event_id": 5379,
"version": 0,
"level": 3,
"task": 35,
"opcode": 0,
"keywords": 36028797018963968,
"time_created": "2026-03-15T04:24:37.747249+00:00",
"event_record_id": 5810,
"correlation": {},
"execution": {
"process_id": 0,
"thread_id": 0
},
"channel": "Application",
"computer": "LAB-DC01.ludus.domain",
"security": {
"user_id": ""
}
},
"event_data": {
"param1": " \r\n\r\nServer Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}\r\nServer Application Instance ID:\r\n{52EE295C-5F24-480F-B035-16BA5030561E}\r\nServer Application Name: System Application\r\nThe serious nature of this error has caused the process to terminate.\r\nError Code = 0x8004d01c : A connection with the transaction manager was lost.\r\n\r\nCOM+ Services Internals Information:\r\nFile: com\\complus\\src\\comsvcs\\context\\context.cpp, Line: 192\r\nComsvcs.dll file version: ENU 2001.12.10941.16384 shp"
},
"message": ""
}
Event ID 5485: COM+ failed to find the correct partition for the admin SDK
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 5486: Unable to load file param1 during component registration
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 5488: Unable to load DLL param1 during component registration
#Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 1073742598: The mtstocom launching routine has started.
#Event ID 1073742599: The mtstocom launching routine has completed.
#Event ID 1073742600: The mtstocom migration utility is attempting to retry populating the packages collection because it failed its first attempt.
#Description
The mtstocom migration utility is attempting to retry populating the packages collection because it failed its first attempt.param1.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | The mtstocom migration utility is attempting to retry populating the packages collection because it failed its first attempt. |
Event ID 1073742601: Application image succesfully dumped.
#Event ID 1073742602: Application image dump failed.
#Event ID 1073742603: MSMQ Workgroup configuration does not provide sender identity for a COM+ application that has security enabled.
#Description
MSMQ Workgroup configuration does not provide sender identity for a COM+ application that has security enabled. The usage is accepted.param1.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | MSMQ Workgroup configuration does not provide sender identity for a COM+ application that has security enabled. The usage is accepted. |
Event ID 1073742604: MSMQ Message Authentication disabled for a COM+ application that has security enabled.
#Event ID 1073742605: The COM+ sub system is suppressing duplicate event log entries for a duration of param1 seconds.
#Description
The COM+ sub system is suppressing duplicate event log entries for a duration of seconds. The suppression timeout can be controlled by a REG_DWORD value named under the following registry key: HKLM\.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | The COM+ sub system is suppressing duplicate event log entries for a duration of |
param2 UnicodeString | seconds. The suppression timeout can be controlled by a REG_DWORD value named |
param3 UnicodeString | under the following registry key: HKLM\ |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"event_id": 781,
"level": 4,
"task": 0,
"opcode": 0,
"time_created": "2026-04-27T23:17:46.0417204+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Application"
},
"event_data": {
"param2": "SuppressDuplicateDuration",
"param1": "86400",
"param3": "Software\\Microsoft\\COM3\\Eventlog"
}
}
Event ID 1073742606: The average call duration has exceeded the configured threshold.
#Event ID 1073742607: The average call duration has exceeded 10 minutes.
#Description
The average call duration has exceeded 10 minutes. If this is not the expected behavior, please see article 910904 in the Microsoft Knowledge Base at http://support.microsoft.com for details on how to use the COM+ AutoDump feature to automatically generate dump files and/or terminate the process if the problem occurs again.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | The average call duration has exceeded 10 minutes. If this is not the expected behavior, please see article 910904 in the Microsoft Knowledge Base at http://support.microsoft.com for details on how to use the COM+ AutoDump feature to automatically generate dump files and/or terminate the process if the problem occurs again. |
Event ID 1073873667: A new CRM log file was created.
#Description
A new CRM log file was created. This CRM log file is not secure because the application Identity is Interactive User or the file system is not NTFS. param1.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | A new CRM log file was created. This CRM log file is not secure because the application Identity is Interactive User or the file system is not NTFS. |
Event ID 1073873668: A new CRM log file was created.
#Event ID 1073873669: A new CRM log file was created for the System Application.
#Description
A new CRM log file was created for the System Application.
Message #
Event ID 2147488081: An error occurred in your COM+ component.
#Event ID 2147488082: A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call.
