Windows Server 2008 R2

i get multiple source ESENT google search results does not point to anything to worry about. just double checking here if this

is "normal"?

I am trying to set up WDS so I can image all my laptops off one sysprepped baseline. My baseline is a Latitude 5570, with a 250gb GPT drive split into several partitions, including 3 mounted drives- C:, d:; a:. C: is system, D: and A: are data drives. 

I am currently capturing the C: drive through PXe using a capture image on my WDS server. 

My question, I want to basically clone this configuration in its entirety when I image- programs, partitions, etc...then deploy with a prompt to set up the computer hostname. This is all in a non-active directory environment. Since WIM only captures one partition, what is the best way to accomplish this?

Configuration

Servers:

• Location 1
  • SCCM-Central1-loc1
    • 2012 R2
    • 10.70.4.228/24
• Location 2
  • SCCM-DP1-loc2
    • Windows 10 Build 1803
    • 172.22.65.4/24
    • No Symantec Endpoint Protection
  • FILESERVER-FS1-loc2
    • 2012 R2
    • 172.22.65.231/24
• Location 3
  • SCCM-DP2-loc3
    • Windows 10 Build 1803
    • 172.22.186.4/24
    • Symantec Endpoint Protection
• Location 4
  • SCCM-DP3-loc4 (Tega)
    • Windows 10 Build 1803
    • 172.22.207.4
    • Symantec Endpoint Protection
    • Citrix Receiver
• Location 5
  • SCCM-DP4-loc5 (PTZA)
    • Windows 10 Build 1803
    • 172.22.185.4
    • Symantec Endpoint Protection
    • Citrix Receiver

• We need to be able to attach to the f$ share on each of the “SCCM-DPx-LOCx” servers from the “SCCM-Central1-loc1”.
  • Issue Attempting to connect to
    • \\172.22.65.4\f$
    • \\ SCCM-DP1-loc2\f$
    • \\ SCCM-DP1-loc2.DOMAIN.com\f$
    • \\10.120.186.4\f$
    • \\ SCCM-DP2-loc3\f$
    • \\ SCCM-DP2-loc3. DOMAIN.com\f$
      • Fails from SCCM-Central1-loc1 or any Windows 2012 R2 server outside of the 172.22.65.0/24 subnet.
        • Error: Windows cannot access \\ SCCM-DP1-loc2\f$

Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identify and resolve network problems, click Diagnose.

See Details shows

Error Code: 0x80004005

Unspecified error

• Works from any Windows 10 workstation even across the VPN. Also works from a Server 2012 R2 server in the 172.22.65.0/24 subnet

• Works Attempting to connect to
  • \\172.22.65.231\f$
  • \\ FILESERVER-FS1-loc2\f$
  • \\ FILESERVER-FS1-loc2.DOMAIN.com\f$
  • \\ 172.22.207.4\f$
  • \\ SCCM-DP3-loc4\f$
  • \\ SCCM-DP3-loc4. DOMAIN.com\f$
  • \\ 172.22.185.4\f$
  • \\ SCCM-DP3-loc5\f$
  • \\ SCCM-DP3-loc5. DOMAIN.com\f$
    • Works from all locations and all machines

• Notes:
  • Connecting from any Windows 10 machine to the failing systems works every time (see above).
  • Connecting to a Windows 2012 R2 server in the same subnet as one of the failing systems works every time.
  • Auditing of ports from any location to the systems in this subnet renders the same result:

Test-NetConnection -port 138 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

WARNING: TCP connect to FILESERVER-FS1-loc2:138 failed

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 138

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : False

Test-NetConnection -port 137 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

WARNING: TCP connect to FILESERVER-FS1-loc2:137 failed

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 137

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : False

Test-NetConnection -port 139 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 139

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : True

Test-NetConnection -port 445 -ComputerName "FILESERVER-FS1-loc2" -InformationLevel "Detailed"

ComputerName            : FILESERVER-FS1-loc2

RemoteAddress           : 172.22.65.231

RemotePort              : 445

AllNameResolutionResults : 172.22.65.231

MatchingIPsecRules      :

NetworkIsolationContext : Private Network

IsAdmin                 : False

InterfaceAlias          : Ethernet

SourceAddress           : 10.70.4.228

NetRoute (NextHop)      : 10.70.4.1

PingSucceeded           : True

PingReplyDetails (RTT)  : 39 ms

TcpTestSucceeded        : True

• Attempted Fixes
  • NSLOOKUP does find the systems
  • Creating a non-Admin share was no different
  • Turning off IPv6 was no help
  • Turning on SMB file sharing did not help
  • Checked and the OS firewall for Domain, Private, Guest or Public, all are off
  • Removing the SCCM-DP1-loc2 from the domain then will respond with a prompting for username and password, but still does not allow login and eventually fails with the same error.
    • Error: Windows cannot access \\ SCCM-DP1-loc2\f$

Check the spelling of the name. Otherwise, there might be a problem with your network. To try to identify and resolve network problems, click Diagnose.

See Details shows

Error Code: 0x80004005

Unspecified error

• Disabled SMB2/3 and this still fails
• Verified that SMB1 is present

Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

FeatureName     : SMB1Protocol

DisplayName     : SMB 1.0/CIFS File Sharing Support

Description     : Support for the SMB 1.0/CIFS file sharing protocol, and the Computer Browser protocol.

RestartRequired  : Possible

State           : Enabled

Hi,

I have a SMTP relay setup under Window 2012 R2

Multiple system (not a web application)  is sending email via this SMTP relay

I need to capture and process those email (.EML) before it sending out to the recipient

The problem is the email is sending out so fast before i even able to capture it

Is there a way i can create a temporary folder to redirect this email (.EML) files into it. Which my script will process the .EML files, and move it back to pickup folder for sending out?

I understand that i can change the pickup directory with the following command. however, this change the pickup directory entirely to a new folder instead of creating a intermediate folder before the pickup folder

cscript.exe C:\inetpub\AdminScripts\adsutil.vbs set smtpsvc/1/pickupdirectory "new directory for pickup folder"

Hi All,

can someone help me. there is a application in our production environment with multiple nodes in application cluster.

which has full dependency with w32tm service. if any of the server beyond 10sec from it's active node then, the application eliminate it from application cluster. 

