Cryptographic Library windows 2008

Hi people,
I´m confused with the correct version of Cryptographic Library for windows 2008. I´ve read in different threads, that the version 2003 x64 is correct and the other side that the correct it´s Cryptographic Library Microsoft Win32 for x86/IA32
Which is it?

If I was you I'll try the 64bit one then...
Regards
Juan

Similar Messages

SAP Cryptographic Library for Windows 2008

Hello,
Do you know where can i find SAP Cryptographic Library for Windows 2008 x64?
I was trying to find it in swdc, but there's only for Windows 2003 - and it's not working with 2008.
Best regards
Bartosz

Hi,
Just an information from my experience : I have never been able to download any release of the SAP Crypto library contrary to what all the documentation and SAP notes tell.
We had always to ask our SAP representative and to wait for several weeks to receive a DVD by physical mail.
Regards,
Olivier

Windows 2008 R2 SP1 (64bit) shared folders no longer work with Windows 7 Pro but do work with WindowsXP & Windows 2003

As of last week, our Windows 7 Pro workstations can not map or browse the Windows 2008 Server shares. They can ping the Windows 2008 server. The Windows 7 Pro machines can still access the Windows 2003 Server Shares. The older workstations running Windows
XP can still map to the both the Windows 2003 & Windows 2008 Servers. All the servers can browse to each others shared folders (2 windows 2003 server & 1 windows 2008 server).

Ok, now you're down to network or permissions issues. An unedited ipconfig /all
of server and problem workstation may help. You could also try setting up some auditing.
https://technet.microsoft.com/en-us/library/dn311489.aspx
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Windows 2008 R2, converting to dynamic disk questions

Hello,
   I have a Windows 2008 R2 server and I want to convert the drive into a dynamic disk for mirroring. The disk currently is divided into two partitions. The C: partition which is System,Boot, Page File, etc. and the D: partition which
is data. The questions I have are:
    Can a disk with multiple partitions be created without data loss or anything?
    I know you have to reboot, but how long does it usually take to do the reboot/conversion before the server is back up?
    I want to mirror the drive to a 2nd identical disk in the server, and am planning to use Computer Management. Do I have to partition the second drive first, or will the process do it automatically?
    The server is a dedicated server that is provided by a hosting company, so I would be doing it through Remote Desktop. Can it be done that way?
Thanks.

Hi,
You can convert the drive into a dynamic disk within both local logon session and remote desktop session. The system requires reboot twice to make the conversion take into effect. You do not have to partition the second drive.
For more detailed information, please refer to the articles below:
Dynamic disks and volumes
http://technet.microsoft.com/en-us/library/cc757696(v=ws.10).aspx
Create and test a mirrored system or boot volume
http://technet.microsoft.com/en-us/library/cc738132(v=ws.10).aspx
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

High Page Reads/Sec on Windows 2008 R2 64-bit running on VMware but very low Real Memory & Page file Usage.

Hello All,
Below is the server configuration,
OS: Windows 2008 R2 Enterprise 64 Bit
Version: 6.1.7601 Service Pack 1 Build 7601
CPU: 4 (@ 2.93 GHz, 1 core)
Memory: 12 GB
Page file: 12 GB
1. The actual utilization, be it a 15 minute sample, hourly, weekly etc, the utilization of real memory has never crossed 20% and the page file usage is at 0.1%. For some reason, the Pages/Sec>Limit% counter reports 100% continuously regardless of the
sampling intervals. Upon further observation, the Page Reads/Sec value is somewhere between 150~450 and Page Input/Sec is somewhere between 800~8000. Does this indicate a performance bottleneck? (I've in the interim asked the Users, App. Owners to see if they
notice any performance degradation and awaiting response). If this indicates a performance issue, please could someone help list down how to track this down further to which process/memory mapped file is causing it? and what I should go about performing to
fix this problem please?
p.s., initially the Security logs were full on this server and since page file is tied to Application, Security and System logs, this was freed up to see if this is causing the high page reads but this doesn't.
2. If the above does not necessarily indicate a performance problem, please can someone reference few KB articles that confirms this? Also, in this case, will there be any adverse effects if attempting to fine tune a server which is already running fine?
assuming App. Owners confirm there isn't any performance degradation.
Thanks in advance.

Hi,
Based on the description, we can try to download Server Performance Advisor (SPA) to help further analyze the performance of the server. SPA can generate comprehensive diagnostic reports and charts and provides recommendations to help you quickly analyze
issues and develop corrective actions.
Regarding this tool, the following articles can be referred to for more information.
Microsoft Server Performance Advisor
https://msdn.microsoft.com/en-us/library/windows/hardware/dn481522.aspx
Server Performance Advisor (SPA) 3.0
http://blogs.technet.com/b/windowsserver/archive/2013/03/11/server-performance-advisor-spa-3-0.aspx
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

CERT_TRUST_IS_NOT_SIGNATURE_VALID when installing a 3rd-party cert in Windows 2008 Domain Controller

