Hi, I attempted to install some windows updates and now every day or so the server gets a blue screen and crashes. Have been trying to install more updates in case it is a driver install but they fail to install and revert changes.

The text file of the mini dump is below. Any help would be greatly appreciated in stopping the server from crashing.

Opened log file 'c:\debuglog.txt'
6: kd> .symfix+ c:\symbols
6: kd> .reload
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
.....
6: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
Loading Kernel Symbols
...............................................................
................................................................
...............
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                            *
*                        Bugcheck Analysis                                    *
*                                                                            *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000000, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
bit 0 : value 0 = read operation, 1 = write operation
bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800022db43c, address which referenced memory

Debugging Details:
------------------


KEY_VALUES_STRING: 1


PROCESSES_ANALYSIS: 1

SERVICE_ANALYSIS: 1

STACKHASH_ANALYSIS: 1

TIMELINE_ANALYSIS: 1


DUMP_CLASS: 1

DUMP_QUALIFIER: 400

BUILD_VERSION_STRING:  7601.23889.amd64fre.win7sp1_ldr.170810-1615

SYSTEM_MANUFACTURER:  Dell Inc.

SYSTEM_PRODUCT_NAME:  PowerEdge R210 II

BIOS_VENDOR:  Dell Inc.

BIOS_VERSION:  2.2.3

BIOS_DATE:  10/25/2012

BASEBOARD_MANUFACTURER:  Dell Inc.

BASEBOARD_PRODUCT:  03X6X0

BASEBOARD_VERSION:  A02

DUMP_TYPE:  2

BUGCHECK_P1: 0

BUGCHECK_P2: 2

BUGCHECK_P3: 1

BUGCHECK_P4: fffff800022db43c

WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80002510100
Unable to get MmSystemRangeStart
GetUlongPtrFromAddress: unable to read from fffff800025102e8
GetUlongPtrFromAddress: unable to read from fffff80002510498
GetPointerFromAddress: unable to read from fffff800025100b8
 0000000000000000 

CURRENT_IRQL:  2

FAULTING_IP: 
nt!KeWaitForSingleObject+17c
fffff800`022db43c 4c8938          mov     qword ptr [rax],r15

CPU_COUNT: 8

CPU_MHZ: da4

CPU_VENDOR:  GenuineIntel

CPU_FAMILY: 6

CPU_MODEL: 3a

CPU_STEPPING: 9

CPU_MICROCODE: 6,3a,9,0 (F,M,S,R)  SIG: 15'00000000 (cache) 15'00000000 (init)

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  WIN7_DRIVER_FAULT_SERVER

BUGCHECK_STR:  0xA

PROCESS_NAME:  svchost.exe

ANALYSIS_SESSION_HOST:  HOST-82-145-46-

ANALYSIS_SESSION_TIME:  11-17-2019 17:29:01.0727

ANALYSIS_VERSION: 10.0.18362.1 amd64fre

TRAP_FRAME:  fffff880080cb8e0 -- (.trap 0xfffff880080cb8e0)
.trap 0xfffff880080cb8e0
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=fffffa801f69ca30
rdx=00000000000000ae rsi=0000000000000000 rdi=0000000000000000
rip=fffff800022db43c rsp=fffff880080cba70 rbp=0000000000000000
 r8=fffff78000000008  r9=0000000000000000 r10=0000000000000000
r11=fffff880021e6180 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na po cy
nt!KeWaitForSingleObject+0x17c:
fffff800`022db43c 4c8938          mov     qword ptr [rax],r15 ds:00000000`00000000=????????????????
.trap
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800022d2f29 to fffff800022d3980

STACK_TEXT:  
fffff880`080cb798 fffff800`022d2f29 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`080cb7a0 fffff800`022d1ba0 : 00000014`00000001 00000000`00000000 00000000`00000000 00000004`085486ab : nt!KiBugCheckDispatch+0x69
fffff880`080cb8e0 fffff800`022db43c : 00000000`00000000 fffff800`022e0308 00000006`00000000 00000000`00060001 : nt!KiPageFault+0x260
fffff880`080cba70 fffff800`022b427a : fffffa80`1f69ca00 00000000`0000001b 00000000`00000000 fffff880`021e6100 : nt!KeWaitForSingleObject+0x17c
fffff880`080cbb10 fffff800`022d986c : ffffffff`ffb3b4c0 fffffa80`1f69ca28 fffffa80`1f69ca08 fffff880`080cbd70 : nt!ExpWaitForResource+0xae
fffff880`080cbb80 fffff800`022dddbb : fffff880`080cbd70 fffffa80`1f9a68f0 fffffa80`1f69c9f0 00000000`00000000 : nt!ExAcquireResourceExclusiveLite+0x14f
fffff880`080cbbf0 fffff880`02c58f4b : fffffa80`1f9a68f0 00000000`0000001f 00000000`00000000 fffff880`080cbcb0 : nt!ExEnterCriticalRegionAndAcquireResourceExclusive+0x1b
fffff880`080cbc20 fffff880`02c58e01 : fffffa80`1f1f3620 fffffa80`1fe0b700 fffff8a0`14c5d000 fffff880`080cbe60 : termdd!IcaChannelInputInternal+0x137
fffff880`080cbd00 fffff880`06f23198 : fffff8a0`015b4010 fffff880`02c5dd6c fffffa80`1f9df790 fffffa80`1f9fd770 : termdd!IcaChannelInput+0xdd
fffff880`080cbd40 fffff880`06f00708 : 00000000`00000000 fffff800`00000001 00000000`00000000 00000000`00000000 : RDPWD!SignalBrokenConnection+0x54
fffff880`080cbda0 fffff880`02c58d8f : fffffa80`1f1f3620 fffffa80`1f9dfa70 fffffa80`1f9df790 00000000`c000013c : RDPWD!WDLIB_MCSIcaChannelInput+0x90
fffff880`080cbdf0 fffff880`06ee56a4 : fffffa80`1f9dfa70 fffffa80`1f9dfa70 fffffa80`1f9df790 fffffa80`1f9dfa70 : termdd!IcaChannelInput+0x6b
fffff880`080cbe30 fffff880`02c5cf3e : fffffa80`1f7e17f0 fffffa80`1f74aa70 fffffa80`1ff86450 fffffa80`1f7f7830 : tdtcp!TdInputThread+0x64c
fffff880`080cc6b0 fffff880`02c5bae3 : fffffa80`1e203580 fffffa80`1f7f7830 fffffa80`1c198cb0 fffffa80`1ff86450 : termdd!IcaDriverThread+0x5a
fffff880`080cc6e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : termdd!IcaDeviceControlStack+0x827