#Description
A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call. The COM+ application is configured to use Application and Component level access checks, and enforcement of these checks is currently enabled. The remainder of this message provides information about the component method that the caller attempted to invoke and the identity of the caller.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 2147488083: A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call.
#Description
A method call to an object in a COM+ application was rejected because the caller is not properly authorized to make this call. The COM+ application is configured to use Application and Component level access checks, and enforcement of these checks is currently enabled. Information about the component method that the caller attempted to invoke and about the identity of the caller could not be obtained, probably due to low memory conditions on this computer.
Message #
Event ID 2147488100: Failures have occurred during migration of MTS packages and program settings to COM+ applications and program settings.
#Event ID 2147488106: A registry value was changed while installing the following component into a COM+ Application.
#Event ID 2147488107: Controlled registration of this component failed.
#Description
Controlled registration of this component failed. It has been registered directly. If you are not using partitions you can ignore this warning. If you are using partitions you may need to add support components that are required before controlled registration of this component can succeed. Check your documentation for details.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 2147488108: You have installed an application which contains one or more private components into the base partition.
#Event ID 2147488112: During controlled registration of this component the component cancelled registry redirection.
#Event ID 2147488113: The
#Event ID 2147489133: COM+ failed to find the correct partition for the admin SDK.
#Event ID 2147489134: Unable to load file param1 during component registration.
#Event ID 2147489136: Unable to load DLL param1 during component registration.
#Event ID 2147619160: The CRM log file was originally created on a computer with a different name.
#Description
The CRM log file was originally created on a computer with a different name. It has been updated with the name of the current computer. If this warning appears when the computer name has been changed then no further action is required. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"event_id": 4440,
"level": 3,
"task": 28,
"opcode": 0,
"time_created": "2026-04-21T17:12:40.2365444+00:00",
"computer": "DESKTOP-FF3N5XK.ludus.domain",
"channel": "Application"
},
"event_data": {
"param1": "WIN11-25H2-X64\n\nServer Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}\nServer Application Instance ID:\n{584A3186-4244-4106-AD66-17EC370A4D68}\nServer Application Name: System Application\nComsvcs.dll file version: ENU 2001.12.10941.16384 shp"
}
}
Event ID 2147619161: The CRM log file was originally created with a different application ID.
#Event ID 2147619162: A log information record was not found in the existing CRM log file.
#Event ID 2147619163: An unexpected method call was received.
#Event ID 2147619164: An empty CRM log file was detected.
#Event ID 2147619165: An incompletely initialized CRM log file was detected.
#Event ID 2147619166: The application attempted to use the CRM but the CRM is not enabled for this application.
#Description
The application attempted to use the CRM but the CRM is not enabled for this application. You can correct this problem using the Component Services administrative tool. Display the Properties for your application. Select the Advanced tab and check Enable Compensating Resource Managers. The CRM can only be enabled for server applications. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 2147619168: Some transactions could not be completed because they are in-doubt.
#Event ID 2147619169: The system has called the CRM Compensator custom component and that component has failed and generated an exception.
#Description
The system has called the CRM Compensator custom component and that component has failed and generated an exception. This indicates a problem with the CRM Compensator component. Notify the developer of the CRM Compensator component that this failure has occurred. The system will continue because the IgnoreCompensatorErrors registry flag is set, but correct compensation might not have occurred. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 2147619170: The system has called the CRM Compensator custom component and that component has returned an error.
#Description
The system has called the CRM Compensator custom component and that component has returned an error. This indicates a problem with the CRM Compensator component. Notify the developer of the CRM Compensator component that this failure has occurred. The system will continue because the IgnoreCompensatorErrors registry flag is set, but correct compensation might not have occurred. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 2147619171: The CRM log file for this application is located on a disk which is low on space.
#Event ID 2147619173: CRM Worker custom components require a transaction.
#Description
CRM Worker custom components require a transaction. You can correct this problem using the Component Services administrative tool. Display the Properties for your CRM Worker component. Select the Transactions tab. Select the Transaction support Required option button.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 2147619174: Event class failed Query Interface.
#Event ID 2147619175: Failed to create event class.
#Event ID 2147619176: Event failed.
#Event ID 2147619177: A previous instance of this server application has been terminated.
#Event ID 2147619182: The attempt to trace an event has failed with E_OUTOFMEMORY.
#Event ID 2147619183: During initialization, the System Application stopped an open COM+ tracing session.
#Description
During initialization, the System Application stopped an open COM+ tracing session.
Message #
Event ID 2147619516: COM+ Services was unable to obtain local SAM information.
