Msiscsi.sys crashing in Windows 2008 R2 Datacenter x64

After enabling MPIO for ISCSI one of our HyperV Clustered Windows 2008 R2 Datacenter x64 servers has been unstable, crashing 3-5 times daily.  I've had to take it out of service and after analyzing the dump file it seems there is an issue with msiscsi.sys and overlapping drivers 'tssecsrv' and 'tdtcp.sys'   This all started occuring after we enabled MPIO to connect to our Promise Vessraid ISCSI using MultiPath I/O over iSCSI.  We are connecting using two intel network cards to 2 gigabit ports on the VessRaid.  Other than the Intel network drivers (v14.7 package version 11.0.103 7/14/2009) and Intel Matrix Storage Array 10R drivers, everything is Microsoft (OS, patches, iscsi initiator, HyperV, MPIO)  Any ideas and where to start?
Analyze -v below:
Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [c:\windows\memory.dmp]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: SRV*n:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: n:\i386
Windows 7 Kernel Version 7600 MP (16 procs) Free x64
Product: LanManNt, suite: TerminalServer DataCenter SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`0180c000 PsLoadedModuleList = 0xfffff800`01a49e50
Debug session time: Mon Dec 14 20:12:27.351 2009 (GMT-8)
System Uptime: 0 days 18:44:22.000
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                        Bugcheck Analysis                                    *
Use !analyze -v to get detailed debugging information.
BugCheck A, {4, 2, 1, fffff8000188fac1}
Probably caused by : msiscsi.sys ( msiscsi!iSpProcessWMIRequestTimeout+71e )
Followup: MachineOwner
8: kd> !analyze -v
*                        Bugcheck Analysis                                    *
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000004, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
 bit 0 : value 0 = read operation, 1 = write operation
 bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff8000188fac1, address which referenced memory
Debugging Details:
OVERLAPPED_MODULE: Address regions for 'tssecsrv' and 'tdtcp.sys' overlap
WRITE_ADDRESS:  0000000000000004
CURRENT_IRQL:  2
FAULTING_IP:
nt!IoReleaseRemoveLockEx+21
fffff800`0188fac1 f0834304ff      lock add dword ptr [rbx+4],0FFFFFFFFh
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
TRAP_FRAME:  fffff8800233d180 -- (.trap 0xfffff8800233d180)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa8055864210 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8000188fac1 rsp=fffff8800233d310 rbp=0000000000000000
 r8=0000000000000020  r9=000000000000000c r10=fffff8000180c000
r11=fffff8800233d2e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe cy
nt!IoReleaseRemoveLockEx+0x21:
fffff800`0188fac1 f0834304ff      lock add dword ptr [rbx+4],0FFFFFFFFh ds:00000000`00000004=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff8000187d469 to fffff8000187df00
STACK_TEXT: 
fffff880`0233d038 fffff800`0187d469 : 00000000`0000000a 00000000`00000004 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff880`0233d040 fffff800`0187c0e0 : fffffa80`5718f020 00000000`00000000 00000000`00000000 fffff880`03a82366 : nt!KiBugCheckDispatch+0x69
fffff880`0233d180 fffff800`0188fac1 : fffffa80`58de9030 fffff800`01a215f8 fffffa80`24f54040 fffffa80`24f54148 : nt!KiPageFault+0x260
fffff880`0233d310 fffff880`036b72b6 : fffffa80`2c662a20 fffffa80`2c662a20 00000000`00000002 fffffa80`55864210 : nt!IoReleaseRemoveLockEx+0x21
fffff880`0233d380 fffff880`036b668b : fffffa80`26a72018 fffff880`03616200 00000000`00000000 00000000`00000000 : msiscsi!iSpProcessWMIRequestTimeout
+0x71e
fffff880`0233d420 fffff800`01868def : 00000000`00000000 00000000`00000002 00000000`00000001 fffffa80`254debd8 : msiscsi!iSpTickHandler+0x11f
fffff880`0233d460 fffff800`01889fa6 : 00000000`00000002 fffff880`0233d618 00000000`00000000 00000000`00000005 : nt!IopTimerDispatch+0x132
fffff880`0233d570 fffff800`01889326 : fffffa80`263a6440 fffffa80`263a6440 00000000`00000000 00000000`00000000 : nt!KiProcessTimerDpcTable+0x66
fffff880`0233d5e0 fffff800`01889e7e : 0000009d`127c5d6d fffff880`0233dc58 00000000`0041fc6b fffff880`023182e8 : nt!KiProcessExpiredTimerList+0xc6
fffff880`0233dc30 fffff800`01889697 : 0000009d`62ca30cb fffff880`0041fc6b fffffa80`57195bf0 00000000`0000006b : nt!KiTimerExpiration+0x1be
fffff880`0233dcd0 fffff800`018866fa : fffff880`02315180 fffff880`023202c0 00000000`00000002 fffff880`00000000 : nt!KiRetireDpcList+0x277
fffff880`0233dd80 00000000`00000000 : fffff880`0233e000 fffff880`02338000 fffff880`0233dd40 00000000`00000000 : nt!KiIdleLoop+0x5a
STACK_COMMAND:  kb
FOLLOWUP_IP:
msiscsi!iSpProcessWMIRequestTimeout+71e
fffff880`036b72b6 33d2            xor     edx,edx
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  msiscsi!iSpProcessWMIRequestTimeout+71e
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: msiscsi
IMAGE_NAME:  msiscsi.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcad7
FAILURE_BUCKET_ID:  X64_0xA_msiscsi!iSpProcessWMIRequestTimeout+71e
BUCKET_ID:  X64_0xA_msiscsi!iSpProcessWMIRequestTimeout+71e
Followup: MachineOwner
Btw Intel 82576/82574L v11.0.103 (7/14/2009) used