I have followed following support article still we the peer list is showing my domain controller. it is not desplaying my NTP server: -time.child.root.com

env details:-

The servers all are installed with windows 2008 

All are part of Active directory Domain.

all are ESXI Vms not syncing Time from esxi group. 

https://support.microsoft.com/en-in/help/816042/how-to-configure-an-authoritative-time-server-in-windows-server

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

C:\Windows\system32>w32tm /query /configuration

[Configuration]

EventLogFlags: 2 (Local)

AnnounceFlags: 5 (Local)

TimeJumpAuditOffset: 28800 (Local)

MinPollInterval: 10 (Local)

MaxPollInterval: 15 (Local)

MaxNegPhaseCorrection: 3600 (Local)

MaxPosPhaseCorrection: 3600 (Local)

MaxAllowedPhaseOffset: 300 (Local)

FrequencyCorrectRate: 4 (Local)

PollAdjustFactor: 5 (Local)

LargePhaseOffset: 50000000 (Local)

SpikeWatchPeriod: 900 (Local)

LocalClockDispersion: 10 (Local)

HoldPeriod: 5 (Local)

PhaseCorrectRate: 1 (Local)

UpdateInterval: 30000 (Local)

[TimeProviders]

NtpClient (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

CrossSiteSyncFlags: 2 (Policy)

AllowNonstandardModeCombinations: 1 (Local)

ResolvePeerBackoffMinutes: 15 (Policy)

ResolvePeerBackoffMaxTimes: 7 (Policy)

CompatibilityFlags: 2147483648 (Local)

EventLogFlags: 0 (Policy)

LargeSampleSkew: 3 (Local)

SpecialPollInterval: 3600 (Policy)

Type: NT5DS (Policy)

NtpServer (Local)

DllName: C:\Windows\system32\w32time.dll (Local)

Enabled: 1 (Local)

InputProvider: 0 (Local)

AllowNonstandardModeCombinations: 1 (Local)

VMICTimeProvider (Local)

DllName: C:\Windows\System32\vmictimeprovider.dll (Local)

Enabled: 1 (Local)

InputProvider: 1 (Local)

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

C:\Windows\system32>w32tm /query /source

DC21.child.root.com

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

C:\Windows\system32>w32tm /query /peers

#Peers: 1

Peer: DC21.child.root.com

State: Active

Time Remaining: 896.3444743s

Mode: 1 (Symmetric Active)

Stratum: 4 (secondary reference - syncd by (S)NTP)

PeerPoll Interval: 17 (out of valid range)

HostPoll Interval: 10 (1024s)

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

C:\Windows\system32>w32tm /query /status

Leap Indicator: 0(no warning)

Stratum: 5 (secondary reference - syncd by (S)NTP)

Precision: -6 (15.625ms per tick)

Root Delay: 0.1250000s

Root Dispersion: 8.0002952s

ReferenceId: 0x0A780A15 (source IP:  10.120.10.21)

Last Successful Sync Time: 21/02/2019 12:54:18

Source: DC21.child.root.com

Poll Interval: 10 (1024s)

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

C:\Windows\system32>w32tm /config /syncfromflags:manual /manualpeerlist:"0.time.

child.root.com"

The command completed successfully.

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

C:\Windows\system32>w32tm /query /status

Leap Indicator: 0(no warning)

Stratum: 5 (secondary reference - syncd by (S)NTP)

Precision: -6 (15.625ms per tick)

Root Delay: 0.1250000s

Root Dispersion: 8.0002952s

ReferenceId: 0x0A780A15 (source IP:  10.120.10.21)

Last Successful Sync Time: 21/02/2019 12:54:18

Source: DC21.child.root.com

Poll Interval: 10 (1024s)

Example 1:

• total 3 hosts, all host are member of cluster group.
• CPU 10 core; total 2 CPU socket per host.
• total 10 VMs.

In my understanding.

• 1 host = 20 core = 20 lic core
• 10 VMs = 20 *5 = 100 lic core
• 3 hosts = 100 *3 = 300 lic core
• buy OLP = 300 /2 = 150 lic pack

Is it correct? or I get new formula from distributor

• 1 host = 20 core = 20 lic core
• 3 hosts = 20 *3 = 60 lic core
• now I can use 6 VMs but I have 10 VMs, So I must buy for 4 VMs.
• 4 VMs = 20 *2 = 40 lic core
• total = 60 + 40 = 100 lic core
• buy OLP = 100 /2 = 50 lic pack

Example 2:

• total 1 host
• CPU 16 core; total 1 CPU socket per host.
• total 10 VMs.

In my understanding.

• 1 host = 16 core = 16 lic core
• 10 VMs = 16 *5 = 80 lic core
• buy OLP = 80 /2 = 40 lic pack

but I see article (but I cannot remember where is it) about minimum license are 8 lic pack for 1 host with 8 cores 2 sockets. So I'm not sure. Can it use for this example?

1: Can't using 2012 because non-support 64bit

2: Still puzzle to me why Pre-loaded doesn't have a "Active Directory Users & Computers"

3: Already paid Windows Server 2008 for this Server... I don't want to waste money replace a server that simply unable to upgrade which not acceptable...

Anyone have an idea how to get setup work... Thanks!!!

I've been rattling my brain about a situation I have in my environment. We have 5 DCs in the in the environment. What is going on is if a end user machine does not have the PDCe listed as the peer, then time synchronization does not work. All of the DCs have the PDCe as their time source and time is synchronizing successfully among them. Please see some w32tm output below.

----

Client that is not synchronizing time

C:\Windows\system32>w32tm /query /peers
#Peers: 1

Peer: NON-PDCe
State: Active
Time Remaining: 291.7218809s
Mode: 3 (Client)
Stratum: 0 (unspecified)
PeerPoll Interval: 0 (unspecified)
HostPoll Interval: 10 (1024s)

C:\Windows\system32>w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 1 (primary reference - syncd by radio clock)
Precision: -6 (15.625ms per tick)
Root Delay: 0.0000000s
Root Dispersion: 10.0000000s
ReferenceId: 0x4C4F434C (source name:  "LOCL")
Last Successful Sync Time: 2/28/2019 3:37:18 PM
Source: Free-running System Clock
Poll Interval: 10 (1024s)

----

Some clients don't even show a peer:

C:\Users\user>w32tm /query /peers
#Peers: 1

Peer:
State: Pending
Time Remaining: 797.0196934s
Mode: 0 (reserved)
Stratum: 0 (unspecified)
PeerPoll Interval: 0 (unspecified)
HostPoll Interval: 0 (unspecified)

----

Output of client that time sync works:

C:\Users\user>w32tm /query /peers
#Peers: 1

Peer: PDCe
State: Active
Time Remaining: 12303.9146627s
Mode: 3 (Client)
Stratum: 14 (secondary reference - syncd by (S)NTP)
PeerPoll Interval: 15 (32768s)
HostPoll Interval: 15 (32768s)

C:\Users\user>w32tm /query /status
Leap Indicator: 0(no warning)
Stratum: 15 (secondary reference - syncd by (S)NTP)
Precision: -23 (119.209ns per tick)
Root Delay: 0.0703662s
Root Dispersion: 0.4165810s
ReferenceId: 0x0A01013D (source IP:  10.1.1.61)
Last Successful Sync Time: 3/1/2019 9:51:35 AM
Source: PDCe
Poll Interval: 15 (32768s)

Why would a client not be able to sync time unless it has the PDCe as it's peer? Any help would be greatly appreciated.

I have SChannel Fatal Alert 40 & 70 (together) and 20 (separately from 40/70). Twice (maybe 2-3 power cycles apart) I have had a blue screen after trying to power down. I assume the issues are related? Shutdown seems to be interrupted and it goes to the blue screen. The reason is: DRIVER_IRQL_NOT_LESS_OR_EQUAL and it leaves behind a dump file [The computer has rebooted from a bugcheck.  The bugcheck was: 0x000000d1 (0xfffff8800529e4a0, 0x0000000000000002, 0x0000000000000008, 0xfffff8800529e4a0).] I have not found any driver problems nor malfunctioning devices that I know of that are connected. Running a memory check resulted in no errors. I have updated anything I can and removed unnecessary software. These are the main steps I have followed from searching other posts but no solution yet (at least I doubt I fixed it, there will probably be more faults).

How can I isolate what is causing the errors? I don't see especially strange behavior in my logs but maybe I am missing something.

The system is a server running Windows.

Hello,

unfortunately we have the following problem with our HPE MSA (connected to two HPE ProLiant DL380p as Hyper-V node) with our HPE ProLiant DL380 Gen8 with one HPE SmartArray 421 controller each:

A logical drive was created using the HPE controller. Disk Partitioning for the Virtual Machine Volume and Disk as a Quorum Disk was done with disk partitioning of Windows 2012 R2 Datacenter and GPT.

I can set the drive to "online" in disk partitioning, but not in Failover Cluster Manager. I am currently receiving the following error messages:

cluster:

CLUSTER1.SEBO.local

started

09.02.2019 20:06:37

Completed

09.02.2019 20:06:38

Physical disk resource for Cluster Disk 1 is created.
Cluster Disk 1 resource goes online.
Failed to create, configure, or bring online physical disk resource (disk) "Cluster Disk 1".
Physical disk resource for Cluster Disk 2 is created.
Resource for "Cluster Disk 2" comes online.
Failed to create, configure, or bring online physical disk resource (disk) "Cluster Disk 2".
When adding storage to the cluster, the following errors occurred:
An error occurred while trying to bring the resource "Cluster Disk 1" online.

The cluster resource could not be brought online by the resource monitor

Failed to try to bring the Cluster Disk 2 resource online.

The cluster resource could not be brought online by the resource monitor.

How do we get both media online?

DL

What is TechNet Guru Competition?

Each month the TechNet Wiki council organizes a contest of the best articles posted that month. This is your chance to be announced as MICROSOFT TECHNOLOGY GURU OF THE MONTH!

One winner in each category will be selected each month for glory and adoration by the MSDN/TechNet Ninjas and community as a whole. Winners will be announced in dedicated blog post that will be published in Microsoft Wiki Ninjas blog, a tweet from the Wiki Ninjas Twitter account, links will be published at Microsoft TNWiki group on Facebook, and other acknowledgement from the community will follow.

Some of our biggest community voices and many MVPs have passed through these halls on their way to fame and fortune.

If you have already made a contribution in the forums or gallery or you published a nice blog, then you can simply convert it into a shared wiki article, reference the original post, and register the article for the TechNet Guru Competition. The articles must be written in March 2019 and must be in English. However, the original blog or forum content can be from beforeMarch 2019.

Come and see who is making waves in all your favorite technologies. Maybe it will be you!

Who can join the Competition?

Anyone who has basic knowledge and the desire to share the knowledge is welcome. Articles can appeal to beginners or discusse advanced topics. All you have to do is to add your article to TechNet Wiki from your own specialty category.

How can you win?

1. Please copy/Write over your Microsoft technical solutions and revelations to TechNetWiki.
2. Add a link to your new article on THIS WIKI COMPETITION PAGE (so we know you've contributed)
3. (Optional but recommended) Add a link to your article at the TechNetWiki group on Facebook. The group is very active and people love to help, you can get feedback and even direct improvements in the article before the contest starts.

Do you have any question or want more information?

Feel free to ask any questions below, or Join us at the official MicrosoftTechNet Wiki groups on facebook. Read More about TechNet Guru Awards.

If you win, people will sing your praises online and your name will be raised as Guru of the Month.

Please remember to mark the replies as answers if they help and unmarked them if they provide no help, this will help others who are looking for solutions to the same or similar problem. Contact via my Twitter (Karen Payne) or Facebook (Karen Payne) via my MSDN profile but will not answer coding question on either.

NuGet BaseConnectionLibrary for database connections.

StackOverFlow

when I try to zip a directory in win 2008 r2 standard, I get this error:

[Window Title]

Compressed (zipped) Folders Error

[Content]

'E:\drops\comercial.bne.com.br\comercial.bne.com.br_2.78.11256.1_20110915\_PublishedWebsites\BNE.Web\img\texto_candidatação.png' cannot be compressed because it includes characters that cannot be used in a compressed folder, such asã. You should rename this file or directory.

[OK]

How to solve it?

Hello, sorry if posted to wrong forum.

If I own a windows server, create my user accounts on it for example 100 people but not login to domain so no user connect to the windows server,

1. If I connect a Nas server to the AD and let users login to the Nas

2. If I have a server which runs 3 services each one connect to the AD and let users login to

3. If I have one windows 10 machine join to the domain, let users remote login to this machine so users may change their password on it

4. If I integrate these account with office 365

Is it ture that 1. 2. 3. only need one device CAL each?

do I need more CAL for 4?

Thanks for your helping

What is TechNet Guru Competition?

Each month the TechNet Wiki council organizes a contest of the best articles posted that month. This is your chance to be announced as MICROSOFT TECHNOLOGY GURU OF THE MONTH!

One winner in each category will be selected each month for glory and adoration by the MSDN/TechNet Ninjas and community as a whole. Winners will be announced in dedicated blog post that will be published in Microsoft Wiki Ninjas blog, a tweet from the Wiki Ninjas Twitter account, links will be published at Microsoft TNWiki group on Facebook, and other acknowledgement from the community will follow.

Some of our biggest community voices and many MVPs have passed through these halls on their way to fame and fortune.

If you have already made a contribution in the forums or gallery or you published a nice blog, then you can simply convert it into a shared wiki article, reference the original post, and register the article for the TechNet Guru Competition. The articles must be written in March 2019 and must be in English. However, the original blog or forum content can be from beforeMarch 2019.

Come and see who is making waves in all your favorite technologies. Maybe it will be you!

Who can join the Competition?

Anyone who has basic knowledge and the desire to share the knowledge is welcome. Articles can appeal to beginners or discusse advanced topics. All you have to do is to add your article to TechNet Wiki from your own specialty category.

How can you win?

1. Please copy/Write over your Microsoft technical solutions and revelations to TechNetWiki.
2. Add a link to your new article on THIS WIKI COMPETITION PAGE (so we know you've contributed)
3. (Optional but recommended) Add a link to your article at the TechNetWiki group on Facebook. The group is very active and people love to help, you can get feedback and even direct improvements in the article before the contest starts.

Do you have any question or want more information?

Feel free to ask any questions below, or Join us at the official MicrosoftTechNet Wiki groups on facebook. Read More about TechNet Guru Awards.

If you win, people will sing your praises online and your name will be raised as Guru of the Month.

Please remember to mark the replies as answers if they help and unmarked them if they provide no help, this will help others who are looking for solutions to the same or similar problem. Contact via my Twitter (Karen Payne) or Facebook (Karen Payne) via my MSDN profile but will not answer coding question on either.

NuGet BaseConnectionLibrary for database connections.

StackOverFlow

Hi,

I have only one PC with Windows Server 2008 R2, and I need to connect with several accounts with different permissions.

That worked fine during two days, but now, each time I use an account different from the Admin I get the error message:

"You have been logged on with a temporary profile. You cannot access your files and files created in this profile will be deleted when you log off."

So effectively i lost everything I do with these profiles...:(

How a I correct this issue?

Thanks

Hi All,

We've been having a server BSOD roughly every 10 minutes after applying windows updates. I saw that the Intel LAN driver had been updated and rolled it back, but the issue has persisted. Any help would be greatly appreciated. Dump is below:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 9F, {3, fffffa803309fa00, fffff80002df3428, fffffa8033c08010}

Probably caused by : usbccgp.sys

Followup:     MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DRIVER_POWER_STATE_FAILURE (9f)
A driver has failed to complete a power IRP within a specific time.
Arguments:
Arg1: 0000000000000003, A device object has been blocking an Irp for too long a time
Arg2: fffffa803309fa00, Physical Device Object of the stack
Arg3: fffff80002df3428, nt!TRIAGE_9F_POWER on Win7 and higher, otherwise the Functional Device Object of the stack
Arg4: fffffa8033c08010, The blocked IRP

Debugging Details:
------------------


KEY_VALUES_STRING: 1


STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  7601.24354.amd64fre.win7sp1_ldr_escrow.190108-1700

SYSTEM_MANUFACTURER:  Cisco Systems Inc

SYSTEM_PRODUCT_NAME:  UCSC-C220-M3S

SYSTEM_VERSION:  A

BIOS_VENDOR:  Cisco Systems, Inc.

BIOS_VERSION:  C220M3.1.4.5e.0.061320122352

BIOS_DATE:  06/13/2012

BASEBOARD_MANUFACTURER:  Cisco Systems Inc

BASEBOARD_PRODUCT:  UCSC-C220-M3S

BASEBOARD_VERSION:  74-10442-01

DUMP_TYPE:  2

BUGCHECK_P1: 3

BUGCHECK_P2: fffffa803309fa00

BUGCHECK_P3: fffff80002df3428

BUGCHECK_P4: fffffa8033c08010

DRVPOWERSTATE_SUBCODE:  3

DRIVER_OBJECT: fffffa806ef86c60

IMAGE_NAME:  usbccgp.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  5ae9da13

MODULE_NAME: usbccgp

FAULTING_MODULE: fffff88006015000 usbccgp

CPU_COUNT: 20

CPU_MHZ: 7d0

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 2d

CPU_STEPPING: 7

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER

BUGCHECK_STR:  0x9F

PROCESS_NAME:  System

CURRENT_IRQL:  2

ANALYSIS_SESSION_HOST:

ANALYSIS_SESSION_TIME:  02-26-2019 15:04:23.0638

ANALYSIS_VERSION: 10.0.17763.132 amd64fre

DPC_STACK_BASE:  FFFFF80002DF9FB0

STACK_OVERFLOW: Stack Limit: fffff80002df3fb0. Use (kF) and (!stackusage) to investigate stack usage.

STACK_TEXT: 
fffff800`02df33d8 fffff800`019149f0 : 00000000`0000009f 00000000`00000003 fffffa80`3309fa00 fffff800`02df3428 : nt!KeBugCheckEx
fffff800`02df33e0 fffff800`01883945 : fffff800`02df34c0 fffff800`02df34c0 fffff800`01a38b80 00000000`00000000 : nt! ?? ::FNODOBFM::`string'+0x1c470
fffff800`02df3480 fffff800`01882d2e : 00000002`e815bf00 fffff800`02df3b18 00000000`00013897 fffff800`01a3a068 : nt!KiProcessExpiredTimerList+0x105
fffff800`02df3af0 fffff800`01882b17 : 00000000`91d151c2 fffffa80`00013897 fffffa80`3591bd40 00000000`00000096 : nt!KiTimerExpiration+0x1be
fffff800`02df3b90 fffff800`018e911a : fffff800`01a36180 fffff800`01a461c0 00000000`00000000 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff800`02df3c40 00000000`00000000 : fffff800`02df4000 fffff800`02dee000 fffff800`02df3c00 00000000`00000000 : nt!KiIdleLoop+0x5a


THREAD_SHA1_HASH_MOD_FUNC:  bcfdeee85e39b09901d4996ee9fbb4285da8a1a2

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  e612baa0e63db6ecc3179ba3a60c3225251499c4

THREAD_SHA1_HASH_MOD:  ee8fcf1fb60cb6e3e2f60ddbed2ec02b5748a693

FOLLOWUP_NAME:  MachineOwner

IMAGE_VERSION:  6.1.7601.24138

STACK_COMMAND:  .thread ; .cxr ; kb

FAILURE_BUCKET_ID:  X64_0x9F_3_IMAGE_usbccgp.sys

BUCKET_ID:  X64_0x9F_3_IMAGE_usbccgp.sys

PRIMARY_PROBLEM_CLASS:  X64_0x9F_3_IMAGE_usbccgp.sys

TARGET_TIME:  2019-02-26T20:33:53.000Z

OSBUILD:  7601

OSSERVICEPACK:  1000

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  274

PRODUCT_TYPE:  3

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 7

OSEDITION:  Windows 7 Server (Service Pack 1) Enterprise TerminalServer SingleUserTS

OS_LOCALE: 

USER_LCID:  0

OSBUILD_TIMESTAMP:  2019-01-08 20:35:55

BUILDDATESTAMP_STR:  190108-1700

BUILDLAB_STR:  win7sp1_ldr_escrow

BUILDOSVER_STR:  6.1.7601.24354.amd64fre.win7sp1_ldr_escrow.190108-1700

ANALYSIS_SESSION_ELAPSED_TIME:  754

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0x9f_3_image_usbccgp.sys

FAILURE_ID_HASH:  {fe186b26-16d6-e67c-87c5-a0955ed99d61}

Followup:     MachineOwner
---------

0: kd> !drvobj fffffa806ef86c60 f
fffff80001a6e590: Unable to get value of ObpRootDirectoryObject
fffff80001a6e590: Unable to get value of ObpRootDirectoryObject
Driver object (fffffa806ef86c60) is for:
 \Driver\usbccgp
Driver Extension List: (id , addr)

Device Object list:
fffffa8033b2da00: Could not read device object


DriverEntry:   fffff8800602f064    usbccgp!GsDriverEntry
DriverStartIo: 00000000   
DriverUnload:  fffff8800602a8c8    usbccgp!USBC_DriverUnload
AddDevice:     00000000   

Dispatch routines:
[00] IRP_MJ_CREATE                      fffff88006016450    usbccgp!USBC_Dispatch
[01] IRP_MJ_CREATE_NAMED_PIPE           fffff800018aaed0    nt!IopInvalidDeviceRequest
[02] IRP_MJ_CLOSE                       fffff88006016450    usbccgp!USBC_Dispatch
[03] IRP_MJ_READ                        fffff800018aaed0    nt!IopInvalidDeviceRequest
[04] IRP_MJ_WRITE                       fffff800018aaed0    nt!IopInvalidDeviceRequest
[05] IRP_MJ_QUERY_INFORMATION           fffff800018aaed0    nt!IopInvalidDeviceRequest
[06] IRP_MJ_SET_INFORMATION             fffff800018aaed0    nt!IopInvalidDeviceRequest
[07] IRP_MJ_QUERY_EA                    fffff800018aaed0    nt!IopInvalidDeviceRequest
[08] IRP_MJ_SET_EA                      fffff800018aaed0    nt!IopInvalidDeviceRequest
[09] IRP_MJ_FLUSH_BUFFERS               fffff800018aaed0    nt!IopInvalidDeviceRequest
[0a] IRP_MJ_QUERY_VOLUME_INFORMATION    fffff800018aaed0    nt!IopInvalidDeviceRequest
[0b] IRP_MJ_SET_VOLUME_INFORMATION      fffff800018aaed0    nt!IopInvalidDeviceRequest
[0c] IRP_MJ_DIRECTORY_CONTROL           fffff800018aaed0    nt!IopInvalidDeviceRequest
[0d] IRP_MJ_FILE_SYSTEM_CONTROL         fffff800018aaed0    nt!IopInvalidDeviceRequest
[0e] IRP_MJ_DEVICE_CONTROL              fffff88006016450    usbccgp!USBC_Dispatch
[0f] IRP_MJ_INTERNAL_DEVICE_CONTROL     fffff88006016450    usbccgp!USBC_Dispatch
[10] IRP_MJ_SHUTDOWN                    fffff800018aaed0    nt!IopInvalidDeviceRequest
[11] IRP_MJ_LOCK_CONTROL                fffff800018aaed0    nt!IopInvalidDeviceRequest
[12] IRP_MJ_CLEANUP                     fffff800018aaed0    nt!IopInvalidDeviceRequest
[13] IRP_MJ_CREATE_MAILSLOT             fffff800018aaed0    nt!IopInvalidDeviceRequest
[14] IRP_MJ_QUERY_SECURITY              fffff800018aaed0    nt!IopInvalidDeviceRequest
[15] IRP_MJ_SET_SECURITY                fffff800018aaed0    nt!IopInvalidDeviceRequest
[16] IRP_MJ_POWER                       fffff88006016450    usbccgp!USBC_Dispatch
[17] IRP_MJ_SYSTEM_CONTROL              fffff88006016450    usbccgp!USBC_Dispatch
[18] IRP_MJ_DEVICE_CHANGE               fffff800018aaed0    nt!IopInvalidDeviceRequest
[19] IRP_MJ_QUERY_QUOTA                 fffff800018aaed0    nt!IopInvalidDeviceRequest
[1a] IRP_MJ_SET_QUOTA                   fffff800018aaed0    nt!IopInvalidDeviceRequest
[1b] IRP_MJ_PNP                         fffff88006016450    usbccgp!USBC_Dispatch