#Event ID 2147619547: A COM+ service (such as Queued Components or Compensating Resource Manager) failed an ApplicationFree event.
#Event ID 2147619548: A COM+ service (such as Queued Components or Compensating Resource Manager) failed an ApplicationShutdown event.
#Event ID 2147619550: COM+ has determined that your machine is running very low on available memory.
#Description
COM+ has determined that your machine is running very low on available memory. In order to ensure proper system behavior, the activation of the component has been refused. If this problem continues, either install more memory or increase the size of your paging file. Memory statistics are: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 2147619551: COM+ failed an activation because the creation of a context property returned E_OUTOFMEMORY param1.
#Event ID 2147619554: The shutdown process of COM+ surrogate failed because of an unknown ApplId.
#Event ID 2147620098: An external error has been reported to COM+ services.
#Event ID 2147620099: The server process has lost its connection with MS-DTC.
#Description
The server process has lost its connection with MS-DTC. This is expected if MS-DTC has stopped, or if MS-DTC failover has occurred on a cluster.param1.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"event_id": 5379,
"level": 3,
"task": 35,
"opcode": 0,
"time_created": "2026-03-15T04:24:37.7472498+00:00",
"computer": "JD-DC01-2022.ludus.domain",
"channel": "Application"
},
"event_data": {
"param1": " \n\nServer Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}\nServer Application Instance ID:\n{52EE295C-5F24-480F-B035-16BA5030561E}\nServer Application Name: System Application\nThe serious nature of this error has caused the process to terminate.\nError Code = 0x8004d01c : A connection with the transaction manager was lost.\n\nCOM+ Services Internals Information:\nFile: com\\complus\\src\\comsvcs\\context\\context.cpp, Line: 192\nComsvcs.dll file version: ENU 2001.12.10941.16384 shp"
}
}
Event ID 3221230264: The current registration database is corrupt.
#Event ID 3221230291: Error creating security descriptor.
#Description
Error creating security descriptor.
Message #
Event ID 3221230292: Failed to initialize registration database server.
#Description
Failed to initialize registration database server.
Message #
Event ID 3221230293: Failed to initialize registration database API.
#Description
Failed to initialize registration database API.
Message #
Event ID 3221230295: COM Replication: An unexpected error occurred.
#Event ID 3221230336: You have attempted to install an application which contains one or more imported components into a non-base partition.
#Event ID 3221361233: The run-time environment has detected an inconsistency in its internal state.
#Description
The run-time environment has detected an inconsistency in its internal state. This indicates a potential instability in the process that could be caused by the custom components running in the COM+ application, the components they make use of, or other factors. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-Complus",
"event_id": 4689,
"level": 2,
"task": 21,
"opcode": 0,
"time_created": "2026-03-15T04:24:38.8875891+00:00",
"computer": "JD-DC01-2022.ludus.domain",
"channel": "Application"
},
"event_data": {
"param1": "Recover\n\nServer Application ID: {02D4B3F1-FD88-11D1-960D-00805FC79235}\nServer Application Instance ID:\n{4A26DC83-5659-44C6-A647-673BD2933877}\nServer Application Name: System Application\nThe serious nature of this error has caused the process to terminate.\nError Code = 0x8004d027 : MSDTC was unable to read its configuration information.\n\nCOM+ Services Internals Information:\nFile: com\\complus\\src\\comsvcs\\crm\\recoveryclerk2.cpp, Line: 1772\nComsvcs.dll file version: ENU 2001.12.10941.16384 shp"
}
}
Event ID 3221361234: The run-time environment has detected the absence of a critical resource and has caused the process that hosted it to terminate.
#Event ID 3221361235: The run-time environment was unable to initialize for transactions required to support transactional components.
#Event ID 3221361241: Could not obtain a proxy/stub class factory for given interface.
#Event ID 3221361242: Failed to create a stub object for given interface.
#Event ID 3221361268: Replication: Invalid machine name supplied for param1.
#Event ID 3221361273: The run-time environment was unable to create a new UUID.
#Event ID 3221361285: An attempt was made to access a SPM Property Group in LockMethod mode, by an object without JIT Activation, or by an object with a lock on another ...
#Event ID 3221361311: The class ID of the proxy stub DLL for the interface is not available, or failed to load the proxy stub DLL, or failed to create a proxy.
#Description
The class ID of the proxy stub DLL for the interface is not available, or failed to load the proxy stub DLL, or failed to create a proxy.