We are having a similar issue on 2 identical machines running Windows Server 2008 R2 SP1, please find one of the dumps below:
Loading Dump File [C:\Windows\Minidump\071311-11122-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Windows 7 Kernel Version 7600 MP (16 procs) Free x64
Product: Server, suite: TerminalServer SingleUserTS
Built by: 7600.16695.amd64fre.win7_gdr.101026-1503
Machine Name:
Kernel base = 0xfffff800`01811000 PsLoadedModuleList = 0xfffff800`01a4ee50
Debug session time: Wed Jul 13 09:16:40.467 2011 (UTC - 7:00)
System Uptime: 0 days 5:42:49.014
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                        Bugcheck Analysis                                   
Use !analyze -v to get detailed debugging information.
BugCheck A, {4, 2, 1, fffff800018932bd}
Probably caused by : msiscsi.sys ( msiscsi!iSpProcessWMIRequestTimeout+71e )
Followup: MachineOwner
8: kd> !analyze -v
*                        Bugcheck Analysis                                   
IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000004, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800018932bd, address which referenced memory
Debugging Details:
WRITE_ADDRESS: GetPointerFromAddress: unable to read from fffff80001ab90e0
 0000000000000004
CURRENT_IRQL:  2
FAULTING_IP:
nt!IoReleaseRemoveLockEx+21
fffff800`018932bd f0834304ff      lock add dword ptr [rbx+4],0FFFFFFFFh
CUSTOMER_CRASH_COUNT:  1
DEFAULT_BUCKET_ID:  DRIVER_FAULT_SERVER_MINIDUMP
BUGCHECK_STR:  0xA
PROCESS_NAME:  System
TRAP_FRAME:  fffff8800213d180 -- (.trap 0xfffff8800213d180)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000000 rbx=0000000000000000 rcx=0000000000000000
rdx=fffffa803a27b370 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800018932bd rsp=fffff8800213d310 rbp=0000000000000000
 r8=0000000000000020  r9=000000000000000d r10=fffff80001811000
r11=fffff8800213d2e0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac pe cy
nt!IoReleaseRemoveLockEx+0x21:
fffff800`018932bd f0834304ff      lock add dword ptr [rbx+4],0FFFFFFFFh ds:0200:00000000`00000004=????????
Resetting default scope
LAST_CONTROL_TRANSFER:  from fffff80001880ca9 to fffff80001881740
STACK_TEXT: 
fffff880`0213d038 fffff800`01880ca9 : 00000000`0000000a 00000000`00000004 00000000`00000002 00000000`00000001 : nt!
KeBugCheckEx
fffff880`0213d040 fffff800`0187f920 : 00000000`00000000 00000000`00000000 00000000`00000000 fffffa80`13d459a0 : nt!
KiBugCheckDispatch+0x69
fffff880`0213d180 fffff800`018932bd : 00000000`00000002 fffff800`01a265f8 fffffa80`12df4680 fffffa80`12df4788 : nt!
KiPageFault+0x260
fffff880`0213d310 fffff880`035c22b6 : fffffa80`1875b520 fffffa80`1875b520 00000000`00000002 fffffa80`3a27b370 : nt!
IoReleaseRemoveLockEx+0x21
fffff880`0213d380 fffff880`035c168b : fffffa80`18446018 fffff880`0350c200 00000000`00000000 00000000`00000000 : msiscsi!
iSpProcessWMIRequestTimeout+0x71e
fffff880`0213d420 fffff800`0186c5bf : 00000000`00000000 00000000`0000000a 00000000`00000000 fffff800`01968fc5 : msiscsi!
iSpTickHandler+0x11f
fffff880`0213d460 fffff800`0188d29e : 00000000`00000002 fffff880`0213d618 00000000`00000000 00000000`00000100 : nt!
IopTimerDispatch+0x132
fffff880`0213d570 fffff800`0188cdd6 : fffffa80`3694fca0 fffffa80`3694fca0 00000000`00000000 00000000`00000000 : nt!
KiProcessTimerDpcTable+0x66
fffff880`0213d5e0 fffff800`0188d4be : 0000002f`e41691a8 fffff880`0213dc58 00000000`00141e76 fffff880`02118448 : nt!
KiProcessExpiredTimerList+0xc6
fffff880`0213dc30 fffff800`0188ccb7 : 0000000b`39bb96c3 0000000b`00141e76 0000000b`39bb9698 00000000`00000076 : nt!
KiTimerExpiration+0x1be
fffff880`0213dcd0 fffff800`01889eea : fffff880`02115180 fffff880`021202c0 00000000`00000001 fffff880`00000000 : nt!
KiRetireDpcList+0x277
fffff880`0213dd80 00000000`00000000 : fffff880`0213e000 fffff880`02138000 fffff880`0213dd40 00000000`00000000 : nt!
KiIdleLoop+0x5a
STACK_COMMAND:  kb
FOLLOWUP_IP:
msiscsi!iSpProcessWMIRequestTimeout+71e
fffff880`035c22b6 33d2            xor     edx,edx
SYMBOL_STACK_INDEX:  4
SYMBOL_NAME:  msiscsi!iSpProcessWMIRequestTimeout+71e
FOLLOWUP_NAME:  MachineOwner
MODULE_NAME: msiscsi
IMAGE_NAME:  msiscsi.sys
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bcad7
FAILURE_BUCKET_ID:  X64_0xA_msiscsi!iSpProcessWMIRequestTimeout+71e
BUCKET_ID:  X64_0xA_msiscsi!iSpProcessWMIRequestTimeout+71e
Followup: MachineOwner

Similar Messages

  • 10g Express Edition on Windows 2008 Enterprise R2 x64 with Active Directory

    I have successfully installed the 10g Express Edition on Windows 2008 Ent. r2 x64 with Microsoft Active Directory Domain Controller but i could not be able to run http://127.0.0.1:8080/apex
    Although i have run the http://127.0.0.1:8080/apex on my another Windows 2008 R2 x64 ant WITHOUT Active Directory Domain Controller Role.
    i think its related with AD Domain server role of my server, because i run that on same config and operation without Active Directory Domain Controller role.
    Can anyone help about this issue?
    thanks in advance

    I have experienced the same problem - running 10g Express on a Win 2008 (32-bit). When not being a Domain controller, the install was fine. When installing after the server had been given the Domain Controller role (+the required DNS), it failed. NO FIREWALLS are involved on the server. Seems like Oracle Express has problems being installed in this kind of environment - independent of x32 or x64 bit OS.
    Edited by: 811504 on Nov 17, 2010 11:44 PM

  • CF 10 continues to crash on Windows 2008 R2 64 bit

    I have had CF 10 running on my VM for about a week now. The VM is Windows 2008 Enterprise, 64 bit. CF 10 is 64 bit.  The error that I keep getting is:
    Service Temporary Unavailable!
    The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
    Jakarta/ISAPI/isapi_redirector/1.2.32 ()
    To recover, I need to stop and restart all the CF services.
    Anyone else having this problem or has anyone else had to fix it?