Hello,
I'm facing with a problem while trying to install a 3rd-party digital certificate on a Windows 2008 Domain Controller.
Basically, I'm following this TechNet
http://technet.microsoft.com/en-us/library/cc783835(v=ws.10).aspx
1) I did create the file Reqdccert.vbs on the Domain Controller
2) then I did generate the inf file
cscript reqdccert.vbs DomainController E
3) and then I generated a certificate request
certreq -new AD.inf AD.req
4) also I've imported RootCA and SubCA into the Certificate Store of the DC
5) I got a signed certificate from our 3rd-party CA running on Windows 2000
6) when importing the certificate I get the below error
C:\>certreq -ACCEPT ad.p7c
Certificate Request Processor: The signature of the certificate cannot be verifi
ed. 0x80096004 (-2146869244)
Here is the verbose log from CAPI2:
+ System
- Provider
[ Name] Microsoft-Windows-CAPI2
[ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}
EventID 11
Version 0
Level 2
Task 11
Opcode 2
Keywords 0x4000000000000003
- TimeCreated
[ SystemTime] 2014-06-13T09:33:02.604870500Z
EventRecordID 304
Correlation
- Execution
[ ProcessID] 1700
[ ThreadID] 3032
Channel Microsoft-Windows-CAPI2/Operational
Computer ad.eac.igs
- Security
[ UserID] S-1-5-21-4171312682-976198474-2692596432-500
- UserData
- CertGetCertificateChain
- Certificate
[ fileRef] 4DA02894B4AFB76F8D6B8722A96A3444041573C6.cer
[ subjectName] ad.eac.com
- AdditionalStore
- Certificate
[ fileRef] 691847ADD248AEB8579462249B063A1555716B21.cer
[ subjectName] SubCA
- Certificate
[ fileRef] 4DA02894B4AFB76F8D6B8722A96A3444041573C6.cer
[ subjectName] ad.eac.com
- Certificate
[ fileRef] 0175DDA12776ED8CA4657E921E9AE3C6B0698F71.cer
[ subjectName] RootCA
ExtendedKeyUsage
- Flags
[ value] 0
- ChainEngineInfo
[ context] user
- AdditionalInfo
- NetworkConnectivityStatus
[ value] 1
[ _SENSAPI_NETWORK_ALIVE_LAN] true
- CertificateChain
[ chainRef] {0B005F9F-F15B-4FE2-A630-7BBEE6AB5C0A}
- TrustStatus
- ErrorStatus
[ value] 8
[ CERT_TRUST_IS_NOT_SIGNATURE_VALID] true
- InfoStatus
[ value] 0
- ChainElement
- Certificate
[ fileRef] 4DA02894B4AFB76F8D6B8722A96A3444041573C6.cer
[ subjectName] ad.eac.com
- SignatureAlgorithm
[ oid] 1.2.840.113549.1.1.11
[ hashName] SHA256
[ publicKeyName] RSA
- PublicKeyAlgorithm
[ oid] 1.2.840.113549.1.1.1
[ publicKeyName] RSA
[ publicKeyLength] 2048
- TrustStatus
- ErrorStatus
[ value] 8
[ CERT_TRUST_IS_NOT_SIGNATURE_VALID] true
- InfoStatus
[ value] 4
[ CERT_TRUST_HAS_NAME_MATCH_ISSUER] true
- ApplicationUsage
- Usage
[ oid] 1.3.6.1.5.5.7.3.1
[ name] Server Authentication
- Usage
[ oid] 1.3.6.1.5.5.7.3.2
[ name] Client Authentication
- Usage
[ oid] 1.3.6.1.4.1.311.20.2.2
[ name] Smart Card Logon
IssuanceUsage
- ChainElement
- Certificate
[ fileRef] 691847ADD248AEB8579462249B063A1555716B21.cer
[ subjectName] SubCA
- SignatureAlgorithm
[ oid] 1.2.840.113549.1.1.5
[ hashName] SHA1
[ publicKeyName] RSA
- PublicKeyAlgorithm
[ oid] 1.2.840.113549.1.1.1
[ publicKeyName] RSA
[ publicKeyLength] 2048
- TrustStatus
- ErrorStatus
[ value] 0
- InfoStatus
[ value] 101
[ CERT_TRUST_HAS_EXACT_MATCH_ISSUER] true
[ CERT_TRUST_HAS_PREFERRED_ISSUER] true
- ApplicationUsage
[ any] true
IssuanceUsage
- ChainElement
- Certificate
[ fileRef] 0175DDA12776ED8CA4657E921E9AE3C6B0698F71.cer
[ subjectName] RootCA
- SignatureAlgorithm
[ oid] 1.2.840.113549.1.1.5
[ hashName] SHA1
[ publicKeyName] RSA
- PublicKeyAlgorithm
[ oid] 1.2.840.113549.1.1.1
[ publicKeyName] RSA
[ publicKeyLength] 2048
- TrustStatus
- ErrorStatus
[ value] 0
- InfoStatus
[ value] 10C
[ CERT_TRUST_HAS_NAME_MATCH_ISSUER] true
[ CERT_TRUST_IS_SELF_SIGNED] true
[ CERT_TRUST_HAS_PREFERRED_ISSUER] true
- ApplicationUsage
[ any] true
- IssuanceUsage
[ any] true
- EventAuxInfo
[ ProcessName] certreq.exe
[ startTime] 2014-06-13T09:32:53.369Z
[ endTime] 2014-06-13T09:33:02.604Z
[ duration] PT9.232850S
- CorrelationAuxInfo
[ TaskId] {A8DC7725-FEE9-4E09-905A-FEFF7FAE9B8B}
[ SeqNumber] 27
- Result The signature of the certificate cannot be verified.
[ value] 80096004
Any idea what the problem is?
Thanks in advance,
Davide.