THREAD_SHA1_HASH_MOD_FUNC:  925bb6dbdcecbd62e8019434c291c87e41295cfe

THREAD_SHA1_HASH_MOD_FUNC_OFFSET:  0a322b14563d72936212bc1637a2e34639fdc201

THREAD_SHA1_HASH_MOD:  d121fd67da0c876e827f6e09d5dc026c2d15e7a9

FOLLOWUP_IP: 
termdd!IcaChannelInputInternal+137
fffff880`02c58f4b 8b85ec000000    mov     eax,dword ptr [rbp+0ECh]

FAULT_INSTR_CODE:  ec858b

SYMBOL_STACK_INDEX:  7

SYMBOL_NAME:  termdd!IcaChannelInputInternal+137

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: termdd

IMAGE_NAME:  termdd.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce7ab0c

IMAGE_VERSION:  6.1.7601.17514

STACK_COMMAND:  .thread ; .cxr ; kb

FAILURE_BUCKET_ID:  X64_0xA_termdd!IcaChannelInputInternal+137

BUCKET_ID:  X64_0xA_termdd!IcaChannelInputInternal+137

PRIMARY_PROBLEM_CLASS:  X64_0xA_termdd!IcaChannelInputInternal+137

TARGET_TIME:  2019-11-17T17:03:39.000Z

OSBUILD:  7601

OSSERVICEPACK:  1000

SERVICEPACK_NUMBER: 0

OS_REVISION: 0

SUITE_MASK:  272

PRODUCT_TYPE:  3

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 7

OSEDITION:  Windows 7 Server (Service Pack 1) TerminalServer SingleUserTS

OS_LOCALE:  

