Hi All,

We've been having a server BSOD roughly every 10 minutes after applying windows updates. I saw that the Intel LAN driver had been updated and rolled it back, but the issue has persisted. Any help would be greatly appreciated. Dump is below:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, fffffa803309fa00, fffff80002df3428, fffffa8033c08010}

Probably caused by : usbccgp.sys

Followup:     MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time.
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa803309fa00, Physical Device Object of the stack
Arg3: fffff80002df3428, nt!TRIAGE_9F_POWER on Win7 and higher, otherwise the Functional Device Object of the stack
Arg4: fffffa8033c08010, The blocked IRP

Debugging Details:
------------------


KEY_VALUES_STRING: 1


STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  7601.24354.amd64fre.win7sp1_ldr_escrow.190108-1700

SYSTEM_MANUFACTURER:  Cisco Systems Inc

SYSTEM_PRODUCT_NAME:  UCSC-C220-M3S

SYSTEM_VERSION:  A

BIOS_VENDOR:  Cisco Systems, Inc.

BIOS_VERSION:  C220M3.1.4.5e.0.061320122352

BIOS_DATE:  06/13/2012

BASEBOARD_MANUFACTURER:  Cisco Systems Inc

BASEBOARD_PRODUCT:  UCSC-C220-M3S

BASEBOARD_VERSION:  74-10442-01

DUMP_TYPE:  2

BUGCHECK_P1: 3

BUGCHECK_P2: fffffa803309fa00

BUGCHECK_P3: fffff80002df3428

BUGCHECK_P4: fffffa8033c08010

DRVPOWERSTATE_SUBCODE:  3

DRIVER_OBJECT: fffffa806ef86c60

IMAGE_NAME:  usbccgp.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5ae9da13

MODULE_NAME: usbccgp

FAULTING_MODULE: fffff88006015000 usbccgp

CPU_COUNT: 20

CPU_MHZ: 7d0

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 2d

CPU_STEPPING: 7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_SESSION_HOST:

ANALYSIS_SESSION_TIME:  02-26-2019 15:04:23.0638

ANALYSIS_VERSION: 10.0.17763.132 amd64fre

DPC_STACK_BASE:  FFFFF80002DF9FB0

STACK_OVERFLOW: Stack Limit: fffff80002df3fb0. Use (kF) and (!stackusage) to investigate stack usage.

STACK_TEXT: 
fffff800`02df33d8 fffff800`019149f0 : 00000000`0000009f 00000000`00000003 fffffa80`3309fa00 fffff800`02df3428 : nt!KeBugCheckEx
fffff800`02df33e0 fffff800`01883945 : fffff800`02df34c0 fffff800`02df34c0 fffff800`01a38b80 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x1c470
fffff800`02df3480 fffff800`01882d2e : 00000002`e815bf00 fffff800`02df3b18 00000000`00013897 fffff800`01a3a068 : nt!KiProcessExpiredTimerList+0x105
fffff800`02df3af0 fffff800`01882b17 : 00000000`91d151c2 fffffa80`00013897 fffffa80`3591bd40 00000000`00000096 : nt!KiTimerExpiration+0x1be
fffff800`02df3b90 fffff800`018e911a : fffff800`01a36180 fffff800`01a461c0 00000000`00000000 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff800`02df3c40 00000000`00000000 : fffff800`02df4000 fffff800`02dee000 fffff800`02df3c00 00000000`00000000 : nt!KiIdleLoop+0x5a


THREAD_SHA1_HASH_MOD_FUNC:  bcfdeee85e39b09901d4996ee9fbb4285da8a1a2

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  e612baa0e63db6ecc3179ba3a60c3225251499c4

THREAD_SHA1_HASH_MOD:  ee8fcf1fb60cb6e3e2f60ddbed2ec02b5748a693

FOLLOWUP_NAME:  MachineOwner

IMAGE_VERSION:  6.1.7601.24138

STACK_COMMAND:  .thread ; .cxr ; kb

FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_usbccgp.sys

BUCKET_ID:  X64_0x9F_3_IMAGE_usbccgp.sys

PRIMARY_PROBLEM_CLASS:  X64_0x9F_3_IMAGE_usbccgp.sys

TARGET_TIME:  2019-02-26T20:33:53.000Z

OSBUILD:  7601

OSSERVICEPACK:  1000

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  274

PRODUCT_TYPE:  3

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 7

OSEDITION:  Windows 7 Server (Service Pack 1) Enterprise TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  2019-01-08 20:35:55