One common reason for that error is that the wrong SubCA certificate had been imported accidentally - e.g. an earlier 'version' of that SubCA with the same Subject CA name but a different key. In this case the validating client will try to build a chain
based on name only but finally the signature check fails.
Could you cross-check if the extension Authority Key Identifier in your DC certificate is the same as the field
Subject Key Identifier of the SubCA certificate? (These are typically hashes of the keys though it is not standardized - it should be a unique string characteristic for the CA)
For the client cert. CERT_TRUST_HAS_NAME_MATCH_ISSUER is indicated in your log - thus Isser name in client cert. matches Subject Name in CA cert, but we don't know about SKI/AKI.
Elke

Windows 2008 Enterprise 32-bit Random Blue Screen 0x000000C4

Hello,
We have a customer with IBM x3500 M3 server, Windows 2008 Enterprise SP2 32-bit, 24GB RAM (Domain, file and print server, rdp server roles installed).
Since December 2013, they have been experiencing random reboots (once or twice a month), so I ran debug on the memory.dmp and found that ntkrpamp.exe wa scausing this issue:
Debug on memory.dmp file for January, 2014:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\Debug\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Win2008E.DVD
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (12 procs) Free x86 compatible
Product: LanManNt, suite: Enterprise TerminalServer
Built by: 6002.18881.x86fre.vistasp2_gdr.130707-1535
Machine Name:
Kernel base = 0x82233000 PsLoadedModuleList = 0x8234ac70
Debug session time: Wed Jan 8 08:24:19.852 2014 (UTC - 5:00)
System Uptime: 4 days 0:37:56.528
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                        Bugcheck Analysis
Use !analyze -v to get detailed debugging information.
BugCheck 50, {f85c5048, 0, 823af2bf, 0}
Probably caused by : ntkrpamp.exe ( nt!CmpCheckKey+61b )
Followup: MachineOwner
9: kd> !analyze -v
*                        Bugcheck Analysis
PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: f85c5048, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 823af2bf, If non-zero, the instruction address which referenced the bad memory
   address.
Arg4: 00000000, (reserved)
Debugging Details:
READ_ADDRESS: f85c5048
FAULTING_IP:
nt!CmpCheckKey+61b
823af2bf 394724          cmp     dword ptr [edi+24h],eax
MM_INTERNAL_CODE: 0
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
BUGCHECK_STR: 0x50
PROCESS_NAME: System
CURRENT_IRQL: 0
TRAP_FRAME: 97b7d9ec -- (.trap 0xffffffff97b7d9ec)
ErrCode = 00000000
eax=00000000 ebx=e6b30024 ecx=19ef8172 edx=00000035 esi=a559e6a8 edi=f85c5024
eip=823af2bf esp=97b7da60 ebp=97b7da8c iopl=0         nv up ei pl zr na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000             efl=00010246
nt!CmpCheckKey+0x61b:
823af2bf 394724          cmp     dword ptr [edi+24h],eax ds:0023:f85c5048=????????
Resetting default scope
LAST_CONTROL_TRANSFER: from 82280de4 to 822cb292
STACK_TEXT:
97b7d9d4 82280de4 00000000 f85c5048 00000000 nt!MmAccessFault+0x10b
97b7d9d4 823af2bf 00000000 f85c5048 00000000 nt!KiTrap0E+0xdc
97b7da8c 823b581a 01000001 009c4020 009c3f70 nt!CmpCheckKey+0x61b
97b7dabc 823b5e48 a559e6a8 01000001 00000006 nt!CmpCheckRegistry2+0x8c
97b7db04 823b086e 01000001 97b7dc60 8000a05c nt!CmCheckRegistry+0xf5
97b7db60 823b2fdd 97b7dbb4 00000005 00000000 nt!CmpInitializeHive+0x4c1
97b7dbd8 823b527d 97b7dc60 00000000 97b7dc4c nt!CmpInitHiveFromFile+0x19e
97b7dc18 823ab4c5 97b7dc60 00000000 97b7dc7b nt!CmpCmdHiveOpen+0x36
97b7dd14 823ab6fa 00000002 8232b5a0 00000002 nt!CmpFlushBackupHive+0x2fd
97b7dd38 8248acbd 8233513c 8e9462d8 822d8d4a nt!CmpSyncBackupHives+0x90
97b7dd44 822d8d4a 00000000 00000000 8e9462d8 nt!CmpPeriodicBackupFlushWorker+0x32
97b7dd7c 8240901c 00000000 8e585cb2 00000000 nt!ExpWorkerThread+0xfd
97b7ddc0 82271eee 822d8c4d 00000001 00000000 nt!PspSystemThreadStartup+0x9d
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
STACK_COMMAND: kb
FOLLOWUP_IP:
nt!CmpCheckKey+61b
823af2bf 394724          cmp     dword ptr [edi+24h],eax
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!CmpCheckKey+61b
