Event 672 audit failure after migration to hosted Exchange

I recently migrated a company to hosted Exchange. They had been previously using in-house Exchange 2003 (on SBS 2003). Exchange has been removed form the server and the 2003 SBS server is still running as the DC.
Right after the migration the server began to recieve Error 672 failure audits, 1000s per day.
I suspect these can be safely ignored, but is there a way to stop them as they show up on daily security reports.
-Ken
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 672
Date:  11/24/2014
Time:  10:11:40 AM
User:  NT AUTHORITY\SYSTEM
Computer: BUZZ
Description:
Authentication Ticket Request:
  User Name:  user@hosted Exchange.lan
  Supplied Realm Name: COMPANY.LOCAL
  User ID:   -
Service Name:  krbtgt/COMPANY.LOCAL
  Ticket Options:  0x40810010
  Result Code:  0x6
  Ticket Encryption Type: -
  Pre-Authentication Type: -
  Client Address:  192.168.x.x
  Certificate Issuer Name:
  Certificate Serial Number:
  Certificate Thumbprint:

Hi Ken,
I suspect these can be safely ignored, but is there a way to stop them as they show up on daily security reports.
We can stop audit failure events from being logged in Event Viewer by editing audit policy. More specifically, we can set the Group Policy setting
Audit logon events to not to audit logon failure
(uncheck the Failure checkbox), here is a screenshot below:
Best Regards,
Amy

Similar Messages

2012 R2 Generation 2 VM Boot Failure after Migration

I have encountered an issue after migrating virtual machines to a new host. It happens whether the VM has been moved with live migration or though a shutdown, export, import process.
The hosts are both 2012 R2 Datacenter. The virtual machines are Generation 2 and also have 2012 R2 Datacenter. All the systems where installed with the April ISO. The only difference between the hosts is that one only has no other updates. The other has
all recommended and optional updates as off 2014-10-10.
Once the machine has migrated to the updated host the next time it attempts to boot up (after a restart, ect.) it will fail with one of these two messages.
This happens whether the virtual machine has updates or is a fresh install from the April ISO. Once the machine is migrated back to the host that does not have any updates it will boot back up without any issues.
Notes:
The virtual machines where created on the host without any updates.
When creating a new virtual machine on the host with updates the 2012 R2 ISO bluescreens.
I setup another host machine without updates, tested migration to it and then ran updates. Same issue occurs.
I have tried boot with and without secure boot enabled also tries it with drive signature enforcement disabled. No change either.
This does not happen with generation 1 machines.
What I am trying to figure out is, if it truly is an update issue which update might it be so that it can be avoided? It would also be interesting to figure out if there is a workaround to get affect virtual machines to boot back up.
Let me know what your ideas are or if there are any other tests you would like me to provide.

I would like to thank you for your suggestions. It wasn't the updates that where causing the problem, it is actually a side effect of them requiring a restart. In addition to running updates on the new host servers, I also added a second network card.
The virtual machines are stored on an SMB 3.0 file share. When the server gets restarted SMB 3.0 finds and starts using that second network card in a multichannel configuration. (There are two physical cards / 3 ports / 3 vlans).
I found this out when I looked at the multichannel configuration on the server without updates, but had this network card installed. It wasn't using it at all. After a restart of that server the VM's where exhibiting the same broken behavior. Simply disabling
that network card on the machine got them to work again. The server with updates, because it had been restarted already, was trying to use this network card in SMB 3.0 multichannel.
It just happened to be a coincidence of timing. On the other hand the issue moves to why this second NIC would be causing these issues. I am not entirely sure if it actually has to do with SMB verses something with Hyper-V and the network card. After the
restart the saved state of VM's on it failed to start. Removing the saved state and trying to boot them resulted in the same digital signature error. However, like I mentioned, disabling the network card worked. Virtual machines with
save states restored themselves and those without them also would boot. Again, I will post what I figure out.
Thanks again,
Kevin

ActiveSync is not working properly after migrating to new Exchange 2013 SP1 server?!

Few weeks ago we have added new Exchange 2013 SP1 onto our existing Exchange 2007 environment. I have migrated my mailbox to the new Ex2013 server. Everything (send/receive - internally/externally, OWA, OutlookAnywhere) for me and the existing Ex2007
users works fine. The only thing I have trouble with is the ActiveSync! After migrating to the new Ex2013 server my phone stops getting new emails…, existing Ex2007 users don’t have any problems with their mobile phones.
I did ActiveSync test for my user account with ActiveSync Tester and here is what I have:
As you can see from the error above ActiveSync Tester detects ActiveSync on Ex2013 server however something wrong there with form-based auth?! I can’t see any differences in settings for ActiveSync virtual folders in Ex2007 and Ex2013
virtual folders?!
What I’m missing here?! Please help.

Check if the Exchange Servers group does not have the appropriate permission to the mailbox object in Active Directory.
To check whether inheritance is disabled on the user:
1.Open Active Directory Users and Computers.
2.On the menu at the top of the console, click View > Advanced Features.
3.Locate and right-click the mailbox account in the console, and then click Properties.
4.Click the Security tab.
5.Click Advanced.
6.Make sure that the check box for "Include inheritable permissions from this object's parent" is selected.
Ref:
http://technet.microsoft.com/en-us/library/dd439375(v=exchg.80).aspx
Also check the Virtual directory authentication
Microsoft-Server-ActiveSync
•Basic authentication
•SSL required
•Requires 128-bit encryption
Ref:
http://technet.microsoft.com/en-us/library/gg247612(v=exchg.150).aspx
Check the IIS log if you are able to find any error message on it
Exchange Queries

Google Apps migration to Hosted Exchange

Hi,
We have recently migrated from Gmail to Hosted Exchange. For historical data we setup mailboxes to download Gmail using IMAP then we exported these into PSTs.
We imported the PSTs into the users new Exchange accounts (Aware no calendar/contacts at this stage)- what we have found now is the Gmail reference folders, which is expected, but when you right click on it it still has 'IMAP Folder'. When we go back into
the account we cant see any IMAP links, and considering this was imported with PST surely these would've been lost (that's what I expected).
The issue now is you cant freely drag and drop as the IMAP is causing permission issues.
Any help would be greatly appreciated.

Hi,
I find a related article about "Migrate from Gmail to Office 365 in 7 steps":
http://technet.microsoft.com/en-us/library/dn568114.aspx
Even if it isn't Hosted Exchange server, the information maybe helped.
Please paste the detailed errors when can't drag and drop.
Thanks
Mavis
Mavis Huang
TechNet Community Support

ActiveSync Failures After Migration to Exchange 2013

Hi all,
I am having an issue with ActiveSync a single mailbox that has been migrated from Exchange 2007 to 2013. After the mailbox was migrated to 2013 it continued to sync as normal for a week or so. After removing the exchange 2007 server (uninstalled exchange) from
the topology, the user could no longer sync.
This is not the inherit permissions in AD issue. I had a user with that issue but this one is different.
It appears to have something to do with the app pools. The following article provides a script to recycle the app pools, when I run this, the issue is resolved but only temporarily. Within 20 mins or so, the issue returns for the user. Running the script
again works but again, it is only temporary.
http://www.expta.com/2014/04/fix-for-exchange-activesync-failures.html
Can anyone tell me why this fix only works momentarily? Is there any way (besides running the script constantly) to make the fix stick?
Any help is much appreciated.
Thanks!

Instead of restarting App pool, I would suggest looking at the IIS logs on the Client Access Server and check for the entries for this user.
If you notice either throttling/something wrong with this user's connection, troubleshoot in that direction.
also look at Event logs to see if there are any problems with App pools creating Watson dumps. (event ID 4999, 1003 etc)

SQL Loader failure after migration from 9.2.0.7 to 10.2.0.3

Hi,
The following is the error comming up when trying to load the data using SQL Loader in 10g.
**SQL*Loader-704: Internal error: ulnain: error occurred on good insert [-1]**
**SQL*Loader-2026: the load was aborted because SQL Loader cannot continue.**
the same data file is getting loaded sucessfully in 9i whith out any issues.
can any one kindly suggest on how to go about this issue.

From what I've found one cause of this error can be due to the way your client is connecting to the server. There was an issue when using Citrix, for example, that was remedied in 10.2.0.3. However, without more details it would be difficult to diagnose this specific situation. I would suggest filing a service request as noted above. Thanks.

After migration from SP2010 to SP2013 event receiver code is not working

we have two lists work order list and estimation list. we developed infopath form for work order list , in that we have work order field we don't enter the value of that field after filling the all fields when i clicked save button work order ID field
will generate automatically and estimation hyper link will generate.when i click on estimation link estimation list will open, inthat list we have work order id filed it has to generate automatically(It will fetch the data from work order list). For generating
automatically we written event receiver code in visual studio 2010.After migration from SP2010 to SP2013 it is not working. May i know what modification we have to do

try these links:
http://sharepoint.stackexchange.com/questions/75491/sharepoint-2013-event-receiver-on-custom-list-definition-not-firing
http://www.sharepointdiary.com/2011/08/fix-missing-event-receivers-issue-in-migration.html
http://stackoverflow.com/questions/28298707/we-have-event-receiver-code-issue-after-migration-from-2010-to-2013
https://www.linkedin.com/groups/SharePoint-migration-designer-workflow-runs-3664766.S.5905212303858479106
http://channel9.msdn.com/Series/Reimagine-SharePoint-Development/Migrating-a-SharePoint-Event-Receiver-to-a-Remote-Event-Receiver
Please mark as answer if you find it useful else vote for it if it is close to answer..happy sharepointing

Kerberos audit failures, ~38-42 events PER MINUTE

We have a server running "Windows Server Standard FE" 64bit SP2 (I know, embarrassing). The issue is that our Security log is getting FLOODED with audit failures from Kerberos Service Ticket Operations. We will see 38 all with the EXACT same time-stamp,
then sometimes the next minute will have another 40, sometimes it's a 5 minute gap, sometimes it's a more random gap but regardless it never waits too long before another huge burst of failures. We actually have the issues on other machines running newer system
(2k3, 2k8) but this one is hands down the most troublesome.
Honestly I might be out of my depth here as I'm really not too keen on Kerberos ticket requests, but any information around this would be greatly appreciated to help me investigate the issue further. These errors haven't actually led to any problems or other
errors, just bug the heck out of me when checking audits.
A Kerberos service ticket was requested.
Account Information:
Account Name: <hostname>$@<domain>.LOCAL
Account Domain: <domain>.LOCAL
Logon GUID: {00000000-0000-0000-0000-000000000000}
Service Information:
Service Name: krbtgt/<domain>.LOCAL
Service ID: NULL SID
Network Information:
Client Address: ::1
Client Port: 0
Additional Information:
Ticket Options: 0x60810010
Ticket Encryption Type: 0xffffffff
Failure Code: 0xe
Transited Services: -
This event is generated every time access is requested to a resource such as a computer or a Windows service. The service name indicates the resource to which access was requested.
This event can be correlated with Windows logon events by comparing the Logon GUID fields in each event. The logon event occurs on the machine that was accessed, which is often a different machine than the domain controller which issued the service ticket.
Ticket options, encryption types, and failure codes are defined in RFC 4120.

:(

4265 Audit Failure: NTLM Authentication Issue from constant Outlook Login Prompts

Hello Technet!
Last week I started running into a domain-wide issue where users could authenticate while connected to the domain, but would receive prompts to log in to our external host. The first prompt is for mail.domain.local, which works fine inside the office, and
the second is owa.domain.com, which continually fails.
On the second prompt, the Exchange 2007 server (on Server 2008 R2) reports the following error:
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 3/19/2015 9:10:19 AM
Event ID: 4625
Task Category: Logon
Level: Information
Keywords: Audit Failure
User: N/A
Computer: mail.domain.local
Description:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name: user
Account Domain: domain
Failure Information:
Failure Reason: An Error occured during Logon.
Status: 0xc000006d
Sub Status: 0x0
Process Information:
Caller Process ID: 0x0
Caller Process Name: -
Network Information:
Workstation Name: DOMAIN-PC
Source Network Address: 12.345.67.89
Source Port: 56984
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
I've gone through quite a few attempted fixes already, all to no effect:
1. I've both added BackChannelHostName to the server's registry, as well as described here: https://support.microsoft.com/en-us/kb/896861
2. Verified SSL Cert status
3. Internal and External OWA URI is set to owa.domain.com in EWC
4. Set up the IIS7 authentication and SSL settings to their defaults, as described here: http://msexchangeguru.com/2010/10/05/autodiscover/
5. I added a SRV record for autodiscover on our DC to correct an EXPR auth issue: https://acbrownit.wordpress.com/2012/12/20/internal-dns-and-exchange-autodiscover/
Despite all these things, I haven't yet seemed to scratch whatever itch Exchange is having. All of the client Outlooks will get the prompt for owa.domain.com, even though their mail is working because they're in the office or on VPN. For whatever reason,
the Mac Outlook 2011 users cannot authenticate to the mail server at all, so they are the ones hit the hardest by this issue.
Any insight everyone here at TechNet can offer would be appreciated. Every fix and workaround I've looked at has either changed nothing, or pointed to something that was already configured properly. If there are details missing that I could offer to provide
a better idea of the problem, please let me know. Thank you.
-- Brian Q.

Hi,
Yes, it may be caused by the security updates on March 10, 2015. Please refer to the known issue in the following KB:
http://support.microsoft.com/en-us/kb/3002657
Please remove the security patch on the DC and restart server to have a try. Additionally, here is a similar thread for your reference:
https://social.technet.microsoft.com/Forums/exchange/en-US/1b2a24d9-3d77-49f6-9d0f-63c71da64827/password-prompt-after-exchange-server-windows-updates?forum=exchangesvrclientslegacy
Regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Winnie Liang
TechNet Community Support

An account failed to log on unknown username or password. Causing Login audit failures

I have a SBS11 Essentials server that is getting audit Failures over and over again. There computer account says it's the SBS11 server it's self. It says unknown user name or bad password. I have checked for scheduled tasks, backup jobs, services and
non of them are using any special user accounts. I have used MS network monitor and can't find anything helpful to lead to the issue. All computers in the network are running Windows 7. The domain functional level is 2008 R2.
I get a the 4768 event ID about a Kerberos event and then just after I get a Event ID 4625 account failure with Logon Type 3. I have includes the events below. I need to figure what is causing the audit failures as my GFI Test Hacker alert is
catching it every morning. Disabling the Test Hacker alert is not a option. I have used Process Explorer also but can't seem to pin it down. I also enabled Kerberos logging.
http://support.microsoft.com/kb/262177?wa=wsignin1.0. All event codes state its a unknown or no existing account but how do I stop it from happening?
This is from the System Event log
A Kerberos Error Message was received:
on logon session TH.LOCAL\thsbs11e$
Client Time:
Server Time: 14:59:53.0000 3/4/2014 Z
Error Code: 0x6 KDC_ERR_C_PRINCIPAL_UNKNOWN
Extended Error:
Client Realm:
Client Name:
Server Realm: TH.LOCAL
Server Name: krbtgt/TH.LOCAL
Target Name: krbtgt/[email protected]
Error Text:
File: e
Line: 9fe
Error Data is in record data.
This is from the Security Event log
A Kerberos authentication ticket (TGT) was requested.
Account Information:
Account Name: S-1-5-21-687067891-4024245798-968362083-1000
Supplied Realm Name: TH.LOCAL
User ID: NULL SID
Service Information:
Service Name: krbtgt/TH.LOCAL
Service ID: NULL SID
Network Information:
Client Address: ::1
Client Port: 0
Additional Information:
Ticket Options: 0x40810010
Result Code: 0x6
Ticket Encryption Type: 0xffffffff
Pre-Authentication Type: -
Certificate Information:
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:
Certificate information is only provided if a certificate was used for pre-authentication.
Pre-authentication types, ticket options, encryption types and result codes are defined in RFC 4120.
I then get teh following error in the next event
An account failed to log on.
Subject:
Security ID: SYSTEM
Account Name: THSBS11E$
Account Domain: TH
Logon ID: 0x3e7
Logon Type: 3
Account For Which Logon Failed:
Security ID: NULL SID
Account Name:
Account Domain:
Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc0000064
Process Information:
Caller Process ID: 0x25c
Caller Process Name: C:\Windows\System32\lsass.exe
Network Information:
Workstation Name: THSBS11E
Source Network Address: -
Source Port: -
Detailed Authentication Information:
Logon Process: Schannel
Authentication Package: Kerberos
Transited Services: -
Package Name (NTLM only): -
Key Length: 0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

Well I opened the case for him and he never followed up with Microsoft :-(
It's a kerberos issue, we're told to ignore it. Would you be willing to be patient and stubborn and work with CSS to at least understand what's going on better? I can tell you it's normal with Essentials but not the exact technical reason it's
happening.
Unfortunately TechNet isn't coming back, sorry folks :-(