    Of interest here are some CF10 metrics logging I took as a sample to compare.
    05/06/2012
    8:49 AM
    Information
    scheduler-1
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 378536 Request count: 201 Error count: 4 Bytes received: 780 Bytes sent: 6993022 Free memory: 45875240 Total memory: 175702016 Active Sessions: 0
    05/06/2012
    8:48 AM
    Information
    scheduler-2
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 378536 Request count: 201 Error count: 4 Bytes received: 780 Bytes sent: 6993022 Free memory: 47207152 Total memory: 175702016 Active Sessions: 0
    05/06/2012
    8:47 AM
    Information
    scheduler-0
    Max threads: 150 Current thread count: 4 Current thread busy: 1 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 52128072 Total memory: 175898624 Active Sessions: 0
    05/06/2012
    8:46 AM
    Information
    scheduler-1
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 59819016 Total memory: 167116800 Active Sessions: 0
    05/06/2012
    8:45 AM
    Information
    scheduler-1
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 61154744 Total memory: 167116800 Active Sessions: 0
    05/06/2012
    8:44 AM
    Information
    scheduler-1
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 62484720 Total memory: 167116800 Active Sessions: 0
    05/06/2012
    8:43 AM
    Information
    scheduler-2
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 63821448 Total memory: 167116800 Active Sessions: 0
    05/06/2012
    8:42 AM
    Information
    scheduler-2
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 65154032 Total memory: 167116800 Active Sessions: 0
    05/06/2012
    8:41 AM
    Information
    scheduler-1
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 66487544 Total memory: 167116800 Active Sessions: 0
    05/06/2012
    8:40 AM
    Information
    scheduler-0
    Max threads: 150 Current thread count: 4 Current thread busy: 0 Max processing time: 333509 Request count: 200 Error count: 4 Bytes received: 780 Bytes sent: 5695004 Free memory: 67824496 Total memory: 167116800 Active Sessions: 0
    The online CF10 documentation omits CF10 metrics logging details so I am not sure what to make of the log detail differing. Reference:
    http://help.adobe.com/en_US/ColdFusion/10.0/Admin/WSc3ff6d0ea77859461172e0811cbf3638e6-7fe 0.html#WSc3ff6d0ea77859461172e0811cbf3638e6-7fda
    I don't think the logs have been any use so far. Still interested to know why CF10 is crashing for you. Something else comes to mind. Is it possible for you to run CF10 from CMD prompt for a time, ColdFusion10\cfusion\bin\cfstart.bat ? Perhaps there is an error and having the details displayed in CMD prompt will lead to solution.
    HTH again, Carl.

  • TS130 Crash - HyperV - Windows 2008 R2 SP1

    Hello,
    Sry for my english. Im from germany.
    We have a ts130 server with hyper-v windows 2008 r2 sp1 with two windows 2008 r2 sp1 vm's. We have 4 x 4 GB ram. The server run for the last 3 month, after complete new installation, without any problems, then the server crashes every day one time, without any information why. No image on scree, no reaction num key. We must do a hardreset...The onboard raid controller do a completed repair and review till 100% after starting windows and everything is fine. We become two new HDD's and we replace it. The server run 2 weeks and then crash, same problem. after every crash the onboard raid controller do a completed repair and review. Then lenovo replace the mainboard and the power unit with bios update, but the last 2 days, the server crash again one time a day.I dont know what we should do. Can anyone help us?
    Peter

    Hi, I have the same problem as you have.
    Currently, I have Centos 6 installed with VirtualBox, but I have had this problem with other Ubuntus and Windows. After a while, sometimes 2 weeks, sometimes 2 hours, the system stop without showing any info on the screen and no reaction on keyboard (Bloq Num) as Cordial said. We have to do a hard reset and there is nothing in the linux logs, it only stops working.
    I've try with soft raid, hardware raid, no raid, different HDDs, different OS, virtualization with VBox, KVM, VMWare VSphere, no virtualization, different RAM modules from different brands, a new power supply, changing BIOS options, ... Nothing solve the problem.
    The integrated network card even blocked my switch when the server crash, so i start using a PCI one and disabled the integrated in the BIOS. The problem with the switch disapeared, but not the crash. At least other computers on the switch are working.
    I've been trying to put this server in production for more than a year, but it's impossible.
    Could somebody help with that? I've no idea what to do now.

  • Failed to import drivers System Center 2012 Config Manager on Windows 2008 R2 Datacenter

    Hello, I am having a problem importing Surface Pro 3 drivers into SCCM 2012 on Win2008 R2 Datacenter for OSD.  I get the message that the selected drivers are not applicable to any supported platforms.  I know there was a hotfix for SCCM 2007
    and Win7 only drivers.  Is there one for SCCM 2012 and Win8.1 drivers?  Or is there something else I need to be looking at?  Everything I find is for SCCM 2007 not 2012.  Any push in the right direction is greatly appreciated.

    Hi,
    Please check the answer of the thread below to see if it can also resolve your issue.
    Quote:
    They verified that this is NOT an SCCM 2012 Issue,  but is in fact an issue with the underlying server OS of (in this case) Server 2008 R2 SP1.  There is a known bug with inf file verfication: http://support.microsoft.com/kb/979492, but the hotfix
    doesn't currently fix it. 
    The workaround is to edit the Manufacture section of the affected inf files, and add NTx86.6.1.1 to the line, like this:
    [Manufacturer]
    %Microsoft% = Microsoft, NTamd64,NTx86.6.1.1
    https://social.technet.microsoft.com/Forums/en-US/534b67e5-d2db-457a-863c-f0bd381eaf4d/driver-is-not-applicable-to-any-supported-platforms?forum=confi
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Acrobat 9.5.5.316 randomly crashes on Windows 2008 R2 Terminal Server

    The program Acrobat.exe version 9.5.5.316 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
    Process ID: 98b8
    Start Time: 01cea3b5e2f780b3
    Termination Time: 4
    Application Path: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat.exe
    Report Id: 2add6733-0fa9-11e3-9916-b8ac6f98b058
    Faulting application name: Acrobat.exe, version: 9.5.5.316, time stamp: 0x518ac052
    Faulting module name: CFGMGR32.dll, version: 6.1.7601.17621, time stamp: 0x4ddb8851
    Exception code: 0xc0000005
    Fault offset: 0x0000125d
    Faulting process id: 0xa0d8
    Faulting application start time: 0x01cea3aa1ae12191
    Faulting application path: C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat.exe
    Faulting module path: C:\Windows\syswow64\CFGMGR32.dll
    Report Id: 58b1bfcd-0f9d-11e3-9916-b8ac6f98b058

    You are in an environment that was never tested with Acrobat 9 and it's a product that is no longer supported by Adobe either.
    All of that being said, it appears you may have had it working and now you need to ask the questions:
    - Did it ever work?  If yes, then you go to the next question...
    - What changed?
    - Was there an OS Update or product update that was applied?
    - Was there a third party software update (i.e. antivirus software, graphic card, etc...)?
    - Does it work in Safe Mode or in a modified startup mode?

