I'm seeing Event IDs 700 and 701 logged every hour on a Windows Server 2008 Standard SP2 box, here's a couple of event logs (they're all identical other than the time stamp):
Log Name: Application
Source: ESENT
Date: 29/05/2010 11:00:42 PM
Event ID: 700
Task Category: Online Defragmentation
Level: Information
Keywords: Classic
User: N/A
Computer: WT-Server.wineandtruffle.com.au
Description:
DFSRs (1676) \\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db: Online defragmentation is beginning a full pass on database '\\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">700</EventID>
<Level>4</Level>
<Task>10</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-05-29T15:00:42.000Z" />
<EventRecordID>30571</EventRecordID>
<Channel>Application</Channel>
<Computer>WT-Server.wineandtruffle.com.au</Computer>
<Security />
</System>
<EventData>
<Data>DFSRs</Data>
<Data>1676</Data>
<Data>\\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db: </Data>
<Data>\\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db</Data>
</EventData>
</Event>
Log Name: Application
Source: ESENT
Date: 29/05/2010 11:00:42 PM
Event ID: 701
Task Category: Online Defragmentation
Level: Information
Keywords: Classic
User: N/A
Computer: WT-Server.wineandtruffle.com.au
Description:
DFSRs (1676) \\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db: Online defragmentation has completed a full pass on database '\\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">701</EventID>
<Level>4</Level>
<Task>10</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2010-05-29T15:00:42.000Z" />
<EventRecordID>30572</EventRecordID>
<Channel>Application</Channel>
<Computer>WT-Server.wineandtruffle.com.au</Computer>
<Security />
</System>
<EventData>
<Data>DFSRs</Data>
<Data>1676</Data>
<Data>\\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db: </Data>
<Data>\\.\C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238\dfsr.db</Data>
</EventData>
</Event>
This server is NOT running Exchange - it's a PDC with AD and a file server. There are no other servers it is synchronising with - it's the only server in the domain.
Is there some way to turn off Online Defragmentation? Failing that, is it safe to simply stop the DFS Replication Service and delete the C:\System Volume Information\DFSR\database_F05C_88FF_5C88_C238 directory and then restart the service, or will it bring the server to a crashing halt? Or is there another way to get rid of this?
Thanks,
Trevor