On a System Center Configuration Manager 2007 Service Pack 2 (SP2) client computer that is running Windows Server 2008 R2, the Systems Management Server (SMS) Agent Host service (Ccmexec.exe) crashes intermittently. Additionally, the following error is logged in the event log:
Log Name: Application Source: Application Error Event ID: 1000 Level: Error Keywords: Classic Description: Faulting application name: CcmExec.exe, version: 4.0.6425.2000, time stamp: 0x4a14c745 Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdb3b Exception code: 0xc0000005 Fault offset: 0x0009cb74 Faulting process id: 0xa04 Faulting application start time: 0x01ca273b4637f18e Faulting application path: C:\Windows\SysWOW64\CCM\CcmExec.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
This issue occurs because an access violation occurs in the Ntdll.dll module, and then the wrong function is called in the Caltrack.dll module.
For all the details on this issue as well as a download link for the hotfix, please see the following Knowledge Base article.
KB2724939 - The SMS Host Agent service crashes on a System Center Configuration Manager 2007 SP2 client computer that is running Windows Server 2008 R2 (http://support.microsoft.com/kb/2724939)
J.C. Hornbeck | System Center & Security Knowledge Engineer
Get the latest System Center news on Facebook and Twitter:
App-V Team blog: http://blogs.technet.com/appv/ ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/ DPM Team blog: http://blogs.technet.com/dpm/ MED-V Team blog: http://blogs.technet.com/medv/ Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/ Operations Manager Team blog: http://blogs.technet.com/momteam/ SCVMM Team blog: http://blogs.technet.com/scvmm Server App-V Team blog: http://blogs.technet.com/b/serverappv Service Manager Team blog: http://blogs.technet.com/b/servicemanager System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials WSUS Support Team blog: http://blogs.technet.com/sus/
The Forefront Server Protection blog: http://blogs.technet.com/b/fss/ The Forefront Endpoint Security blog : http://blogs.technet.com/b/clientsecurity/ The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/ The Forefront TMG blog: http://blogs.technet.com/b/isablog/ The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/