Hi

i am using Windows server 2008R2 with IIS and i don't know why but svchost.exe started to taking 4.5GB of memory

i really don't know why it's happen and how to solve it.

EL

you can find screenshot attach.

Faulting application name: taskmgr.exe, version: 6.1.7601.17514, time stamp: 0x4ce79737

Faulting module name: taskmgr.exe, version: 6.1.7601.17514, time stamp: 0x4ce79737

Exception code: 0xc0000005

Fault offset: 0x000000000000d2b1

Faulting process id: 0xfb4

Faulting application start time: 0x01cf907a3972d262

Faulting application path: C:\Windows\system32\taskmgr.exe

Faulting module path: C:\Windows\system32\taskmgr.exe

Report Id: 784db3b2-fc6d-11e3-a388-441ea149f216

I am getting the above error when I try to open the task manager, I have check for windows updates the server has the latest updates, scanned for viruses and also logged in with different users but the error keeps persisting

Any Ideas.

Thanks

Kind Regards

Zakaria Khan

I am out of ideas with this one. We have one server that is failing to install this months updates with error code 0x80071A91, which seems to be one of the more mysterious Windows Update error codes. I am looking for a structured way of resolving this error either via these forums or finally by raising a support call with Microsoft directly. The first update which records an error within the System event.log is KB2953522 with error 0x80242016, all subsequent attempts to update via Windows Update has resulted in Error Code 0x80071A91

I have tried the following so far, with no success after each step:

- Restarted system with only Microsoft Services running

- Stopped WU Service, renamed SoftwareDistribution Folder and Restarted WU Service

- Changed TrustedInstaller Service to run as Automatic startup type as opposed to manual

- Re-registered Windows Update files

- Installed System Update Readiness Tool

- Ran chkdsk against all volumes, no issues found

- Disabled Anti Virus software

I enabled verbose logging for Windows Update, which threw up the following error codes:

WindowsUpdate.log:

- 2014-06-24 12:29:44:745 9740 2ad4 Handler FATAL: CBS called Error with 0x80071a91,

- 2014-06-24 12:29:44:791 9740 276c Handler FATAL: Completed install of CBS update with type=0, requiresReboot=0, installerError=1, hr=0x80071a91

- 2014-06-24 12:29:16:820  980 11c4 DnldMgr WARNING: Matched the file to be copied on name, windows6.1-kb2957509-x64.cab

- 2014-06-24 12:29:16:992  980 11c4 DnldMgr WARNING: Matched the file to be copied on name, windows6.1-kb2957503-x64.cab

- 2014-06-24 12:29:17:272  980 11c4 DnldMgr WARNING: Matched the file to be copied on name, ie11-windows6.1-kb2957689-x64.cab

- 2014-06-24 12:29:19:035  980 11c4 DnldMgr WARNING: Matched the file to be copied on name, ie11-windows6.1-kb2963950-x64.cab

- 2014-06-24 12:29:20:502  980 11c4 DnldMgr WARNING: Matched the file to be copied on name, windows6.1-kb2957189-x64.cab

- 2014-06-24 12:29:20:689  980 11c4 DnldMgr WARNING: Matched the file to be copied on name, windows6.1-kb2939576-x64.cab

- 2014-06-24 12:29:20:892  980 11c4 DnldMgr WARNING: Matched the file to be copied on name, windows6.1-kb2800095-v2-x64.cab

- 2014-06-24 12:29:26:508  980 2cbc Agent WARNING: failed to calculate prior restore point time with error 0x80070002; setting restore point

- 2014-06-24 12:29:26:508  980 2cbc Agent WARNING: LoadLibrary failed for srclient.dll with hr:8007007e

- 2014-06-24 12:32:13:400 10452 2f44 COMAPI   - WARNING: Exit code = 0x00000000; Call error code = 0x80240022

- 2014-06-24 12:37:38:824 8852 2a98 WUApp WARNING: Couldn't retrieve featured update notifications, hr=0, lcid=00000409