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrpamp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 51da1840
FAILURE_BUCKET_ID: 0x50_nt!CmpCheckKey+61b
BUCKET_ID: 0x50_nt!CmpCheckKey+61b
Followup: MachineOwner
Based on google searches, driver verifier was recommended to be turned on to track driver with fault. I enabled verifier on all drivers, disabled automatic server reboot and today server crashed again.
here's the debug output of full memory.dmp file:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\windows\memory.dmp]
Kernel Summary Dump File: Only kernel address space is available
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Win2008E.DVD
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (12 procs) Free x86 compatible
Product: LanManNt, suite: Enterprise TerminalServer
Built by: 6002.18881.x86fre.vistasp2_gdr.130707-1535
Machine Name:
Kernel base = 0x82214000 PsLoadedModuleList = 0x8232bc70
Debug session time: Thu Feb 13 08:29:07.272 2014 (UTC - 5:00)
System Uptime: 3 days 23:15:45.259
Loading Kernel Symbols
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdd00c). Type ".hh dbgerr001" for details
Loading unloaded module list
*                        Bugcheck Analysis
Use !analyze -v to get detailed debugging information.
BugCheck C4, {e2, af033d18, 2d0000, 0}
Page 6684ef not present in the dump file. Type ".hh dbgerr004" for details
Page 66a0f9 not present in the dump file. Type ".hh dbgerr004" for details
Probably caused by : srvnet.sys ( srvnet!SrvNetWskSendData+c9 )
Followup: MachineOwner
9: kd> !analyze -v
*                        Bugcheck Analysis
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 000000e2, IRP field is a user-mode address but Irp->RequestorMode is KernelMode.
Arg2: af033d18, IRP address.
Arg3: 002d0000, User-mode address present as the value of an IRP field.
Arg4: 00000000
Debugging Details:
Page 6684ef not present in the dump file. Type ".hh dbgerr004" for details
Page 66a0f9 not present in the dump file. Type ".hh dbgerr004" for details
BUGCHECK_STR: 0xc4_e2
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
PROCESS_NAME: spoolsv.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from 824ff5a7 to 822e19bd
STACK_TEXT:
eff67a20 824ff5a7 000000c4 000000e2 af033d18 nt!KeBugCheckEx+0x1e
eff67a40 824fea32 af033d18 002d0000 9930e2e0 nt!VerifierBugCheckIfAppropriate+0x32
eff67a58 824fe7e0 af033d18 9930e2e0 99269b80 nt!ViIrpCheckKernelAddressForIrp+0x51
eff67a70 824f766d 99269b80 af033458 99269b80 nt!VfBeforeCallDriver+0x3d
eff67a90 82258931 af033fa4 af033fe0 99269b80 nt!IovCallDriver+0x1ef
eff67aa4 9b01271a eff67adc aad3183f bd99d34c nt!IofCallDriver+0x1b
eff67aac aad3183f bd99d34c eff67ad0 00000002 afd!WskProAPISend+0x67
eff67adc aad31490 9b01d9d0 af033d18 af033458 srvnet!SrvNetWskSendData+0xc9
eff67afc aad779d2 d5b93018 af033458 00000030 srvnet!SrvNetSendData+0x4d
eff67b14 aadb45bd af033368 aad75459 af033d18 srv!SrvStartSend2+0xa3
eff67b40 aad7522d af033fa4 eff67b84 824f7d4d srv!SrvFsdRestartReadAndX+0x127
eff67b4c 824f7d4d 00000000 af033d18 af033368 srv!SrvFsdIoCompletionRoutine+0x1d
eff67b84 822bb0fb 00000000 af033d18 eff67bf0 nt!IovpLocalCompletionRoutine+0x16e
eff67bb8 824f7b95 824f7a77 ccb4e7c8 eff67c44 nt!IopfCompleteRequest+0x11d
eff67c28 981a30d9 c3fbc2d8 ccb4e7c8 909c9dd0 nt!IovCompleteRequest+0x11c
eff67c4c 824f76be 909c9dd0 ccb4e7c8 9efe80e8 Npfs!NpFsdWrite+0x53
eff67c70 82258931 ccb4e838 ccb4e7c8 909c9dd0 nt!IovCallDriver+0x23f
eff67c84 8245ae25 9efe8114 ccb4e7c8 ccb4e838 nt!IofCallDriver+0x1b
eff67ca4 82427b13 909c9dd0 9efe80e8 00000001 nt!IopSynchronousServiceTail+0x1d9
eff67d38 8225ec96 909c9dd0 00000a39 00000000 nt!NtWriteFile+0x6fc
eff67d38 77755d14 909c9dd0 00000a39 00000000 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
0549f880 00000000 00000000 00000000 00000000 0x77755d14
STACK_COMMAND: kb
FOLLOWUP_IP:
srvnet!SrvNetWskSendData+c9
aad3183f 53              push    ebx
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: srvnet!SrvNetWskSendData+c9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: srvnet
IMAGE_NAME: srvnet.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4dbabc34
FAILURE_BUCKET_ID: 0xc4_e2_VRF_srvnet!SrvNetWskSendData+c9
BUCKET_ID: 0xc4_e2_VRF_srvnet!SrvNetWskSendData+c9
