Windows Search Service Terminated Unexpectedly; Faulting application: SearchIndexer.exe
A number of users with laptops have reported that searches in Outlook either don't work or are incomplete. All of these users are using Outlook in cached mode, and almost all of them were imaged recently. I got my hands on one of these machines
and discovered that the Windows Search service seems to tank randomly. The 'SearchIndexer.exe' process seems to crash also. It appears to be an issue with the machines as a whole versus the profile since I encountered the same problem when
I logged on as myself. (This was the first time I logged onto this machine.) On Friday I logged on as myself for the first time, build the OST & left it on over the weekend to index. This morning The System event log is full of errors
just like we found when the user was logged on:
The Windows Search service terminated unexpectedly. It has done this 5785 time(s). (Event ID: 7034; Source: Service Control Manager; OpCode: Info)
The Windows Search service entered the running state. Wash, Rinse & Repeat
I went through the following to no avail:
Logged in as a new user - Problem persists. Ran through the
Search & Indexer Troubleshooter. Other than it being 'aware' that the service failed recently and that the service not running it found nothing wrong. When I started the service & ran the troubleshooter again, it mentioned that the service
had failed recently but that's all. Set
'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search\SetupCompletedSuccessfully' from 1 to 0
Rebuilt the index - gets up to a point (like 27kish) then breaks and starts the stop/start process again. Hard to say what its choking on since its 2 different
mail files. I'm not aware of a way to 'parse' the mail file or enable super-verbose logging to see what its having trouble with.
The only indexed locations are 'Offline Files' for my user, and 'Microsoft Office Outlook' for my user as well. We're not indexing any drives, libraries or network locations, even via the symlink 'hack'.
Short of reimaging this machine, I don't know what else to try.
------------------------------
APPLICATION LOG
Outlook Search has encountered an error and is temporarily disabling indexing for store C:\Users\jgp2750\AppData\Local\Microsoft\Outlook\outlook.ost (error=0x800706ba).
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Outlook" />
<EventID Qualifiers="32768">36</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-04-18T14:32:45.000000000Z" />
<EventRecordID>218711</EventRecordID>
<Channel>Application</Channel>
<Computer>FQDN</Computer>
<Security />
</System>
- <EventData>
<Data>C:\Users\jgp2750\AppData\Local\Microsoft\Outlook\outlook.ost</Data>
<Data>0x800706ba</Data>
</EventData>
</Event>
Faulting application name: SearchIndexer.exe, version: 7.0.7600.16385, time stamp: 0x4a5bcdd0
Faulting module name: NLSData0001.dll, version: 6.1.7600.16385, time stamp: 0x4a5bda85
Exception code: 0xc0000005
Fault offset: 0x00260a0d
Faulting process id: 0xb38
Faulting application start time: 0x01cbfdd577062774
Faulting application path: C:\Windows\system32\SearchIndexer.exe
Faulting module path: C:\Windows\System32\NLSData0001.dll
Report Id: b967dd6d-69c8-11e0-99bd-0024d60226ee
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-04-18T14:32:45.000000000Z" />
<EventRecordID>218710</EventRecordID>
<Channel>Application</Channel>
<Computer>FQDN</Computer>
<Security />
</System>
- <EventData>
<Data>SearchIndexer.exe</Data>
<Data>7.0.7600.16385</Data>
<Data>4a5bcdd0</Data>
<Data>NLSData0001.dll</Data>
<Data>6.1.7600.16385</Data>
<Data>4a5bda85</Data>
<Data>c0000005</Data>
<Data>00260a0d</Data>
<Data>b38</Data>
<Data>01cbfdd577062774</Data>
<Data>C:\Windows\system32\SearchIndexer.exe</Data>
<Data>C:\Windows\System32\NLSData0001.dll</Data>
<Data>b967dd6d-69c8-11e0-99bd-0024d60226ee</Data>
</EventData>
</Event>
Faulting application name: SearchIndexer.exe, version: 7.0.7600.16385, time stamp: 0x4a5bcdd0
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x0000004c
Faulting process id: 0x10c8
Faulting application start time: 0x01cbfdd546f303ec
Faulting application path: C:\Windows\system32\SearchIndexer.exe
Faulting module path: unknown
Report Id: 87c5842d-69c8-11e0-99bd-0024d60226ee
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-04-18T14:31:22.000000000Z" />
<EventRecordID>218698</EventRecordID>
<Channel>Application</Channel>
<Computer>FQDN</Computer>
<Security />
</System>
- <EventData>
<Data>SearchIndexer.exe</Data>
<Data>7.0.7600.16385</Data>
<Data>4a5bcdd0</Data>
<Data>unknown</Data>
<Data>0.0.0.0</Data>
<Data>00000000</Data>
<Data>c0000005</Data>
<Data>0000004c</Data>
<Data>10c8</Data>
<Data>01cbfdd546f303ec</Data>
<Data>C:\Windows\system32\SearchIndexer.exe</Data>
<Data>unknown</Data>
<Data>87c5842d-69c8-11e0-99bd-0024d60226ee</Data>
</EventData>
</Event>
SYSTEM LOG
The Windows Search service terminated unexpectedly. It has done this 5831 time(s).
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7034</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-04-18T14:34:52.973976600Z" />
<EventRecordID>74749</EventRecordID>
<Correlation />
<Execution ProcessID="520" ThreadID="4604" />
<Channel>System</Channel>
<Computer>FQDN</Computer>
<Security />
</System>
- <EventData>
<Data Name="param1">Windows Search</Data>
<Data Name="param2">5831</Data>
</EventData>
</Event>
The Windows Search service entered the running state.
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="16384">7036</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2011-04-18T14:35:30.537732600Z" />
<EventRecordID>74750</EventRecordID>
<Correlation />
<Execution ProcessID="520" ThreadID="1364" />
<Channel>System</Channel>
<Computer>FQDN</Computer>
<Security />
</System>
- <EventData>
<Data Name="param1">Windows Search</Data>
<Data Name="param2">running</Data>
<Binary>57005300650061007200630068002F0034000000</Binary>
</EventData>
</Event>
April 18th, 2011 12:50pm