USER_LCID:  0

OSBUILD_TIMESTAMP:  2017-08-11 07:01:41

BUILDDATESTAMP_STR:  170810-1615

BUILDLAB_STR:  win7sp1_ldr

BUILDOSVER_STR:  6.1.7601.23889.amd64fre.win7sp1_ldr.170810-1615

ANALYSIS_SESSION_ELAPSED_TIME:  d48

ANALYSIS_SOURCE:  KM

FAILURE_ID_HASH_STRING:  km:x64_0xa_termdd!icachannelinputinternal+137

FAILURE_ID_HASH:  {0fc94f3f-770f-6d3c-499f-4b967eb5dd38}

Followup:     MachineOwner
---------

rax=fffff880080cb8a0 rbx=00000004085486ab rcx=000000000000000a
rdx=0000000000000000 rsi=fffffa801f69ca28 rdi=fffffa801e8d7060
rip=fffff800022d3980 rsp=fffff880080cb798 rbp=fffff880080cb960
 r8=0000000000000002  r9=0000000000000001 r10=fffff800022db43c
r11=0000000000000001 r12=0000000000000000 r13=fffff880021e6180
r14=fffff880080cbb80 r15=fffffa801e8d7168
iopl=0         nv up ei ng nz na po nc
cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000286
nt!KeBugCheckEx:
fffff800`022d3980 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:fffff880`080cb7a0=000000000000000a
Child-SP          RetAddr           : Args to Child                                                          : Call Site
fffff880`080cb798 fffff800`022d2f29 : 00000000`0000000a 00000000`00000000 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`080cb7a0 fffff800`022d1ba0 : 00000014`00000001 00000000`00000000 00000000`00000000 00000004`085486ab : nt!KiBugCheckDispatch+0x69
fffff880`080cb8e0 fffff800`022db43c : 00000000`00000000 fffff800`022e0308 00000006`00000000 00000000`00060001 : nt!KiPageFault+0x260 (TrapFrame @ fffff880`080cb8e0)
fffff880`080cba70 fffff800`022b427a : fffffa80`1f69ca00 00000000`0000001b 00000000`00000000 fffff880`021e6100 : nt!KeWaitForSingleObject+0x17c
fffff880`080cbb10 fffff800`022d986c : ffffffff`ffb3b4c0 fffffa80`1f69ca28 fffffa80`1f69ca08 fffff880`080cbd70 : nt!ExpWaitForResource+0xae
fffff880`080cbb80 fffff800`022dddbb : fffff880`080cbd70 fffffa80`1f9a68f0 fffffa80`1f69c9f0 00000000`00000000 : nt!ExAcquireResourceExclusiveLite+0x14f
fffff880`080cbbf0 fffff880`02c58f4b : fffffa80`1f9a68f0 00000000`0000001f 00000000`00000000 fffff880`080cbcb0 : nt!ExEnterCriticalRegionAndAcquireResourceExclusive+0x1b
fffff880`080cbc20 fffff880`02c58e01 : fffffa80`1f1f3620 fffffa80`1fe0b700 fffff8a0`14c5d000 fffff880`080cbe60 : termdd!IcaChannelInputInternal+0x137
fffff880`080cbd00 fffff880`06f23198 : fffff8a0`015b4010 fffff880`02c5dd6c fffffa80`1f9df790 fffffa80`1f9fd770 : termdd!IcaChannelInput+0xdd
fffff880`080cbd40 fffff880`06f00708 : 00000000`00000000 fffff800`00000001 00000000`00000000 00000000`00000000 : RDPWD!SignalBrokenConnection+0x54
fffff880`080cbda0 fffff880`02c58d8f : fffffa80`1f1f3620 fffffa80`1f9dfa70 fffffa80`1f9df790 00000000`c000013c : RDPWD!WDLIB_MCSIcaChannelInput+0x90
fffff880`080cbdf0 fffff880`06ee56a4 : fffffa80`1f9dfa70 fffffa80`1f9dfa70 fffffa80`1f9df790 fffffa80`1f9dfa70 : termdd!IcaChannelInput+0x6b
fffff880`080cbe30 fffff880`02c5cf3e : fffffa80`1f7e17f0 fffffa80`1f74aa70 fffffa80`1ff86450 fffffa80`1f7f7830 : tdtcp!TdInputThread+0x64c
fffff880`080cc6b0 fffff880`02c5bae3 : fffffa80`1e203580 fffffa80`1f7f7830 fffffa80`1c198cb0 fffffa80`1ff86450 : termdd!IcaDriverThread+0x5a
fffff880`080cc6e0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : termdd!IcaDeviceControlStack+0x827
start             end                 module name
fffff800`02026000 fffff800`02030000   kdcom    kdcom.dll    Sat Feb  5 08:52:49 2011 (4D4D8061)
fffff800`0221b000 fffff800`02264000   hal      hal.dll      Sat Nov 20 05:00:25 2010 (4CE7C669)
fffff800`02264000 fffff800`0284a000   nt       ntkrnlmp.exe Thu Aug 10 23:01:41 2017 (598D4845)
fffff880`00c00000 fffff880`00c5c000   volmgrx  volmgrx.sys  Fri Jul  7 07:53:40 2017 (595FA074)
fffff880`00c5c000 fffff880`00c65000   rdprefmp rdprefmp.sys Mon Jul 13 17:16:35 2009 (4A5BCE63)
fffff880`00c65000 fffff880`00c70000   Msfs     Msfs.SYS     Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`00c70000 fffff880`00c7b000   mssmbios mssmbios.sys Mon Jul 13 16:31:10 2009 (4A5BC3BE)
fffff880`00c7b000 fffff880`00cca000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Sat Nov 20 05:03:51 2010 (4CE7C737)
fffff880`00cca000 fffff880`00cde000   PSHED    PSHED.dll    Mon Jul 13 18:32:23 2009 (4A5BE027)
fffff880`00cde000 fffff880`00d3d000   CLFS     CLFS.SYS     Sat Jul  8 07:54:10 2017 (5960F212)