Followup: MachineOwner
Here's the output of mini dump file as well:
Microsoft (R) Windows Debugger Version 6.12.0002.633 X86
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:\windows\minidump\Mini021314-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\Win2008E.DVD
Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (12 procs) Free x86 compatible
Product: LanManNt, suite: Enterprise TerminalServer
Built by: 6002.18881.x86fre.vistasp2_gdr.130707-1535
Machine Name:
Kernel base = 0x82214000 PsLoadedModuleList = 0x8232bc70
Debug session time: Thu Feb 13 08:29:07.272 2014 (UTC - 5:00)
System Uptime: 3 days 23:15:45.259
Loading Kernel Symbols
Press ctrl-c (cdb, kd, ntsd) or ctrl-break (windbg) to abort symbol loads that take too long.
Run !sym noisy before .reload to track down problems loading symbols.
Loading User Symbols
Loading unloaded module list
*                        Bugcheck Analysis
Use !analyze -v to get detailed debugging information.
BugCheck C4, {e2, af033d18, 2d0000, 0}
Probably caused by : srvnet.sys ( srvnet!SrvNetWskSendData+c9 )
Followup: MachineOwner
9: kd> !analyze -v
*                        Bugcheck Analysis
DRIVER_VERIFIER_DETECTED_VIOLATION (c4)
A device driver attempting to corrupt the system has been caught. This is
because the driver was specified in the registry as being suspect (by the
administrator) and the kernel has enabled substantial checking of this driver.
If the driver attempts to corrupt the system, bugchecks 0xC4, 0xC1 and 0xA will
be among the most commonly seen crashes.
Arguments:
Arg1: 000000e2, IRP field is a user-mode address but Irp->RequestorMode is KernelMode.
Arg2: af033d18, IRP address.
Arg3: 002d0000, User-mode address present as the value of an IRP field.
Arg4: 00000000
Debugging Details:
BUGCHECK_STR: 0xc4_e2
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP
PROCESS_NAME: spoolsv.exe
CURRENT_IRQL: 2
LAST_CONTROL_TRANSFER: from 824ff5a7 to 822e19bd
STACK_TEXT:
eff67a20 824ff5a7 000000c4 000000e2 af033d18 nt!KeBugCheckEx+0x1e
eff67a40 824fea32 af033d18 002d0000 9930e2e0 nt!VerifierBugCheckIfAppropriate+0x32
eff67a58 824fe7e0 af033d18 9930e2e0 99269b80 nt!ViIrpCheckKernelAddressForIrp+0x51
eff67a70 824f766d 99269b80 af033458 99269b80 nt!VfBeforeCallDriver+0x3d
eff67a90 82258931 af033fa4 af033fe0 99269b80 nt!IovCallDriver+0x1ef
eff67aa4 9b01271a eff67adc aad3183f bd99d34c nt!IofCallDriver+0x1b
eff67aac aad3183f bd99d34c eff67ad0 00000002 afd!WskProAPISend+0x67
eff67adc aad31490 9b01d9d0 af033d18 af033458 srvnet!SrvNetWskSendData+0xc9
eff67afc aad779d2 d5b93018 af033458 00000030 srvnet!SrvNetSendData+0x4d
eff67b14 aadb45bd af033368 aad75459 af033d18 srv!SrvStartSend2+0xa3
eff67b40 aad7522d af033fa4 eff67b84 824f7d4d srv!SrvFsdRestartReadAndX+0x127
eff67b4c 824f7d4d 00000000 af033d18 af033368 srv!SrvFsdIoCompletionRoutine+0x1d
eff67b84 822bb0fb 00000000 af033d18 eff67bf0 nt!IovpLocalCompletionRoutine+0x16e
eff67bb8 824f7b95 824f7a77 ccb4e7c8 eff67c44 nt!IopfCompleteRequest+0x11d
eff67c28 981a30d9 c3fbc2d8 ccb4e7c8 909c9dd0 nt!IovCompleteRequest+0x11c
eff67c4c 824f76be 909c9dd0 ccb4e7c8 9efe80e8 Npfs!NpFsdWrite+0x53
eff67c70 82258931 ccb4e838 ccb4e7c8 909c9dd0 nt!IovCallDriver+0x23f
eff67c84 8245ae25 9efe8114 ccb4e7c8 ccb4e838 nt!IofCallDriver+0x1b
eff67ca4 82427b13 909c9dd0 9efe80e8 00000001 nt!IopSynchronousServiceTail+0x1d9
eff67d38 8225ec96 909c9dd0 00000a39 00000000 nt!NtWriteFile+0x6fc
eff67d38 77755d14 909c9dd0 00000a39 00000000 nt!KiSystemServicePostCall
WARNING: Frame IP not in any known module. Following frames may be wrong.
0549f880 00000000 00000000 00000000 00000000 0x77755d14
STACK_COMMAND: kb
FOLLOWUP_IP:
srvnet!SrvNetWskSendData+c9
aad3183f 53              push    ebx
SYMBOL_STACK_INDEX: 7
SYMBOL_NAME: srvnet!SrvNetWskSendData+c9
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: srvnet
IMAGE_NAME: srvnet.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 4dbabc34
FAILURE_BUCKET_ID: 0xc4_e2_VRF_srvnet!SrvNetWskSendData+c9
BUCKET_ID: 0xc4_e2_VRF_srvnet!SrvNetWskSendData+c9
Followup: MachineOwner
I'd like to know how to fix this. Server has up-to-date firmware and drivers from IBM. It's also up-to-date on all windows updates.
Any help is greatly appreciated.
Will