Issues with Mac Book Pro after migration

Hi all,
I changed my macbook pro few days ago for new one. I used Migration path with a Time Machine´s backup but performance of new MacBook is not my expectation (a lot of reboots and crashes).
I appreciate any help.
EtreCheck version: 2.1.8 (121)
Report generated February 8, 2015 at 8:42:22 PM GMT-5
Download EtreCheck from http://etresoft.com/etrecheck
Click the [Click for support] links for help with non-Apple products.
Click the [Click for details] links for more information about that line.
Hardware Information: ℹ️
    MacBook Pro (Retina, 13-inch, Mid 2014) (Technical Specifications)
    MacBook Pro - model: MacBookPro11,1
    1 3 GHz Intel Core i7 CPU: 2-core
    16 GB RAM Not upgradeable
        BANK 0/DIMM0
            8 GB DDR3 1600 MHz ok
        BANK 1/DIMM0
            8 GB DDR3 1600 MHz ok
    Bluetooth: Good - Handoff/Airdrop2 supported
    Wireless: en0: 802.11 a/b/g/n/ac
    Battery Health: Normal - Cycle count 11
Video Information: ℹ️
    Intel Iris
        Color LCD spdisplays_2560x1600Retina
System Software: ℹ️
    OS X 10.10.2 (14C109) - Time since boot: 0:14:27
Disk Information: ℹ️
    APPLE SSD SM0512F disk0 : (500.28 GB)
        EFI (disk0s1) <not mounted> : 210 MB
        Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB
        Macintosh HD (disk1) / : 499.10 GB (225.70 GB free)
            Encrypted AES-XTS Unlocked Paused
            Core Storage: disk0s2 499.42 GB Online
USB Information: ℹ️
    Apple Internal Memory Card Reader
    Apple Inc. Apple Internal Keyboard / Trackpad
    Apple Inc. BRCM20702 Hub
        Apple Inc. Bluetooth USB Host Controller
    Bluegiga Low Energy Dongle
Thunderbolt Information: ℹ️
    Apple Inc. thunderbolt_bus
Gatekeeper: ℹ️
    Mac App Store and identified developers
Kernel Extensions: ℹ️
        /Applications/VMware Fusion.app
    [not loaded]    com.vmware.kext.vmci (90.6.3) [Click for support]
    [not loaded]    com.vmware.kext.vmioplug.14.1.3 (14.1.3) [Click for support]
    [not loaded]    com.vmware.kext.vmnet (0223.55.95) [Click for support]
    [not loaded]    com.vmware.kext.vmx86 (0223.55.95) [Click for support]
    [not loaded]    com.vmware.kext.vsockets (90.6.0) [Click for support]
        /Library/Application Support/VirtualBox
    [loaded]    org.virtualbox.kext.VBoxDrv (4.3.20) [Click for support]
    [loaded]    org.virtualbox.kext.VBoxNetAdp (4.3.20) [Click for support]
    [loaded]    org.virtualbox.kext.VBoxNetFlt (4.3.20) [Click for support]
    [loaded]    org.virtualbox.kext.VBoxUSB (4.3.20) [Click for support]
        /System/Library/Extensions
    [not loaded]    com.bose.cdcusb.kext (1.0.0) [Click for support]
    [not loaded]    com.cisco.nke.ipsec (2.0.3 ) [Click for support]
    [not loaded]    com.prolific.driver.PL2303 (2.0.0) [Click for support]
    [not loaded]    com.seagate.driver.PowSecDriverCore (5.0.1) [Click for support]
        /System/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns
    [not loaded]    com.seagate.driver.PowSecLeafDriver_10_4 (5.0.1) [Click for support]
    [not loaded]    com.seagate.driver.PowSecLeafDriver_10_5 (5.0.1) [Click for support]
    [not loaded]    com.seagate.driver.SeagateDriveIcons (5.0.1) [Click for support]
Startup Items: ℹ️
    CiscoVPN: Path: /System/Library/StartupItems/CiscoVPN
    ChmodBPF: Path: /Library/StartupItems/ChmodBPF
    HP IO: Path: /Library/StartupItems/HP IO
    HW_CreateNetwork: Path: /Library/StartupItems/HW_CreateNetwork
    HWNetMgr: Path: /Library/StartupItems/HWNetMgr
    HWPortDetect: Path: /Library/StartupItems/HWPortDetect
    HWPortDetect_driver: Path: /Library/StartupItems/HWPortDetect_driver
    StartOuc: Path: /Library/StartupItems/StartOuc
    Startup items are obsolete in OS X Yosemite
Launch Agents: ℹ️
    [loaded]    com.cisco.anyconnect.gui.plist [Click for support]
    [failed]    com.fortinet.forticlient.fssoagent_launchagent.plist [Click for support] [Click for details]
    [running]    com.mcafee.menulet.plist [Click for support]
    [running]    com.mcafee.reporter.plist [Click for support]
    [loaded]    com.oracle.java.Java-Updater.plist [Click for support]
    [loaded]    com.oracle.mydesktophelper.plist [Click for support]
    [running]    com.seagate.SeagateStorageGauge.plist [Click for support]
    [not loaded]    com.teamviewer.teamviewer.plist [Click for support]
    [not loaded]    com.teamviewer.teamviewer_desktop.plist [Click for support]
    [loaded]    org.macosforge.xquartz.startx.plist [Click for support]
Launch Daemons: ℹ️
    [loaded]    com.adobe.fpsaud.plist [Click for support]
    [running]    com.cisco.anyconnect.vpnagentd.plist [Click for support]
    [running]    com.fitbit.galileod.plist [Click for support]
    [loaded]    com.lobotomo.IPSecuritasDaemon.plist [Click for support]
    [running]    com.mcafee.agent.cma.plist [Click for support]
    [unknown]    com.mcafee.ssm.Eupdate.plist [Click for support]
    [unknown]    com.mcafee.ssm.ScanFactory.plist [Click for support]
    [unknown]    com.mcafee.ssm.ScanManager.plist [Click for support]
    [unknown]    com.mcafee.virusscan.fmpd.plist [Click for support]
    [loaded]    com.microsoft.office.licensing.helper.plist [Click for support]
    [loaded]    com.oracle.java.Helper-Tool.plist [Click for support]
    [loaded]    com.oracle.java.JavaUpdateHelper.plist [Click for support]
    [running]    com.oracle.mydesktopservice.plist [Click for support]
    [loaded]    com.teamviewer.Helper.plist [Click for support]
    [not loaded]    com.teamviewer.teamviewer_service.plist [Click for support]
    [loaded]    org.macosforge.xquartz.privileged_startx.plist [Click for support]
    [not loaded]    org.virtualbox.startup.plist [Click for support]
User Launch Agents: ℹ️
    [failed]    com.apple.CSConfigDotMacCert-[...]@me.com-SharedServices.Agent.plist [Click for details]
    [loaded]    com.citrixonline.GoToMeeting.G2MUpdate.plist [Click for support]
    [loaded]    com.google.keystone.agent.plist [Click for support]
    [failed]    com.spotify.webhelper.plist [Click for support] [Click for details]
    [not loaded]    org.virtualbox.vboxwebsrv.plist [Click for support]
User Login Items: ℹ️
    iTunesHelper    UNKNOWN Hidden (missing value)
    VMware Fusion Helper    UNKNOWN (missing value)
    VMware Fusion Helper    UNKNOWN (missing value)
    Chatter Desktop    UNKNOWN (missing value)
    Microsoft Database Daemon    Application (/Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app)
    VMware Fusion Start Menu    Application (/Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app)
    Spotify    UNKNOWN (missing value)
    Myo Connect    Application (/Applications/Myo Connect.app)
    ESET Cybersecurity    UNKNOWN (missing value)
    HPEventHandler    UNKNOWN (missing value)
Internet Plug-ins: ℹ️
    JavaAppletPlugin: Version: Java 8 Update 31 Check version
    FlashPlayer-10.6: Version: 16.0.0.305 - SDK 10.6 [Click for support]
    net.juniper.DSSafariExtensions: Version: Unknown [Click for support]
    Flash Player: Version: 16.0.0.305 - SDK 10.6 [Click for support]
    Default Browser: Version: 600 - SDK 10.10
    QuickTime Plugin: Version: 7.7.3
    SharePointBrowserPlugin: Version: 14.4.7 - SDK 10.6 [Click for support]
    Silverlight: Version: 5.1.10411.0 - SDK 10.6 [Click for support]
    MeetingJoinPlugin: Version: Unknown - SDK 10.6 [Click for support]
    iPhotoPhotocast: Version: 7.0 - SDK 10.8
User internet Plug-ins: ℹ️
    CitrixOnlineWebDeploymentPlugin: Version: 1.0.105 [Click for support]
    WebEx64: Version: 1.0 - SDK 10.6 [Click for support]
3rd Party Preference Panes: ℹ️
    Flash Player [Click for support]
    Java [Click for support]
Time Machine: ℹ️
    Skip System Files: NO
    Mobile backups: ON
    Auto backup: YES
    Volumes being backed up:
        Macintosh HD: Disk size: 499.10 GB Disk used: 273.40 GB
    Destinations:
        G-DRIVE Shakilay [Local]
        Total size: 999.86 GB
        Total number of backups: 10
        Oldest backup: 2014-04-26 08:02:35 +0000
        Last backup: 2015-01-20 00:10:11 +0000
        Size of backup disk: Adequate
            Backup size 999.86 GB > (Disk used 273.40 GB X 3)
        Data [Network]
        Total size: 2.00 TB
        Total number of backups: 2
        Oldest backup: 2015-02-08 17:07:08 +0000
        Last backup: 2015-02-08 20:58:57 +0000
        Size of backup disk: Excellent
            Backup size 2.00 TB > (Disk size 499.10 GB X 3)
Top Processes by CPU: ℹ️
         3%    Myo Connect
         3%    WindowServer
         0%    fontd
         0%    cma
         0%    launchservicesd
Top Processes by Memory: ℹ️
    137 MB    Finder
    120 MB    Safari
    103 MB    mds_stores
    103 MB    WindowServer
    86 MB    VShieldScanner
Virtual Memory Information: ℹ️
    10.16 GB    Free RAM
    4.82 GB    Active RAM
    915 MB    Inactive RAM
    1.29 GB    Wired RAM
    1.29 GB    Page-ins
    0 B    Page-outs
Diagnostics Information: ℹ️
    Feb 8, 2015, 08:26:28 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-202628_[redacted].c rash [Click for details]
    Feb 8, 2015, 08:26:22 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-202622_[redacted].c rash [Click for details]
    Feb 8, 2015, 08:26:15 PM    Self test - passed
    Feb 8, 2015, 08:23:32 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-202332_[redacted].c rash [Click for details]
    Feb 8, 2015, 08:23:24 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-202324_[redacted].c rash [Click for details]
    Feb 8, 2015, 07:41:45 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-194145_[redacted].c rash
    Feb 8, 2015, 07:41:36 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-194136_[redacted].c rash
    Feb 8, 2015, 06:26:23 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-182623_[redacted].c rash
    Feb 8, 2015, 06:26:17 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-182617_[redacted].c rash
    Feb 8, 2015, 06:07:35 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-180735_[redacted].c rash
    Feb 8, 2015, 06:07:32 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-180732_[redacted].c rash
    Feb 8, 2015, 05:52:26 PM    /Library/Logs/DiagnosticReports/com.apple.WebKit.WebContent_2015-02-08-175226_[ redacted].hang
    Feb 8, 2015, 01:28:33 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-132833_[redacted].c rash
    Feb 8, 2015, 01:28:23 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-132823_[redacted].c rash
    Feb 8, 2015, 01:28:13 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-132813_[redacted].c rash
    Feb 8, 2015, 09:42:52 AM    /Library/Logs/DiagnosticReports/SubmitDiagInfo_2015-02-08-094252_[redacted].cpu _resource.diag [Click for details]
    Feb 8, 2015, 09:10:22 AM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-091022_[redacted].c rash
    Feb 8, 2015, 09:10:15 AM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-091015_[redacted].c rash
    Feb 8, 2015, 09:10:06 AM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-08-091006_[redacted].c rash
    Feb 7, 2015, 06:58:33 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-185833_[redacted].c rash
    Feb 7, 2015, 06:58:29 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-185829_[redacted].c rash
    Feb 7, 2015, 06:05:55 PM    /Library/Logs/DiagnosticReports/Safari_2015-02-07-180555_[redacted].hang
    Feb 7, 2015, 05:56:59 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175659_[redacted].c rash
    Feb 7, 2015, 05:56:38 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175638_[redacted].c rash
    Feb 7, 2015, 05:56:37 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175637_[redacted].c rash
    Feb 7, 2015, 05:56:15 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175615_[redacted].c rash
    Feb 7, 2015, 05:52:19 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175219_[redacted].c rash
    Feb 7, 2015, 05:52:11 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175211_[redacted].c rash
    Feb 7, 2015, 05:03:35 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-170335_[redacted].c rash
    Feb 7, 2015, 05:03:25 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-170325_[redacted].c rash
    Feb 7, 2015, 05:03:17 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-170317_[redacted].c rash
    Feb 7, 2015, 05:03:04 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-170304_[redacted].c rash
    Feb 7, 2015, 05:03:02 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-170302_[redacted].c rash
    Feb 7, 2015, 04:52:36 PM    /Library/Logs/DiagnosticReports/Google Drive_2015-02-07-165236_[redacted].crash
    Feb 7, 2015, 02:56:01 PM    /Library/Logs/DiagnosticReports/com.apple.AmbientDisplayAgent_2015-02-07-145601 _[redacted].crash
    Feb 7, 2015, 08:41:15 AM    /Library/Logs/DiagnosticReports/SubmitDiagInfo_2015-02-07-084115_[redacted].cpu _resource.diag [Click for details]
    Feb 7, 2015, 08:08:37 AM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-080837_[redacted].c rash
    Feb 7, 2015, 07:57:42 AM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-075742_[redacted].c rash
    Feb 7, 2015, 07:57:36 AM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-075736_[redacted].c rash
    Feb 6, 2015, 07:58:29 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-06-195829_[redacted].c rash
    Feb 6, 2015, 01:05:37 AM    /Users/[redacted]/Library/Logs/DiagnosticReports/Mail_2015-02-06-010537_[redact ed].crash
    Feb 5, 2015, 10:46:17 PM    /Library/Logs/DiagnosticReports/MyDesktopStatus_2015-02-05-224617_[redacted].cr ash
    Jan 28, 2015, 07:33:04 AM    /Library/Logs/DiagnosticReports/Kernel_2015-01-28-073304_[redacted].panic [Click for details]
    Feb 5, 2015, 10:52:28 PM    /Library/Logs/DiagnosticReports/discoveryd_2015-02-05-225228_[redacted].crash
    Feb 7, 2015, 07:13:43 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-191343_[redacted].c rash
    Feb 7, 2015, 05:57:08 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175708_[redacted].c rash
    Feb 7, 2015, 05:56:55 PM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-175655_[redacted].c rash
    Feb 7, 2015, 07:57:50 AM    /Library/Logs/DiagnosticReports/MyDesktopService_2015-02-07-075750_[redacted].c rash

