The windows modules installer service entered the running state

While checking a performance issue on a Windows 2008 server; I noticed the system log had these messages logged every three minutes or so.

The Windows Modules Installer service entered the running state.
The Windows Error Reporting Service service entered the running state.
The start type of the Windows Modules Installer service was changed from /
   demand start to auto start.
The start type of the Windows Modules Installer service was changed from /
   auto start to demand start.
The Windows Modules Installer service entered the stopped state.
The Windows Error Reporting Service service entered the stopped state.

The application log showed these messages roughly the same period of time (I didn’t seriously compare):

Windows(R) Lightweight Directory Access Protocol (LDAP) failed a request to connect to /
   Active Directory Domain Services(R) for Windows user <domain\user>.
Without the corresponding UNIX identity of the Windows user, the user cannot access /
   Network File System (NFS) shared resources.
Verify that the Windows user is in Active Directory Domain Services and has access permissions.

I spoke to the users and they reported a previous experiment with NFS and they no longer needed the NFS service or client anymore. I removed the role and disabled the two services (server needed a reboot but it was in use).

The messages stopped.

Not sure why the modules installer was getting invoked and it wasn’t worth researching at this point.

I may look into it later.

Posted in NFS

|

Tagged Troubleshoot, Windows Service

|

Hello,I am trying to get aquainted with my first Windows 2008 Servers and one of the things that has been annoying me is tha constant flooding of my event log with these messages. It seems like every ten minutes I get another one…It seems the 2 main culprits are:
Windows Modules InstallerWMI Performance Adapter
I get a start/stop message every 10 minutes from one of these services and that’s a lot of junk messages in my event log. I’d like to make them go away…Thanks,Jeff

January 13th, 2009 6:14pm

hi there i would like to know the exact verbatim of the event id so that it would be easy for troubleshooting windows modules installer is useful for your windows update service.wmi performance adapter provides the library support for application developers.you can safely stop / disable the wmi performance adapter service.for windows module installer i would refer to below article for troubleshooting the servicehttp://social.technet.microsoft.com/Forums/en-US/itprovistasp/thread/2f4665ba-14ce-495f-a59c-6425a39cb553/but please do provide the verbatim of the event id .sainath
Windows Driver Development

January 13th, 2009 9:33pm

Hi,The full error is…
The Windows Modules Installer service entered the stopped state. OrThe Windows Modules Installer service entered the running state.

— <Event xmlns=»http://schemas.microsoft.com/win/2004/08/events/event»>

— <System>

<Provider Name=»Service Control Manager» Guid=»{555908D1-A6D7-4695-8E1E-26931D2012F4}» EventSourceName=»Service Control Manager» />

<EventID Qualifiers=»16384″>7036</EventID>

<Version>0</Version>

<Level>4</Level>

<Task>0</Task>

<Opcode>0</Opcode>

<Keywords>0x80000000000000</Keywords>

<TimeCreated SystemTime=»2009-01-13T16:05:12.000Z» />

<EventRecordID>26534</EventRecordID>

<Correlation />

<Execution ProcessID=»0″ ThreadID=»0″ />

<Channel>System</Channel>

<Computer>XXXXX06.XXXXX.local</Computer>

<Security />
</System>

— <EventData>

<Data Name=»param1″>Windows Modules Installer</Data>

<Data Name=»param2″>running</Data>
</EventData>
</Event>…it seem like it is just cycling off and on a lot creating a lot of traffic in the log. I’m from the school where the less messages the better but they are only informational. It just makes it harder to spot real issues lodged between all these start stop messages. -Jeff

January 13th, 2009 9:44pm

hi jeff,just want to know few more detailscomputer version , is this sbs server ?did you had a chance to go through the link which i provided which will give clear troubleshooting of wua service.also i feel there might be some application which is polling this service ?is it possible to restart the server in safe mode with networking or safe mode and check the behavior ?sainath
Windows Driver Development

January 13th, 2009 9:59pm

I was wondering if you’d come to a solution for this issue. I too am having the same problem. I’ve searched all over the internet, and this thread is the best I have found. The only error I am getting in the event log is a 15021 HttpEvent «An error occured while using SSL configuration for socket address 0.0.0.0:4343. The error status code is contained within the returned data.» The only things I have running on this server, other then being a domain controller/DNS/DHCP, is WSUS 3.0, and the Volume Activation Management Tool.Albion

January 25th, 2009 12:47am

Funny as I search today about this issue — I see that I am not the only one with a 2008 server getting these msgs every ten mins. But yet I have not seen one solution yet.

July 9th, 2010 4:32pm

I second what Aaron says. Apparently the «Windows Modules Installer» service in Win2008 SP2 x86 stopping and restarting every 10 minutes is by design. It seems sort of odd, but I have two plain vanilla W2008SP2x86 TS builds, and both
exhibit the same stopping & restarting of this service every 10 minutes.

November 23rd, 2010 11:14am

Windows Module Installer (TrustedInstaller.exe) service performs various Windows Update functions such as enabling installation, checking for updates, modification of updates, and removal of updates.

• Windows Update: Updates are additions to software that can prevent or fix problems, enhance the security of the computer, or improve the computer’s performance.

Outline of this event:

1. Windows Module installer service was started by the system.
2. It checked for new updates listed on the Microsoft Update Server.
3. If no new updates are available, the service is stopped. If new updates are found, the service will download updates automatically, or notify the user there are new downloads to install, depending on user-defined settings in the Windows Update control panel.