This one may help.
http://msdn.microsoft.com/en-us/library/windows/hardware/ff559023(v=vs.85).aspx
I'd test the RAM and or get with IBM on best method to verify the hardware and drivers.
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Command to set modify Advanced Security Settings (Audit Settings for folders) on windows 2008

Hello,
We have requirement to modify Advanced Security Settings (Audit Settings for folders) on windows 2008. I am looking for a command which does this job.
I know, using group policies I can do this; in fact I had done this using group policies. However, I need to do this on number of servers which are not in domain. There are around 15 folders on which I need to enable Auditing; manual editing folder advanced
permissions is a cumbersome job. Hence, I am looking for a command line options.
I need to know how command can be utilised to enable Audit option on a folder. Please share a command which can do this; once I get the command, I will create a batch file for other necessary folders. (BTW, this is not a scripting question, I just need to
know the command hence, please do not re-direct me to scripting forum)
Manually through GUI, I am setting following.. snaps are given below
Thanks !

You can try using Auditpol.exe: http://technet.microsoft.com/en-us/library/cc731451%28v=ws.10%29.aspx
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner 2010 / 2011
Microsoft
Certified Professional
Microsoft
Certified Systems Administrator: Security
Microsoft
Certified Systems Engineer: Security
Microsoft
Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows 7, Configuring
Microsoft
Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
Microsoft Certified IT Professional: Enterprise Administrator
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Trainer
Thanks but I guess, auditpol ca be used only to manipulate system audit policies. how do I specify a folder and user in auditpol ? I could not find or understand how folder can be included with auditpol command line options.
Thanks !

KMS Error 0xC004F015 on Windows 2008 R2 - Does anyone have the correct fix for this please?

I am in the process of migrating my KMS server from Windows 2003 to Windows 2008 R2 64-bit. My Windows 2003 server has been happily providing my Windows 7 clients with licenses for well over a year. I have followed these migration steps in this forum article:
social.technet.microsoft.com/Forums/windows/en-US/cd4177bd-8df5-4a66-afdc-c760398b7e7f/migrating-kms-server-from-one-computer-to-another?forum=itprovistaactivation
I cannot get passed step 5. As soon as I try step 5 with my Windows 7 KMS key I receive error 0xC004F015. Despite reading countless articles on Microsoft forums and also speaking the Microsoft licensing who frankly were of no help at all, I am none the wiser
how to resolve this fault. My questions are:
1. Should my Windows 2008 R2 server be licensed with a MAK or KMS key? Does this matter?
2. Some articles I have read suggest if you use a Windows Server "C" license then you do not need to use a Windows 7 KMS key. I've tried this but it just tells me I have insufficient licenses.
3. When installing my windows 7 license key via the slmgr /ipk command should I be using my Windows 7 Professional KMS key? This works fine on my old Windows 2003 server, but Windows 2008 does not like it at all. Would I be better simply moving my KMS server
to a Windows 7 desktop instead?
4. I also want my Windows 2008 R2 to carry out my KMS activation for Office 2013. Can this run on the same server as my Windows 7 KMS key should I ever get it to work
Thank you anyone who can shed some light on this absolutely baffling error. Surely some one out there has the definitive answer.
Regards
N Buck

I am in the process of migrating my KMS server from Windows 2003 to Windows 2008 R2 64-bit. My Windows 2003 server has been happily providing my Windows 7 clients with licenses for well over a year. I have followed these migration steps in this
forum article:
social.technet.microsoft.com/Forums/windows/en-US/cd4177bd-8df5-4a66-afdc-c760398b7e7f/migrating-kms-server-from-one-computer-to-another?forum=itprovistaactivation
I cannot get passed step 5. As soon as I try step 5 with my Windows 7 KMS key I receive error 0xC004F015. Despite reading countless articles on Microsoft forums and also speaking the Microsoft licensing who frankly were of no help at all, I am none the wiser
how to resolve this fault. My questions are:
1. Should my Windows 2008 R2 server be licensed with a MAK or KMS key? Does this matter?
2. Some articles I have read suggest if you use a Windows Server "C" license then you do not need to use a Windows 7 KMS key. I've tried this but it just tells me I have insufficient licenses.
3. When installing my windows 7 license key via the slmgr /ipk command should I be using my Windows 7 Professional KMS key? This works fine on my old Windows 2003 server, but Windows 2008 does not like it at all. Would I be better simply moving my KMS server
to a Windows 7 desktop instead?
4. I also want my Windows 2008 R2 to carry out my KMS activation for Office 2013. Can this run on the same server as my Windows 7 KMS key should I ever get it to work
Hi,
on your KMShost, if that is a WindowsServer OS, you cannot use a WindowsClient (WinVista/Win7/Win8/Win8.1) KMShost product key, you must use a WindowsServer KMShost product key.
Further, the KMShost product key must match the OS of the KMShost machine (or exceed/better it).
e.g. if your KMShost machine is WS2008R2, you must use a WS2008R2 (or higher e.g. WS2012 or WS2012R2) product key.
If you will use a higher product key, you will need to install the relevant patch package to do so.
When you install a Windows KMShost product key onto a machine, the Windows KMShost product key completely replaces the previous Windows product key of that machine [it serves two purposes, (1) replace the previous key, (2) activates the KMShost feature].
So, your KMShost is neither licensed as MAK nor KMS, it becomes a KMShost.
For WS2008R2 KMShosts, you can install one of 3 types (channels/groups) of KMshost pkey.
The channel/group pkey you choose, is based upon the maximum product editions you wish to perform KMSclient activations for.
http://technet.microsoft.com/en-us/library/ff793411.aspx
For your issue #2, are you attempting to install your Windows7 KMS key upon the KMShost or a KMSclient?
For your issue #3, are you attempting this upon a KMSclient? (Volume License editions on Win7Pro or Win7Ent, are already pre-loaded with a KMSclient pkey, so you should have no need to alter the client keys). As previously mentioned, no Win7 key is needed/possible
for the KMShost, if the KMShost is WS2008R2.
For your issue #4, yes, your WS2008R2 KMShost can also act as KMShost for Office2010 and/or Office2013, this requires a further patch, and the installation of the relevant Office KMShost pkey.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Solaris nis client can't connect to Windows 2008 NIS Server across subnets