fffff880`00d3d000 fffff880`00db2000   CI       CI.dll       Thu Jun 26 19:08:21 2014 (53ACD215)
fffff880`00db2000 fffff880`00dc3000   Npfs     Npfs.SYS     Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`00dcd000 fffff880`00dfd000   CLASSPNP CLASSPNP.SYS Sat Nov 20 01:19:23 2010 (4CE7929B)
fffff880`00e00000 fffff880`00e5e000   msrpc    msrpc.sys    Sat Nov 20 01:21:56 2010 (4CE79334)
fffff880`00e5e000 fffff880`00ebf000   NETIO    NETIO.SYS    Mon May 29 21:17:00 2017 (592CF23C)
fffff880`00ebf000 fffff880`00ecd000   vga      vga.sys      Mon Jul 13 16:38:47 2009 (4A5BC587)
fffff880`00ecd000 fffff880`00edd000   watchdog watchdog.sys Mon Jul 13 16:37:35 2009 (4A5BC53F)
fffff880`00edd000 fffff880`00ee6000   rdpencdd rdpencdd.sys Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`00ee6000 fffff880`00fd9000   NDIS     NDIS.SYS     Mon Oct 12 20:30:31 2015 (561C7AD7)
fffff880`00fd9000 fffff880`00ffe000   VIDEOPRT VIDEOPRT.SYS Mon Jul 13 16:38:51 2009 (4A5BC58B)
fffff880`01000000 fffff880`01019000   HIDCLASS HIDCLASS.SYS Tue Jul  2 21:05:05 2013 (51D3A2F1)
fffff880`01024000 fffff880`0102d000   RDPCDD   RDPCDD.sys   Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff880`0102f000 fffff880`010f1000   Wdf01000 Wdf01000.sys Fri Jun 21 20:13:05 2013 (51C51641)
fffff880`010f1000 fffff880`01101000   WDFLDR   WDFLDR.SYS   Wed Jul 25 19:29:04 2012 (5010AB70)
fffff880`01101000 fffff880`01158000   ACPI     ACPI.sys     Sat Nov 20 01:19:16 2010 (4CE79294)
fffff880`01158000 fffff880`01161000   WMILIB   WMILIB.SYS   Mon Jul 13 16:19:51 2009 (4A5BC117)
fffff880`01161000 fffff880`0116b000   msisadrv msisadrv.sys Mon Jul 13 16:19:26 2009 (4A5BC0FE)
fffff880`0116b000 fffff880`0119e000   pci      pci.sys      Sat Nov 20 01:19:11 2010 (4CE7928F)
fffff880`0119e000 fffff880`011ab000   vdrvroot vdrvroot.sys Mon Jul 13 17:01:31 2009 (4A5BCADB)
fffff880`011ab000 fffff880`011c0000   partmgr  partmgr.sys  Fri Mar 16 21:06:09 2012 (4F641BC1)
fffff880`011c0000 fffff880`011d5000   volmgr   volmgr.sys   Sat Nov 20 01:19:28 2010 (4CE792A0)
fffff880`011d5000 fffff880`011fe000   hpqilo2  hpqilo2.sys  Mon Jan 25 12:50:22 2010 (4B5E040E)
fffff880`01200000 fffff880`01263000   storport storport.sys Thu Mar 10 20:30:23 2011 (4D79A55F)
fffff880`01263000 fffff880`01275000   mup      mup.sys      Mon Jul 13 16:23:45 2009 (4A5BC201)
fffff880`01275000 fffff880`01280000   iaStorF  iaStorF.sys  Mon Oct 28 13:15:28 2013 (526ED3F0)
fffff880`01280000 fffff880`01296000   disk     disk.sys     Mon Jul 13 16:19:57 2009 (4A5BC11D)
fffff880`01296000 fffff880`012a3000   mouhid   mouhid.sys   Mon Jul 13 17:00:20 2009 (4A5BCA94)
fffff880`012a3000 fffff880`0132d000   bxvbda   bxvbda.sys   Fri Aug  2 09:14:51 2013 (51FBDAFB)
fffff880`0132d000 fffff880`01347000   mountmgr mountmgr.sys Sun May  7 07:52:08 2017 (590F3498)
fffff880`01347000 fffff880`01350000   atapi    atapi.sys    Mon Jul 13 16:19:47 2009 (4A5BC113)
fffff880`01350000 fffff880`0137a000   ataport  ataport.SYS  Sat Nov 20 01:19:15 2010 (4CE79293)
fffff880`0137a000 fffff880`01385000   msahci   msahci.sys   Sat Nov 20 02:33:58 2010 (4CE7A416)
fffff880`01385000 fffff880`01395000   PCIIDEX  PCIIDEX.SYS  Mon Jul 13 16:19:48 2009 (4A5BC114)
fffff880`01395000 fffff880`013ab000   lsi_sas2 lsi_sas2.sys Tue Dec 14 07:15:29 2010 (4D078A11)
fffff880`013ab000 fffff880`013f7000   volsnap  volsnap.sys  Sat Nov 20 01:20:08 2010 (4CE792C8)
fffff880`013f7000 fffff880`01400000   Null     Null.SYS     Mon Jul 13 16:19:37 2009 (4A5BC109)
fffff880`01401000 fffff880`016b7000   iaStorA  iaStorA.sys  Mon Oct 28 13:15:26 2013 (526ED3EE)
fffff880`016b7000 fffff880`016c2000   amdxata  amdxata.sys  Fri Mar 19 08:18:18 2010 (4BA3A3CA)
fffff880`016c2000 fffff880`0170e000   fltmgr   fltmgr.sys   Sat Nov 20 01:19:24 2010 (4CE7929C)
fffff880`0170e000 fffff880`01783000   cng      cng.sys      Sat Nov 19 08:03:43 2016 (583077DF)
fffff880`01783000 fffff880`017ae000   ksecpkg  ksecpkg.sys  Thu Aug 10 23:06:33 2017 (598D4969)
fffff880`017ae000 fffff880`017f7000   fwpkclnt fwpkclnt.sys Mon May 29 21:16:49 2017 (592CF231)
fffff880`017f7000 fffff880`01800000   hwpolicy hwpolicy.sys Sat Nov 20 01:18:54 2010 (4CE7927E)
fffff880`01800000 fffff880`0181b000   ksecdd   ksecdd.sys   Thu Aug 10 22:58:52 2017 (598D479C)
fffff880`0181b000 fffff880`0182c000   pcw      pcw.sys      Mon Jul 13 16:19:27 2009 (4A5BC0FF)
fffff880`0182c000 fffff880`01836000   Fs_Rec   Fs_Rec.sys   Wed Feb 29 19:41:06 2012 (4F4EEFD2)
fffff880`01836000 fffff880`01846000   vmstorfl vmstorfl.sys Sat Nov 20 01:57:30 2010 (4CE79B8A)
fffff880`01846000 fffff880`0184e000   spldr    spldr.sys    Mon May 11 09:56:27 2009 (4A0858BB)
fffff880`01852000 fffff880`019f9000   Ntfs     Ntfs.sys     Fri Jun  9 07:54:05 2017 (593AB68D)
fffff880`01a01000 fffff880`01bfd000   tcpip    tcpip.sys    Mon May 29 21:17:34 2017 (592CF25E)
fffff880`02c00000 fffff880`02c0f000   nm3      nm3.sys      Wed Jun  9 17:05:51 2010 (4C102C5F)
fffff880`02c0f000 fffff880`02c1e000   netbios  netbios.sys  Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff880`02c1e000 fffff880`02c3b000   serial   serial.sys   Mon Jul 13 17:00:40 2009 (4A5BCAA8)
fffff880`02c3b000 fffff880`02c56000   wanarp   wanarp.sys   Sat Nov 20 02:52:36 2010 (4CE7A874)
fffff880`02c56000 fffff880`02c6a000   termdd   termdd.sys   Sat Nov 20 03:03:40 2010 (4CE7AB0C)
fffff880`02c6a000 fffff880`02cbb000   rdbss    rdbss.sys    Sat Nov 20 01:27:51 2010 (4CE79497)
fffff880`02cbb000 fffff880`02cc7000   nsiproxy nsiproxy.sys Thu Aug 10 22:58:55 2017 (598D479F)
fffff880`02cc9000 fffff880`02ceb000   tdx      tdx.sys      Sat Jul 29 07:56:29 2017 (597CA21D)
fffff880`02ceb000 fffff880`02cf8000   TDI      TDI.SYS      Sat Nov 20 01:22:06 2010 (4CE7933E)
fffff880`02cf8000 fffff880`02d81000   afd      afd.sys      Tue Apr  4 07:53:16 2017 (58E3B35C)
fffff880`02d81000 fffff880`02dc6000   netbt    netbt.sys    Thu Aug 10 22:59:59 2017 (598D47DF)
fffff880`02dc6000 fffff880`02dd1000   ws2ifsl  ws2ifsl.sys  Mon Jul 13 17:10:33 2009 (4A5BCCF9)
fffff880`02dd1000 fffff880`02dda000   wfplwf   wfplwf.sys   Mon Jul 13 17:09:26 2009 (4A5BCCB6)
fffff880`02dda000 fffff880`02e00000   pacer    pacer.sys    Sat Nov 20 02:52:18 2010 (4CE7A862)
fffff880`03c00000 fffff880`03c10d00   STREAM   STREAM.SYS   Mon Jul 13 17:06:18 2009 (4A5BCBFA)
fffff880`03c11000 fffff880`03c54000   ks       ks.sys       Sat Nov 20 02:33:23 2010 (4CE7A3F3)
fffff880`03c54000 fffff880`03c59200   ksthunk  ksthunk.sys  Mon Jul 13 17:00:19 2009 (4A5BCA93)
fffff880`03c5f000 fffff880`03c6e000   discache discache.sys Mon Jul 13 16:37:18 2009 (4A5BC52E)
fffff880`03c6e000 fffff880`03c8d000   dfsc     dfsc.sys     Thu Sep  8 07:55:13 2016 (57D17BD1)
fffff880`03c8d000 fffff880`03c9e000   blbdrive blbdrive.sys Mon Jul 13 16:35:59 2009 (4A5BC4DF)
fffff880`03c9e000 fffff880`03cc4000   tunnel   tunnel.sys   Sat Nov 20 02:51:50 2010 (4CE7A846)
fffff880`03cc4000 fffff880`03cd6000   usbehci  usbehci.sys  Tue Nov 26 17:41:11 2013 (52954DB7)
fffff880`03cd6000 fffff880`03d2c000   USBPORT  USBPORT.SYS  Tue Nov 26 17:41:11 2013 (52954DB7)
fffff880`03d2c000 fffff880`03d4f000   bxnd60a  bxnd60a.sys  Fri Feb  7 08:42:42 2014 (52F50D02)
fffff880`03d4f000 fffff880`03d90000   g200ewm  g200ewm.sys  Fri Jan 15 10:56:21 2010 (4B50BA55)
fffff880`03d90000 fffff880`03da8000   IPMIDrv  IPMIDrv.sys  Sat Nov 20 02:04:53 2010 (4CE79D45)
fffff880`03da8000 fffff880`03db3000   ICCWDT   ICCWDT.sys   Thu May  4 04:42:54 2017 (590B13BE)
fffff880`03db3000 fffff880`03dbf000   serenum  serenum.sys  Mon Jul 13 17:00:33 2009 (4A5BCAA1)
fffff880`03dbf000 fffff880`03dc8000   wmiacpi  wmiacpi.sys  Mon Jul 13 16:31:02 2009 (4A5BC3B6)
fffff880`03dc8000 fffff880`03dd2000   errdev   errdev.sys   Mon Jul 13 16:31:04 2009 (4A5BC3B8)
fffff880`03dd2000 fffff880`03de8000   intelppm intelppm.sys Mon Jul 13 16:19:25 2009 (4A5BC0FD)
fffff880`03de8000 fffff880`03df8000   CompositeBus CompositeBus.sys Sat Nov 20 02:33:17 2010 (4CE7A3ED)
fffff880`03df8000 fffff880`03dfea00   ManyCam_x64 ManyCam_x64.sys Wed Mar 12 23:46:01 2008 (47D8DBB9)
fffff880`03e0b000 fffff880`03e21000   AgileVpn AgileVpn.sys Mon Jul 13 17:10:24 2009 (4A5BCCF0)
fffff880`03e21000 fffff880`03e45000   rasl2tp  rasl2tp.sys  Sat Nov 20 02:52:34 2010 (4CE7A872)
fffff880`03e45000 fffff880`03e51000   ndistapi ndistapi.sys Mon Jul 13 17:10:00 2009 (4A5BCCD8)
fffff880`03e51000 fffff880`03e80000   ndiswan  ndiswan.sys  Sat Nov 20 02:52:32 2010 (4CE7A870)
fffff880`03e80000 fffff880`03e9b000   raspppoe raspppoe.sys Mon Jul 13 17:10:17 2009 (4A5BCCE9)
fffff880`03e9b000 fffff880`03ebc000   raspptp  raspptp.sys  Sat Nov 20 02:52:31 2010 (4CE7A86F)