BUILDDATESTAMP_STR:  190108-1700

BUILDLAB_STR:  win7sp1_ldr_escrow

BUILDOSVER_STR:  6.1.7601.24354.amd64fre.win7sp1_ldr_escrow.190108-1700

ANALYSIS_SESSION_ELAPSED_TIME:  754

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0x9f_3_image_usbccgp.sys

FAILURE_ID_HASH:  {fe186b26-16d6-e67c-87c5-a0955ed99d61}

Followup:     MachineOwner
---------

0: kd> !drvobj fffffa806ef86c60 f
fffff80001a6e590: Unable to get value of ObpRootDirectoryObject
fffff80001a6e590: Unable to get value of ObpRootDirectoryObject
Driver object (fffffa806ef86c60) is for:
 \Driver\usbccgp
Driver Extension List: (id , addr)

Device Object list:
fffffa8033b2da00: Could not read device object


DriverEntry:   fffff8800602f064    usbccgp!GsDriverEntry
DriverStartIo: 00000000   
DriverUnload:  fffff8800602a8c8    usbccgp!USBC_DriverUnload
AddDevice:     00000000   

Dispatch routines:
[00] IRP_MJ_CREATE                      fffff88006016450    usbccgp!USBC_Dispatch
[01] IRP_MJ_CREATE_NAMED_PIPE           fffff800018aaed0    nt!IopInvalidDeviceRequest
[02] IRP_MJ_CLOSE                       fffff88006016450    usbccgp!USBC_Dispatch
[03] IRP_MJ_READ                        fffff800018aaed0    nt!IopInvalidDeviceRequest
[04] IRP_MJ_WRITE                       fffff800018aaed0    nt!IopInvalidDeviceRequest
[05] IRP_MJ_QUERY_INFORMATION           fffff800018aaed0    nt!IopInvalidDeviceRequest
[06] IRP_MJ_SET_INFORMATION             fffff800018aaed0    nt!IopInvalidDeviceRequest
[07] IRP_MJ_QUERY_EA                    fffff800018aaed0    nt!IopInvalidDeviceRequest
[08] IRP_MJ_SET_EA                      fffff800018aaed0    nt!IopInvalidDeviceRequest
[09] IRP_MJ_FLUSH_BUFFERS               fffff800018aaed0    nt!IopInvalidDeviceRequest
[0a] IRP_MJ_QUERY_VOLUME_INFORMATION    fffff800018aaed0    nt!IopInvalidDeviceRequest
[0b] IRP_MJ_SET_VOLUME_INFORMATION      fffff800018aaed0    nt!IopInvalidDeviceRequest
[0c] IRP_MJ_DIRECTORY_CONTROL           fffff800018aaed0    nt!IopInvalidDeviceRequest
[0d] IRP_MJ_FILE_SYSTEM_CONTROL         fffff800018aaed0    nt!IopInvalidDeviceRequest
[0e] IRP_MJ_DEVICE_CONTROL              fffff88006016450    usbccgp!USBC_Dispatch
[0f] IRP_MJ_INTERNAL_DEVICE_CONTROL     fffff88006016450    usbccgp!USBC_Dispatch
[10] IRP_MJ_SHUTDOWN                    fffff800018aaed0    nt!IopInvalidDeviceRequest
[11] IRP_MJ_LOCK_CONTROL                fffff800018aaed0    nt!IopInvalidDeviceRequest
[12] IRP_MJ_CLEANUP                     fffff800018aaed0    nt!IopInvalidDeviceRequest
[13] IRP_MJ_CREATE_MAILSLOT             fffff800018aaed0    nt!IopInvalidDeviceRequest
[14] IRP_MJ_QUERY_SECURITY              fffff800018aaed0    nt!IopInvalidDeviceRequest
[15] IRP_MJ_SET_SECURITY                fffff800018aaed0    nt!IopInvalidDeviceRequest
[16] IRP_MJ_POWER                       fffff88006016450    usbccgp!USBC_Dispatch
[17] IRP_MJ_SYSTEM_CONTROL              fffff88006016450    usbccgp!USBC_Dispatch
[18] IRP_MJ_DEVICE_CHANGE               fffff800018aaed0    nt!IopInvalidDeviceRequest
[19] IRP_MJ_QUERY_QUOTA                 fffff800018aaed0    nt!IopInvalidDeviceRequest
[1a] IRP_MJ_SET_QUOTA                   fffff800018aaed0    nt!IopInvalidDeviceRequest
[1b] IRP_MJ_PNP                         fffff88006016450    usbccgp!USBC_Dispatch