- 2014-06-24 12:41:28:548  980 1700 AU WARNING: Returning due to error from GetDownloadProgressUx, error = 0x8024000C

- 2014-06-24 12:41:28:548  980 1700 AU WARNING: GetInteractiveInstallProgress failed, error = 0x8024000C

- 2014-06-24 12:41:28:548 8852 276c WUApp WARNING: Call to GetInteractiveInstallProgress failed, hr=8024000C

- 2014-06-24 12:40:48:053  980 250c AU   # WARNING: Install failed, error = 0x80071A91 / 0x80071A91

- 2014-06-24 12:41:27:597  980 250c AU   # WARNING: Install call completed, reboot required = No, error = 0x00000000

CheckSUR.log:

 =================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 25.0
2014-06-24 12:05
Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
Checking Package Watchlist
Checking Component Watchlist
Checking Packages
Checking Component Store

CheckSUR.persist.log:

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 25.0
2014-06-23 14:34
Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
Checking Package Watchlist
Checking Component Watchlist
Checking Packages
Checking Component Store
Summary:
Seconds executed: 2801
 No errors detected
=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 25.0
2014-06-24 12:05
Checking Windows Servicing Packages
Checking Package Manifests and Catalogs
Checking Package Watchlist
Checking Component Watchlist
Checking Packages
Checking Component Store

CBS.log:

2014-06-24 12:55:56, Info                  CBS    SQM: Failed to start upload with file pattern: C:\Windows\servicing\sqm\*_std.sqm, flags: 0x2 [HRESULT = 0x80004005 - E_FAIL]
2014-06-24 12:55:56, Info                  CBS    SQM: Failed to start standard sample upload. [HRESULT = 0x80004005 - E_FAIL]
2014-06-24 12:55:56, Info                  CBS    SQM: Warning: Failed to upload all unsent reports. [HRESULT = 0x80004005 - E_FAIL]
2014-06-24 12:55:56, Error                 CSI    00000007 (F) STATUS_RM_NOT_ACTIVE #155# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0xd2ec10->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped dis (0x00d2ebb0))[gle=0xd0190005]
2014-06-24 12:55:56, Error                 CSI   00000008@2014/6/24:11:55:56.207 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
2014-06-24 12:55:57, Error                 CSI    00000009 (F) STATUS_RM_NOT_ACTIVE #154# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0xd2ec10->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped dis (0x00d2ed88))[gle=0xd0190005]
2014-06-24 12:55:57, Error                 CSI   0000000a@2014/6/24:11:55:57.205 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
2014-06-24 12:55:58, Error                 CSI    0000000b (F) STATUS_RM_NOT_ACTIVE #153# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
2014-06-24 12:55:58, Info                  CSI    0000000c Warning: Failed to delete pending transaction content. Error code: STATUS_RM_NOT_ACTIVE
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:00, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:56:00, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:56:07, Info                  CBS    Appl: DetectUpdate, Package: Microsoft-Windows-Smtpsvc-Service-Package~31bf3856ad364e35~amd64~~6.1.7601.17514, Remote Parent: IIS-ODBCLogging, Parent Missing (ERROR_FILE_NOT_FOUND), non-critical error, ignored, check case sensitivity
2014-06-24 12:57:12, Info                  CBS    Failed to get session package state for package: Package_2_for_KB2957509~31bf3856ad364e35~amd64~~6.1.1.2 [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-06-24 12:57:13, Info                  CBS    Failed to get session package state for package: Package_2_for_KB2957503~31bf3856ad364e35~amd64~~6.1.1.2 [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:13, Info                  CBS    Failed to get next element [HRESULT = 0x800f080d - CBS_E_MANIFEST_INVALID_ITEM]
2014-06-24 12:57:13, Info                  CBS    Warning: Unrecognized packageExtended attribute.
2014-06-24 12:57:34, Error                 CSI    0000008e (F) STATUS_RM_NOT_ACTIVE #192432# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x353e7f0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped dis (0x0353e790))[gle=0xd0190005]
2014-06-24 12:57:34, Error                 CSI   0000008f@2014/6/24:11:57:34.755 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
2014-06-24 12:57:35, Error                 CSI    00000090 (F) STATUS_RM_NOT_ACTIVE #192431# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x353e7f0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped dis (0x0353e968))[gle=0xd0190005]
2014-06-24 12:57:35, Error                 CSI   00000091@2014/6/24:11:57:35.410 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
2014-06-24 12:57:36, Error                 CSI    00000092 (F) STATUS_RM_NOT_ACTIVE #192430# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
2014-06-24 12:57:36, Error                 CSI    00000093 (F) STATUS_RM_NOT_ACTIVE #192416# from ApplyTransactionPOQsToSil(...)[gle=0xd0190005]
2014-06-24 12:57:36, Error                 CSI    00000094 (F) STATUS_RM_NOT_ACTIVE #192386# from Windows::COM::CComponentStore::ApplyTransactionNow(...)[gle=0xd0190005]
2014-06-24 12:57:36, Error                 CSI    00000095 (F) HRESULT_FROM_WIN32(6801) #192378# from Windows::COM::CPendingTransaction::IStorePendingTransaction_Apply(...)[gle=0x80071a91]
2014-06-24 12:57:36, Error                 CSI    00000096 (F) HRESULT_FROM_WIN32(6801) #168627# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_Commit(Flags = 38 (0x00000026), pSink = NULL, disp = 0, coldpatching = FALSE)[gle=0x80071a91]
2014-06-24 12:57:36, Error                 CSI    00000097 (F) HRESULT_FROM_WIN32(6801) #168626# 4525368 us from Windows::ServicingAPI::CCSITransaction_ICSITransaction::Commit(flags = 0x00000026, pSink = NULL, disp = 0)
2014-06-24 12:57:36, Error                 CBS    Exec: Failed to commit CSI transaction to resolve execution chain. [HRESULT = 0x80071a91 - ERROR_RM_NOT_ACTIVE]
2014-06-24 12:57:36, Info                  CBS    Failed to resolve execution chain. [HRESULT = 0x80071a91 - ERROR_RM_NOT_ACTIVE]
2014-06-24 12:57:36, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x80071a91 - ERROR_RM_NOT_ACTIVE]
2014-06-24 12:57:36, Info                  CBS    WER: Generating failure report for package: Package_for_KB2957689~31bf3856ad364e35~amd64~~11.2.1.0, status: 0x80071a91, failure source: Resolve, start state: Absent, target state: Installed, client id: WindowsUpdateAgent