fffff880`03ebc000 fffff880`03ed6000   rassstp  rassstp.sys  Mon Jul 13 17:10:25 2009 (4A5BCCF1)
fffff880`03ed6000 fffff880`03ee1000   rdpbus   rdpbus.sys   Mon Jul 13 17:17:46 2009 (4A5BCEAA)
fffff880`03ee1000 fffff880`03ef0000   kbdclass kbdclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff880`03ef0000 fffff880`03eff000   mouclass mouclass.sys Mon Jul 13 16:19:50 2009 (4A5BC116)
fffff880`03eff000 fffff880`03f00480   swenum   swenum.sys   Mon Jul 13 17:00:18 2009 (4A5BCA92)
fffff880`03f01000 fffff880`03f13000   umbus    umbus.sys    Sat Nov 20 02:44:37 2010 (4CE7A695)
fffff880`03f13000 fffff880`03f6d000   usbhub   usbhub.sys   Tue Nov 26 17:41:36 2013 (52954DD0)
fffff880`03f6d000 fffff880`03f82000   NDProxy  NDProxy.SYS  Sat Nov 20 02:52:20 2010 (4CE7A864)
fffff880`03f82000 fffff880`03f90000   crashdmp crashdmp.sys Mon Jul 13 17:01:01 2009 (4A5BCABD)
fffff880`03f90000 fffff880`03f9a000   dump_diskdump dump_diskdump.sys Fri Apr 22 13:04:32 2011 (4DB1DF50)
fffff880`03f9a000 fffff880`03fb0000   dump_LSI_SAS2 dump_LSI_SAS2.sys Tue Dec 14 07:15:29 2010 (4D078A11)
fffff880`03fb0000 fffff880`03fcd000   usbccgp  usbccgp.sys  Tue Nov 26 17:41:15 2013 (52954DBB)
fffff880`03fcd000 fffff880`03fcee80   USBD     USBD.SYS     Tue Nov 26 17:41:03 2013 (52954DAF)
fffff880`03fcf000 fffff880`03fdb000   Dxapi    Dxapi.sys    Mon Jul 13 16:38:28 2009 (4A5BC574)
fffff880`03fdb000 fffff880`03fe9000   hidusb   hidusb.sys   Sat Nov 20 02:43:49 2010 (4CE7A665)
fffff880`03fe9000 fffff880`03ff1080   HIDPARSE HIDPARSE.SYS Tue Jul  2 21:05:04 2013 (51D3A2F0)
fffff880`03ff2000 fffff880`04000000   kbdhid   kbdhid.sys   Sat Nov 20 02:33:25 2010 (4CE7A3F5)
fffff880`04400000 fffff880`0444e000   mrxsmb10 mrxsmb10.sys Thu Aug 10 22:59:34 2017 (598D47C6)
fffff880`0444e000 fffff880`04472000   mrxsmb20 mrxsmb20.sys Thu Aug 10 22:59:32 2017 (598D47C4)
fffff880`04472000 fffff880`044da000   srv2     srv2.sys     Thu Aug 10 22:59:46 2017 (598D47D2)
fffff880`044fa000 fffff880`04508000   monitor  monitor.sys  Mon Jul 13 16:38:52 2009 (4A5BC58C)
fffff880`04508000 fffff880`0452b000   luafv    luafv.sys    Mon Jul 13 16:26:13 2009 (4A5BC295)
fffff880`0452b000 fffff880`0456a000   MbamChameleon MbamChameleon.sys Tue Oct 15 08:16:28 2019 (5DA5E2CC)
fffff880`0456a000 fffff880`0457f000   lltdio   lltdio.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`0457f000 fffff880`04597000   rspndr   rspndr.sys   Mon Jul 13 17:08:50 2009 (4A5BCC92)
fffff880`04597000 fffff880`045b4000   bowser   bowser.sys   Wed Oct  5 07:54:43 2016 (57F51433)
fffff880`045b4000 fffff880`045cc000   mpsdrv   mpsdrv.sys   Mon Jul 13 17:08:25 2009 (4A5BCC79)
fffff880`045cc000 fffff880`045f9000   mrxsmb   mrxsmb.sys   Thu Aug 10 23:00:08 2017 (598D47E8)
fffff880`05400000 fffff880`05431000   srvnet   srvnet.sys   Thu Aug 10 22:59:39 2017 (598D47CB)
fffff880`05431000 fffff880`05443000   tcpipreg tcpipreg.sys Wed Oct  3 09:07:26 2012 (506C62BE)
fffff880`05471000 fffff880`05539000   HTTP     HTTP.sys     Thu Jun 15 13:23:45 2017 (5942ECD1)
fffff880`05539000 fffff880`055e3000   peauth   peauth.sys   Tue Jun 14 10:11:06 2016 (57603AAA)
fffff880`06e20000 fffff880`06eb5000   srv      srv.sys      Thu Aug 10 22:59:53 2017 (598D47D9)
fffff880`06eb5000 fffff880`06ee3000   rdpdr    rdpdr.sys    Sat Nov 20 03:06:41 2010 (4CE7ABC1)
fffff880`06ee3000 fffff880`06eee000   tdtcp    tdtcp.sys    Thu Feb 16 20:57:32 2012 (4F3DDE3C)
fffff880`06eee000 fffff880`06efd000   tssecsrv tssecsrv.sys Wed Jul 16 18:21:26 2014 (53C72516)
fffff880`06efd000 fffff880`06f37000   RDPWD    RDPWD.SYS    Wed Jul 16 18:21:53 2014 (53C72531)
fffff880`06f37000 fffff880`06f7e000   mbamswissarmy mbamswissarmy.sys Wed Aug  7 13:26:54 2019 (5D4B340E)
fffff880`06fef000 fffff880`06ffa000   asyncmac asyncmac.sys Mon Jul 13 17:10:13 2009 (4A5BCCE5)
fffff960`000b0000 fffff960`003d8000   win32k   win32k.sys   Wed Aug 16 07:57:40 2017 (59945D64)
fffff960`004a0000 fffff960`004be000   dxg      dxg.sys      Mon Jul 13 16:38:28 2009 (4A5BC574)
fffff960`00760000 fffff960`0076a000   TSDDD    TSDDD.dll    Mon Jul 13 17:16:34 2009 (4A5BCE62)
fffff960`008f0000 fffff960`00926000   G200eWd  G200eWd.dll  unavailable (00000000)
fffff960`00aa0000 fffff960`00ae8000   RDPDD    RDPDD.dll    unavailable (00000000)