0: kd> lm
start             end                 module name
fffff800`017a4000 fffff800`017ae000   kdcom      (deferred)            
fffff800`0180a000 fffff800`01852000   hal        (deferred)            
fffff800`01852000 fffff800`01e2e000   nt         (pdb symbols)          C:\ProgramData\dbg\sym\ntkrnlmp.pdb\C6476208D085404F8A83A21B5DB435101\ntkrnlmp.pdb
fffff880`00c00000 fffff880`00c16000   AgileVpn   (deferred)            
fffff880`00c16000 fffff880`00c25000   dump_megasas2   (deferred)            
fffff880`00c27000 fffff880`00c76000   mcupdate_GenuineIntel   (deferred)            
fffff880`00c76000 fffff880`00c8a000   PSHED      (deferred)            
fffff880`00c8a000 fffff880`00ce9000   CLFS       (deferred)            
fffff880`00ce9000 fffff880`00d5c000   CI         (deferred)            
fffff880`00d5c000 fffff880`00d77000   sacdrv     (deferred)            
fffff880`00d77000 fffff880`00dd3000   volmgrx    (deferred)            
fffff880`00dd3000 fffff880`00df5000   tdx        (deferred)            
fffff880`00e00000 fffff880`00e37000   dcrypt     (deferred)            
fffff880`00e41000 fffff880`00f33000   NDIS       (deferred)            
fffff880`00f33000 fffff880`00f91000   msrpc      (deferred)            
fffff880`00f91000 fffff880`00ff1000   NETIO      (deferred)            
fffff880`00ff1000 fffff880`00fff000   crashdmp   (deferred)            
fffff880`01000000 fffff880`0100c000   Dxapi      (deferred)            
fffff880`0100c000 fffff880`010ce000   Wdf01000   (deferred)            
fffff880`010ce000 fffff880`010de000   WDFLDR     (deferred)            
fffff880`010de000 fffff880`01135000   ACPI       (deferred)            
fffff880`01135000 fffff880`0113e000   WMILIB     (deferred)            
fffff880`0113e000 fffff880`01148000   msisadrv   (deferred)            
fffff880`01148000 fffff880`0117b000   pci        (deferred)            
fffff880`0117b000 fffff880`01188000   vdrvroot   (deferred)            
fffff880`01188000 fffff880`0119d000   partmgr    (deferred)            
fffff880`0119d000 fffff880`011a6000   compbatt   (deferred)            
fffff880`011a6000 fffff880`011b2000   BATTC      (deferred)            
fffff880`011b2000 fffff880`011c6000   volmgr     (deferred)            
fffff880`011c6000 fffff880`011e0000   mountmgr   (deferred)            
fffff880`011e0000 fffff880`011ef000   megasas2   (deferred)            
fffff880`011ef000 fffff880`011fc000   TDI        (deferred)            
fffff880`01200000 fffff880`01211000   Npfs       (deferred)            
fffff880`01218000 fffff880`0127c000   storport   (deferred)            
fffff880`0127c000 fffff880`013a5000   megasr1    (deferred)            
fffff880`013a5000 fffff880`013b0000   amdxata    (deferred)            
fffff880`013b0000 fffff880`013fa000   fltmgr     (deferred)            
fffff880`01400000 fffff880`01409000   rdpencdd   (deferred)            
fffff880`01409000 fffff880`01412000   rdprefmp   (deferred)            
fffff880`01412000 fffff880`0141d000   Msfs       (deferred)            
fffff880`01424000 fffff880`015cc000   Ntfs       (deferred)            
fffff880`015cc000 fffff880`015e7000   ksecdd     (deferred)            
fffff880`015e7000 fffff880`015f7000   watchdog   (deferred)            
fffff880`015f7000 fffff880`01600000   RDPCDD     (deferred)            
fffff880`01600000 fffff880`0160d000   sdcfilter   (deferred)            
fffff880`0160d000 fffff880`01637000   cdrom      (deferred)            
fffff880`01637000 fffff880`01681000   dump_FLTMGR   (deferred)            
fffff880`01681000 fffff880`016a6000   VIDEOPRT   (deferred)            
fffff880`016ab000 fffff880`016e8000   savonaccess   (deferred)            
fffff880`016ea000 fffff880`0175f000   cng        (deferred)            
fffff880`0175f000 fffff880`01770000   pcw        (deferred)            
fffff880`01770000 fffff880`0178e000   mup        (deferred)            
fffff880`0178e000 fffff880`017be000   CLASSPNP   (deferred)            
fffff880`017be000 fffff880`017d9000   USBSTOR    (deferred)            
fffff880`017db000 fffff880`017e4000   Null       (deferred)            
fffff880`017e4000 fffff880`017f1000   dwvkbd64   (deferred)            
fffff880`017f1000 fffff880`017ff000   vga        (deferred)            
fffff880`01800000 fffff880`0182b000   ksecpkg    (deferred)            
fffff880`0182b000 fffff880`01874000   fwpkclnt   (deferred)            
fffff880`01874000 fffff880`01884000   vmstorfl   (deferred)            
fffff880`01884000 fffff880`018d0000   volsnap    (deferred)            
fffff880`018d0000 fffff880`018d8000   spldr      (deferred)            
fffff880`018d8000 fffff880`018e1000   hwpolicy   (deferred)            
fffff880`018e1000 fffff880`018eb000   dump_diskdump   (deferred)            
fffff880`018eb000 fffff880`019dd000   SophosED   (deferred)            
fffff880`019dd000 fffff880`019e7000   Fs_Rec     (deferred)            
fffff880`019e7000 fffff880`019fc000   disk       (deferred)            
fffff880`01a00000 fffff880`01bfb000   tcpip      (deferred)            
fffff880`05c00000 fffff880`05c0f000   kbdclass   (deferred)            
fffff880`05c17000 fffff880`05ca0000   afd        (deferred)            
fffff880`05ca0000 fffff880`05ce5000   netbt      (deferred)            
fffff880`05ce5000 fffff880`05cee000   wfplwf     (deferred)            
fffff880`05cee000 fffff880`05cfb000   sophosntplwf   (deferred)            
fffff880`05cfb000 fffff880`05d0b000   netbios    (deferred)            