I have been using Microsoft Windows Server for NIS for years to centralize some accounts accessing Solaris and Linux OS.
Windows 2003 R2 Indentity Management for UNIX version of Server for NIS was last working version with Solairs.
After upgrading Domain to Windows 2008 all Solaris clients that are on different subnets fail to bind and connect to NIS servers now.
These servers already were setup using ypinit -c to manually add the NIS servers to connect to and prior to Windows 2008 this worked.
Now no Solaris nis clients on different subnets (no firewall between) can connect , but other Unix/Linux OS connect fine.
Is this a known issue and can we get a resolution as it seems only Solaris is affected?

Hi Mid.Hudson-IT,
Before we begin ,we should ensure we have configured the printer server correctly .
Here is a link for reference of configuring the printer server .
Print server role: Configuring a print server
https://technet.microsoft.com/en-us/library/cc775791(v=ws.10).aspx
"I can map all of the printers on the network to the print server as-well as install the drivers correctly and I can resolve the IP and server name via DNS"
From this sentence ,I can`t figure out whether you have tried to ping the server both with the IP adress and name adress from the client ?
If we can ping the print server from the client,we can ensure the connection to the printer server is good .
Then we can try to install the printer driver directly to have a check .In the adress bar of Windows Explorer ,input "\\server name \the printer name"
If we cannot ping the print server ,we should troubleshoot the network issue firstly.
We also can check the event viewer for more information to troubleshoot this issue .
Best regards

Windows 2008 Server upgrade

Hi,
I would like to upgrade one of my Servers from Windows 2008 R2 Enterprise to Windows 2012 but I am not sure if I can and if I do what the implications would be.
The server in question is my Hyper V server host and has several other servers running from it that are stored on an external storage unit.
Will I be able to upgrade this server?
If not what are my options as far as reinstalling goes? The virtual servers are mainly production servers so I want to reduce the down time.
Thanks for your help.
alamb00

Hi alamb200,
You can upgrade your Windows Server 2008 R2 Enterprise with SP1 to Windows Server 2012/2012 R2 Standard or Windows Server 2012/2012 R2 Datacenter with no problem.
Upgrade Options for Windows Server 2012 R2
http://technet.microsoft.com/en-us/library/dn303416.aspx
However, please note that VMs will not work after you upgrade the Hyper-V 2012
R2 host, you need to take additional steps to move/migrate the VMs.
How to Migrate/Move Virtual machines from 2008R2 Host to 2012R2 Host ?
http://curah.microsoft.com/38398/temp
Thanks.
Jeremy Wu
TechNet Community Support

Windows 2008 Server Configuration - Help

Hello All,
I am not an expert in configuring servers and I have just started to learn. Please forgive me if I am doing something funny!
I have a router with static IP address and DHCP enabled on the router. The router had the following configuration as shown below and the clients were obtaining IP address from the router and using the internet without a problem.
Router Configutaion:
Basic Setting:
IP Address : 122.165.60.160 (My Wan Static IP)
IP Subnet Mask : 255.255.252.0
Gateway IP: 122.165.60.1
DNS Address:
Primary DNS : 203.145.184.32
Secondary DNS: 203.145.184.13
Lan TCP/IP Setup:
IP Address: 192.168.2.1 (Router IP)
IP Subnet Mask: 255.255.255.0
DHCP Enabled:
Statring IP : 192.168.2.11
Ending IP: 192.168.2.100
Now, I have installed Windows 2008 R2 Server with Active Directory, DNS and DHCP, IIS. I have created a few users and did nothing more than that in the server.
Server IP Settings
Server IP: 192.168.2.5
Subnet : 255.255.255.0
Gateway : 192.168.2.1
DNS: 127.0.0.1
And when I tried to join the domain i created... corp.globe.com the clients were not able to find the domain I therefore changed the following settings in the router.
DNS Address:
Primary DNS : 203.145.184.32
Secondary DNS: 192.168.2.5 (Server IP)
After this change the clients were able to join the domain and login as well. However the clients were getting the IP from the router. I am facing a lot of problems as listed below.
1. I am not able to ping the clients using the computer name from the server.
2. Clients cannot ping other clients or server using name. (Suppose if I try... PING SYS1 .... It looks like it is trying to ping some 92.x.x.xx IP address) even if SYS1 IP address is 192.168.2.13
3. Clients can access Internet, but I cannot browse anything in the server.
Please help me in the configuration, or point me to some guide which describes the same. I tried to set up and enable the DHCP server using Windows 2008 machine and I disabled it DHCP on the router, clients where able to get the IP address from Windows 2008
server, but they were not able to use internet. Please advise.
Thanks for your time.