  • Windows 2008 R2 SP1 BSOD

    Hi All,
    Experience BSOD's throughout the business day on an Windows 2008 R2 SP1 x64 terminal server (hosted on an hyper-v 2008 host) but not outside of business hours (thinking its an application / driver issue). Other virtual machines on this host are not experiencing
    the same issue and the host is not impacted (non-hardware failure).
    I've been trying to find out how to diagnose this one by revising the minidump files with WinDBG / 2008R2 symbol files but it keeps coming back to winsys32 as the fault, but can't figure out how to resolve this one.
    If anyone could help with this that would be great.
    Regards
    Allan

    Hi,
    Please try below Hotfix and other related which can help in your case.
    Error message on a blue screen on a computer that is running Windows 7 or Windows Server 2008 R2: "STOP: 0x0000000A"
    http://support.microsoft.com/en-us/kb/979444
    "0x00000050" Stop error and an automatic restart on a Windows Server 2008 R2-based or Windows Server 2012-based computer
    https://support.microsoft.com/en-us/kb/2781406?wa=wsignin1.0
    A Windows Server 2008 R2 Virtual Machine may crash with a blue screen after configuring NLB on it
    http://blogs.technet.com/b/networking/archive/2010/01/29/a-windows-server-2008-r2-virtual-machine-may-crash-with-a-blue-screen-after-configuring-nlb-on-it.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Windows 2008 R2 intermittently getting access denied when logging in

    Hi, 
    I recently built 2 new Virtual Machines. They both run on Hyper-V (version 6.2x).
    One is Windows 2008 R2 standard and the other Windows 2008 R2 Datacenter. These are both remote desktop servers. 
    These are both connected to a domain. 
    The domain controller is linux/samba based, this will mimic the Windows NT4 style domain controller environment. 
    Within each Virtual Machine I have a remote desktop users group, that is a staff group. 
    Intermittently users get an access denied error when logging on. This only happens when logging on as domain users. 
    If this happened all the time, I might think the machine needed to be removed and re-added to the domain but as it's intermittent, I don't see the trust relationship as the problem. 
    Any ideas? 
    Thanks

    Hi,
    Thanks for your post in Windows Server Forum.
    Before providing you some information, I would like to get some more information to resolve your issue.
    - Have you notice any specific error when trying to remote login?
    - Did you check GPO setting option “Allow log on through Remote Desktop Services”
    As group policy and the user group are interrelated with each other. There are 2 types of user rights.
    (1)   Logon rights  (2) Privileges
    These two plays an important part in allowing an RDP session to the server. Also need to check in GPO Setting for more option.
    a. Allow log on through Remote Desktop Services : Users\Group must be added for Remote Session
    b. Deny log on through Remote Desktop Services : Users\Group must not be added for Remote Session
    For checking the setting in GPO follow below path:
    - Start > Run >gpedit.msc
    - Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
    For more information, refer beneath article.
    “Allow Logon through Terminal Services (Remote Desktop Services)” group policy and “Remote Desktop Users” group.
    http://blogs.technet.com/b/askperf/archive/2011/09/09/allow-logon-through-terminal-services-group-policy-and-remote-desktop-users-group.aspx
    Hope This Helps!
    Thanks.

  • Windows 2008 Server R2 - Service Pack 1 Failed to install

    A few nights ago I deployed Service Pack 1 for Windows 2008 Server R2 x64.  The update failed to install after 3 attempts using the Windows Update manager.  After the third time I checked the system properties which states that SP1 is
    installed, yet it never appeared to install successfully as my other server machine had a prompt stating the SP was installed successfully. 
    In update history it shows the 3 failed attempts with no successes.  This morning I began running into memory errors which are impacting my 2 VM Ware sessions which in turn lock up my virtual machine so I am going to attempt to remove and reinstall
    to see if this corrects my issue.  By the way what triggered the install of SP1 is random reboots of my server.  This is that unknown Kernal Power Error which I have yet to resolve.  Some months my server randomly reboots one time and other
    months 4-5x.  That is neither here nor there, the point of this discussion is to resolve SP1. 
    I have tried to remove SP1 by means of Control Panel, Programs and Features, Installed Updates.  So it shows the that the SP1 installed in multiple areas yet in the install history no signs of successful installation.
    When trying to uninstall from Program and Features/Installed Updates section in control panel it cycles through like its going to uninstall, but after several minutes I receive the following error      Windows Update     
    An error has occurred. Not all of the updates were successfully uninstalled.
    When trying to uninstall from the command prompt (as administrator) "wusa.exe /uninstall /kb:976932" I get the following popup            Windows Update Standalone Installer        
    Installer encountered an error: 0x80073712       The component store has been corrupted.
    Now if I try and install through the network installer file name "windows6.1-KB976932-X64.exe" I get "Windows Server 2008 R2 Service Pack 1 is already installed"
    I performed these steps in the order mentioned which I came across this "System Update Readiness Tool for Windows Server 2008 R2 x64 Edition (KB947821) [February 2011]" After applying this hotfix I went through the same steps as mentioned above with the
    exact same results.
    It is unfortuante I did not come across this hotfix before I attempted install SP1 as it appears as if this would have prepared the system for SP1 installation.  Currently I am in limbo with a corrupt installation of SP1 and so far no means of uninstalling
    short of a reinstallation or repair of the OS which I am not willing to do at this point in time.
    If anyone has any suggestions please chime in and let me know what I can try.  Thanks for all the support and hopefully this post will help others in the future.