0: kd> lm
start             end                 module name
fffff800`017a4000 fffff800`017ae000   kdcom      (deferred)            
fffff800`0180a000 fffff800`01852000   hal        (deferred)            
fffff800`01852000 fffff800`01e2e000   nt         (pdb symbols)          C:\ProgramData\dbg\sym\ntkrnlmp.pdb\C6476208D085404F8A83A21B5DB435101\ntkrnlmp.pdb
fffff880`00c00000 fffff880`00c16000   AgileVpn   (deferred)            
fffff880`00c16000 fffff880`00c25000   dump_megasas2   (deferred)            
fffff880`00c27000 fffff880`00c76000   mcupdate_GenuineIntel   (deferred)            
fffff880`00c76000 fffff880`00c8a000   PSHED      (deferred)            
fffff880`00c8a000 fffff880`00ce9000   CLFS       (deferred)            
fffff880`00ce9000 fffff880`00d5c000   CI         (deferred)            
fffff880`00d5c000 fffff880`00d77000   sacdrv     (deferred)            
fffff880`00d77000 fffff880`00dd3000   volmgrx    (deferred)            
fffff880`00dd3000 fffff880`00df5000   tdx        (deferred)            
fffff880`00e00000 fffff880`00e37000   dcrypt     (deferred)            
fffff880`00e41000 fffff880`00f33000   NDIS       (deferred)            
fffff880`00f33000 fffff880`00f91000   msrpc      (deferred)            
fffff880`00f91000 fffff880`00ff1000   NETIO      (deferred)            
fffff880`00ff1000 fffff880`00fff000   crashdmp   (deferred)            
fffff880`01000000 fffff880`0100c000   Dxapi      (deferred)            
fffff880`0100c000 fffff880`010ce000   Wdf01000   (deferred)            
fffff880`010ce000 fffff880`010de000   WDFLDR     (deferred)            
fffff880`010de000 fffff880`01135000   ACPI       (deferred)            
fffff880`01135000 fffff880`0113e000   WMILIB     (deferred)            
fffff880`0113e000 fffff880`01148000   msisadrv   (deferred)            
fffff880`01148000 fffff880`0117b000   pci        (deferred)            
fffff880`0117b000 fffff880`01188000   vdrvroot   (deferred)            
fffff880`01188000 fffff880`0119d000   partmgr    (deferred)            
fffff880`0119d000 fffff880`011a6000   compbatt   (deferred)            
fffff880`011a6000 fffff880`011b2000   BATTC      (deferred)            
fffff880`011b2000 fffff880`011c6000   volmgr     (deferred)            
fffff880`011c6000 fffff880`011e0000   mountmgr   (deferred)            
fffff880`011e0000 fffff880`011ef000   megasas2   (deferred)            
fffff880`011ef000 fffff880`011fc000   TDI        (deferred)            
fffff880`01200000 fffff880`01211000   Npfs       (deferred)            
fffff880`01218000 fffff880`0127c000   storport   (deferred)            
fffff880`0127c000 fffff880`013a5000   megasr1    (deferred)            
fffff880`013a5000 fffff880`013b0000   amdxata    (deferred)            
fffff880`013b0000 fffff880`013fa000   fltmgr     (deferred)            
fffff880`01400000 fffff880`01409000   rdpencdd   (deferred)            
fffff880`01409000 fffff880`01412000   rdprefmp   (deferred)            
fffff880`01412000 fffff880`0141d000   Msfs       (deferred)            
fffff880`01424000 fffff880`015cc000   Ntfs       (deferred)            
fffff880`015cc000 fffff880`015e7000   ksecdd     (deferred)            
fffff880`015e7000 fffff880`015f7000   watchdog   (deferred)            
fffff880`015f7000 fffff880`01600000   RDPCDD     (deferred)            
fffff880`01600000 fffff880`0160d000   sdcfilter   (deferred)            
fffff880`0160d000 fffff880`01637000   cdrom      (deferred)            
fffff880`01637000 fffff880`01681000   dump_FLTMGR   (deferred)            
fffff880`01681000 fffff880`016a6000   VIDEOPRT   (deferred)            
fffff880`016ab000 fffff880`016e8000   savonaccess   (deferred)            
fffff880`016ea000 fffff880`0175f000   cng        (deferred)            
fffff880`0175f000 fffff880`01770000   pcw        (deferred)            
fffff880`01770000 fffff880`0178e000   mup        (deferred)            
fffff880`0178e000 fffff880`017be000   CLASSPNP   (deferred)            
fffff880`017be000 fffff880`017d9000   USBSTOR    (deferred)            
fffff880`017db000 fffff880`017e4000   Null       (deferred)            
fffff880`017e4000 fffff880`017f1000   dwvkbd64   (deferred)            
fffff880`017f1000 fffff880`017ff000   vga        (deferred)            
fffff880`01800000 fffff880`0182b000   ksecpkg    (deferred)            
fffff880`0182b000 fffff880`01874000   fwpkclnt   (deferred)            
fffff880`01874000 fffff880`01884000   vmstorfl   (deferred)            
fffff880`01884000 fffff880`018d0000   volsnap    (deferred)            
fffff880`018d0000 fffff880`018d8000   spldr      (deferred)            
fffff880`018d8000 fffff880`018e1000   hwpolicy   (deferred)            
fffff880`018e1000 fffff880`018eb000   dump_diskdump   (deferred)            
fffff880`018eb000 fffff880`019dd000   SophosED   (deferred)            
fffff880`019dd000 fffff880`019e7000   Fs_Rec     (deferred)            
fffff880`019e7000 fffff880`019fc000   disk       (deferred)            
fffff880`01a00000 fffff880`01bfb000   tcpip      (deferred)            
fffff880`05c00000 fffff880`05c0f000   kbdclass   (deferred)            
fffff880`05c17000 fffff880`05ca0000   afd        (deferred)            
fffff880`05ca0000 fffff880`05ce5000   netbt      (deferred)            
fffff880`05ce5000 fffff880`05cee000   wfplwf     (deferred)            
fffff880`05cee000 fffff880`05cfb000   sophosntplwf   (deferred)            
fffff880`05cfb000 fffff880`05d0b000   netbios    (deferred)            