Unloaded modules:
fffff880`06f7e000 fffff880`06fef000   spsys.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00071000
fffff880`01000000 fffff880`0100e000   crashdmp.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000E000
fffff880`01296000 fffff880`012a0000   dump_storpor
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0000A000
fffff880`0100e000 fffff880`01024000   dump_LSI_SAS
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  00016000
fffff880`00db2000 fffff880`00dcd000   sacdrv.sys
    Timestamp: unavailable (00000000)
    Checksum:  00000000
    ImageSize:  0001B000
Closing open log file c:\debuglog.txt

I have deployed a Windows 2016 server as a Hyper-V host.  However the server manager is always showing Red for Local Server and All Servers under Services.  The services are Sync Host_3d6a513 and Downloaded Maps Manager. 

I can start the Sync Host service but the Downloaded Maps Manager starts then stops.  Does not seem to be causing issues but I would like to see a Green status in my Server Manager.  Can I just set these to manual?  Do I even need them?

We have a server running Windows Server 2016 Essentials with Windows Server Backup backing up to a WD My Passport external hard drive. Over the past year, we've seen random warnings where backups were "Completed with warnings" and the bare metal restore portion failed. These warnings happen inconsistently from once a month to several times a month (6 times last month). We don't see any patterns that cause it to fail or succeed. There aren't any other scheduled tasks or backups running during this time.

The eventlog has several errors at the backup time:

1. Source: DeviceSetupManager Event ID: 131 - Metadata staging failed, result=0x8007000D for container '{00000000-0000-0000-FFFF-FFFFFFFFFFFF}'

2. Source: VSS Event ID: 8229 - 

A VSS writer has rejected an event with error 0x800423f2, The writer's timeout expired between the Freeze and Thaw events.
. Changes that the writer made to the writer components while handling the event will not be available to the requester. Check the event log for related events from the application hosting the VSS writer. 

Operation:
   Thaw Event

Context:
   Execution Context: Writer
   Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Writer Name: Registry Writer
   Writer Instance ID: {f2595c5a-ccdf-4122-aa1e-d7fff661237e}
   Command Line: C:\Windows\system32\vssvc.exe
   Process ID: 7764

3. Many Source: SPP errors Event ID: 16389

Writer System Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer ASR Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer Shadow Copy Optimization Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer FRS Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer Registry Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer COM+ REGDB Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer MSSearch Service Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer Windows Server Storage VSS Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer WMI Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer Certificate Authority experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer NTDS experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer IIS Config Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer Dhcp Jet Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

Writer IIS Metabase Writer experienced retryable error during shadow copy creation. Retrying...  More info: .

4. Source: Disk  Event ID: 51 - An error was detected on device \Device\Harddisk2\DR133 during a paging operation.

5. Many Source: FilterManager Event ID: 3 - Filter Manager failed to attach to volume '\Device\Harddisk2\DR134'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xC03A001C.

We tried the following without success:

1. Replacing backup drive
2. Increase freeze-thaw timeout per https://success.solarwindsmsp.com/kb/solarwinds_backup/Error-VSS-error-0x800423f2-The-writer-s-timeout-expired-between-the-Freeze-and-Thaw-events?q=VSS%20error%200x800423f2

Any help would be appreciated, thanks.

there is a bug in my computer, i have to fix it. but my computer(windows server 2008 R2) cannot install the update,please reply as soon as possible!!Thanks!!!

This alert said ： ”此更新不适用于您的计算机“ 

Hello,

I met a DFS replication issue recently, when I try to starup the DFS service and running for a while, the system will show an error event 2004 and 2104. Actually I have searched for some solutions on the internet, what I have done is trying to use command"chkdsk E: /F /R" to the fix the disk issue and it also finished. After that I am trying to re-startup the DFS server , it still has the same errors. Some solutions mentioned that the DFS database should be recovered, I have no idea if anything related, if it is the case, how can I recover this issue? I am not familiar on the DFS, if someone can provide me detailed steps , that would be appreciated!

My environment and issue is on the Server-B E: volume

1. Only two ways replications

3. Server-A(Win2012 R2 STD) replicated volume F:\ mounted from a storage with deduplication function;   Totally space : 19.9T Free Space: 10.08T

3. Server-B(Win2012 R2 STD) replicated volume E:\ mounted from a storage with deduplication function;   Totally space : 15.9T Free Space: 6.59T

DFS report below
Volume E: Full or faulty.
Affected copied folders: Transportation Technology Department (new)
Description: The DFS Replication service has stopped replication on volume E:. This failure can occur if the disk is full, the disk fails, or the quota limit has been reached. Event ID: 2004
Last time: November 18, 2019 at 14:24:06 (GMT8:00)
Suggested action: Increase the free disk space on the specified volume or move the copied folder to another volume. See the information about disk space under the Information section of the "Disk Space Used by Replicated Folders" table.

Database issues are preventing replication on volume E:.
Affected copied folders: Transportation Technology Department (new)
Description: The DFS Replication service failed to recover from an internal database error on volume E:. All replicated folders on this volume have been stopped before the database is automatically rebuilt. If the database is successfully rebuilt, the replication will resume after the rebuild is complete. If the database cannot be rebuilt, a separate event will be generated. If you find this error appears more than twice in seven days, it is recommended that you run Chkdsk on the volume that contains the database. Event ID: 2104
Last time: November 18, 2019 at 14:24:06 (GMT8:00)
Suggested action: For information about resolving this issue, see the Microsoft website.

Anybody can help on this case? Thanks for your kindly support!!

       

Hello!

Been puzzled by the following issue: after enabling ESP I sometimes get strange results when tracing ping command. The problem is that the single command "ping somehost" which usually produces 8 packets (4 requests and 4 replies) may produce only 6 or even 4 esp packets, for example:

1) ping somehost

- that's as expected.

2) ping somehost

- only 6 out of 8

3) ping somehost

- only 4 out of 8

I can hardly imagine how the presence of ESP may affect the number of packets sent/received - what am I missing here?

Thank you in advcance,
Michael

Faulting application name: mmc.exe, version: 10.0.14393.2097, time stamp: 0x5a820e5d
Faulting module name: GPOAdmin.dll, version: 10.0.14393.2068, time stamp: 0x5a7e7062
Exception code: 0xc0000005
Fault offset: 0x00000000000be1d6
Faulting process id: 0x3a8
Faulting application start time: 0x01d428f2d03e703a
Faulting application path: C:\Windows\system32\mmc.exe
Faulting module path: C:\Windows\System32\GPOAdmin.dll
Report Id: a87fb79e-672e-4311-b356-b574aa4c2245
Faulting package full name:
Faulting package-relative application ID:

Hi,

  Since our company's goal is to keep Windows Server 2016/2012/2008 high available, I rarely use windows update. I install individual hotfixes for vulnerability(e.g. MS17-10, CVE-2019-0708) instead. However, is there any tools that can confirm that all my Windows servers are secured? I try Microsoft Security Baseline Analyzer, Metasploit Framework, Nmap, CVE-2019-0708 scanner( https://github.com/robertdavidgraham/rdpscan ), all these can do some sort of work. however, I still look for a one solution that can scan all my servers, all vulnerabilities and make sure that all servers are patches and secured.