    Maybe a little bit late, but I was running almost same problem on a exchange server.
    Scenario:
    First attempt to Update the windows patches - excluded the patches from the last 2 months.
    I was kind a new to this, and didnt noticed that Windows Service pack must have at least 8GB free disk space.(Recommended)
    So the C:\ partition had less then 5 GB free disk space, and I started the updates.
    All went well until Windows SP1 begun running to downloading and installing.
    When the installer noticed there wasnt enough space, It stopped, it give the status Failed, en when scaling up the C:\partition with another 10GB more space, the C:\partition had 18GB free disk space.
    Tried to Call up a new attemp to install the SP1... but with no succes to start the SP1 installation...
    I tried to reinstall but the windows update didnt get offered again to install again or resume or anything to try again...
    Maybe...it is handy for Mickysoft, to check before installing, so the install wont get corrupted, and can install when c:\ partition has enough disk space.
    What was the trick:
    1) Stop the windows Update Service
    2) C:\Windows\SoftwareDistribution\DataStore - Delete content
    3) C:\Windows\SoftwareDistribution\Download - Delete content
    4) Windows update Service check if its runs again
    5) Check again for windows updates - Check if Windows Server Service pack 1 is offered, and install reboot and youre good to go.
    It works for me :) hopefully after 3 years you had found a solution, but since I was poping for a solution and found this article with no solution.
    I tought it will be hopefull for others to respond to this article with a solution.
    Kind regards,
    Alexander Tjintjelaar
    Micky soft noob

  • Blue Screen Crashes in Windows Server 2008

    Our Windows 2008 server which has been running fine for several years now has started to record a series of blue screen crashes in the past week, almost daily.  Our hosting company ran a chkdsk and didn't find any errors. The also ran an sfc scan which
    they said identified and fixed several system files, however we are still seeing blue screen crashes.
    I have put the minidump from the latest crash in my public skydrive folder at -
    https://skydrive.live.com/?cid=446280106bb642de#cid=446280106BB642DE&id=446280106BB642DE%21140
    Can anyone help me identify the problem that is causing the blue screen crashes?
    Thanks,
    Gary
    Gary Frickey