fffff880`05d0b000 fffff880`05d28000   serial     (deferred)            
fffff880`05d28000 fffff880`05d43000   wanarp     (deferred)            
fffff880`05d43000 fffff880`05d57000   termdd     (deferred)            
fffff880`05d57000 fffff880`05d7d000   sntp       (deferred)            
fffff880`05d7d000 fffff880`05dd0000   rdbss      (deferred)            
fffff880`05dd0000 fffff880`05ddc000   nsiproxy   (deferred)            
fffff880`05ddc000 fffff880`05de7000   mssmbios   (deferred)            
fffff880`05de7000 fffff880`05dfd000   intelppm   (deferred)            
fffff880`05e00000 fffff880`05e57000   USBPORT    (deferred)            
fffff880`05e57000 fffff880`05e65000   vgapnp     (deferred)            
fffff880`05e65000 fffff880`05e71000   serenum    (deferred)            
fffff880`05e71000 fffff880`05e89000   IPMIDrv    (deferred)            
fffff880`05e89000 fffff880`05e8d500   CmBatt     (deferred)            
fffff880`05e8e000 fffff880`05e98000   acpipmi    (deferred)            
fffff880`05e98000 fffff880`05ea8000   CompositeBus   (deferred)            
fffff880`05eaa000 fffff880`05ef4000   hmpalert   (deferred)            
fffff880`05ef4000 fffff880`05f03000   discache   (deferred)            
fffff880`05f03000 fffff880`05f24000   dfsc       (deferred)            
fffff880`05f24000 fffff880`05f35000   blbdrive   (deferred)            
fffff880`05f35000 fffff880`05f5b000   tunnel     (deferred)            
fffff880`05f5b000 fffff880`05fd9000   e1r62x64   (deferred)            
fffff880`05fd9000 fffff880`05feb000   usbehci    (deferred)            
fffff880`05feb000 fffff880`05ff2000   DamewareMini   (deferred)            
fffff880`05ff2000 fffff880`05fff000   mouhid     (deferred)            
fffff880`06000000 fffff880`06015000   NDProxy    (deferred)            
fffff880`06015000 fffff880`06032000   usbccgp    (pdb symbols)          C:\ProgramData\dbg\sym\usbccgp.pdb\F141A42087E64AB39D8BF0EBFE1113DF1\usbccgp.pdb
fffff880`06032000 fffff880`06033e80   USBD       (deferred)            
fffff880`06034000 fffff880`06042000   hidusb     (pdb symbols)          C:\ProgramData\dbg\sym\hidusb.pdb\398AF7CA0DC04B749613A694E689D4161\hidusb.pdb
fffff880`06042000 fffff880`0605b000   HIDCLASS   (deferred)            
fffff880`0605b000 fffff880`06063280   HIDPARSE   (deferred)            
fffff880`06064000 fffff880`06072000   kbdhid     (deferred)            
fffff880`06072000 fffff880`0607b000   sfloppy    (deferred)            
fffff880`0607d000 fffff880`060a1000   rasl2tp    (deferred)            
fffff880`060a1000 fffff880`060ad000   ndistapi   (deferred)            
fffff880`060ad000 fffff880`060dc000   ndiswan    (deferred)            
fffff880`060dc000 fffff880`060f7000   raspppoe   (deferred)            
fffff880`060f7000 fffff880`06118000   raspptp    (deferred)            
fffff880`06118000 fffff880`06132000   rassstp    (deferred)            
fffff880`06132000 fffff880`0613d000   rdpbus     (deferred)            
fffff880`0613d000 fffff880`0614c000   mouclass   (deferred)            
fffff880`0614c000 fffff880`0614d480   swenum     (deferred)            
fffff880`0614e000 fffff880`06191000   ks         (deferred)            
fffff880`06191000 fffff880`061a3000   umbus      (deferred)            
fffff880`061a3000 fffff880`061fd000   usbhub     (deferred)            
fffff880`06624000 fffff880`0665b000   dump_dcrypt   (deferred)            
fffff880`0665b000 fffff880`06669000   monitor    (deferred)            
fffff880`06669000 fffff880`0668c000   luafv      (deferred)            
fffff880`0668c000 fffff880`066a5000   WudfPf     (deferred)            
fffff880`066a5000 fffff880`066ba000   lltdio     (deferred)            
fffff880`066ba000 fffff880`066d2000   rspndr     (deferred)            
fffff880`066d2000 fffff880`066ef000   bowser     (deferred)            
fffff880`066ef000 fffff880`06707000   mpsdrv     (deferred)            
fffff880`06707000 fffff880`06734000   mrxsmb     (deferred)            
fffff880`06734000 fffff880`06782000   mrxsmb10   (deferred)            
fffff880`06782000 fffff880`067a6000   mrxsmb20   (deferred)            
fffff880`07800000 fffff880`0780b000   secdrv     (deferred)            
fffff880`0780b000 fffff880`0783c000   srvnet     (deferred)            
fffff880`0783c000 fffff880`0784e000   tcpipreg   (deferred)            
fffff880`07855000 fffff880`0791d000   HTTP       (deferred)            
fffff880`0791d000 fffff880`07951000   mqac       (deferred)            
fffff880`07951000 fffff880`079fb000   peauth     (deferred)            
fffff880`09600000 fffff880`09614000   fileinfo   (deferred)            
fffff880`09614000 fffff880`0964a000   WUDFRd     (deferred)            
fffff880`0964a000 fffff880`09678000   rdpdr      (deferred)            
fffff880`09678000 fffff880`09683000   tdtcp      (deferred)            
fffff880`09683000 fffff880`09693000   tssecsrv   (deferred)            
fffff880`09693000 fffff880`096cd000   RDPWD      (deferred)            
fffff880`096f0000 fffff880`09758000   srv2       (deferred)            
fffff880`09758000 fffff880`097ef000   srv        (deferred)            
fffff880`0ab6d000 fffff880`0ab78000   asyncmac   (deferred)            
fffff960`00050000 fffff960`00379000   win32k     (deferred)            
fffff960`00580000 fffff960`0059e000   dxg        (deferred)            
fffff960`00790000 fffff960`0079a000   TSDDD      (deferred)            
fffff960`00840000 fffff960`00849000   framebuf   (deferred)            
fffff960`00bf0000 fffff960`00bfc000   DamewareDisp   (deferred)            