fffff880`05d0b000 fffff880`05d28000   serial     (deferred)            
fffff880`05d28000 fffff880`05d43000   wanarp     (deferred)            
fffff880`05d43000 fffff880`05d57000   termdd     (deferred)            
fffff880`05d57000 fffff880`05d7d000   sntp       (deferred)            
fffff880`05d7d000 fffff880`05dd0000   rdbss      (deferred)            
fffff880`05dd0000 fffff880`05ddc000   nsiproxy   (deferred)            
fffff880`05ddc000 fffff880`05de7000   mssmbios   (deferred)            
fffff880`05de7000 fffff880`05dfd000   intelppm   (deferred)            
fffff880`05e00000 fffff880`05e57000   USBPORT    (deferred)            
fffff880`05e57000 fffff880`05e65000   vgapnp     (deferred)            
fffff880`05e65000 fffff880`05e71000   serenum    (deferred)            
fffff880`05e71000 fffff880`05e89000   IPMIDrv    (deferred)            
fffff880`05e89000 fffff880`05e8d500   CmBatt     (deferred)            
fffff880`05e8e000 fffff880`05e98000   acpipmi    (deferred)            
fffff880`05e98000 fffff880`05ea8000   CompositeBus   (deferred)            
fffff880`05eaa000 fffff880`05ef4000   hmpalert   (deferred)            
fffff880`05ef4000 fffff880`05f03000   discache   (deferred)            
fffff880`05f03000 fffff880`05f24000   dfsc       (deferred)            
fffff880`05f24000 fffff880`05f35000   blbdrive   (deferred)            
fffff880`05f35000 fffff880`05f5b000   tunnel     (deferred)            
fffff880`05f5b000 fffff880`05fd9000   e1r62x64   (deferred)            
fffff880`05fd9000 fffff880`05feb000   usbehci    (deferred)            
fffff880`05feb000 fffff880`05ff2000   DamewareMini   (deferred)            
fffff880`05ff2000 fffff880`05fff000   mouhid     (deferred)            
fffff880`06000000 fffff880`06015000   NDProxy    (deferred)            
fffff880`06015000 fffff880`06032000   usbccgp    (pdb symbols)          C:\ProgramData\dbg\sym\usbccgp.pdb\F141A42087E64AB39D8BF0EBFE1113DF1\usbccgp.pdb
fffff880`06032000 fffff880`06033e80   USBD       (deferred)            
fffff880`06034000 fffff880`06042000   hidusb     (pdb symbols)          C:\ProgramData\dbg\sym\hidusb.pdb\398AF7CA0DC04B749613A694E689D4161\hidusb.pdb
fffff880`06042000 fffff880`0605b000   HIDCLASS   (deferred)            
fffff880`0605b000 fffff880`06063280   HIDPARSE   (deferred)            
fffff880`06064000 fffff880`06072000   kbdhid     (deferred)            
fffff880`06072000 fffff880`0607b000   sfloppy    (deferred)            
fffff880`0607d000 fffff880`060a1000   rasl2tp    (deferred)            
fffff880`060a1000 fffff880`060ad000   ndistapi   (deferred)            
fffff880`060ad000 fffff880`060dc000   ndiswan    (deferred)            
fffff880`060dc000 fffff880`060f7000   raspppoe   (deferred)            
fffff880`060f7000 fffff880`06118000   raspptp    (deferred)            
fffff880`06118000 fffff880`06132000   rassstp    (deferred)            
fffff880`06132000 fffff880`0613d000   rdpbus     (deferred)            
fffff880`0613d000 fffff880`0614c000   mouclass   (deferred)            
fffff880`0614c000 fffff880`0614d480   swenum     (deferred)            
fffff880`0614e000 fffff880`06191000   ks         (deferred)            
fffff880`06191000 fffff880`061a3000   umbus      (deferred)            
fffff880`061a3000 fffff880`061fd000   usbhub     (deferred)            
fffff880`06624000 fffff880`0665b000   dump_dcrypt   (deferred)            
fffff880`0665b000 fffff880`06669000   monitor    (deferred)            
fffff880`06669000 fffff880`0668c000   luafv      (deferred)            
fffff880`0668c000 fffff880`066a5000   WudfPf     (deferred)            
fffff880`066a5000 fffff880`066ba000   lltdio     (deferred)            
fffff880`066ba000 fffff880`066d2000   rspndr     (deferred)            
fffff880`066d2000 fffff880`066ef000   bowser     (deferred)            
fffff880`066ef000 fffff880`06707000   mpsdrv     (deferred)            
fffff880`06707000 fffff880`06734000   mrxsmb     (deferred)            
fffff880`06734000 fffff880`06782000   mrxsmb10   (deferred)            
fffff880`06782000 fffff880`067a6000   mrxsmb20   (deferred)            
fffff880`07800000 fffff880`0780b000   secdrv     (deferred)            
fffff880`0780b000 fffff880`0783c000   srvnet     (deferred)            
fffff880`0783c000 fffff880`0784e000   tcpipreg   (deferred)            
fffff880`07855000 fffff880`0791d000   HTTP       (deferred)            
fffff880`0791d000 fffff880`07951000   mqac       (deferred)            
fffff880`07951000 fffff880`079fb000   peauth     (deferred)            
fffff880`09600000 fffff880`09614000   fileinfo   (deferred)            
fffff880`09614000 fffff880`0964a000   WUDFRd     (deferred)            
fffff880`0964a000 fffff880`09678000   rdpdr      (deferred)            
fffff880`09678000 fffff880`09683000   tdtcp      (deferred)            
fffff880`09683000 fffff880`09693000   tssecsrv   (deferred)            
fffff880`09693000 fffff880`096cd000   RDPWD      (deferred)            
fffff880`096f0000 fffff880`09758000   srv2       (deferred)            
fffff880`09758000 fffff880`097ef000   srv        (deferred)            
fffff880`0ab6d000 fffff880`0ab78000   asyncmac   (deferred)            
fffff960`00050000 fffff960`00379000   win32k     (deferred)            
fffff960`00580000 fffff960`0059e000   dxg        (deferred)            
fffff960`00790000 fffff960`0079a000   TSDDD      (deferred)            
fffff960`00840000 fffff960`00849000   framebuf   (deferred)            
fffff960`00bf0000 fffff960`00bfc000   DamewareDisp   (deferred)            

