Event 1008 is logged in the Application log after you uninstall the Quality of Service Packet Scheduler service on a Windows Server 2003-based computer

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
When you uninstall the Quality of Service (QoS) Packet Scheduler service, and then you try to add performance counters in the performance monitor on a Windows Server 2003-based computer, the following event is logged in the Application log:

Event Type: Error
Event Source: Perflib
Event Category: None
Event ID: 1008
Date: <Date>
Time: <Time>
User: N/A
Computer: <Computer Name>
Description:The Open Procedure for service "PSched" in DLL "C:\WINDOWS\system32\pschdprf.dll" failed. Performance data for this service will not be available. The Status code returned is the first DWORD in the attached data.Data:0000: 02 00 00 00

This problem occurs because the system removes the Pschdprf.dll file but does not remove the following registry values when the QoS Packet Scheduler is removed:
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Libray
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Open
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Open
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Collection
When you add a performance counter, the performance monitor tries to load the Pschdprf.dll file because these registry values exist. Event 1008 is logged because the Pschdprf.dll file does not exist.
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To work around this problem, manually remove the following registry entries:
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Libray
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Open
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Open
  • HKEY_LOCAL_MACHINESystem\CurrentControlSet\Services\Psched\Performance\Collection
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
QOS psched pschdprf.dll

Article ID: 942393 - Last Review: 09/21/2007 20:27:31 - Revision: 2.2

Microsoft Windows Server 2003, Datacenter Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86)

  • kbtshoot kberrmsg kbexpertiseinter KB942393