Windows Server 2012 - Log service encountered a corrupted metadata file (KtmRm for Distributed Transaction Coordinator)

Maciej Szuchta 1 Reputation point
2022-10-31T13:11:45.29+00:00

Hello

I have a problem with "KtmRM for Distributed Transaction Coordinator" service. My application needs that service in order to work properly. We've recently noticed that this service cannot be started at all. In event viewer we observe a a lot of logs saying

   - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">  
   - <System>  
     <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />   
     <EventID Qualifiers="49152">7024</EventID>   
     <Version>0</Version>   
     <Level>2</Level>   
     <Task>0</Task>   
     <Opcode>0</Opcode>   
     <Keywords>0x8080000000000000</Keywords>   
     <TimeCreated SystemTime="2022-10-31T12:56:08.653426500Z" />   
     <EventRecordID>2081785</EventRecordID>   
     <Correlation />   
     <Execution ProcessID="528" ThreadID="4996" />   
     <Channel>System</Channel>   
     <Computer>SEDNT2506.win.dom.sandvik.com</Computer>   
     <Security />   
     </System>  
   - <EventData>  
     <Data Name="param1">KtmRm for Distributed Transaction Coordinator</Data>   
     <Data Name="param2">%%2147949012</Data>   
     <Binary>4B0074006D0052006D000000</Binary>   
     </EventData>  
     </Event>  

255722-image.png

I searched the web and found that 2147949012 error is

Log service encountered a corrupted metadata file.

I'm wondering what can cause this issue or how can I proceed to find the resolution.
Any advice will be useful.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,420 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Wesley Li-MSFT 4,391 Reputation points Microsoft Vendor
    2022-11-03T11:39:42.113+00:00

    Hi

    The Microsoft Distributed Transaction Coordinator (MSDTC) uses the Kernel Transaction Manager Resource Manager service (KtmRm) to coordinate transactions with the Windows Kernel Transaction Manager (KTM).

    The MSDTC agent calls the function, and the registry check fails during the process because the application process identifies an account in the Users group and does not have access to the registry.

    The workaround is to add the identity account of the application process to the Administrators group, before that you may need to restart the MSDTC service to perform these steps.

    Related Reference Documents:
    https://learn.microsoft.com/en-us/troubleshoot/windows/win32/msdtc-service-run-under-networkservice-account
    https://learn.microsoft.com/en-us/troubleshoot/windows/win32/ktmrm-service-event-id-0x80070005

    Best Regards,
    Wesley Li

    0 comments No comments