actor39

I have 1 PC on my network that is flooding the network with port 445 traffic - our firewall denies outbound traffic on this port - to avoid ransom virus exposure. I am trying to determine where the traffic is coming from - an app a service, etc. I ran a full virus scan and a malware scan - nothing found. No file share activity, open sessions or printer activity, no directory service activity. Scanned port and only microsoft-ds is listed. Any thoughts?

Thanks, 

Milty 

milty60

Hello there,

I am new to this Forum, I need your advicear. My goal is to learn and get certified on Windows Server 2016. My question is where should I start? Your advice is highly appreciated. Thanks!

We inherited a windows 2008 standard as a virtual machine (VMware v5.0) on a host with no known root password so rdp is the only access method and allows us in; it is part of our domain environment and can login locally or as a domain admin.

We were getting a message to activate the license but found the software license service will not start though it had previously been running I believe with Network service and switched to local system (that starts but gets an access denied message), the local administrator account, domain administrator account but all with throw and error.

Starting as the local system was the closest possibility but when a key was entered it gave access denied.

Trying finding some articles which vary on what to try but because we have no access to the vm, rebooting into safe mode or like that will be a last resort.

Before spending the money to open a support ticket, anyone have any ideas on what to try to get the software license service to start up successfully?

thanks....Mark

I am attempting to use the 'For developers' inside Update & Security Settings. I click on the 'Show Settings for the 'Change settings to show file extensions' and get an error:

I have changed the ACL on this file - taken ownership as domain admin user - but still the error persists.  

Thomas Lee <DoctorDNS@Gmail.Com>

I am attempting to install SSH on a Win2019 preview and am getting an error message and the SSH <g class="gr_ gr_178 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="178" id="178">deamon</g> fails to install.

I type:

PS [C:\Users\Administrator]> Add-WindowsCapability -LogLevel WarningsInfo -LogPath .\log.txt -online -name openssh.server~~~~0.0.1.0 -Verbose
VERBOSE: Target Image Version 10.0.17733.1000
Add-WindowsCapability : Add-WindowsCapability failed. Error code = 0x800f0950
At line:1 char:1+ Add-WindowsCapability -LogLevel WarningsInfo -LogPath .\log.txt -onli ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo          : NotSpecified: (:) [Add-WindowsCapability], COMException+ FullyQualifiedErrorId : Microsoft.Dism.Commands.AddWindowsCapabilityCommand

This generates a log file - but I am not much wiser in terms of resolving this issue by looking at it. Apologies for the length, but there seems no option to just include a file. Here is the log file:

