What is the other method to rectify the error code Event ID 2004:Microsoft-Windows-PerfNet on Windows 10?

Question

What is the other method to rectify the error code Event ID 2004:Microsoft-Windows-PerfNet on Windows 10?

Shahid Ali 0

Every time when I start up the PC and login, it starts to load very slow. I checked the Event Viewer and noticed many same error daily. (see screenshot). It could be related to Event ID 2004.

Unable to open the Server service performance object. The first four bytes (DWORD) of the Data section contains the status code.

I have tried sfc /scannow and no problem. I might do it again.

I did tried the Windows Rebuild command and Resync the counters/Restart Service:

c:\windows\system32\lodctr.exe /r

c:\windows\sysWOW64\lodctr.exe /r

WINMGMT.EXE /RESYNCPERF

Powershell (I don't usually do this because it's for Windows 2008 Server R2 (not Windows 10) but maybe it's familiar, so I just want to try it)

Get-Service -Name "pla" | Restart-Service -Verbose

Get-Service -Name "winmgmt" | Restart-Service -Force -Verbose

The server in service is already set to Automatically. (see screenshot). I am using Windows 10 Home Edition.

Is there another method to resolve it? Is it something to do with Registry or other system files that they're partial disabled or corrupted.

Screenshot 2026-01-30 085822

Screenshot 2026-01-30 090030

0 comments

2 answers

Your answer

Answer 1

Carl-L 21,320 Microsoft External Staff Moderator

Hello Shahid Ali,

After the last command, it should output the line that showing the counter set name server.

It's unfortunate that it didn't work.

Disclaimer: Let’s try performing an in-place install or in-place upgrade which will refresh your Windows files and operating system without removing files or applications. That being said, we always recommend that if you have important data, you should back it up before making large system changes. If you want to back up your data first, please do so. Once you are done backing up, you can follow the steps in the following guides: How to run In-place upgrade in Windows 10.

Please let me know if there are any updates.

Carl-L 21,320 Reputation points Microsoft External Staff Moderator

2026-02-06T13:40:07.85+00:00

Hello Shahid Ali,

Just checking in to make sure that you have received my reply. Please let me know if there are any updates.
Shahid Ali 0 Reputation points

2026-02-07T16:37:30.2833333+00:00

That last command, is it for LanmanServer to see the counters? No specific value in that command.

I tried command 'reg query' (see screenshot). What is the normal result?

Question: I followed your command instruction, 'reg add' with the value 0 which it means false, so does it mean that Disable Performance Counters won't perform?

Not sure if I could do in-place upgrade. I don't have original installation. Few years ago, I upgraded from Windows 8.1 to Windows 10 for free. I recently backup and not sure if it was stable as it has Windows images file.
Carl-L 21,320 Reputation points Microsoft External Staff Moderator

2026-02-10T14:00:43.2166667+00:00

Hello Shahid Ali,

Thanks for getting back to me.

Disable Performance Counters value is 0 which means the Performance counters should be enabled.

Anyway, upgrading your computer from Windows 8.1 to Windows 10 won't affect your ability to perform an in-place upgrade. This step will reinstall your Windows 10 to your computer without touching the license or your files and apps. Instead, it will replace all system file and configurations to make sure that the corrupted one is clear.

Please let me know if there are any updates.
Shahid Ali 0 Reputation points

2026-02-10T18:36:47.6066667+00:00

I thought so, about 'Disable Performance Counter'. I was slightly confused with the word 'Disable' that it seems like turn it off.

Well, I could do in-place Windows 10 upgrade but I consider Windows 11 soon but wait for while to see if it is stable. I don't think that Microsoft will extend Windows 10 another year, it will end October 2026.

Let me discover the similar solutions for Prefnet and those event ID error codes before I re-upgrade or install Windows 11.
Carl-L 21,320 Reputation points Microsoft External Staff Moderator

2026-02-11T13:13:29.61+00:00

Hello Shahid Ali,

Thanks for your understanding.

If you still have any questions, please let me know.

Answer 2

Carl-L 21,320 Microsoft External Staff Moderator

Hello Shahid Ali.