Unloaded modules:
fffff880`0aafc000 fffff880`0ab6d000   spsys.sys
fffff880`017be000 fffff880`017cc000   crashdmp.sys
fffff880`018e1000 fffff880`018eb000   dump_storpor
fffff880`017cc000 fffff880`017db000   dump_megasas
fffff880`01600000 fffff880`01637000   dump_dcrypt.
fffff880`01681000 fffff880`016ab000   cdrom.sys
0: kd> lmDvmnt
Browse full module list
start             end                 module name
fffff800`01852000 fffff800`01e2e000   nt         (pdb symbols)          C:\ProgramData\dbg\sym\ntkrnlmp.pdb\C6476208D085404F8A83A21B5DB435101\ntkrnlmp.pdb
    Loaded symbol image file: ntkrnlmp.exe
    Mapped memory image file: C:\ProgramData\dbg\sym\ntoskrnl.exe\5C355E0B5dc000\ntoskrnl.exe
    Image path: ntkrnlmp.exe
    Image name: ntkrnlmp.exe
    Browse all global symbols  functions  data
    Timestamp:        Tue Jan  8 18:35:55 2019 (5C355E0B)
    CheckSum:         00559DD2
    ImageSize:        005DC000
    File version:     6.1.7601.24354
    Product version:  6.1.7601.24354
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     ntkrnlmp.exe
        OriginalFilename: ntkrnlmp.exe
        ProductVersion:   6.1.7601.24354
        FileVersion:      6.1.7601.24354 (win7sp1_ldr_escrow.190108-1700)
        FileDescription:  NT Kernel & System
        LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> lmDvmusbccgp
Browse full module list
start             end                 module name
fffff880`06015000 fffff880`06032000   usbccgp    (pdb symbols)          C:\ProgramData\dbg\sym\usbccgp.pdb\F141A42087E64AB39D8BF0EBFE1113DF1\usbccgp.pdb
    Loaded symbol image file: usbccgp.sys
    Mapped memory image file: C:\ProgramData\dbg\sym\usbccgp.sys\5AE9DA131d000\usbccgp.sys
    Image path: \SystemRoot\system32\drivers\usbccgp.sys
    Image name: usbccgp.sys
    Browse all global symbols  functions  data
    Timestamp:        Wed May  2 08:32:35 2018 (5AE9DA13)
    CheckSum:         00025F76
    ImageSize:        0001D000
    File version:     6.1.7601.24138
    Product version:  6.1.7601.24138
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     USBCCGP.SYS
        OriginalFilename: USBCCGP.SYS
        ProductVersion:   6.1.7601.24138
        FileVersion:      6.1.7601.24138 (win7sp1_ldr.180502-0600)
        FileDescription:  USB Common Class Generic Parent Driver
        LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> lmDvmhidusb
Browse full module list
start             end                 module name
fffff880`06034000 fffff880`06042000   hidusb     (pdb symbols)          C:\ProgramData\dbg\sym\hidusb.pdb\398AF7CA0DC04B749613A694E689D4161\hidusb.pdb
    Loaded symbol image file: hidusb.sys
    Mapped memory image file: C:\ProgramData\dbg\sym\hidusb.sys\5C356048e000\hidusb.sys
    Image path: \SystemRoot\system32\drivers\hidusb.sys
    Image name: hidusb.sys
    Browse all global symbols  functions  data
    Timestamp:        Tue Jan  8 18:45:28 2019 (5C356048)
    CheckSum:         0000B997
    ImageSize:        0000E000
    File version:     6.1.7601.24354
    Product version:  6.1.7601.24354
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     HIDUSB.SYS
        OriginalFilename: HIDUSB.SYS
        ProductVersion:   6.1.7601.24354
        FileVersion:      6.1.7601.24354 (win7sp1_ldr_escrow.190108-1700)
        FileDescription:  USB Miniport Driver for Input Devices
        LegalCopyright:   © Microsoft Corporation. All rights reserved.