2014-06-24 12:57:36, Info                  CBS    Failed to query DisableWerReporting flag.  Assuming not set... [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
2014-06-24 12:57:36, Info                  CBS    Failed to add %windir%\winsxs\pending.xml to WER report because it is missing.  Continuing without it...
2014-06-24 12:57:36, Info                  CBS    Failed to add %windir%\winsxs\pending.xml.bad to WER report because it is missing.  Continuing without it...
2014-06-24 12:57:37, Info                  CBS    SQM: Reporting package change for package: Package_for_KB2957689~31bf3856ad364e35~amd64~~11.2.1.0, current: Absent, pending: Default, start: Absent, applicable: Installed, target: Installed, limit: Installed, hotpatch status: StillGoing, status: 0x0, failure source: Resolve, reboot required: False, client id: WindowsUpdateAgent, initiated offline: False, execution sequence: 844, first merged sequence: 844
2014-06-24 12:57:37, Info                  CBS    SQM: Reporting package change completion for package: Package_for_KB2957689~31bf3856ad364e35~amd64~~11.2.1.0, current: Absent, original: Absent, target: Installed, status: 0x80071a91, failure source: Resolve, failure details: "(null)", client id: WindowsUpdateAgent, initiated offline: False, execution sequence: 844, first merged sequence: 844
2014-06-24 12:57:37, Info                  CBS    SQM: resolve time performance datapoint is invalid. [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-06-24 12:57:37, Info                  CBS    SQM: stage time performance datapoint is invalid. [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-06-24 12:57:37, Info                  CBS    SQM: execute time performance datapoint is invalid. [HRESULT = 0x80070490 - ERROR_NOT_FOUND]
2014-06-24 12:57:37, Info                  CBS    SQM: Failed to initialize Win SAT assessment. [HRESULT = 0x80040154 - Unknown Error]
2014-06-24 12:57:37, Info                  CBS    SQM: average disk throughput datapoint is invalid [HRESULT = 0x80040154 - Unknown Error]
2014-06-24 12:57:37, Info                  CBS    Exec: Processing complete.  Session: 30379939_1877002549, Package: Package_for_KB2957689~31bf3856ad364e35~amd64~~11.2.1.0 [HRESULT = 0x80071a91 - ERROR_RM_NOT_ACTIVE]
2014-06-24 12:57:57, Error                 CSI    000000d7 (F) STATUS_RM_NOT_ACTIVE #232679# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x353e7f0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped dis (0x0353e790))[gle=0xd0190005]
2014-06-24 12:57:57, Error                 CSI   000000d8@2014/6/24:11:57:57.578 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
2014-06-24 12:57:57, Error                 CSI    000000d9 (F) STATUS_RM_NOT_ACTIVE #232678# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0}, da = (KEY_SET_VALUE|KEY_WOW64_64KEY), oa = @0x353e7f0->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[28]"\Registry\Machine\COMPONENTS"; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped dis (0x0353e968))[gle=0xd0190005]
2014-06-24 12:57:57, Error                 CSI   000000da@2014/6/24:11:57:57.703 (F) d:\win7sp1_gdr\base\wcp\sil\merged\ntu\ntsystem.cpp(3676): Error STATUS_RM_NOT_ACTIVE originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
2014-06-24 12:57:57, Error                 CSI    000000db (F) STATUS_RM_NOT_ACTIVE #232677# from Windows::Rtl::SystemImplementation::CSystemIsolationLayer_IRtlSystemIsolationLayerTearoff::OpenRegistryKey(flags = (OpenForBackupIntent), da = (KEY_SET_VALUE), kn = [ml:58{29},l:56{28}]"\Registry\Machine\COMPONENTS", key = NULL, disp = (null))[gle=0xd0190005]
2014-06-24 12:57:57, Error                 CSI    000000dc (F) STATUS_RM_NOT_ACTIVE #232666# from ApplyTransactionPOQsToSil(...)[gle=0xd0190005]
2014-06-24 12:57:57, Error                 CSI    000000dd (F) STATUS_RM_NOT_ACTIVE #232636# from Windows::COM::CComponentStore::ApplyTransactionNow(...)[gle=0xd0190005]
2014-06-24 12:57:57, Error                 CSI    000000de (F) HRESULT_FROM_WIN32(6801) #232628# from Windows::COM::CPendingTransaction::IStorePendingTransaction_Apply(...)[gle=0x80071a91]
2014-06-24 12:57:57, Error                 CSI    000000df (F) HRESULT_FROM_WIN32(6801) #219554# from Windows::ServicingAPI::CCSITransaction::ICSITransaction_Commit(Flags = 38 (0x00000026), pSink = NULL, disp = 0, coldpatching = FALSE)[gle=0x80071a91]
2014-06-24 12:57:57, Error                 CSI    000000e0 (F) HRESULT_FROM_WIN32(6801) #219553# 1923479 us from Windows::ServicingAPI::CCSITransaction_ICSITransaction::Commit(flags = 0x00000026, pSink = NULL, disp = 0)
2014-06-24 12:57:57, Error                 CBS    Exec: Failed to commit CSI transaction to resolve execution chain. [HRESULT = 0x80071a91 - ERROR_RM_NOT_ACTIVE]
2014-06-24 12:57:57, Info                  CBS    Failed to resolve execution chain. [HRESULT = 0x80071a91 - ERROR_RM_NOT_ACTIVE]
2014-06-24 12:57:57, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x80071a91 - ERROR_RM_NOT_ACTIVE]
2014-06-24 12:57:57, Info                  CBS    WER: Generating failure report for package: Package_for_KB2963950~31bf3856ad364e35~amd64~~11.2.1.0, status: 0x80071a91, failure source: Resolve, start state: Absent, targe

