Event ID 1000 is logged and RTCSrv.exe crashes when the process is selected in Resource Monitor tool in Lync Server 2013

Symptoms
This issue occurs when you select the RTCSrv.exe process under the Overview tab in the Resource Monitor tool in Microsoft Lync Server 2013.

When this issue occurs, the process stops running. Additionally, the event id 1000 is logged in the Application Log:

Log Name: Application
Source: Application Error
Date: Data&Time
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: computer name
Description:
Faulting application name: RTCSrv.exe, version: X.X.XXXX.XXX, time stamp: 0x5236eca4
Faulting module name: WRTCES.dll, version: X.X.XXXX.XXX, time stamp: 0x540bc84b
Exception code: 0xc0000005
Fault offset: 0x000000000005ad3f
Faulting process id: XXXXXX
Faulting application start time: 0x01d030bb448e5542
Faulting application path: C:\Program Files\Microsoft Lync Server 2013\Server\Core\RTCSrv.exe
Faulting module path: C:\PROGRA~1\MICROS~2\Server\Core\WRTCES.dll
Report Id: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
Faulting package full name:
Faulting package-relative application ID:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="Date&Time" />
<EventRecordID>288986</EventRecordID>
<Channel>Application</Channel>
<Computer>computer name</Computer>
<Security />
</System>
<EventData>
<Data>RTCSrv.exe</Data>
  <Data>X.X.XXXX.XXX</Data>
<Data>5236eca4</Data>
<Data>WRTCES.dll</Data>
  <Data>X.X.XXXX.XXX</Data>
<Data>540bc84b</Data>
<Data>c0000005</Data>
<Data>000000000005ad3f</Data>
<Data>4284</Data>
<Data>01d030bb448e5542</Data>
<Data>C:\Program Files\Microsoft Lync Server 2013\Server\Core\RTCSrv.exe</Data>
<Data>C:\PROGRA~1\MICROS~2\Server\Core\WRTCES.dll</Data>
  <Data>XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX</Data>
<Data>
</Data>
<Data>
</Data>
</EventData>
</Event>

Cause
This issue occurs because a deleted object is referenced to use when the process is selected.
Resolution
To resolve this issue, install the July 2015 cumulative update 5.0.8308.920 for Lync Server 2013 (Front End Server and Edge Server).
Properties

Article ID: 3070715 - Last Review: 03/11/2016 02:14:00 - Revision: 2.0

Microsoft Lync Server 2013

  • kbqfe kbsurveynew kbfix kbexpertiseinter KB3070715
Feedback