Hi Linc,
Thanks for your time and help. Here it is
Start time: 11:22:24 02/09/15
Revision: 1214
Model Identifier: MacBookPro11,1
System Version: OS X 10.10.2 (14C109)
Kernel Version: Darwin 14.1.0
Time since boot: 16 minutes
UID: 501
USB
   Low Energy Dongle (Bluegiga)
FileVault 2: On FileVault master keychain appears to be installed Encryption in progress: Pending
System errors (per sec)
   Myo Connect (UID 501, error 316): 167
Memory (MB)
   kernel_task (UID 0): 1079
Root crontab
   45 16 * * * /usr/local/McAfee/AntiMalware/VShieldTaskManager 4 >> /dev/null 2>&1
DNS: 190.157.8.33
Listeners
   cupsd: ipp
   kdc: kerberos
   launchd: afpovertcp
   launchd: ftp
   launchd: microsoft-ds
Diagnostic reports
   2015-01-22 MyDesktopService crash x2
   2015-01-23 MyDesktopService crash
   2015-01-24 MyDesktopService crash x6
   2015-01-24 cma crash
   2015-01-30 Kernel panic
   2015-01-30 MyDesktopService crash x12
   2015-01-31 MyDesktopService crash x3
   2015-02-01 MyDesktopService crash x3
   2015-02-02 MyDesktopService crash x3
   2015-02-02 cma crash
   2015-02-03 MyDesktopService crash x3
   2015-02-06 MyDesktopStatus crash
   2015-02-06 discoveryd crash
   2015-02-07 MyDesktopService crash x5
   2015-02-08 Google Drive crash
   2015-02-08 MyDesktopService crash x28
   2015-02-08 Safari hang
   2015-02-08 com.apple.AmbientDisplayAgent crash
   2015-02-08 com.apple.WebKit.WebContent hang
   2015-02-09 MyDesktopService crash x12
Log
   Feb 9 10:57:10 com.apple.CSConfigDotMacCert-EMAIL-SharedServices: Service setup event to handle failure and will not launch until it fires.
   Feb 9 10:57:10 com.spotify.webhelper: Service setup event to handle failure and will not launch until it fires.
   Feb 9 10:57:10 com.fortinet.fssoagent_launchagent: Service setup event to handle failure and will not launch until it fires.
   Feb 9 10:57:11 SIOCPROTODETACH_IN6: utun0 error=6
   Feb 9 10:58:58 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
   Feb 9 10:58:58 jnl: b(1, 4): replay_journal: from: 10309120 to: 27239936 (joffset 0x1a389000)
   Feb 9 10:58:58 jnl: b(1, 4): journal replay done.
   Feb 9 10:59:01 rtR0InitNative: warning! failed to resolve special kernel symbols
   Feb 9 10:59:01 supdrvDTraceInit: RTR0DbgKrnlInfoOpen failed with rc=-102.
   Feb 9 10:59:04 com.fortinet.fssoagent_launchagent: Service setup event to handle failure and will not launch until it fires.
   Feb 9 10:59:04 com.apple.CSConfigDotMacCert-EMAIL-SharedServices: Service setup event to handle failure and will not launch until it fires.
   Feb 9 10:59:04 com.spotify.webhelper: Service setup event to handle failure and will not launch until it fires.
   Feb 9 10:59:13 SIOCPROTODETACH_IN6: utun0 error=6
   Feb 9 11:03:09 process Myo Connect[389] caught causing excessive wakeups. Observed wakeups rate (per sec): 183; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45016
   Feb 9 11:04:28 ctl_enqueuedata: m_allocpacket_internal(1072) failed
   Feb 9 11:06:18 SATA WARNING: IDENTIFY DEVICE checksum not implemented.
   Feb 9 11:06:18 jnl: b(1, 4): replay_journal: from: 14158336 to: 18902016 (joffset 0x1a389000)
   Feb 9 11:06:18 jnl: b(1, 4): journal replay done.
   Feb 9 11:06:20 rtR0InitNative: warning! failed to resolve special kernel symbols
   Feb 9 11:06:20 supdrvDTraceInit: RTR0DbgKrnlInfoOpen failed with rc=-102.
   Feb 9 11:06:23 com.fortinet.fssoagent_launchagent: Service setup event to handle failure and will not launch until it fires.
   Feb 9 11:06:23 com.apple.CSConfigDotMacCert-EMAIL-SharedServices: Service setup event to handle failure and will not launch until it fires.
   Feb 9 11:06:23 com.spotify.webhelper: Service setup event to handle failure and will not launch until it fires.
   Feb 9 11:06:34 SIOCPROTODETACH_IN6: utun0 error=6
   Feb 9 11:09:11 process Myo Connect[390] caught causing excessive wakeups. Observed wakeups rate (per sec): 268; Maximum permitted wakeups rate (per sec): 150; Observation period: 300 seconds; Task lifetime number of wakeups: 45009
Daemons
   com.adobe.fpsaud
   com.fitbit.galileod
   com.lobotomo.IPSecuritasDaemon
   com.mcafee.agent.cma
   com.mcafee.ssm.Eupdate
   com.mcafee.ssm.ScanManager
   com.mcafee.virusscan.fmpd
   com.mcafee.virusscan.ssm.ScanFactory
   com.microsoft.office.licensing.helper
   com.oracle.java.Helper-Tool
   com.oracle.java.JavaUpdateHelper
   com.oracle.mydesktopservice
   - status: -11
   com.teamviewer.Helper
   org.macosforge.xquartz.privileged_startx
Agents
   com.apple.AirPortBaseStationAgent
   com.apple.CSConfigDotMacCert-EMAIL-SharedServices
   - status: 78
   com.citrixonline.GoToMeeting.G2MUpdate
   com.fortinet.fssoagent_launchagent
   - status: 78
   com.google.keystone.user.agent
   com.mcafee.menulet
   com.mcafee.reporter
   com.oracle.java.Java-Updater
   com.oracle.mydesktophelper
   com.seagate.SeagateStorageGauge.plist
   com.spotify.webhelper
   - status: 78
   org.macosforge.xquartz.startx
User overrides
   com.apple.FTMonitor
   com.evernote.EvernoteHelper
   com.apple.imagent.monaco
Startup items
   /System/Library/StartupItems/CiscoVPN/CiscoVPN
   /System/Library/StartupItems/CiscoVPN/StartupParameters.plist
   /Library/StartupItems/ChmodBPF/ChmodBPF
   /Library/StartupItems/ChmodBPF/StartupParameters.plist
   /Library/StartupItems/cma/cma.sh
   /Library/StartupItems/cma/cmamesh
   /Library/StartupItems/HP IO/HP IO
   /Library/StartupItems/HP IO/Resources/version.plist
   /Library/StartupItems/HP IO/StartupParameters.plist
Global login items
   /Applications/ESET Cybersecurity.app
   /Library/Printers/hp/hpio/HPEventHandler.app/
User login items
   iTunesHelper
   - missing value
   VMware Fusion Helper
   - missing value
   VMware Fusion Helper
   - missing value
   Chatter Desktop
   - missing value
   Microsoft Database Daemon
   - /Applications/Microsoft Office 2011/Office/Microsoft Database Daemon.app
   VMware Fusion Start Menu
   - /Applications/VMware Fusion.app/Contents/Library/VMware Fusion Start Menu.app
   Spotify
   - missing value
   Myo Connect
   - /Applications/Myo Connect.app
   ESET Cybersecurity
   - missing value
   HPEventHandler
   - missing value
iCloud errors
   CallHistorySyncHelper x6
   bird x584
   cloudd x77
Continuity errors
   sharingd x12
User caches/logs
   3212 MB: Library/Containers/com.apple.mail/Data/Library/Logs/Mail/stbeehive.oracle.comUU ID.txt
Restricted files: 17090
Lockfiles: 159
High file counts
   Desktop: 54
Contents of /Library/LaunchAgents/com.fortinet.forticlient.fssoagent_launchagent.plist
   - mod date: Jan 16 17:29:30 2015
   - checksum: 2763292712
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Label</key>
    <string>com.fortinet.fssoagent_launchagent</string>
    <key>Program</key>
    <string>/Library/Application Support/Fortinet/FortiClient/bin/fssoagent_launchagent</string>
    <key>RunAtLoad</key>
    <true/>
    <key>KeepAlive</key>
    <dict>
    <key>SuccessfulExit</key>
    <false/>
    </dict>
    <key>ThrottleInterval</key>
    <integer>0</integer>
   </dict>
   </plist>
Contents of /Library/LaunchAgents/com.mcafee.menulet.plist
   - mod date: Sep 30 05:02:01 2013
   - checksum: 1852533552
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Label</key>
    <string>com.mcafee.menulet</string>
    <key>GroupName</key>
    <string>Virex</string>
    <key>ProgramArguments</key>