Kevin Evans

Hi,

We have 1 WDS server, a Windows 2008 R2 server. We use it to push Windows 7 SP1 on our desktops.

I want to install this image on our new Latitude E7240 Dell laptops. I added all the drivers from the Dell Driver CAB for this model to the WDS server, and totally rebuilded the image. howerver my laptop fails to install. I added the Intel drivers for this model and rebuilded but still no effect. What am I doing wrong?

here is the error:

"A connection to the deployment share (\\server\xxx) could not be made.

The following networking device did not have a driver installed.

PCI\VEN_8086&DEV_155A&SUBSYS_05CA1028&REV_04

can anyone help me?

Hello,

I would like to permenantly delete some data in the current filesystem and in the vss snapshots/history.

f.ex.:
If vss history is enabled on a drive f.ex. d: and I have the following directory structure:

d:\data\aaa
d:\data\bbb
d:\data\ccc
etc etc

No, I'm permanently deleting the directory d:\data\bbb.

The d:\data\bbb directory will still exist in the VSS history.

How can you purge/delete the d:\data\bbb in the entire VSS history (while of course keeping the vss history of d:\data\aaa, d:\data\ccc, etc) ?

Is that possible and is there an easy/fast way to do it?

Thanks a lot!

Didier

I have trouble with Windows Server 2003 R2 Standard. I installed the KB2893294(MS13-098) patch, and I changed the registry that is suggested actions of Security Advisory(2915720) http://technet.microsoft.com/en-us/security/advisory/2915720

Suggested Actions:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Wintrust\Config]
"EnableCertPaddingCheck"="1"

After rebooting the event viewer(system) says:

 Event Type: Error
 Event Source: TermService
 Event Category: None
 Event ID: 1014
 User:  N/A
 Description:
 Cannot load illegal module: C:\Windows\system32\rdpwsx.DLL

After I cannot use Remote Desktop Connection from other client.

So I check the all security patches and other hotfixies. I checked the KB2653956 and KB958476.

But TermService do not recover the error.

And then, I delete the "EnableCertPaddingCheck" registry and reboot systems.

TermService have no error. I can use Remote Desktop Connection from other client.

After KB2893294 installed, Remote Desktop Connection cannot use from other client that "EnableCertPaddingCheck" registry set to "1".

Other Windows Server 2008 systems do not effect the KB2893294 patch. But All Windows Server 2003 systems cannot use the Remote Desktop Connections after the KB2893294 patch.

hello,

my windows service running on Windows Server 2008 R2 SP1 stopps two or three times per month undefined with the Event ID 7036 : service entered the stopped state. 10 mins later it starts again alone: service entered the running state.

What I also see is that some other services enter in the stopped state and then enter the running state: with Event ID 7036, but more frequently, means several times per day:

SoftwareProtectionService

WindowsModuleInstaller

ApplicationExperience

WMI Performance Adapter

Portable Device Enumerator Service

What is the problem here, I could not find any solution yet.

thx

I am attempting to install Visual Web Developer 2008 Express Edition on a Server 2008 Standard SP2, which all ready includes SQL Server 2008. The installer includes SQL Server Express, which is failing without any error codes. 

Visual Web Developer only partly installs. The tools folder has a shortcut to Remote Debugger, as the only component to succeed. It seems this is the newest version of Visual Studio compatible with Server 2008 Standard.

My real goal is to create an empty Win Forms site bound to its existing SQL Server 2008 and then drop my completed development site pages into the production server. I need a successful complete install.

