running as service issue

[rchowhan]

I am having an issue when kshost is run as a service. It returns several unknown replies (runs under domain admin)\

e.g.

Method: check NT Event Log
Status : Unknown
Date : 1/31/2007 12:23:47 AM
Reply : Win32 Error. Code: 5.
Access is denied

Recurrences : 13
Last status: Unknown
Total tests: 52971
Alive ratio : 98.69 %
Dead ratio: 1.27 %

When i start in application mode all the tests run fine. However, .exe is now closing unexpectedly with no trace in event logs

Windows 2003 Standard
Ks-host 5.7

[KS-Soft Europe]

Reply : Win32 Error. Code: 5. Access is denied

As i can see fro the Alive ratio, it happens time after time or on the regular basis? Do you use this test to monitor remote system? Could you try to use IP-address instead of UNC name? What OS is installed on the target machine?

When i start in application mode all the tests run fine. However, .exe is now closing unexpectedly with no trace in event logs

Do you use ODBC logging or ODBC Query test method? If yes, what ODBC driver do you use? Do you have installed antivirus monitor? Personal firewall? Content monitoring software? Non-standard winsock components? Network packet analyzer?
It might be a resource allocation error. Could you check resource usage for each process? You may use standard Windows Task Manager to check Handles, GDI and USER objects. What the total resource usage on your system?

Windows 2003 Standard

Have you installed SP1 on your Windows 2003 server?

Ks-host 5.7

We recommend you to upgrade to the newest version. We have fixed several issued related to "NT Event Log" test method in newer versions. You may download the newest version from our site: http://www.ks-soft.net/hostmon.eng/downpage.htm

Regards,
Max

[KS-Soft]

PS

1) Make sure HostMonitor (service) is able to use specified account. Please check NT Event log. Do you see message from HostMonitor, like "Logged on as user ..."?

2) Quote from "what's new: version 5.82"

The problem related to NT Event Log test method has been fixed: when HostMonitor calls Windows API to format event description, Windows does not check the accordance between the number of variables in a template (that is stored in resource file) and the number of variables stored in an event log. This could lead to access violation errors when some software was installed or updated incorrectly (e.g. version mismatch between different DLLs) Now HostMonitor checks the template (retrieved from the DLL) and verifies the number of insertion strings before calling Windows function
Also if there is DLLs version mismatch (described above), you may copy appropriate DLL (e.g. copy file from another system) into <HostMonitor>\EventLogDlls\ directory. If HostMonitor detects DLL in EventLogDlls subdirectory, this DLL will be used instead of installed DLL (installed DLL - DLL that is specified in the system registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\<log name>\<event source name> key)

Regards
Alex