Configuration

Servers:

• Location 1
  • SCCM-Central1-loc1
    • 2012 R2
    • 10.70.4.228/24
• Location 2
  • SCCM-DP1-loc2
    • Windows 10 Build 1803
    • 172.22.65.4/24
    • No Symantec Endpoint Protection
  • FILESERVER-FS1-loc2
    • 2012 R2
    • 172.22.65.231/24
• Location 3
  • SCCM-DP2-loc3
    • Windows 10 Build 1803
    • 172.22.186.4/24
    • Symantec Endpoint Protection
• Location 4
  • SCCM-DP3-loc4 (Tega)
    • Windows 10 Build 1803
    • 172.22.207.4
    • Symantec Endpoint Protection
    • Citrix Receiver
• Location 5
  • SCCM-DP4-loc5 (PTZA)
    • Windows 10 Build 1803
    • 172.22.185.4
    • Symantec Endpoint Protection
    • Citrix Receiver

• We need to be able to attach to the f$ share on each of the “SCCM-DPx-LOCx” servers from the “SCCM-Central1-loc1”.
  • Issue Attempting to connect to
    • \\172.22.65.4\f$
    • \\ SCCM-DP1-loc2\f$
    • \\ SCCM-DP1-loc2.DOMAIN.com\f$
    • \\10.120.186.4\f$
    • \\ SCCM-DP2-loc3\f$
    • \\ SCCM-DP2-loc3. DOMAIN.com\f$
      • Fails from SCCM-Central1-loc1 or any Windows 2012 R2 server outside of the 172.22.65.0/24 subnet.
        • Error: Windows cannot access \\ SCCM-DP1-loc2\f$

Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identify and resolve network problems, click Diagnose.

See Details shows

Error Code: 0x80004005

Unspecified error

• Works from any Windows 10 workstation even across the VPN. Also works from a Server 2012 R2 server in the 172.22.65.0/24 subnet

• Works Attempting to connect to
  • \\172.22.65.231\f$
  • \\ FILESERVER-FS1-loc2\f$
  • \\ FILESERVER-FS1-loc2.DOMAIN.com\f$
  • \\ 172.22.207.4\f$
  • \\ SCCM-DP3-loc4\f$
  • \\ SCCM-DP3-loc4. DOMAIN.com\f$
  • \\ 172.22.185.4\f$
  • \\ SCCM-DP3-loc5\f$
  • \\ SCCM-DP3-loc5. DOMAIN.com\f$
    • Works from all locations and all machines

• Notes:
  • Connecting from any Windows 10 machine to the failing systems works every time (see above).
  • Connecting to a Windows 2012 R2 server in the same subnet as one of the failing systems works every time.
  • Auditing of ports from any location to the systems in this subnet renders the same result:

Test-NetConnection -port 138 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

WARNING: TCP connect to FILESERVER-FS1-loc2:138 failed

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 138

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : False

Test-NetConnection -port 137 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