Unloaded modules:
fffff880`0aafc000 fffff880`0ab6d000   spsys.sys
fffff880`017be000 fffff880`017cc000   crashdmp.sys
fffff880`018e1000 fffff880`018eb000   dump_storpor
fffff880`017cc000 fffff880`017db000   dump_megasas
fffff880`01600000 fffff880`01637000   dump_dcrypt.
fffff880`01681000 fffff880`016ab000   cdrom.sys
0: kd> lmDvmnt
Browse full module list
start             end                 module name
fffff800`01852000 fffff800`01e2e000   nt         (pdb symbols)          C:\ProgramData\dbg\sym\ntkrnlmp.pdb\C6476208D085404F8A83A21B5DB435101\ntkrnlmp.pdb
    Loaded symbol image file: ntkrnlmp.exe
    Mapped memory image file: C:\ProgramData\dbg\sym\ntoskrnl.exe\5C355E0B5dc000\ntoskrnl.exe
    Image path: ntkrnlmp.exe
    Image name: ntkrnlmp.exe
    Browse all global symbols  functions  data
    Timestamp:        Tue Jan  8 18:35:55 2019 (5C355E0B)
    CheckSum:         00559DD2
    ImageSize:        005DC000
    File version:     6.1.7601.24354
    Product version:  6.1.7601.24354
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        1.0 App
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     ntkrnlmp.exe
        OriginalFilename: ntkrnlmp.exe
        ProductVersion:   6.1.7601.24354
        FileVersion:      6.1.7601.24354 (win7sp1_ldr_escrow.190108-1700)
        FileDescription:  NT Kernel & System
        LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> lmDvmusbccgp
Browse full module list
start             end                 module name
fffff880`06015000 fffff880`06032000   usbccgp    (pdb symbols)          C:\ProgramData\dbg\sym\usbccgp.pdb\F141A42087E64AB39D8BF0EBFE1113DF1\usbccgp.pdb
    Loaded symbol image file: usbccgp.sys
    Mapped memory image file: C:\ProgramData\dbg\sym\usbccgp.sys\5AE9DA131d000\usbccgp.sys
    Image path: \SystemRoot\system32\drivers\usbccgp.sys
    Image name: usbccgp.sys
    Browse all global symbols  functions  data
    Timestamp:        Wed May  2 08:32:35 2018 (5AE9DA13)
    CheckSum:         00025F76
    ImageSize:        0001D000
    File version:     6.1.7601.24138
    Product version:  6.1.7601.24138
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     USBCCGP.SYS
        OriginalFilename: USBCCGP.SYS
        ProductVersion:   6.1.7601.24138
        FileVersion:      6.1.7601.24138 (win7sp1_ldr.180502-0600)
        FileDescription:  USB Common Class Generic Parent Driver
        LegalCopyright:   © Microsoft Corporation. All rights reserved.
0: kd> lmDvmhidusb
Browse full module list
start             end                 module name
fffff880`06034000 fffff880`06042000   hidusb     (pdb symbols)          C:\ProgramData\dbg\sym\hidusb.pdb\398AF7CA0DC04B749613A694E689D4161\hidusb.pdb
    Loaded symbol image file: hidusb.sys
    Mapped memory image file: C:\ProgramData\dbg\sym\hidusb.sys\5C356048e000\hidusb.sys
    Image path: \SystemRoot\system32\drivers\hidusb.sys
    Image name: hidusb.sys
    Browse all global symbols  functions  data
    Timestamp:        Tue Jan  8 18:45:28 2019 (5C356048)
    CheckSum:         0000B997
    ImageSize:        0000E000
    File version:     6.1.7601.24354
    Product version:  6.1.7601.24354
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    Information from resource tables:
        CompanyName:      Microsoft Corporation
        ProductName:      Microsoft® Windows® Operating System
        InternalName:     HIDUSB.SYS
        OriginalFilename: HIDUSB.SYS
        ProductVersion:   6.1.7601.24354
        FileVersion:      6.1.7601.24354 (win7sp1_ldr_escrow.190108-1700)
        FileDescription:  USB Miniport Driver for Input Devices
        LegalCopyright:   © Microsoft Corporation. All rights reserved.

Hello!

Recently I asked about the free space on the volume to which the backups are being taken - https://social.technet.microsoft.com/Forums/en-US/e4bea301-7c97-402e-9dd7-2fe721272fc4/system-volume-information-consumes-600gb?forum=winservergen - now I can't understand the following:

To prevent Windows Backup from consuming all the space on my volume E: I have set theMaximum Shadow Copy Storage space: to 700GB (total volume space is 1TB):

- and I was hoping that Used space will not succeed the 700GB. Nevertheless Windows Backup keeps consuming the free space - now it takes ~750GB so

Q1: Which VSSadmin parameter corresponds to the Windows Backup'sUsed space - the Allocated Shadow Copy Storage space: orMaximum Shadow Copy Storage space: ?

Q2:Windows Backup shows that Used space (750GB) > then the Allocated Shadow Copy Storage space: ANDMaximum Shadow Copy Storage space: - is it normal?