Due to one of life’s mysteries, the following error shows up dozens of times per day in the event log of one of our web servers (Win2000/IIS):
Event ID 1016: The data buffer created for the “NTFSDRV” service in the “C:\WINNT\system32\snprfdll.DLL” library is not aligned on an 8-byte boundary. This may cause problems for applications that are trying to read the performance data buffer. Contact the manufacturer of this library or service to have this problem corrected or to get a newer version of this library.
A search on Google delivers nothing. Similar Performance Monitor problems are mentioned in
I choose for the 2nd solution: adding a value to the registry. I create a .reg file that contains
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib] "Configuration Flags"=dword:00000001
It works. That is, the warnings in the event log disappear. Have I just disconnected a fire alarm or was it innocent? Time will tell …
Related posts:
- No life without CURLs If you’re a web server administrator – as I am...




0 Response to “Fix by disabling: error 1016 in event log”