WARNING: TCP connect to FILESERVER-FS1-loc2:137 failed

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 137

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : False

Test-NetConnection -port 139 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 139

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : True

Test-NetConnection -port 445 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 445

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : True

• Attempted Fixes
  • NSLOOKUP does find the systems
  • Creating a non-Admin share was no different
  • Turning off IPv6 was no help
  • Turning on SMB file sharing did not help
  • Checked and the OS firewall for Domain, Private, Guest or Public, all are off
  • Removing the SCCM-DP1-loc2 from the domain then will respond with a prompting for username and password, but still does not allow login and eventually fails with the same error.
    • Error: Windows cannot access \\ SCCM-DP1-loc2\f$

Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identify and resolve network problems, click Diagnose.

See Details shows

Error Code: 0x80004005

Unspecified error

• Disabled SMB2/3 and this still fails
• Verified that SMB1 is present

Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

FeatureName     : SMB1Protocol

DisplayName     : SMB 1.0/CIFS File Sharing Support

Description     : Support for the SMB 1.0/CIFS file sharing protocol, and the Computer Browser protocol.

RestartRequired  : Possible

State           : Enabled

Hi there,

I've got the following setting.

2 QNAPs, each is mounted as a volume via iSCSI on a different Windows Server 2016 (FS1 & FS2).

FS1 replicates to FS2.

On the Volume are several directories shared with DFS.

Each directory has a soft quota set by FSRM and gets mapped to clients as a drive by the DCs GPO.

Sadly each drive shows the capacity from the whole volume which is mounted on FS1/FS2.

The settings on both fileservers are identical in regards to DFS and FSRM

My Question now is, is it possible to show only the size of the quota for the mapped drive and if yes, how is it done?

Thank you.

Martin

Hi,

I have a QGis plugin to solve a vehicle routing problem using ORTools.  

When the program gets to the ORTools part, Qgis crashes and leaves an Error Event in Eventviewer, but no stacktrace.   

According to this event the crash is caused by ucrtbase.dll. See the screenshot below. 

The OS is Windows server 2012 with latest updates. 

I have created the user mode crash dump which is uploaded to onedrive including the WER report file here: 

https://1drv.ms/f/s!ApOUFM1sYj1FhRT5NvmpmrWYYWum

event screenshot: https://1drv.ms/u/s!ApOUFM1sYj1FhR5JCHEptJHp86nY

Any help would be appreciated!

Cheers,

Atis

Hi, I love the MMC to manage my servers very much. I installed the RSAT, and the MMC is a very good utility to manage the services on the severs remotely. You can see the following screenshot. Many services are managed by my console.

However, when I tried to save the event logs as evtx format from remote server to my local laptop with MMC, it failed. I cannot understand why Microsoft doesn't allow it. I have to RDP to every server and save the event logs. It's too troublesome. And I believe Mircorosft originally recommend us to use RAST and MMC to manage remote servers!

• Servers: Windows Server 2008 R2
• My laptop: Windows 7

Hi, I have a Program called unlock downloaded from below web site.

https://www.joeware.net/freetools/tools/unlock/index.htm

Now I just use it manually by the below method.

Copied Unlock file on C Drive

Now to Unlock account following is the method adopted

To View Locked Account Just use "l" and to unlock "u" (Run Batch Files as mention above) 

Need Help : 

I want to run l batch file to run after some interval using tasks scheduler how can I run this batch file please help.

Problem :

Already put in tasks scheduler but scheduler just running not stopped after execution

A couple of our Windows 7 workstations on our Microsoft 2012 R2 have been occasionally losing printing capability.  The vast bulk of the other workstations are not having this problem.

     Logging in to the workstation administratively permits us in services.msc to restart the Print Spooler client-side.  Then one can print again from that workstation.

     Now my question is:

Why might these few workstations be losing their printing capability as described above, especially when the rest aren't.  Thanks for your assistance.

Hello,

Is it possible if someone create a document and owner of a document to be notified if it is deleted by other users. thanks

Regards

So my long-serving Windows 2008 r2 server (the server) was recently tasked with hosting a second subnet. Here's the basic setup:

- Domain Controller for a local domain
- Services: DC, AD, File Sharing, Jabber, AFP via Acronis
- Primary subnet on built-in, teamed, 1Gb NIC (192.168.100.x)
- New subnet on PCIe, teamed, 10Gb over copper NIC (10.10.10.x)
- All IP addressing is via IPv4
- The router is setup to logically create division between all 3 subnets (there's a third, WiFi subnet as well; used only for on-prem, guest WiFi access)

The PCIe NIC install went well; I have a solid link to my 10Gb switch. All devices on my 10Gb subnet are statically assigned to connect directly to a SAN device. Initially no Gateway or Name Servers were specified in the Win2K8 server (the 10Gb NIC), nor the SAN host, nor the Mac and Windows clients. Nor was the SAN setup to resolve in DNS.