    Hi,
    Gary
    Regarding to Dump files that you provided, I have used WinDbg tool to analysis them. For more detailed results, please refer to the following.
    1.Analyze 120213-41636-01.dump
    * Bugcheck Analysis *
    Use !analyze -v to get detailed debugging information.
    BugCheck 1A, {5200, fffffa80130e0000, ac326f8a3564698d, ac366f8a3564698d}
    Probably caused by : volsnap.sys ( volsnap!VspDoubleBufferIncomingWrite+9a )
    Followup: MachineOwner
    4: kd> !analyze -v
    * Bugcheck Analysis *
    MEMORY_MANAGEMENT (1a)
    # Any other values for parameter 1 must be individually examined.
    Arguments:
    Arg1: 0000000000005200, The subtype of the bugcheck.
    Arg2: fffffa80130e0000
    Arg3: ac326f8a3564698d
    Arg4: ac366f8a3564698d
    Debugging Details:
    BUGCHECK_STR: 0x1a_5200
    CUSTOMER_CRASH_COUNT: 1
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
    PROCESS_NAME: mcupdate.exe
    CURRENT_IRQL: 0
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    LAST_CONTROL_TRANSFER: from fffff802e920536f to fffff802e9076440
    STACK_TEXT:
    fffff880`0d61bcb8 fffff802`e920536f : 00000000`0000001a 00000000`00005200 fffffa80`130e0000 ac326f8a`3564698d : nt!KeBugCheckEx
    fffff880`0d61bcc0 fffff802`e90be5a6 : 00000000`00000000 00000000`00001000 00000000`00000200 fffffa80`13ac14d0 : nt! ?? ::FNODOBFM::`string'+0x2f301
    fffff880`0d61bd00 fffff802`e928c81c : 00000000`00000000 fffff802`e92a8a00 fffff880`133792c0 00000000`00000200 : nt!ExpAllocateBigPool+0xd6
    fffff880`0d61bde0 fffff880`01dab74a : 00000000`00000001 fffff880`121da000 00000000`00001000 fffff880`01da9e2d : nt!ExAllocatePoolWithTag+0x80a
    fffff880`0d61beb0 fffff880`01da9372 : fffffa80`13e738b8 fffffa80`13e73560 fffffa80`0aaaf160 00000000`00000000 : volsnap!VspDoubleBufferIncomingWrite+0x9a
    fffff880`0d61bf00 fffff880`00a26b69 : fffff880`0d61c000 fffffa80`1340db00 fffffa80`06cc4ab0 fffff8a0`24ebd3c8 : volsnap!VolsnapWriteFilter+0x361
    fffff880`0d61bf50 fffff802`e9070b67 : fffff880`0da372c8 00000000`0361e4d8 00000000`03610000 00000000`77a675a4 : Ntfs!NtfsStorageDriverCallout+0x16
    fffff880`0d61bf80 fffff802`e9070b2d : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KxSwitchKernelStackCallout+0x27
    fffff880`13378700 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSwitchKernelStackContinue
    STACK_COMMAND: kb
    FOLLOWUP_IP:
    volsnap!VspDoubleBufferIncomingWrite+9a
    fffff880`01dab74a 488bf8 mov rdi,rax
    SYMBOL_STACK_INDEX: 4
    SYMBOL_NAME: volsnap!VspDoubleBufferIncomingWrite+9a
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: volsnap
    IMAGE_NAME: volsnap.sys
    DEBUG_FLR_IMAGE_TIMESTAMP: 51a9661e
    IMAGE_VERSION: 6.2.9200.16628
    BUCKET_ID_FUNC_OFFSET: 9a
    FAILURE_BUCKET_ID: 0x1a_5200_volsnap!VspDoubleBufferIncomingWrite
    BUCKET_ID: 0x1a_5200_volsnap!VspDoubleBufferIncomingWrite
    ANALYSIS_SOURCE: KM
    FAILURE_ID_HASH_STRING: km:0x1a_5200_volsnap!vspdoublebufferincomingwrite
    FAILURE_ID_HASH: {c0542499-747b-bb38-39b0-9680350f4757}
    2.Analyze 120213-42713-01.dump
    * Bugcheck Analysis *
    Use !analyze -v to get detailed debugging information.
    BugCheck 24, {b50019060b, fffff8800e413e38, fffff8800e413670, fffff802e26a85cc}
    Probably caused by : memory_corruption ( nt!MiReleaseReadListResources+14 )
    Followup: MachineOwner
    1: kd> !analyze -v
    * Bugcheck Analysis *
    NTFS_FILE_SYSTEM (24)
    If you see NtfsExceptionFilter on the stack then the 2nd and 3rd
    parameters are the exception record and context record. Do a .cxr
    on the 3rd parameter and then kb to obtain a more informative stack
    trace.
    Arguments:
    Arg1: 000000b50019060b
    Arg2: fffff8800e413e38
    Arg3: fffff8800e413670
    Arg4: fffff802e26a85cc
    Debugging Details:
    EXCEPTION_RECORD: fffff8800e413e38 -- (.exr 0xfffff8800e413e38)
    ExceptionAddress: fffff802e26a85cc (nt!MiReleaseReadListResources+0x0000000000000014)
    ExceptionCode: c0000005 (Access violation)
    ExceptionFlags: 00000000
    NumberParameters: 2
    Parameter[0]: 0000000000000000
    Parameter[1]: ffffffffffffffff
    Attempt to read from address ffffffffffffffff
    CONTEXT: fffff8800e413670 -- (.cxr 0xfffff8800e413670;r)
    rax=0000000000000000 rbx=0000000000000000 rcx=fffbfa80138f7f80
    rdx=fffffa8009fa3e81 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff802e26a85cc rsp=fffff8800e414070 rbp=0000000000000000
    r8=fffffa8009fa3e80 r9=0000000000000001 r10=fffff802e249c610
    r11=fffffa8012e1b010 r12=fffffa8006d92ef0 r13=fffffa80074e29c0
    r14=fffbfa80138f7f80 r15=0000000000000001
    iopl=0 nv up ei ng nz na pe nc
    cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
    nt!MiReleaseReadListResources+0x14:
    fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0 ds:002b:fffbfa80`138f7fa8=????????????????
    Last set context:
    rax=0000000000000000 rbx=0000000000000000 rcx=fffbfa80138f7f80
    rdx=fffffa8009fa3e81 rsi=0000000000000000 rdi=0000000000000000
    rip=fffff802e26a85cc rsp=fffff8800e414070 rbp=0000000000000000
    r8=fffffa8009fa3e80 r9=0000000000000001 r10=fffff802e249c610
    r11=fffffa8012e1b010 r12=fffffa8006d92ef0 r13=fffffa80074e29c0
    r14=fffbfa80138f7f80 r15=0000000000000001
    iopl=0 nv up ei ng nz na pe nc
    cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010282
    nt!MiReleaseReadListResources+0x14:
    fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0 ds:002b:fffbfa80`138f7fa8=????????????????
    Resetting default scope
    CUSTOMER_CRASH_COUNT: 1
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
    PROCESS_NAME: TrustedInstall
    CURRENT_IRQL: 0
    ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
    EXCEPTION_PARAMETER1: 0000000000000000
    EXCEPTION_PARAMETER2: ffffffffffffffff
    READ_ADDRESS: GetPointerFromAddress: unable to read from fffff802e256b168
    GetUlongFromAddress: unable to read from fffff802e256b1f8
    ffffffffffffffff
    FOLLOWUP_IP:
    nt!MiReleaseReadListResources+14
    fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0
    FAULTING_IP:
    nt!MiReleaseReadListResources+14
    fffff802`e26a85cc 4883792800 cmp qword ptr [rcx+28h],0
    BUGCHECK_STR: 0x24
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    LAST_CONTROL_TRANSFER: from fffff802e2305e46 to fffff802e26a85cc
    STACK_TEXT:
    fffff880`0e414070 fffff802`e2305e46 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!MiReleaseReadListResources+0x14
    fffff880`0e4140a0 fffff802`e22fea09 : 00000000`00005000 fffff980`2cb80000 00000000`00005000 00000000`00000000 : nt!MmWaitForCacheManagerPrefetch+0x42
    fffff880`0e4140e0 fffff802`e26af71f : 00000000`00000000 00000000`00000000 00000000`00000001 fffff880`0e4141e0 : nt!CcFetchDataForRead+0xe9
    fffff880`0e414130 fffff802`e2304e3e : fffffa80`06d92ef0 00000000`00000000 00000000`00040000 00000000`00004301 : nt!CcMapAndCopyFromCache+0xcf