Thanks,

Kurt

Hi all,

in Windows Server 2008 SP2:

When trying to install "MSXML 4.0 SP3 Parser" (http://www.microsoft.com/en-us/download/details.aspx?id=15697) we get an error message:

An error occured during the installation of assembly component
{749100E4-79A4-398A-A06B-D6B9ABF34537}.
HRESULT: 0x:80070003

Any kind of help is very much appreciated.

Best regards
Gernot

Eventvwr:
======

Greetings/Grüße Gernot

First time I've posted here, be lenient if I've posted incorrectly or the wrong forum

The machine runs Server 2008 R2, all updates are applied.

The machine started bogging down and we found the CPU was at 100%, looking at the Task manager we found 30-40 svchosts running.  After restarting the machine, the SVCHOSTS started regenerating themselves again.  

After restarting the machine it runs well for a about 30 minutes and then the SVCHOSTS start to generate about 1 every 30 seconds

We ran antivirus scans, and found some user files that were identified as viruses and they were removed, but the problem persists.

Using Process explorer I found that the SVCHOSTS were running syswow64 but am unable to find out what is generating them.  I forced a dump using the task manager but am not experienced using WinDbg with this type of dmp, only Blue Screen dumps.

How can I find out what is generating these Processes, can I temporarily rename SysWow64

Thanks for the help

Hi all,

I am trying to configure application which uses Kerberos authentication.

Error message: 

kinit: Client not found in Kerberos database while getting initial credentials

1. I use Windows Server 2003 domain controller as LDAP server, Tomcat application (on Linux) and IIS application as client, and apache load balancer.
2. There is multidomain environment:  russia.domain.net, europa.domain.net, asia.domain.net;
3. Tomcat and IIS servers works behind a proxy server (Apache on Linux). 
4. For applications created two DNS  records type A. all DNS use IP address of Apache proxy server:

• application-sandbox.russia.domain.net
• applicationweb-sandbox.russia.domain.net

To confiure kerberos authentication i have performed the following steps:

1. Create user account in EUROPA domain and configure delegation for this:

EUROPE\application_sandbox

2. Register SPN for this account:

setspn -A HTTP/application-sandbox.russia.domain.net EUROPE\application_sandbox

setspn -A HTTP/application-sandbox EUROPE\application_sandbox

3. After i verified registered SPN for this account:

3. After i generate a keytab file:

ktpass /princ HTTP/application-sandbox.russia.domain.net:@RUSSIA.DOMAIN.NET /ptype krb5_nt_principal /crypto rc4-hmac-nt /mapuser EUROPE\application_sandbox /out application_sandbox.keytab -kvno 0 /pass Pa$$w0rd

4. Properties of account looks like the following:

Get-ADUser -Identity appication_sandbox -Properties CN, ServicePrincipalNames, UserPrincipalName

CN                    : kxxb999
DistinguishedName     : CN=kxxb999,OU=Users,DC=europe,DC=domain,DC=net
Enabled               : True
GivenName             :
Name                  : kxxb999
ObjectClass           : user
SamAccountName        : application_sandbox
ServicePrincipalNames : {HTTP/application-sandbox, HTTP/application-sandbox.russia.domain.net}
Surname               : application_sandbox
UserPrincipalName     : HTTP/application-sandbox.russia.domain.net@RUSSIA.DOMAIN.NET

4.Note that CN and User logon name are different. SPN registered for DNS record.

There are no computer in domain with name application-sandbox.russia.domain.net. this is a DNS record for application.