  You may say "ok, use WSUS and run  patch automatically". It does not work for us.

1. Some Windows updates apply immediately and it will shutdown mission-critical application server like SAP system.(In Windows server 2003 or 2000, but I am not sure if Windows Server 2016 works like this way now)

2. Our best practice is deploy patches with testing. (Development system => Quality Assurance System => Production System)

    Some windows updates are features updates, not security updates so it is not necessary. Also, it is troublesome in these two years. Sorry, No offense.

3. I heard about nessus, is it the best solution for this? But I know it is not a freeware.

Ave,

I operate some 20+ VM's with Server 2019, at the front of them there's a pair of IIS Gateway & Connection Broker servers that manage the remote desktop services collections and the login/traffic. All fairly normal.

I've just added a new server into the collections, and it appeared to deploy just fine. When I login to the gateway via browser, I can see the new VM's RDP link. However, when I download the RDP link, the server address hasn't been populated.

None of the other links have this issue.

Any thoughts on how to quickly debug / fix - I'd like to avoid having to undo/redo the whole collection if possible?

Cheers.

I'm trying to trace a problem we're having with network printing.  Serveral documents will be sent to a network printer, and mid way through the print, it will stall.  The spooler is running, but nothing is being sent to the printer.  I checked the event viewer and notice that there is a gap between Event IDs 801 Print Diagnostics, and 842 Isolating Printer Drivers and Other Plugins.  It's a minute between them.  These pauses are seemingly random and do not occur all the time.  But it's consistently inconsistent.

We have a total of 7 network printers (all the same model) running on print servers on separate Win2k8 R2 servers.  2 queues have this issue, and 5 queues do not.  Swapping network cables didn't fix, and the same print job was sent to another queue and it printed without pausing. 

So I'm wondering how I get more information to know what is going on during that minute?  Assuming for the 801 ID.

Thanks in advance for any help with this.

Hi 

The subnet is 192.168.251.0/24 ,  and I fill in 192.168.251.25 for the ip address of the access point of the WSFC.

After the cluster successful installed , I find out that " Microsoft Failover Cluster Virtual Adapter" is installed on both cluster nodes.

But its ip is '169.254.2.x' . I thought that "192.168.251.25" should be config on either one node ( master node) .

Is there something wrong or whether I do not understood it  correctly .

In linux world, there is a software called "keepalived" ,which is mainly manage the VIP(virtual IP) between the cluster nodes.

Is the  "ip address of the access point of the WSFC"  the same user case like that ?

if not , is there any implement similar as "keepalived" in windows world ?

Thank you !

Hi All,

I want to activate Windows servers and Workstations. I wanted to avoid using internet connection or phone call to activate the license since i have multiple machines.

Please suggest what will be the other best option to activate the license automatically without internet

---

Regards, Pratap

I have Office Outlook 2010 loaded.  I have 9 pst files. I don't need 9.  I can delete some but there are some that will not let me delete them.  Why?  Some are empty and it will not let me delete them.  I am a home computer user.  Non on a network.  I am the administrator. 

I need to be able to activate Windows Server 2019 but getting error.

cscript slmgr.vbs /ipk 12345-12345-12345-12345-V4QMY

Error: 0xC004F050 The Software Licensing Service reported that the product key is invalid

The key is downloaded from VLSC for our organization.

I have a KMS host on Windows Server 2012 R2 with July 2016 Quality Roll Up KB3172614 and Servicing Stack KB3173424 installed. We do not use Active Directory for activation. So,according to this <doc> I have the prerequisites for this Windows Server 2012 R2 to be able to activate Windows Server 2019. And according to this <doc> the prerequisites as well.  Currently we are activating Windows Server 2016 from this KMS host. Please tell me how I can troubleshoot and fix this problem.

Here is the same error in the Application event log:

Log Name:      Application
Source:        Microsoft-Windows-Security-SPP
Date:          11/6/2019 2:37:40 PM
Event ID:      1017
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      corp-dc02.corp.xxx.com
Description:
Installation of the Proof of Purchase failed. 0xC004F050
Partial Pkey=V4QMY
ACID=?
Detailed Error[?]

P.S. What is going on with the microscopic font size in this TechNet forum?!

Good afternoon everyone;

  I've been encountering the same error about every 30 minutes that I can't figure out.  It's been going on for quite some time and "Google" isn't being my friend.  I'm seeing this in the Application Logs:

This is on a fully patched, Server 2012 R2 domain controller.  Because every where I look, this error returns references to exchange; exchange isn't installed on my network.  If more details are needed, please just ask!  I'm not even sure where to look for to get additional information.  I do know the UserID sid that's listed is the Administrator's account.

Hi, everyone
I have both internal and external networks open at the same time.
Now, I have some websites that can only be accessed through the internal network.
Can you please help me, how to specify the internal network to access the designated website?

I have a powershell script that accepts a parameter list of servers to reboot.

I run this once per week to apply updates to the servers.

What I am finding is that if there happens to be a window left open on a session that is not logged off just disconnected the -Force does not Force the app closed and do the restart.

If I run the command locally on the server it closes the apps and does the restart.

Is there a setting somewhere that allows remote force restart.

Forgot to mention my environment is 2008R2, 2012 and 2016.

Thanks

How do I deal with a space in a directory name in Robocopy?

e.g.   Copy all files from C:\My Directory to E:\My Directory

Robocopy C:\"My Directory" E:\"My Directory" *.* doesn't work

Thanks

Where can I get an image of server 2016 in 32 bit.