    <array>
    <string>/Library/Application Support/McAfee/MSS/Applications/Menulet.app/Contents/MacOS/Menulet</string>
    </array>
    <key>KeepAlive</key>
    <true/>
   </dict>
   </plist>
Contents of /Library/LaunchAgents/com.mcafee.reporter.plist
   - mod date: Sep 30 05:02:01 2013
   - checksum: 1074323989
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Label</key>
    <string>com.mcafee.reporter</string>
    <key>GroupName</key>
    <string>Virex</string>
    <key>ProgramArguments</key>
    <array>
    <string>/Library/Application Support/McAfee/MSS/Applications/McAfee Reporter.app/Contents/MacOS/McAfee Reporter</string>
    </array>
    <key>KeepAlive</key>
    <true/>
   </dict>
   </plist>
Contents of /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
   - mod date: Jun 7 22:02:57 2013
   - checksum: 3702735998
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Label</key>
    <string>com.oracle.java.Java-Updater</string>
    <key>ProgramArguments</key>
    <array>
    <string>/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater</string>
    <string>-bgcheck</string>
    </array>
    <key>StandardErrorPath</key>
    <string>/dev/null</string>
    <key>StandardOutPath</key>
    <string>/dev/null</string>
    <key>StartCalendarInterval</key>
    <dict>
    <key>Hour</key>
    <integer>9</integer>
    <key>Minute</key>
    <integer>50</integer>
    <key>Weekday</key>
    <integer>5</integer>
    </dict>
   </dict>
   ...and 1 more line(s)
Contents of /Library/LaunchAgents/com.oracle.mydesktophelper.plist
   - mod date: Aug 22 15:20:04 2013
   - checksum: 1185272656
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
     <key>Label</key>
     <string>com.oracle.mydesktophelper</string>
     <key>OnDemand</key>
     <true/>
     <key>ServiceIPC</key>
     <true/>
     <key>ProgramArguments</key>
     <array>
       <string>/Library/Application Support/Oracle/MyDesktop/MyDesktopHelper</string>
     </array>
     <key>Sockets</key>
     <dict>
       <key>MasterSocket</key>
       <dict>
         <key>SockFamily</key>
         <string>Unix</string>
         <key>SockPathName</key>
         <string>/var/tmp/com.oracle.mydesktophelper.sock</string>
         <key>SockPathMode</key>
         <integer>438</integer>
         <key>SockType</key>
   ...and 5 more line(s)
Contents of /Library/LaunchAgents/com.seagate.SeagateStorageGauge.plist
   - mod date: Mar 10 11:38:47 2010
   - checksum: 3262128215
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   
   <plist version="1.0">
   <dict>
    <key>KeepAlive</key>
    <true/>
    <key>Label</key>
    <string>com.seagate.SeagateStorageGauge.plist</string>
    <key>LimitLoadToSessionType</key>
    <string>Aqua</string>
    <key>OnDemand</key>
    <false/>
    <key>ProgramArguments</key>
    <array>
    <string>/Library/Application Support/Seagate/Seagate Storage Gauge.app/Contents/MacOS/Seagate Storage Gauge</string>
    <string>-doautolnch</string>
    <string>/Library/Application Support/Seagate/Seagate Storage Gauge.app</string>
    </array>
    <key>RunAtLoad</key>
   ...and 3 more line(s)
Contents of /Library/LaunchAgents/com.teamviewer.teamviewer.plist
   - mod date: Feb 2 17:44:27 2015
   - checksum: 2033408783
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Disabled</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
    <key>Label</key>
    <string>com.teamviewer.teamviewer</string>
    <key>LimitLoadToSessionType</key>
    <array>
    <string>Aqua</string>
    </array>
    <key>ProgramArguments</key>
    <array>
    <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer</string>
    <string>-RunAsAgent</string>
    <string>YES</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>WorkingDirectory</key>
    <string>/Applications/TeamViewer.app/Contents/MacOS</string>
   </dict>
   ...and 1 more line(s)
Contents of /Library/LaunchAgents/com.teamviewer.teamviewer_desktop.plist
   - mod date: Feb 2 17:44:27 2015
   - checksum: 2384203231
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Disabled</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
    <key>Label</key>
    <string>com.teamviewer.desktop</string>
    <key>LimitLoadToSessionType</key>
    <array>
    <string>LoginWindow</string>
    <string>Aqua</string>
    </array>
    <key>ProgramArguments</key>
    <array>
    <string>/Applications/TeamViewer.app/Contents/Helpers/TeamViewer_Desktop</strin g>
    <string>-RunAsAgent</string>
    <string>YES</string>
    <string>-Module</string>
    <string>Full</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
   ...and 4 more line(s)
Contents of /Library/LaunchAgents/org.macosforge.xquartz.startx.plist
   - mod date: Aug 11 16:52:54 2014
   - checksum: 2451978492
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Label</key>
    <string>org.macosforge.xquartz.startx</string>
    <key>ProgramArguments</key>
    <array>
    <string>/opt/X11/lib/X11/xinit/launchd_startx</string>
    <string>/opt/X11/bin/startx</string>
    <string>--</string>
    <string>/opt/X11/bin/Xquartz</string>
    </array>
    <key>Sockets</key>
    <dict>
    <key>org.macosforge.xquartz:0</key>
    <dict>
    <key>SecureSocketWithKey</key>
    <string>DISPLAY</string>
    </dict>
    </dict>
    <key>ServiceIPC</key>
    <true/>
    <key>EnableTransactions</key>
    <true/>
   ...and 2 more line(s)
Contents of /Library/LaunchDaemons/com.fitbit.galileod.plist
   - mod date: May 19 05:48:41 2014
   - checksum: 333804614
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Program</key>
    <string>/usr/local/bin/galileod</string>
    <key>ProgramArguments</key>
    <array>
    <string>/usr/local/bin/galileod</string>
    </array>
    <key>Label</key>
    <string>com.fitbit.galileod</string>
    <key>UserName</key>
    <string>root</string>
    <key>GroupName</key>
    <string>daemon</string>
    <key>InitGroups</key>
    <true/>
    <key>OnDemand</key>
    <false/>
    <key>ServiceIPC</key>
    <true/>
    <key>Sockets</key>
    <dict>
    <key>UserClients</key>
   ...and 27 more line(s)
Contents of /Library/LaunchDaemons/com.lobotomo.IPSecuritasDaemon.plist
   - mod date: Jun 3 13:41:09 2013
   - checksum: 1975883550
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>KeepAlive</key>
    <true/>
    <key>Label</key>
    <string>com.lobotomo.IPSecuritasDaemon</string>
    <key>ProgramArguments</key>
    <array>
    <string>/Library/PrivilegedHelperTools/com.lobotomo.IPSecuritasDaemon</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
   </dict>
   </plist>
Contents of /Library/LaunchDaemons/com.mcafee.agent.cma.plist
   - mod date: Oct 9 03:12:05 2014
   - checksum: 575335952
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   
   <dict>
          <key>EnvironmentVariables</key>
           <dict>
                <key>DYLD_LIBRARY_PATH</key>
                <string>/Library/McAfee/cma/lib:/Library/McAfee/cma/bin</string>
    <key>NLSPATH</key>
                <string>/Library/McAfee/cma/resource/en_US/%N</string>
      </dict>
       <key>Label</key>
       <string>com.mcafee.agent.cma</string>
       <key>ProgramArguments</key>
       <array>
           <string>/Library/McAfee/cma/bin/launchcma</string>
       </array>
    <key>WorkingDirectory</key>
       <string>/Library/McAfee/cma/bin</string>
   