The Macs have no problem connecting directly to the SAN at 10Gb. The Win2K8 server will not ping or route to the SAN nor any other device on the 10Gb subnet.

At first I thought it was an SMB issue as the Win2K8 server will connect to the NAS at 1Gb using the SAN's NETBIOS name. My second thought was Win2K8 server needed the 10Gb NIC to be enabled in DNS as a routable subnet. Still nothing. So I added the Gateway and Name Server IPs to the server and NAS and put forward/reverse A records in DNS. NSLOOKUP shows name/IP resolution from the server but still no Ping replies.

Lastly I removed the logical separation from within the router just for testing. Still no ping from the server to the SAN. FYI: The subnets' traffic must be segregated again for the final config.

So this is where I punt to you all. Ideally I will connect from the Win2K8 server directly to the SAN via the 10Gb subnet. I have about 18TBs of data to copy to the SAN device from the server. I'll also have a need to copy from the SAN back to the server on occasion. So this 10Gb link is critical going forward.

Mine is a world of very large, media files, both video and static images. The Mac clients and server read and write from/to the SAN device at up to 750 MBs/second. I'm hoping to get similar from the Win2K8 server. With help from you folks, I'm hopeful to get there...asap.

Thanks!

Mr. Smith

I am an Active Directory user that is in the 'Administrators' group on a Windows Server 2008 R2 server we have.  When I attempt to install any setup packages I deploy to the server that are .msi packages, I receive the following error:

"You do not have sufficient privileges to complete the installation for all users of the machine. Log on as administrator and then retry the installation."

The thing is I am an Administrator.  Is the 'local' administrator account theonly account allowed to install .msi packages?  I talked to my server admin and they didn't know why this is occuring since we just started using 2008 R2.  If it was a configuration he would be happy to change it so users in the 'Administrators' group can install .msi packages. I can install .exe packages, but for this setup package I only have the .msi file.

Anyone know how to fix this or update the configuration?

Hello All,

We have implemented a solution with Bitlocker in a domain, but can we have in the same domain another bitlocker server in order to have diferente group policies for bitlocker

Thanks!

Alejandro

Planning for a 2 tier hierarchy.

A root CA and a subordinate CA.

Some older devices only support SHA1.

Can a single subordinate issuing CA issue SHA1 and SHA256? 

No - then I need 2 subordinate CAs.

1. Can I cluster these 2 if they are using 2 different hash algorithms i.e. can I only have HA if I cluster ADCS servers that are the same?
2. Is HA really needed for issuing CAs? (CDP and AIA will be published on a separate web cluster)

Hello. I have a server running Windows 10 Home that has more than 20 simultaneous users. We are facing issues as there is a limit of 20 users for the OS.

Would Windows Server 2016 correct this? How do I upgrade from 10 Home to server?

Thanks.

I have only one user I having issue long into my radius server it keeps tell me his account does not exit but it does

The only thing I can think of he has a very long name about  its about 22 characters long and has - 

Is this possible be the issue? and if true how do I solve this issue I can not change his email he been using that for years I even try cut just name and login name and it still failed

Hi techs,

I am running connectionlogger in my 2008 server with task scheduler. Just after it runs, cpu utilization increased to 70.%.can anybody help me in finding the root cause. 

Hi

I am seeing the below errors in the system event logs on an IIS server. Has anyone seen this before or know what could be causing it? All our other IIS servers running the same application work fine. This is happening quite a few times each day.

An TLS 1.2 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.

A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 40. The Windows SChannel error state is 1205.

An SSL 2.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.

Thanks

Shane

The problem:

Windows Server 2012 R2. Some user when logon and use a custom software that preview xml files via shell command, the xml is previewed with the wrong application (chrome), but if the file is open via the Explorer windows, the file is opened with the right application (iexplorer). I set the right file associations in each account, but only certain user account are affected. If I create a new one, the problem doesn't exist.

Thanks!

Dear all, I already tried a bunch of measures which helped others to get the updates installed, but the Server still Fails to install the Security monthly Quality Rollups for Windows Server 2008 R2 for x64-based Systems from 2017-12 to 2018-10.

The CBS.log shows several Errors "Failed to find file:" / "Failed to gather all required files."

Almost all the "file not found"-errors claim "MsSpellCheckingFacility.exe"-files from the WinSxS-Directory.

Any suggestions?

Have a nice day!

Best regards,

Thomas

Hi,

I am getting an error " unable to connect to virtual disk service" while connecting to disk management.

Tried diskpart, getting Virtual disk service failed to intialize error in Disk part errror.

VDS service is running fine, able to stop and start the service.

please do the needful