Welcome to Microsoft Q&A forum.

Based on what I see here, the Lanman Server service is running well. So in this case, the cause highly comes from Performance Counter issue. Please try to follow these steps to fix it.

Disclaimer: Generally, modifying registry subkeys or work group is intended for advanced users, administrators, and IT Professionals. It can help fix some problems, however, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For further protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click How to back up and restore the registry in Windows - Microsoft Support to view the article.

Type "PowerShell" in the search bar and choose "Run as administrator"
Type reg query "HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Performance" /v "Disable Performance Counters" and press Enter.
If the value is other than 0. Type these commands in order.
1. reg add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Performance" /v "Disable Performance Counters" /t REG_DWORD /d 0 /f
2. net stop pla & net stop winmgmt
3. net start winmgmt & net start pla
Type these commands and restart your computer.
1. lodctr /R
2. %SystemRoot%\SysWOW64\lodctr /R
3. winmgmt /resyncperf
4. net stop pla & net start pla
5. net stop winmgmt & net start winmgmt
Go back to PowerShell and type Get-Counter -ListSet 'Server' | Select-Object CounterSetName to check if Server object is available again.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Carl-L 21,320 Reputation points Microsoft External Staff Moderator

2026-02-03T09:56:10.9533333+00:00

Hello Shahid Ali.

Just checking in to make sure that you have received my reply. Please let me know if there are any updates.
Shahid Ali 0 Reputation points

2026-02-03T11:22:19.17+00:00

Hello, Carl.

I believe, there is a conflict.

First, I have looked at that specific location in Register Editor (HKEY_LOCAL_MACHINE), instead of using Powershell.

HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Performance

But the 'Performance' folder is missing in Register Editor. (see screenshot - Register Edit). Is it in different folder?

I am not sure if it is related to Lanman Server, but it might be something to do with one of Application (maybe .dll file or other files) that causes it.

(see screenshots - Event Viewer XML - PrefNet ID 2004, PrefProc ID 2002, Perflib ID 2003)
Carl-L 21,320 Reputation points Microsoft External Staff Moderator

2026-02-03T13:00:23.7533333+00:00

Hello Shahid Ali.Thanks for getting back to me.

The "Reg add" command will creates the key if it doesn't exist or update an existing key/value.

Based on the details event viewer, it seems to point to the other services instead. So aside from the 2 steps above, can you please type these as well?

reg query "HKLM\SYSTEM\CurrentControlSet\Services\TermService\Performance" /v "Disable Performance Counters"
Shahid Ali 0 Reputation points

2026-02-03T16:18:40.0966667+00:00

I only can get the result without location 'Performance' in command, like this

'HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer'

(see screenshot)

Should I add the key (make Performance folder) for LanmanServer?

HKLM\SYSTEM\CurrentControlSet\Services\TermService\Performance

'Disable Performance Counters' is not found even I used the parameter option /f to search (see screenshot).
Carl-L 21,320 Reputation points Microsoft External Staff Moderator

2026-02-04T14:10:51.1233333+00:00

Hello Shahid Ali,

Thanks for getting back to me.

Yes, please try to create the key and set the value to 0. Just remember to backup the registry before you do so.

I'm waiting for your reply.
Shahid Ali 0 Reputation points

2026-02-04T17:35:16.4566667+00:00

I followed your instruction, I used powershell to added the key, restarted service and did loctr commands. *(Note that I have done for LanmanServer, not TermService yet).*Is this correct?

What should it say after this command? (see screenshot)
Get-Counter -ListSet 'Server' | Select-Object CounterSetName

It seems not resolve, I still receive the same error Event ID 2004.

And I also receive different error Event 1008 (perflib) that could be linked to Event ID 2004 as I mentioned it before. Many dll files in System32 folder that it has failed codes. Lsa.dll, msdtcuiu.DLL, msdtcuiu.DLL, bitsperf.dll, mscoree.dll, etc.Message: *The system cannot find the file specified.. Performance data for this service will not be available.*How do I resolve the issues on dll files?