   
   
   
       <key>KeepAlive</key>
   ...and 5 more line(s)
Contents of /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist
   - mod date: Mar 10 03:00:00 2011
   - checksum: 998894468
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>MachServices</key>
    <dict>
    <key>com.microsoft.office.licensing.helper.port</key>
    <true/>
    </dict>
    <key>Label</key>
    <string>com.microsoft.office.licensing.helper</string>
    <key>OnDemand</key>
    <true/>
    <key>ProgramArguments</key>
    <array>
    <string>/Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper</s tring>
    </array>
    <key>ServiceIPC</key>
    <true/>
   </dict>
   </plist>
Contents of /Library/LaunchDaemons/com.oracle.mydesktopservice.plist
   - mod date: Feb 5 11:05:39 2014
   - checksum: 497805958
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
     <key>Label</key>
    <string>com.oracle.mydesktopservice</string>
    <key>UserName</key>
    <string>root</string>
    <key>GroupName</key>
    <string>wheel</string>
    <key>KeepAlive</key>
    <true/>
    <key>RunAtLoad</key>
    <true/>
    <key>Program</key>
     <string>MyDesktopService</string>
    <key>WorkingDirectory</key>
    <string>/Library/Application Support/Oracle/MyDesktop</string>
    <key>StandardErrorPath</key>
    <string>/Library/Logs/mydesktopservice_error.log</string>
    <key>StandardOutPath</key>
    <string>/Library/Logs/mydesktopservice_output.log</string>
    <key>Listeners</key>
       <dict>
      <key>SockServiceName</key>
   ...and 8 more line(s)
Contents of /Library/LaunchDaemons/com.teamviewer.Helper.plist
   - mod date: Jan 12 02:36:09 2015
   - checksum: 3374894509
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
     <key>Label</key>
     <string>com.teamviewer.Helper</string>
     <key>MachServices</key>
     <dict>
       <key>com.teamviewer.Helper</key>
       <true/>
       </dict>
     <key>Program</key>
     <string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>
     <key>ProgramArguments</key>
     <array>
       <string>/Library/PrivilegedHelperTools/com.teamviewer.Helper</string>
       </array>
   </dict>
   </plist>
Contents of /Library/LaunchDaemons/com.teamviewer.teamviewer_service.plist
   - mod date: Feb 2 17:44:27 2015
   - checksum: 1666586439
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Disabled</key>
    <true/>
    <key>KeepAlive</key>
    <true/>
    <key>Label</key>
    <string>com.teamviewer.service</string>
    <key>ProgramArguments</key>
    <array>
    <string>/Applications/TeamViewer.app/Contents/MacOS/TeamViewer_Service</string>
    <string>-Module</string>
    <string>Full</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>WorkingDirectory</key>
    <string>/Applications/TeamViewer.app/Contents/MacOS</string>
   </dict>
   </plist>
Contents of /Library/LaunchDaemons/org.virtualbox.startup.plist
   - mod date: Jan 6 18:23:58 2015
   - checksum: 3094394405
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
       <key>Label</key>             <string>org.virtualbox.startup</string>
       <key>Disabled</key>          <false/>
       <key>RunAtLoad</key>         <true/>
       <key>KeepAlive</key>         <false/>
       <key>LaunchOnlyOnce</key>    <true/>
       <key>ProgramArguments</key>
           <array>
               <string>/Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh</string>
               <string>restart</string>
           </array>
   </dict>
   </plist>
Contents of Library/LaunchAgents/com.google.keystone.agent.plist
   - mod date: Nov 27 16:14:13 2014
   - checksum: 2292326349
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Label</key>
    <string>com.google.keystone.user.agent</string>
    <key>LimitLoadToSessionType</key>
    <string>Aqua</string>
    <key>ProgramArguments</key>
    <array>
     <string>/Users/USER/Library/Google/GoogleSoftwareUpdate/GoogleSoftwareUpdate.bu ndle/Contents/Resources/GoogleSoftwareUpdateAgent.app/Contents/MacOS/GoogleSoftw areUpdateAgent</string>
     <string>-runMode</string>
     <string>ifneeded</string>
    </array>
    <key>RunAtLoad</key>
    <true/>
    <key>StartInterval</key>
    <integer>3523</integer>
    <key>StandardErrorPath</key>
    <string>/dev/null</string>
    <key>StandardOutPath</key>
    <string>/dev/null</string>
   </dict>
   </plist>
Contents of Library/LaunchAgents/com.spotify.webhelper.plist
   - mod date: Jan 21 20:36:13 2015
   - checksum: 1343262072
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
    <key>Label</key>
    <string>com.spotify.webhelper</string>
    <key>KeepAlive</key>
    <dict>
     <key>NetworkState</key>
     <true/>
    </dict>
    <key>RunAtLoad</key>
    <true/>
    <key>Program</key>
    <string>/Users/USER/Library/Application Support/Spotify/SpotifyWebHelper</string>
    <key>SpotifyPath</key>
    <string>/Applications/Spotify.app</string></dict>
   </plist>
Contents of Library/LaunchAgents/org.virtualbox.vboxwebsrv.plist
   - mod date: Jan 6 18:24:25 2015
   - checksum: 3654809970
   <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
   <plist version="1.0">
   <dict>
     <key>Disabled</key>
     <true/>
     <key>KeepAlive</key>
     <false/>
     <key>Label</key>
     <string>org.virtualbox.vboxwebsvc</string>
     <key>Program</key>
     <string>/Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv</string>
     <key>Sockets</key>
       <dict>
       <key>Listeners</key>
       <dict>
         <key>SockServiceName</key>
         <string>18083</string>
         <key>SockType</key>
         <string>stream</string>
         <key>SockFamily</key>
         <string>IPv4</string>
       </dict>
     </dict>
   </dict>
   ...and 1 more line(s)
Bundles
   - N/A
App extensions
   com.getdropbox.dropbox.garcon
Bad kernel extensions
   /System/Library/Extensions/Seagate Storage Driver.kext/Contents/PlugIns/SeagateDriveIcons.kext
Elapsed time (sec): 609