PS [C:\Users\Administrator]> cat .\log.txt

2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll:                                            - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll: <----- Starting DismApi.dll session -----> - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll:                                            - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll: Host machine information: OS Version=10.0.17733, Running architecture=amd64, Number of processors=2 - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll: API Version 10.0.17733.1000 - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll: Parent process command line: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"  - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Enter DismInitializeInternal - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Input parameters: LogLevel: 2, LogFilePath: .\log.txt, ScratchDirectory: (null) - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   Initialized Panther logging at .\log.txt
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Initialized GlobalConfig - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Initialized SessionTable - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Lookup in table by path failed for: DummyPath-2BA51B78-C7F7-4910-B99D-BB7345357CDC - CTransactionalImageTable::LookupImagePath
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5848 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5848 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 m_pInternalThread started - CCommandThread::Start
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Created g_internalDismSession - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Leave DismInitializeInternal - DismInitializeInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Enter DismOpenSessionInternal - DismOpenSessionInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Input parameters: ImagePath: DISM_{53BFAE52-B167-4E2F-A258-0A37B57FF845}, WindowsDirectory: (null), SystemDrive: (null) - DismOpenSessionInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Lookup in table by path failed for: DRIVE_C - CTransactionalImageTable::LookupImagePath
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Waiting for m_pInternalThread to start - CCommandThread::Start
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 Enter CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 CommandThread StartupEvent signaled - CCommandThread::WaitForStartup
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 m_pInternalThread started - CCommandThread::Start
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 Enter CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-10-14 10:16:56, Info                  DISM   PID=4628 TID=932 Scratch directory set to 'C:\Users\ADMINI~1\AppData\Local\Temp\'. - CDISMManager::put_ScratchDir
2018-10-14 10:16:56, Info                  DISM   PID=4628 TID=932 DismCore.dll version: 10.0.17733.1000 - CDISMManager::FinalConstruct
2018-10-14 10:16:56, Info                  DISM   Initialized Panther logging at .\log.txt
2018-10-14 10:16:56, Info                  DISM   PID=4628 TID=932 Successfully loaded the ImageSession at "C:\Windows\SYSTEM32\Dism" - CDISMManager::LoadLocalImageSession
2018-10-14 10:16:56, Info                  DISM   Initialized Panther logging at .\log.txt
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   Initialized Panther logging at .\log.txt
2018-10-14 10:16:56, Info                  DISM   DISM Manager: PID=4628 TID=932 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Getting the collection of providers from a local provider store type. - CDISMProviderStore::GetProviderCollection
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Connecting to the provider located at C:\Windows\SYSTEM32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Warning               DISM   DISM Provider Store: PID=4628 TID=932 Failed to load the provider: C:\Windows\SYSTEM32\Dism\SiloedPackageProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Connecting to the provider located at C:\Windows\SYSTEM32\Dism\FfuProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Connecting to the provider located at C:\Windows\SYSTEM32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Connecting to the provider located at C:\Windows\SYSTEM32\Dism\VHDProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Connecting to the provider located at C:\Windows\SYSTEM32\Dism\ImagingProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Connecting to the provider located at C:\Windows\SYSTEM32\Dism\CompatProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Warning               DISM   DISM Provider Store: PID=4628 TID=932 Failed to load the provider: C:\Windows\SYSTEM32\Dism\MetaDeployProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-10-14 10:16:56, Info                  DISM   DISM FFU Provider: PID=4628 TID=932 [C:\] is not recognized by the DISM FFU provider. - CFfuImage::Initialize
[4628] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[4628] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[4628] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-10-14 10:16:56, Info                  DISM   DISM WIM Provider: PID=4628 TID=932 [C:\] is not a WIM mount point. - CWimMountedImageInfo::Initialize
2018-10-14 10:16:56, Info                  DISM   DISM VHD Provider: PID=4628 TID=932 [C:\] is not recognized by the DISM VHD provider. - CVhdImage::Initialize
2018-10-14 10:16:56, Info                  DISM   DISM FFU Provider: PID=4628 TID=932 [C:\] is not recognized by the DISM FFU provider. - CFfuImage::Initialize
2018-10-14 10:16:56, Info                  DISM   DISM Imaging Provider: PID=4628 TID=932 The provider FfuManager does not support CreateDismImage on C:\ - CGenericImagingManager::CreateDismImage
2018-10-14 10:16:56, Info                  DISM   DISM VHD Provider: PID=4628 TID=932 [C:\] is not recognized by the DISM VHD provider. - CVhdImage::Initialize
2018-10-14 10:16:56, Info                  DISM   DISM Imaging Provider: PID=4628 TID=932 The provider VHDManager does not support CreateDismImage on C:\ - CGenericImagingManager::CreateDismImage