5. Then i copy keytab file to Linux machine, configure krb5.conf file and trying to get TGT for registered principal name.

krb5.conf file:

[libdefaults]
default_realm = EUROPE.DOMAIN.NET
dns_lookup_realm = false
dns_lookup_kdc = false
default_tkt_enctypes = rc4-hmac
default_tgs_enctypes = rc4-hmac



[realms]
RUSSIA.DOMAIN.NET = {
                        kdc = dc01.russia.domain.net
                        admin_server = dc01.russia.domain.net
                        default_domain = russia.domain.net
                }


EUROPE.DOMAIN.NET = {
                        kdc = dc01.europe.domain.net
                        admin_server = dc01.europe.domain.net
                        default_domain = europe.domain.net
                }


[domain_realm]
europe.domain.net = EUROPE.DOMAIN.NET
.europe.domain.net = EUROPE.DOMAIN.NET
russia.domain.net = RUSSIA.DOMAIN.NET
.russia.domain.net = RUSSIA.DOMAIN.NET

[appdefaults]
autologin = true
forward = true
forwardable = true
encrypt = true

Then i verified created keytab file:

klist -e -k -t application_sandbox.keytab
Keytab name: FILE:application_sandbox.keytab
KVNO Timestamp         Principal
---- ----------------- --------------------------------------------------------
   0 01/01/70 01:00:00 HTTP/application-sandbox.russia.domain.net@RUSSIA.DOMAIN.NET (arcfour-hmac)

And trying to get TGT ticket:

kinit -V -k -t application_sandbox.keytab HTTP/application-sandbox.russia.domain.net@RUSSIA.DOMAIN.NET
Using default cache: /tmp/krb5cc_0
Using principal: HTTP/application-sandbox.russia.domain.net@RUSSIA.DOMAIN.NET
Using keytab: application_sandbox.keytab
kinit: Client not found in Kerberos database while getting initial credentials

But if i use SamAccountName name with kinit commant then i can aquire TGT ticket:

[root@localhost security]# kinit application_sandbox
Password for application_sandbox@EUROPE.DOMAIN.NET:
[root@localhost security]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: application_sandbox@EUROPE.DOMAIN.NET

Valid starting     Expires            Service principal
06/30/14 16:37:41  07/01/14 02:37:38  krbtgt/EUROPE.DOMAIN.NET@EUROPE.DOMAIN.NET
        renew until 07/01/14 16:37:41

I'm in trouble. can anyone faced this problem?

Thank you

I set HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS\Settings\MaxShadowCopies to 128 which allows the server to create 128 shadowcopies - which it does.

HOWEVER. the 'previous versions' tab on some clients only displays the oldest 64 previous versions and not the newest 64. I can verify this by changing MaxShadowCopies to 80, and I see the oldest 64 previous version but not the newest 16.

Server is win08R2
Client 2003r2 or XP: ALL 128 pervious versions are displayed
Client vista/win7/2008/2008R2: ONLY the 64 oldest are displayed

I defined a new system variable named TUXIDR by going into System Properties -> Environment Variables -> New

However, when I am on the command prompt and do an echo, all that's returned is %TUXDIR%.  Also, when I issue the "set" command, I don't see my environment variable in the list.  How do I get my command window to show my new environment variable?

Example:

We are running Windows 2003 TS for client access their report. We create a group policy to “Hide these specified drives in My
Computer” and “Prevent access to drives from My Computer”. The problem is when a TS user tries to save the PDF report, he receives this error: This operation has been cancelled due to restrictions in effect on this computer

Any suggestions how we fix this problem?<

Bob Lin, MCSE &amp; CNE Networking, Internet, Routing, VPN Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com

We have two Windows 2003 servers as DCs. I created batch file and save it on DC1’s C:\WINDOWS\SYSVOL\sysvol\hsapayroll.com\scripts this morning. After more than 4 hours, I don’t see the batch file in the DC2. The funny thing is that I don’t see any Event IDs such as 13566, 13552 and 13555 related to AD replication issues. The Repadmin command doesn’t show any error. What could be the problem?

Bob Lin, MCSE &amp; CNE Networking, Internet, Routing, VPN Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com

Hello.  I need to upgrade file Psxdll.dll to version 9.0.3790.4125, on a Windows Server 2003, R2 and 32 bits.  Could someone please give directions on where to find and install this file.

Thanks,

Luis