Can't Subscribe to Google Calendars after Migration to Mountain Lion

I had my work Google canendars synciing fine with iCal on my old desktop running Lion. After migrating to a new Mac Book with Mountain Lion, I cannot subscribe to my gCal's. The error I get is "Server With Secure Communication Unavalable", which makes no sence.
I've tried:
Chosing to use the calendar when adding the gMail account to Mail.app
Enabling the Calendar under the "Mail, Contacts & Calendars" Preference pane
Adding the account using Calendar.app's Preferences.
The suggestions I've been able to find don't apply, because we are not using Google's two-step validation.
Did Mountain Lion break something with the Google-Apps flavor of gCal? Is there a way to add via URL? I tried that using Safari, but it did not work well (created a iCloud Calendar, wouldn't allow me to change the assigned color and repeatedly threw an error for the same over a year-old event despite clicking the "Ignore" button).
Ray

Found a work-around. I don't know if this applies to all Google calendars, or just the Google-Apps ones:
Add the calendar as a generic CalDAV calendar. Use your full (hosted) gMail address as the username and www.google.com as the server address.
Interrestingly, ML matched this up to the main Google account in the "Mail, Contacts & Calendars" Preference Pane
Ray

1000's of audit failures

I am having an issue with server's randomly getting 1000's of audit failure errors, usually a reboot fixes the problem for a while but i need to get to the root cause of the issue. This is a virtual environment. I have 3 esx host running esx 4.1. The
first error i get is usually this
Message: 'This computer was not able to set up a secure session with a domain controller in domain NJ1due to the following: The RPC server is unavailable. This may lead to authentication problems. Make sure that this computer is connected to the network.
If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise,
this computer sets up the secure session to any domain controller in the specified domain.'
Data: 'C0020017'
The computer is still on the network as i can RDP to it. The 1000's of event ID errors are all the same See Below
n account failed to log on.
Subject:
Security ID:
NULL SID
Account Name:
Account Domain:
Logon ID:
0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID:
NULL SID
Account Name:
svc_or
Account Domain:
nj1
Failure Information:
Failure Reason:
An Error occured during Logon.
Status:
0xc000005e
Sub Status:
0x0
Process Information:
Caller Process ID:
0x0
Caller Process Name:
Network Information:
Workstation Name:
NJ100-MGMT01
Source Network Address:
10.8.32.45
Source Port:
56481
Detailed Authentication Information:
Logon Process:
NtLmSsp
Authentication Package:
NTLM
Transited Services:
Package Name (NTLM only):
Key Length:
0
This event is generated when a logon request fails. It is generated on the computer where access was attempted.
The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.
The Logon Type field indicates the kind of logon that was requested. The most common types are 2 (interactive) and 3 (network).
The Process Information fields indicate which account and process on the system requested the logon.
The Network Information fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.
The authentication information fields provide detailed information about this specific logon request.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Any help would be appreciated.

@Pace0214
I need a little more info on your environment to get a feel for what may be going on. How many domain controllers are you using? How many sites do you have? How are they configured, i.e., hub and spoke, spanned, etc.? Do you have DC's
in the sites? Are you using AD integrated DNS or some other method? These are the big ones that come to mind.
Mr. X has got you looking in the right places, these types of errors are usually DNS or IP configuration related. AD uses subnets to find everything that DNS doesn't. It is what clients use to locate a DC to authenticate against and unless
properly configured, you will get these types of errors.
Gary
Gary G. Gray
MCP, MCTS, MCITP, MCT Alumni
Please remember to mark the replies as answers if they are helpful.
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

Windows 7 Security Audit Failure message 6281 & Security Kernel

OS: Windows 7 Home Premium Ver 6.1 Build 7601 SP 1
Toshiba Satellite C655
I received a Windows 7 Security pop-up saying there was a Kernel mismatch and asked if I wanted to proceed. Not thinking - i hit yes. Looking through the Security Audit Log - I found an audit failure with 6281 System Integrity Error. I
am assuming they are related.
Any idea what have I done and what do I need to check/do to recover?
Thanks

Hi,
Please upload us the full error messages here, we need more information to narrow down the cause. Then check into
Event Viewer, see if any other errors logged.
Besides, check to see if there are any devices have new drivers need to update.
Mostly this error is caused by the "Realtek Audio HD driver", please check to see if we have any related devices.
Reference:
Windows 7 freeze after shutdown
Best regards
Michael Shao
TechNet Community Support

Help needed: Proxy 3.6 needs frequent restart after migrated fr NT4 to W2K

My question regarding iPlanet Web Proxy Server 3.6 with SP3.
After migrating from NT4 SP6a server to Windows 2000 Server SP4, my browser will have intermittent browsing problem because proxy server not responding to request. I will have to shut down & start the proxy server. Then, browsing is back to normal. In one day, this problem can happen more than 2 times.
Error log shows some errors like "Warning: event_handler: Failed to wait on events The handle is invalid." "Failure: StartConnectToHost: connect failed (error: 10055)" Anyone can help? Thanks.

try reinstalling the server....
that usually helps. don't forget to save your settings, i.e., writing them down or save the .conf file.

Event 672 audit failure after migration to hosted Exchange

Similar Messages

Maybe you are looking for