Saturday, January 18, 2014

Error 6398: The Execute method of job definition... threw an exception

Problem

This posting details the troubleshooting steps taken to resolve this particular version of error 6398 (below). 

Log Name:      Application
Source:        Microsoft-SharePoint Products-SharePoint Foundation
Date:          date/time
Event ID:      6398
Task Category: Timer
Level:         Critical
Keywords:      
User:          [a farm service account]
Computer:      [a farm server]
Description:
The Execute method of job definition 
Microsoft.Office.InfoPath.Server.Administration.FormsMaintenanceJobDefinition 
(ID 47448841-f622-4c46-a01a-17a15800e9b2) threw an exception. More information 
is included below. Access to the path 
'C:\ProgramData\Microsoft\SharePoint\Config\8efbf9e5c7924dcf9f9341a2c482728c' 
is denied.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-SharePoint Products-SharePoint 
Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
    <EventID>6398</EventID>
    <Version>14</Version>
    <Level>1</Level>
    <Task>12</Task>
    <Opcode>0</Opcode>

Troubleshooting Steps
  1. Checked each farm server to determine where the issue was occuring.  Found that it only occurred on the farm application server.
  2. Navigated to: C:\ProgramData\Microsoft\SharePoint\Config.
  3. Right-clicked the folder and selected Properties.
  4. Selected the Security tab.  Found two SIDs listed that failed to eventually resolve to any specific user or group name.  Likely corrupted.
  5. Checked the Security tab for the same folders on the other two farm servers and found two groups that appeared in these but not for the application server: WSS_ADMIN_WPG and WSS_WPG.
  6. Added these two groups to the folder and configured their permissions as seen for the other two farm servers.  Left the two unassociated SIDs in place.  Will remove after a week.
References

No comments: