Event ID: 6398 6482 7076 SharePoint memory is corrupt.

Event ID: 6398 6482 7076
Attempted to read or write protected memory. This is often an indication that other memory is corrupt.

I read a lot of posts saying this was caused by SharePoint and fixed with SP1, and/or an issues with .net 2.0 fixed with .net 2.1. Both are incorrect for my scenario; my servers were completely up to date and all of a sudden I started getting these errors.
I also read that restarting the Services Timer would resolve the issue. All of these are incorrect. The issue is caused by IIS (Adsiis.dll & Wadsiis.dll) and >2 AD users trying to access the same process. None of my dev machines have exhibited these errors because none use AD accounts.

Fix: http://support.microsoft.com/kb/946517/en-us


  1. Thank you for the post. My eventlog was filled with described errors, and your hint to MS KB solved the issue.

  2. Hi Ray & Justin,
    Thanks so much for sharing the information. I am bit confused about whether I should install the hotfix or not. Because I am going to do it in Production server. There is always a risk involved in it. What do you people suggest?

  3. well since the hotfix fixes a bug in IIS your only risk is down time while u restart... so as long as your server can restart u're good to go.