Hi,
And you cannot ping the clients using the computer name from the server?
Did you turn off the firewall on server and client?
If you are having problems connecting to Active Directory and you have already successfully verified network connectivity, there might be a name resolution problem. For more and detail information, please refer to:
http://technet.microsoft.com/en-us/library/cc961921.aspx
Regards.
Vivian Wang

Windows 2008 Server License Key not working on VirtualBox

I have a validated licensed copy of Windows 2008 Server and I need to load it on a Virtual machine (I am running Oracle VirtualBox). When I had the server running on a hardware based server it worked fine. The license key activated and it worked. Now when
I load it onto the VirtualBox solution it fails. It will take it when I run the manual command but will not show my server as activated. This is for my private use only (internal home LAN) but I would prefer to have the activation be correct since I use this
setup to help keep fresh on Windows 2008 servers while being on a Linux OS with a VM software loaded. What can I do to have this server activate correctly under the VirtualBox?
Thanks,
Tom

Hi Tom,
Base on my experience, after we convert a physical computer system to virtualize environment we need to reactive it, with MAK active method we need keep this vm to connect to
internet and with KMS method please confirm this vm can communicate with your KMS server.
The related KB:
Understanding MAK Activation
https://technet.microsoft.com/en-us/library/ff793435.aspx
Volume Activation in Disconnected Environments
https://technet.microsoft.com/en-us/library/dd981010.aspx
I’m glad to be of help to you!
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Windows 2008 Server - Cannot run Active Directory Users and Computers

Hi,
I am running Windows 2008 Server with latest windows updates installed. Directory Services Role also.
I attempt to open Active Directory Users and Computers tool and I get a;
Microsoft Visual C++ Runtime Library error;
"The Application has requested the runtime to terminate it in a unusual way. Please contact the application's support team for more information"
I click ok, then get the following debug info;
Problem signature:
Problem Event Name: APPCRASH
Application Name: mmc.exe
Application Version: 6.0.6001.18000
Application Timestamp: 47919524
Fault Module Name: msvcrt.dll
Fault Module Version: 7.0.6001.18000
Fault Module Timestamp: 4791ad6b
Exception Code: 40000015
Exception Offset: 0000000000029b06
OS Version: 6.0.6001.2.1.0.272.7
Locale ID: 3081
Additional Information 1: 43aa
Additional Information 2: cf3a46656318492c1997480001b6b0e0
Additional Information 3: 3837
Additional Information 4: 92f72e0d0589ff77cef51e0a413aeff6
Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409
If someone could please assist, it would be very much appreciated.
Regards
B

Hi,
To solidly troubleshoot this kind of issue, we need to debug dump file. A suggestion would be to contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
To obtain the phone numbers for specific technology request please take a look at the web site listed below:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
However, I am also glad to share my research.
Some third party applications may lead to this error. Please check if you install other third party applications on Windows server 2008?
Also, please follow the article below to perform necessary steps to see how it's going?
FIX: You receive an "invalid page fault in module MSVCRT.DLL" error message after you install the run-time libraries from Visual C++ 6.0
http://support.microsoft.com/kb/190536/en-us
Hope this helps.
Best wishes
Morgan Che

Windows 2008 Server boot loop and unable to log on in Safe mode

The Situation: I used msconfig to reboot Windows 2008 Server r2 into safe mode. On rebooting, boot progresses ok and the log in screen appears very quickly, then disappears and the machine reboots. I've tried typing the password very quickly and whether
I get it wrong or just can't get enough typed in time, I don't know, but the reboot loop continues. So, i can't log on and can't change safe boot back to normal.
I know Server 2008 uses bcdedit and no longer has a boot.ini, so I don't know if it is still possible manually to amend a boot file so it starts in normal mode again. Can anyone help me to break out of this boot loop without having to resort to anything
major, such as reinstallation?
Just to make clear, I haven't updated the system and the only change made was with msconfig to require safe boot on restarting.
Thanks

from the safemode try this syntax
Syntax: bcdedit /deletevalue {default} safeboot
http://technet.microsoft.com/en-us/library/cc721886(WS.10).aspx
http://www.virmansec.com/blogs/skhairuddin
How on earth is that a good answer? Sorry for the necrosis here of bringing up a post 9 months later, but I just ran in to this issue again. The OP said that he was STUCK IN A BOOT LOOP having placed himself in SAFEMODE already.
How is he supposed to type this in if he can't log in?
What worked for me was to keep striking F8 like a cobra during boot and telling it to use the Last Known Good Configuration option, after the 4th autoreboot, it let me log in and let me switch it back out of the safe mode and back to the normal boot. Yes,
I am aware this is quite lucky and now I don't have to rebuild all my server set up, and that your mileage may vary here, but, keep trying, you might be lucky.

Cryptographic Library windows 2008

Similar Messages

Maybe you are looking for