[4628] [0x8007007b] FIOReadFileIntoBuffer:(1381): The filename, directory name, or volume label syntax is incorrect.
[4628] [0xc142011c] UnmarshallImageHandleFromDirectory:(641)
[4628] [0xc142011c] WIMGetMountedImageHandle:(2897)
2018-10-14 10:16:56, Info                  DISM   DISM WIM Provider: PID=4628 TID=932 [C:\] is not a WIM mount point. - CWimMountedImageInfo::Initialize
2018-10-14 10:16:56, Info                  DISM   DISM Imaging Provider: PID=4628 TID=932 The provider WimManager does not support CreateDismImage on C:\ - CGenericImagingManager::CreateDismImage
2018-10-14 10:16:56, Info                  DISM   DISM Imaging Provider: PID=4628 TID=932 No imaging provider supported CreateDismImage for this path - CGenericImagingManager::CreateDismImage
2018-10-14 10:16:56, Info                  DISM   DISM Manager: PID=4628 TID=932 physical location path: C:\ - CDISMManager::CreateImageSession
2018-10-14 10:16:56, Info                  DISM   DISM Manager: PID=4628 TID=932 Event name for current DISM session is Global\{47081786-EFC6-4526-A7CE-56628A1E1EE3} - CDISMManager::CheckSessionAndLock
2018-10-14 10:16:56, Info                  DISM   DISM Manager: PID=4628 TID=932 Create session event 0xa54 for current DISM session and event name is Global\{47081786-EFC6-4526-A7CE-56628A1E1EE3}  - CDISMManager::CheckSessionAndLock
2018-10-14 10:16:56, Info                  DISM   DISM Manager: PID=4628 TID=932 Copying DISM from "C:\Windows\System32\Dism" - CDISMManager::CreateImageSessionFromLocation
2018-10-14 10:16:56, Info                  DISM   DISM Manager: PID=4628 TID=932 Successfully loaded the ImageSession at "C:\Users\ADMINI~1\AppData\Local\Temp\471B086B-AD90-4A6E-A8A5-5BC1ABE7A4CC" - CDISMManager::LoadRemoteImageSession
2018-10-14 10:16:56, Info                  DISM   DISM Image Session: PID=4868 TID=3568 Instantiating the Provider Store. - CDISMImageSession::get_ProviderStore
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Initializing a provider store for the IMAGE session type. - CDISMProviderStore::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Connecting to the provider located at C:\Users\ADMINI~1\AppData\Local\Temp\471B086B-AD90-4A6E-A8A5-5BC1ABE7A4CC\OSProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  DISM   DISM OS Provider: PID=4868 TID=3568 Defaulting SystemPath to C:\ - CDISMOSServiceManager::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   DISM OS Provider: PID=4868 TID=3568 Defaulting Windows folder to C:\Windows - CDISMOSServiceManager::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Attempting to initialize the logger from the Image Session. - CDISMProviderStore::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Connecting to the provider located at C:\Users\ADMINI~1\AppData\Local\Temp\471B086B-AD90-4A6E-A8A5-5BC1ABE7A4CC\LogProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  DISM   Initialized Panther logging at .\log.txt
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2018-10-14 10:16:56, Warning               DISM   DISM Provider Store: PID=4868 TID=3568 Failed to load the provider: C:\Users\ADMINI~1\AppData\Local\Temp\471B086B-AD90-4A6E-A8A5-5BC1ABE7A4CC\PEProvider.dll. - CDISMProviderStore::Internal_GetProvider(hr:0x8007007e)
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Failed to get and initialize the PE Provider.  Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2018-10-14 10:16:56, Info                  DISM   Initialized Panther logging at .\log.txt
2018-10-14 10:16:56, Info                  DISM   Initialized Panther logging at .\log.txt
2018-10-14 10:16:56, Info                  DISM   DISM Manager: PID=4628 TID=932 Image session successfully loaded from the temporary location: C:\Users\ADMINI~1\AppData\Local\Temp\471B086B-AD90-4A6E-A8A5-5BC1ABE7A4CC - CDISMManager::CreateImageSession
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 Target image information: OS Version=10.0.17733.1000, Image architecture=amd64 - CDismCore::LogImageSessionDetails
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Leave DismOpenSessionInternal - DismOpenSessionInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Session id is: 2 - DismOpenSessionInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Enter DismGetOsInfoInternal - DismGetOsInfoInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Input parameters: Session: 2 - DismGetOsInfoInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Initialized default cancel event - DismGetOsInfoInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Leave DismGetOsInfoInternal - DismGetOsInfoInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Enter DismDeleteInternal - DismDeleteInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Leave DismDeleteInternal - DismDeleteInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Enter DismAddCapabilityInternal - DismAddCapabilityInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Input parameters: Session: 2, Feature: openssh.server~~~~0.0.1.0, Recipe: (NULL), LimitAccess: 0, CancelEvent: 0x0000000000000A1C, Progress: 0x000001FDD8DE74FC, UserData: 0x0000000000000000 - DismAddCapabilityInternal
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=5608 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-10-14 10:16:56, Info                  DISM   API: PID=4628 TID=932 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Connecting to the provider located at C:\Users\ADMINI~1\AppData\Local\Temp\471B086B-AD90-4A6E-A8A5-5BC1ABE7A4CC\CbsProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Encountered a servicing provider, performing additional servicing initializations. - CDISMProviderStore::Internal_LoadProvider
2018-10-14 10:16:56, Info                  CSI    00000001 Shim considered [l:126]'\??\C:\Windows\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17733.1000_none_cecc55bd3f32654b\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-10-14 10:16:56, Info                  CSI    00000002 Shim considered [l:123]'\??\C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17733.1000_none_cecc55bd3f32654b\wcp.dll' : got STATUS_SUCCESS
2018-10-14 10:16:56, Info                  DISM   DISM Package Manager: PID=4868 TID=3568 Finished initializing the CbsConUI Handler. - CCbsConUIHandler::Initialize