Message #
Event ID 3221361313: An unexpected error occurred.
#Event ID 3221361315: COM+ Queued Components failed to obtain necessary information from the catalog.
#Event ID 3221361316: The COM+ Queued Components Player was unable to create an instance of a Queued Component.
#Event ID 3221361317: An unauthenticated message was received by an application that accepts only authenticated messages.
#Event ID 3221361330: The system has called a custom component and that component has failed and generated an exception.
#Description
The system has called a custom component and that component has failed and generated an exception. This indicates a problem with the custom component. Notify the developer of this component that a failure has occurred and provide them with the information below.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361332: An error occurred while checking to see if a queued message was sent by a trusted partner.
#Event ID 3221361333: The server was unable to determine if a queued message was sent by a trusted partner due to a lack of available memory.
#Event ID 3221361334: The server was unable to determine if a queued message was sent by a trusted partner due to an unexpected failure in a Windows API call.
#Description
The server was unable to determine if a queued message was sent by a trusted partner due to an unexpected failure in a Windows API call. The sender is assumed to be untrusted. The failed API and corresponding error code are shown below. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361335: The COM+ Services DLL.
#Event ID 3221361338: COM+ Services was unable to load a required string resource.
#Description
COM+ Services was unable to load a required string resource. The string resource identifier was not found. This results from an error in the localization process for this product and should be reported to Microsoft customer support. The binary data for this event contains the resource identifier that failed to load. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361341: COM+ Services was unable to initialize due to a failure in the system API shown below.
#Event ID 3221361342: The system has called the CRM Compensator custom component and that component has failed and generated an exception.
#Description
The system has called the CRM Compensator custom component and that component has failed and generated an exception. This indicates a problem with the CRM Compensator component. Notify the developer of the CRM Compensator component that this failure has occurred. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361343: The application cannot access the CRM log file because it is being used by another process, probably because another server process is running for ...
#Description
The application cannot access the CRM log file because it is being used by another process, probably because another server process is running for the same application. Please verify that no other server processes are running for this application and try again. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361344: COM+ Services was unable to authorize the incoming call due to an unexpected failure.
#Event ID 3221361345: COM+ Services was unable to determine the caller's identity because of an unexpected error.
#Description
COM+ Services was unable to determine the caller's identity because of an unexpected error. This may be caused by a shortage of system resources on the local machine. The caller will be treated as anonymous which may result in access failures or other errors. The name of the failed API and the error code that it returned are shown below.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361346: COM+ Services was unable to process a component's call to IsCallerInRole due to an unexpected failure.
#Event ID 3221361347: The system has called the CRM Compensator custom component and that component has returned an error.
#Description
The system has called the CRM Compensator custom component and that component has returned an error. This indicates a problem with the CRM Compensator component. Notify the developer of the CRM Compensator component that this failure has occurred. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361348: The system failed to create the CRM Compensator custom component.
#Event ID 3221361349: The system failed to create the CRM Compensator because the system is out of memory.
#Event ID 3221361350: The Queued Components Listener received an improperly formatted message.
#Event ID 3221361352: An unexpected error was returned by the Message Queuing API param1.
#Event ID 3221361354: The server was unable to determine if a queued message was sent by a trusted partner due to an unexpected failure in a COM+ catalog component.
#Description
The server was unable to determine if a queued message was sent by a trusted partner due to an unexpected failure in a COM+ catalog component. The sender is assumed to be untrusted. The failed catalog API and corresponding error code are shown below.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361355: An unexpected error was returned by Message Queuing API indicated.
#Event ID 3221361360: The Synchronization property is required for the Transaction property.
#Event ID 3221361361: The Synchronization property is required for the JIT property.
#Event ID 3221361362: The following component is configured for Construction, and either the IObjectConstruct::Construct() method failed, or the component does not suppo...
#Event ID 3221361366: A condition has occurred that indicates this COM+ application is in an unstable state or is not functioning correctly.
#Event ID 3221361369: Output arguments are not supported by queued methods.
#Event ID 3221361370: A COM+ service (such as Queued Components or Compensating Resource Manager) failed an ApplicationLaunch event.
#Description
A COM+ service (such as Queued Components or Compensating Resource Manager) failed an ApplicationLaunch event. If this problem continues, try disabling CRM and/or QC on your application. If you are using QC, make sure that Message Queuing is installed. The service GUID and HRESULT are: param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361373: A COM+ service (such as Queued Components or Compensating Resource Manager) failed to start.