    fffff880`0e4141d0 fffff880`01903b58 : fffff8a0`06e3cc50 fffffa80`074b86b0 00000000`00000000 00000000`00000000 : nt!CcCopyReadEx+0xfe
    fffff880`0e414240 fffff880`0191a91a : 00000000`00000000 fffff880`0e4144a0 00000000`00060900 fffff8a0`06e3cc50 : Ntfs!NtfsCachedRead+0x148
    fffff880`0e4142b0 fffff880`0191c42b : fffffa80`0f799a10 fffffa80`074b86b0 00000000`00000001 fffffa80`074b8600 : Ntfs!NtfsCommonRead+0x68a
    fffff880`0e414470 fffff880`016e34ee : fffffa80`074a3010 fffffa80`074b86b0 fffffa80`074b86b0 fffffa80`074b8a50 : Ntfs!NtfsFsdRead+0x1db
    fffff880`0e414520 fffff880`016e10b6 : fffffa80`098479a0 fffffa80`074e29c0 fffffa80`074b86b0 fffff802`e24b3140 : fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x25e
    fffff880`0e4145c0 fffff802`e267e868 : 00000000`00000000 fffff880`0e4146a1 fffffa80`074e29c0 00000000`00000018 : fltmgr!FltpDispatch+0xb6
    fffff880`0e414620 fffff802`e26ae513 : fffffa80`074e29c0 fffff8a0`028ca000 ffffffff`800012c4 fffffa80`074e29c0 : nt!IopSynchronousServiceTail+0x158
    fffff880`0e4146f0 fffff802`e26f415a : fffff880`000004a2 00000000`00000000 00000000`00000000 00000000`00000000 : nt!NtReadFile+0x661
    fffff880`0e4147f0 fffff802`e26ef1bf : fffff880`0e414918 00000000`00000003 fffff802`e2665870 fffff802`e248310e : nt!PfSnGetPrefetchInstructions+0x19a
    fffff880`0e414900 fffff802`e26f1935 : fffffa80`074be080 fffff880`0e4149e0 00000000`00000000 fffff880`0e414a30 : nt!PfSnBeginScenario+0x18f
    fffff880`0e4149b0 fffff802`e26a0070 : fffffa80`074be080 00000000`3cc531e5 fffff880`0e414cc0 fffffa80`074be080 : nt!PfSnBeginAppLaunch+0x115
    fffff880`0e414a70 fffff802`e268c2cf : fffffa80`074be080 fffffa80`0723c6e0 00000000`00000000 fffffa80`07110080 : nt!PfProcessCreateNotification+0x70
    fffff880`0e414aa0 fffff802`e22f4915 : fffff880`02e57180 fffffa80`07110080 fffff802`e268c1cc fffffa80`07110080 : nt!PspUserThreadStartup+0x103
    fffff880`0e414b00 fffff802`e22f4897 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartUserThread+0x16
    fffff880`0e414c40 000007fd`9e59d5e8 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiStartUserThreadReturn
    000000c9`60f5fa28 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007fd`9e59d5e8
    SYMBOL_STACK_INDEX: 0
    SYMBOL_NAME: nt!MiReleaseReadListResources+14
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: nt
    DEBUG_FLR_IMAGE_TIMESTAMP: 51a966cd
    IMAGE_VERSION: 6.2.9200.16628
    STACK_COMMAND: .cxr 0xfffff8800e413670 ; kb
    IMAGE_NAME: memory_corruption
    BUCKET_ID_FUNC_OFFSET: 14
    FAILURE_BUCKET_ID: 0x24_nt!MiReleaseReadListResources
    BUCKET_ID: 0x24_nt!MiReleaseReadListResources
    ANALYSIS_SOURCE: KM
    FAILURE_ID_HASH_STRING: km:0x24_nt!mireleasereadlistresources
    FAILURE_ID_HASH: {12e84aa1-b4fa-6138-fa2a-d3b77e82b2b2}
    3.Analyze 120213-48687-01.dump
    * Bugcheck Analysis *
    Use !analyze -v to get detailed debugging information.
    BugCheck C2, {d, fffff901007059c0, 64704344, fffbfa8015d6a940}
    Probably caused by : win32k.sys ( win32k!W32pProcessCallout+86 )
    Followup: MachineOwner
    2: kd> !analyze -v
    * Bugcheck Analysis *
    BAD_POOL_CALLER (c2)
    The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
    Arguments:
    Arg1: 000000000000000d, type of pool violation the caller is guilty of.
    Arg2: fffff901007059c0
    Arg3: 0000000064704344
    Arg4: fffbfa8015d6a940
    Debugging Details:
    OVERLAPPED_MODULE: Address regions for 'dump_iaStor' and 'dump_iaStor.' overlap
    FAULTING_IP:
    win32k!W32pProcessCallout+86
    fffff960`0014bad6 33d2 xor edx,edx
    BUGCHECK_STR: 0xc2_d
    CUSTOMER_CRASH_COUNT: 1
    DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT
    PROCESS_NAME: WerFault.exe
    CURRENT_IRQL: 0
    ANALYSIS_VERSION: 6.3.9600.16384 (debuggers(dbg).130821-1623) amd64fre
    LAST_CONTROL_TRANSFER: from fffff80295c78027 to fffff80295a60440
    STACK_TEXT:
    fffff880`10ffe908 fffff802`95c78027 : 00000000`000000c2 00000000`0000000d fffff901`007059c0 00000000`64704344 : nt!KeBugCheckEx
    fffff880`10ffe910 fffff960`0014bad6 : fffff901`007059c0 fffffa80`15d6adb0 fffff901`007059c0 00000000`64704344 : nt!ExFreePoolWithTag+0xec7
    fffff880`10ffe9f0 fffff960`00184630 : fffff880`10ffeb40 fffffa80`15d6a940 00000000`00000000 00000000`00000000 : win32k!W32pProcessCallout+0x86
    fffff880`10ffea20 fffff802`95e9db5a : fffffa80`15d6a940 fffffa80`15d6adb0 00000000`00000000 00000000`00000008 : win32k!W32CalloutDispatch+0x2f1
    fffff880`10ffea80 fffff802`95e72004 : fffffa80`0a18ed20 00000000`00000001 00000000`00000000 00000000`00000000 : nt!ExCallCallBack+0x3a
    fffff880`10ffeab0 fffff802`95e9d86d : 00000000`00000000 fffffa80`15d6a901 00000000`00000000 fffffa80`152d7080 : nt!PspExitThread+0x414
    fffff880`10ffebd0 fffff802`95a5f453 : fffffa80`15d6a940 fffffa80`152d7080 fffff880`10ffecc0 00000000`7f62b000 : nt!NtTerminateProcess+0xfd
    fffff880`10ffec40 000007fd`bb652eaa : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
    00000000`00cde078 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007fd`bb652eaa
    STACK_COMMAND: kb
    FOLLOWUP_IP:
    win32k!W32pProcessCallout+86
    fffff960`0014bad6 33d2 xor edx,edx
    SYMBOL_STACK_INDEX: 2
    SYMBOL_NAME: win32k!W32pProcessCallout+86
    FOLLOWUP_NAME: MachineOwner
    MODULE_NAME: win32k
    IMAGE_NAME: win32k.sys
    DEBUG_FLR_IMAGE_TIMESTAMP: 5216eef4
    IMAGE_VERSION: 6.2.9200.16699
    BUCKET_ID_FUNC_OFFSET: 86
    FAILURE_BUCKET_ID: 0xc2_d_win32k!W32pProcessCallout
    BUCKET_ID: 0xc2_d_win32k!W32pProcessCallout
    ANALYSIS_SOURCE: KM
    FAILURE_ID_HASH_STRING: km:0xc2_d_win32k!w32pprocesscallout
    FAILURE_ID_HASH: {9d5e1858-9d8c-dc1b-8469-c4e8abf71b98}
    Based on the above prompt messages, you can refer to the following article and get detailed information of Bug Check 1A, Bug Check 24 and Bug Check C2.
    Bug Check 0x1A: MEMORY_MANAGEMENT
    http://msdn.microsoft.com/en-us/library/windows/hardware/ff557391%28v=vs.85%29.aspx
    Bug Check 0x24: NTFS_FILE_SYSTEM
    http://msdn.microsoft.com/en-us/library/windows/hardware/ff557433(v=vs.85).aspx
    Bug Check 0xC2: BAD_POOL_CALLER
    http://msdn.microsoft.com/en-us/library/windows/hardware/ff560185(v=vs.85).aspx
    Based on current state, I suggest you should update volsnap.sys and win32k.sys drivers. Then check if this issue can be solved. Meanwhile, you also should check the memory
    in your computer. For detailed operations, please refer to the following article.
    Run Diagnostics to Check Your System for Memory Problems
    http://technet.microsoft.com/en-us/magazine/ff700221.aspx
    If this issues is a state of emergency for you. Please contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist
    with your request.
    To obtain the phone numbers for specific technology request, please refer to the web site listed below:
    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
    Hope this helps.
    Best regards,                                                                                   
    Justin Gu