2018-10-14 10:16:56, Info                  CSI    00000001 Shim considered [l:126]'\??\C:\Windows\Servicing\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17733.1000_none_cecc55bd3f32654b\wcp.dll' : got STATUS_OBJECT_PATH_NOT_FOUND
2018-10-14 10:16:56, Info                  CSI    00000002 Shim considered [l:123]'\??\C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17733.1000_none_cecc55bd3f32654b\wcp.dll' : got STATUS_SUCCESS
2018-10-14 10:16:56, Info                  DISM   DISM Package Manager: PID=4868 TID=3568 CBS is being initialized for online use. More information about CBS actions can be located at: %windir%\logs\cbs\cbs.log - CDISMPackageManager::Initialize
2018-10-14 10:16:56, Info                  DISM   DISM Package Manager: PID=4868 TID=3568 Loaded servicing stack for online use only. - CDISMPackageManager::CreateCbsSession
2018-10-14 10:16:57, Info                  DISM   DISM Package Manager: PID=4868 TID=3568 CBS session options=0x40100! - CDISMPackageManager::Internal_Finalize
2018-10-14 10:17:03, Info                  DISM   DISM Package Manager: PID=4868 TID=1912  Error in operation: (null) (CBS HRESULT=0x800f0950) - CCbsConUIHandler::Error
2018-10-14 10:17:03, Error                 DISM   DISM Package Manager: PID=4868 TID=3568 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x800f0950)
2018-10-14 10:17:03, Error                 DISM   DISM Package Manager: PID=4868 TID=3568 Failed processing package changes with session options - CDISMPackageManager::ProcessChangesWithOptions(hr:0x800f0950)
2018-10-14 10:17:03, Error                 DISM   API: PID=4628 TID=932 Failed to install capability. - CAddCapabilityCommandObject::InternalExecute(hr:0x800f0950)
2018-10-14 10:17:03, Error                 DISM   API: PID=4628 TID=932 InternalExecute failed - CBaseCommandObject::Execute(hr:0x800f0950)
2018-10-14 10:17:03, Error                 DISM   API: PID=4628 TID=5608 CAddCapabilityCommandObject internal execution failed - DismAddCapabilityInternal(hr:0x800f0950)
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Exit DismAddCapabilityInternal - DismAddCapabilityInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Enter DismGetLastErrorMessageInternal - DismGetLastErrorMessageInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Exit DismGetLastErrorMessageInternal - DismGetLastErrorMessageInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Enter DismCloseSessionInternal - DismCloseSessionInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Input parameters: Session: 2 - DismCloseSessionInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Refcount for DismSession= 2s 0 - CSessionTable::RemoveSession
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=932 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=932 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=932 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=932 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Found the PE Provider.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Finalizing the servicing provider(DISM Package Manager) - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Package Manager: PID=4868 TID=3568 Finalizing CBS core. - CDISMPackageManager::Finalize
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Disconnecting Provider: DISM Package Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Releasing the local reference to OSServices. - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Disconnecting Provider: OSServices - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4868 TID=3568 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Manager: PID=4628 TID=932 Closing session event handle 0xa54 - CDISMManager::CleanupImageSessionEntry
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Found the OSServices.  Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Disconnecting Provider: FfuManager - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Disconnecting Provider: VHDManager - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Disconnecting Provider: GenericImagingManager - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Disconnecting Provider: Compatibility Manager - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   DISM Provider Store: PID=4628 TID=932 Releasing the local reference to DISMLogger.  Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=932 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Leave DismCloseSessionInternal - DismCloseSessionInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Enter DismShutdownInternal - DismShutdownInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 GetReferenceCount hr: 0x0 - CSessionTable::RemoveSession
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Refcount for DismSession= 1s 0 - CSessionTable::RemoveSession
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Successfully enqueued command object - CCommandThread::EnqueueCommandObject
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5848 ExecuteLoop: CommandQueue signaled - CCommandThread::ExecuteLoop
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5848 Successfully dequeued command object - CCommandThread::DequeueCommandObject
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5848 ExecuteLoop: Cancel signaled - CCommandThread::ExecuteLoop
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5848 Leave CCommandThread::ExecuteLoop - CCommandThread::ExecuteLoop
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5848 Leave CCommandThread::CommandThreadProcedureStub - CCommandThread::CommandThreadProcedureStub
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Deleted g_internalDismSession - DismShutdownInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Shutdown SessionTable - DismShutdownInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 Leave DismShutdownInternal - DismShutdownInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll:                                          - DismShutdownInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll: <----- Ending DismApi.dll session -----> - DismShutdownInternal
2018-10-14 10:17:03, Info                  DISM   API: PID=4628 TID=5608 DismApi.dll:                                          - DismShutdownInternal