#Event ID 3221361376: A request for a callback on a MTA thread failed.
#Description
A request for a callback on a MTA thread failed. This should happen only if the system is in an extremely unstable state. It is possible that custom components running in this COM+ application caused the instability that led to this failure. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361377: The initialization of the COM+ surrogate failed -- the CApplication object failed to initialize.
#Event ID 3221361379: The BYOT Gateway failed to import the transaction using TIP.
#Event ID 3221361380: The BYOT Gateway failed to create the component.
#Event ID 3221361381: The BYOT Gateway could not set transactional property in new object context.
#Event ID 3221361382: The BYOT Gateway could not delegate the activation.
#Event ID 3221361383: The BYOT Gateway component is incorrectly configured.
#Event ID 3221361384: The IObjectControl::Activate() method failed.
#Event ID 3221361385: Queued Components has detected an invalid Marshaled object.
#Event ID 3221361386: Object reference passed as a method parameter to a Queued Component does not implement IPersistStream.
#Event ID 3221361387: The CRM has lost its connection with MS-DTC.
#Event ID 3221361388: COM+ Services was unable to initialize security infrastructure due to a failure in the system API shown below.
#Description
COM+ Services was unable to initialize security infrastructure due to a failure in the system API shown below. This is often caused by a shortage of system resources on the local machine. No components requiring security infrastructure services will be created in this process. param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361392: A non-empty queue could not be deleted.
#Event ID 3221361393: Queued Application has an invalid catalog entry.
#Event ID 3221361394: Queued Application has an invalid catalog entry.
#Event ID 3221361395: Queued Components requires Message Queuing.
#Event ID 3221361396: GetProcAddress for a Message Queuing API failed.
#Event ID 3221361397: Unknown event ID.
#Event ID 3221361398: Unable to instantiate Exception Class.
#Event ID 3221361399: COM+ requires that ODBC version 2.
#Event ID 3221361400: COM+ was unable to set up the ODBC shared environment, which means that automatic transaction enlistment will not work.
#Event ID 3221361401: A CRM checkpoint has failed.
#Event ID 3221361402: The threading model of the component specified in the registry is inconsistent with the registration database.
#Event ID 3221361403: CRM recovery has failed because MS-DTC thinks that the previous instance of this application is still connected.
#Description
CRM recovery has failed because MS-DTC thinks that the previous instance of this application is still connected. This is a temporary condition that can occur if the system is too busy. Please attempt the CRM recovery again by restarting this application.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361404: The CRM Compensator custom component has timed out out waiting for the CRM Worker custom component to complete.
#Event ID 3221361405: CRM recovery has failed because the device is not ready.
#Event ID 3221361406: You have attempted to use COM+ Conversation support, and an error was generated accessing the database.
#Description
You have attempted to use COM+ Conversation support, and an error was generated accessing the database. You must specify a valid DSN in the construct string of the COMSvcs.Conversation component. For information on what a valid DSN is, see the documentation for the SQLDriverConnect API in MSDN or the Platform SDK. An example of a valid DSN is "DSN=Conversation".
Message #
Event ID 3221361407: TransactionManager->GetWhereabouts failed.
#Description
TransactionManager->GetWhereabouts failed. If Distributed Transaction Coordinator is configured to use remote host to coordinate transactions, it is likely that remote host cannot be contacted. You can configure MSDTC to use local coordinator by clicking MSDTC toolbar button in Component Services MMC snap-in. Since further execution is impossible at this time, server process has been terminated.param1
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString |
Event ID 3221361409: A COM+ service (such as Queued Components or Compensating Resource Manager) failed in its PauseProcess method.
#Event ID 3221361410: A COM+ service (such as Queued Components or Compensating Resource Manager) failed in its ResumeProcess method.
#Event ID 3221361411: The COM+ tracing GUIDs couldn't be registered.
#Event ID 3221361412: The COM+ tracing session failed to initialize.
#Event ID 3221361413: The COM+ event filter encountered an unexpected error.
#Event ID 3221361920: This is the first external error message in this file.
#Event ID 3221361921: An external error has been reported to COM+ services.
#Event ID 3221361924: COM+ could not create a new thread due to a low memory situation.
#Event ID 3221361925: This is the last external error message in this file.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 0f177893-4a9c-4709-b921-f432d67f43d5
Defined in comres.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 2001.12.10941.16384, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 2001.12.10941.16384, captured 2026-06-02