  • Installation problem on windows server 2008 r2 datacenter edition 64bit

    hi
    today, i tried to install the current maxdb 7.8 release on my virtual server with a windows server 2008 r2 datacenter 64bit edition os. at the first installation, i got an error message something with "rte runtime error". at this point, the installation stopped.
    because of this error, i tried to uninstall the failed installation. this was not possible, in the uninstaller, i didn't see any components, so i can't uninstall.
    so i tried to delete the files manually: the entries in the start menu, and the application's path under "program files"... first, i need to kill a process named "serv.exe", that creates a tcp daemon under port 7200... after killing it, the deletion of the dir in program files was successful.
    this is very very weird, now my server is "contaminated" with an uncomplete uninstallation of maxdb...
    why maxdb 7.8 has problems on windows server 2008 r2 datacenter 64bit edition???
    thanks for feedbacks!
    regards, jan

    > no, because i canceled this virtual server - another method to solve this problem. (i have really no time for things like that..!)
    If you take the time to give exact error messages then someone will be certainly able to help
    > on windows server 2003, there are NO problems.
    Windows 2003 != Windows 2008 - they use a different kernel, a different security system (UAC) and other features that may prevent a succesfull installation in the first place.
    I installed a MaxDB 7.8 just today on Windows 2008 R2 and it worked fine.
    Markus

  • How to install IE8 on Windows Server 2008 R2 Datacenter?

    Hello.
    Can anybody tell me, how to install IE8 on 2008 R2 Datacenter?
    I've downloaded this http://www.microsoft.com/en-us/download/internet-explorer-8-details.aspx for "Windows Server 2008 64-bit and more..", removed IE11, IE10, IE9 from installed updates, and runned "dism /online /disable-feature
    /featurename:Internet-Explorer-Optional-amd64".
    And nothing helps. I've got a message "Internet Explorer 8 is not supported on this operating system".

    you can't "install" IE8 on WS2008R2, nor on Windows7 - because those OS's shipped with IE8.
    IE is an OS component, and so when you "upgrade" or "downgrade" IE, you are affecting an OS component.
    What this means is that the "IE8" download you are trying to apply, is actually IE8 for WinXP or maybe WinVista.
    You can usually "downgrade" Win7 back to IE8, by uninstalling the newer "upgrade" of IE - this causes the OS to automatically attempt to revert to the prior IE version.
    This reversion assumes/requires a healthy OS and component store (CBS), including all the pkgmgr file needed to revert to component.
    Sometimes, the component store is damaged, or is missing files.
    you may need to check the CBS logfiles, and may need to perform SFC /scannow
    You may need to use CheckSUR to repair system health.
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • CA web enrollment page is not shown in windows server 2008 R2 Datacenter edition

    hi friends
    on a windows server 2008 R2 Datacenter, i have installed ADCS (including web enrollment), & every thing is ok.
    but when i connect to CA web enrollment page to request a certificate for my web server, when i select advanced certificate request, system doesn't show the page which we select which register our name & specification & we select which certificate
    template do we want.  instead it shows the page 
    in windows 2008 R2 enterprise edition this problem doesn't exist. also in standalone CA web enrollment page this problem doesn't exist.
    any help pleas
    thanks in advance

    forget about enrollment web pages. With Enterprise CAs you should consider to use Certificates MMC snap-in:
    http://technet.microsoft.com/en-us/library/cc754490.aspx
    My weblog: en-us.sysadmins.lv
    PowerShell PKI Module: pspki.codeplex.com
    PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
    Check out new: SSL Certificate Verifier
    Check out new:
    PowerShell FCIV tool.
    hi thanks.
    i am familiar with cert snap-in, but i wanted to know can we restore previous web enrollment page which delivered us the ability of enroll

  • Reader 9.2 crashed when using attach to email command on windows 2008 x64

    Hi,
    I'm experiencing issues with Adobe Reader 9.2 on a windows 2008 x64 server. This box is running Terminal Services.
    When a user open a pdf and wants to attach it to an email, reader simply crash !!
    Does someone have ever experienced this kind of issue ?
    Thanks.

    Does this happen for all the files or only files greater than a certain size?

  • Windows 2008 Server crashed - How to find location of remote shared files that they used to access on remote web app?

    We have a client that was running windows 2008 server.  A previous IT person had setup their system, so we were walking into a situation where there were many unknowns.  Server was mainly handling emails only, and we were able to get their exchange
    database off and export PSTs to hosted exchange via microsoft.
    Everything went fine with that, however one user said that he used to access files on the server via the remote web app as he described.  He would go to the following url:
    https://mail.theirdomain.com/remote/menu.aspx#
    and he would use his login and then he would see several links to folders.  He could then click on those and see his desired files.  
    We were able to get the server booted again, however we could not find any of the files he described on it at all, leaving me to suspect that perhaps this remote link was accessing another PC.  
    We have the old server up and running, however the link above is no longer active because we have pointed the domain to the new hosted exchange server.  As I am still learning and my boss wanted me to research this on my own and figure out how to find
    out where these files are located.  Any advice would be greatly appreciated.  
    Just as a note I did try access mail.localhost.com/remote/menu.aspx# on the server but this did not work.  Is there any way in the IIS 7 management console to figure out where this was pointing to?  

    I figured it out - The server was using sharepoint to host these files.  I browsed localhost:987 and opened the sharepoint site locally on the server.  They had several documents to be exported, however when clicking on Open in Explorer it was
    giving an error that local client was not configured.  I installed Desktop Experience and after that was able to open it in Windows Explorer and copy all files off.  

Maybe you are looking for

  • How to find out the packages created by a particular user.

    Hi, In a system which i am working. I want the find the different packages that wer created by me. How to find it out. Regards, Chandru

  • Not Authorized Error

    I have been building an iMovie (5.02) for the past two weeks using some songs from my iTunes music. I was asked to put my iTunes store ID in when originally transferring them into iMovie and the played when testing the movie. After the update to yest

  • Adapter for Avaya communication manager

    Hi Everyone, Can anyone help me with the connector for Avaya communication manager? I am confused which jar to use for Avaya communication manager and how to create the configuration file(XML) file for that,i mean fields that are required in XML file

  • Why does my cursor spin?

    I just got a new MacBookPro, and I recently downloaded pages and number and keynote but even when nothing is downloading my cusor is a rainbow circle and it spins. I cant move anything on the desktop or open anthing on the desktop, and I am not reall

  • Authorization Issue to Upload file in Integrated Planning

    Hi All   I have included the planning role for the user...which is the same as mine..I can execute and upload  the file..when I login with the user iD, it says you are not authorize to upload zFILE_SEQ/...in my role..there is Z* values also.. No idea