Thomas Lee <DoctorDNS@Gmail.Com>

Hi,

  I run IIS 7.5 on a Windows Server 2008 R2 in a 2008 domain with two domain controllers, and I have problems trying to set up FTP access and NTFS permissions correctly.

The root FTP folder is given read access to an Active Directory Domain Group, so when I want to add/remove FTP access to a user, I simply would add/remove the user from the group.

The problem is: if I add the user to the group, the user cannot connect immediately, but can do it after "some time". If I remove a granted user from the group, they still can connect, and cannot do it anymore only after "some time".

This is clearly a real problem because I cannot test if a user is granted access or not, because the current configuration does not reflect the current behavior. Furthermore, if a user need to be granted, I have to tell them to wait (how much time?), and cannot grant them "immediately".

I have been testing for days to understand how much that "some time" is, but couldn't find a consistent answer. Sometimes is some minutes (not less that 10-15), sometimes more than half an hour. I would like to test my changes without having to wait an unknown period of time.

Solutions I tried:

- restart the IIS FTP site after each group add/remove operation;

- close and open again the FTP client after each group add/remove operation;

- set the "credentials cache" to disabled (IIS root node > Management > Configuration Editor > Section system.ftpServer/caching > CredentialsCache, I was illuded this was the solution!!!) , and also the flush interval to the minimum allowed (5s) (related question: how could I issue a command to manually flush the cache? really didn't find it anywhere)

I found out some articles about the need for a user to logoff/logon for their new permissions to be active, but think I was misguided because here the user is not logged on, they only use their account credentials when opening the FTP connection.

I also found some articles about "caching of groups at the AD level", "windows AD permission caching", and other similars, but admit that I cannot fully understand them so I can't be sure they are useful to me. Some also seem to apply to SBS, or sharepoint, or some other software/component I don't have installed.

I would like to point out that my configuration *eventually works*, so that's not the problem. The problem is that when I apply some change and would like to test it, I have to wait much time (and don't know how much) before I can test it, so it's really a pain, especially when I have to troubleshoot some access problems.

Could anyone please help me? I am really lost.

Thank you very much!
Andrea

PS I was in doubt wether to post this is the IIS section, but I am wondering if it's indeed an IIS issue, or A/D, or something else.

It has been a month with the openSSL breach, etc., forcing a lot of upgrades.

I had been running windows server 2003 with IIS6 and with PHP 5.2.8.

On it I have installed phpBB 3.0.12. Lately it had been nagging me to upgrage to PHP 5.3.28.

After what I went through to install PHP in the first place, I had been putting it off. At long last I decided to bite down hard and get it done. I found complete upgrading instructions and tutorials almost impossible to find. The best I could determine was to do a new install while keeping the older version as a backup and this I had to figure out on my own. The best online tutorial I could find is this one:

http://www.youtube.com/watch?v=dg9r-RhKSZE

It has four parts, although parts 2 and 3 seem to be the same. Also I learned that the PHP 5.3.28 requires fast cgi and the c++ 2008 runtime.

I also attempted to install imagemagick which seemed to totally mess up my MySQL install and no attempt to reinstall it would work until I figured out that when you remove it it leaves behind it's old configuration files which are now wrong and tries to reuse them and so it will not start. I had to manually delete them first. took me several days to figure that out.

After much ado, I got things running again. Never could figure out what to do about the PECL stuff and there is no mention of it in the video tutorial.

As I say, it's been a month.

Now, what does all this have to do with Wordpress?

Before I did the PHP upgrade, I could install Wordpress flawlessly. However, afterwards, problems have now cropped up. For example, before Wordpress would create the wp-config.php file during the install. Now it will not and it's install tells me I need to do that. So I manually created it on the server and copied it to the website directory. At that point I click in my browser (IE8) to "Run The Install" and get this error message:

Warning: require_once(C:\Websites\test1.xxx.com\wp-config.php): failed to open stream: Permission denied in C:\Websites\test1.xxx.com\wp-load.php on line 29 Fatal error: require_once(): Failed opening required 'C:\Websites\test1.xxx.com/wp-config.php' (include_path='.;C:\php\pear') in C:\Websites\test1.xxx.com\wp-load.php on line 29

I was lost and after much searching, noticed that the security on another Wordpress wp-config.php file for an already installed website were different than the one I created on the server. The Users (yourserver\Users) entry was missing. Adding it corrected the problem and the Wordpress install continued.

These are some of my solutions and I place them here for the reference of other who are struggling.

Still, I must have some unresolved issues.

Please help.

I have a Windows Server 2008R2 (yes, I know) system running as a print server for ~100 printers in the company. After enabling the "Microsoft-Windows-PrintService/Operational" event log (which for some mysterious reason was initially disabled) I now get an event log entry for each print job, which is good.

A frequent requirement is to investigate a problem on a specific printer. Currently I have to look inside each "Document printed" event to find out whether it refers to the printer in question, which is very time consuming. So I would like to filter the "Microsoft-Windows-PrintService/Operational" event log to show only events referring to a specific printer.

Any hints?

Hi,

I have Windows Server 2008 R2. I will need to force a group of domain computers to reboot at the scheduled time. Can someone help me how to approach it? 

Thanks in advance!

Grace

For Open value agreement Microsoft asks me to have a core product. So If I need to purchase 70 user cals, should it be better to purchase a Core cal per user? Or do I have to buy the Core Cal and the user cal too?

In setting up a new task running on our Windows 2008 R2 server I get this error message: An error has occurred for task TEST error message: the following error was reported: 2147943729.

I have searched all over for this specific error code but no hits. Anyone knows how I can get more info?

Thanks!

Good Afternoon,

Currently my company uses 1-tier Certificate Authority 2008 R2. I am planning to implement a 2-tier certificate authority 2016. Both CAs will coexist until CA 2008 R2 is not longer used or required.    

Most of my research was about Certificate authority 2012 R2. Now Windows server 2016 is available, I would like to implement CA 2016 instead. I am not able to find a lot of information regarding CA 2016. 

Can you please provide some information about new features or differences that is available in CA 2016 that was not available in CA 2012 R2?

This is the only good article I found about CA 2016: 

http://arthurremy.com/index.php/107-tutorials/342-installing-a-two-tier-pki-hierarchy-in-windows-server-2016

Thank You

Raed

We have a number of users who are local admins on a Windows 2008 server and have been able to logon to the server either remotely or locally without problems.  Recently, however, all users except the Administrator are not able to logon to the server. When logging on locally, it gets to the point in the logon when the desktop should appear, but there is just a blank screen.  We can press control alt delete and bring up the Task Manager or logoff.  If I try to start Explorer from Task Manager at that point, I get a message that the permissions may not allow this program to run.  I have checked permissions of Explorer.exe, and it indicates that the SERVER\Users group has Read and Execute permissions on this file.  There are no Deny permissions on this file.

When logging on thru RDP, I get an error stating "You are connected to the remote computer.  However, and error occurred while an initial user program was starting, so you are being logged off."  

The administrator account can log on without problems either locally or via RDP.  

I have checked everything that I can think of, but have not been able to resolve this issue.  Does anyone have any suggestions on things to do to try and resolve this issue?

I have 1 PC on my network that is flooding the network with port 445 traffic - our firewall denies outbound traffic on this port - to avoid ransom virus exposure. I am trying to determine where the traffic is coming from - an app a service, etc. I ran a full virus scan and a malware scan - nothing found. No file share activity, open sessions or printer activity, no directory service activity. Scanned port and only microsoft-ds is listed. Any thoughts?

Thanks, 

Milty 

milty60