Server 2012 R2 Locks up SMBClient event log

Hello,
We have two virtual server 2012 R2 servers which are on different domains. These servers act as file servers and have all the user redirected info and profiles on them. For some reason they are randomly locking up and users call in stating their desktops
are frozen but in reality its because this 2012 R2 file server stopped working. The explorer window on the file server locks up and you cant really do much. The only solution until now has been to just restart the server itself. It happens at least once a
month, sometimes more.
I've looked at event viewer after the reboots and there is nothing logged under the application nor the windows log during the time of this "lockup". I've looked at vmware logs and can't finda nything either. Vmotioning the vm during this period
doesn't do anything either.
The only thing I see in logs are regarding the SMBClient. The only real software I'm running on both of these servers is the system center data protection manager agent. The SMBClient shows the following a couple of mintues before the lockup. Same
error message shows up about 5 times before the crash.

Hi,
Thank you for posting in Windows Server Forum.
From you description it seems you are facing issue with VM connection as VM server is getting stopped working so if VM is stopped then it’s obvious that you can’t get the connected to the server and can find the error. 
Actually sorry to say but there is very less information available for the error which you are facing. Still here I would suggest you to check the VM connections and monitor the system resource for more troubleshooting.
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Similar Messages

  • Windows Server 2012 Failover Cluster (Hyper-V) Event Id 1196

    Hi All,
    I just installed Failover Cluster for Hyper-V on windows server 2012 with 2 nodes. I got following error event id 1196.
    reCreated / deleted Cluster Host A record on DNS and nothing happened.
    Any suggestion?
    There is similar topic but it couldnt help
    http://social.technet.microsoft.com/Forums/en-US/winserverClustering/thread/2ad0afaf-8d86-4f16-b748-49bf9ac447a3/
    Regards

    Hi,
    You may refer to this article to troubleshoot this issue;
    Event ID 1196 — Network Name Resource Availability
    http://technet.microsoft.com/en-us/library/dd354022(v=WS.10).aspx
    Check the following:
    Check that on the DNS server, the record for the Network Name resource still exists. If the record was accidentally deleted, or was scavenged by the DNS server, create it again, or arrange to have a network administrator create it.
    Ensure that a valid, accessible DNS server has been specified for the indicated network adapter or adapters in the cluster.
    Check the system event log for Netlogon or DNS events that occurred near the time of the failover cluster event. Troubleshooting these events might solve the problem that prevented the clustered Network Name resource from registering the DNS name.
    For more information please refer to following MS articles:
    DNS Registration with the Network Name Resource
    http://blogs.msdn.com/b/clustering/archive/2009/07/17/9836756.aspx
    Lawrence
    TechNet Community Support

  • Server 2012 R2 Domain Controllers stop accepting log in and replication failure.

    We have recently completed a Domain upgrade to 2012 R2 AD DS from native 2003 AD. The issue we are experiencing is that for seemingly no reason the 2012 hosts will randomly stop accepting (RDP) logins and we see replication failures. We also cannot
    otherwise remotely manage the host (remote service management etc...). The only way I've been able to recover from this condition is to restart the affected host, after which (RDP) logins are again accepted and successful replication starts again.
    Logs aren't showing any issues prior to the issue happening and it is not specific to one host. I have been digging around to find a solution to this abnormal behavior but as yet haven't come across anything specific to what I am seeing.
    Domain level is 2008 R2 and our few remaining 2008 R2 hosts never experience this. Only seems to be the 2012 hosts and randomly among all the DCs. Not one specific 2012 host is affected.
    We have 20 DCs total.
    Are there any known issues? Any advice on what I may be able to look at?
    We are otherwise healthy aside from this intermittent replication/login issue.

    This sounds more like a network type issue than AD type problem.
    Are any firewalls in the way? 
    Do the servers respond to a ping when they are not responding to RDP.
    What are you seeing in event logs prior to the change. 
    Are the servers physical or virtual? Are you able to get onto the console - either through your HyperVisor or through ILO type management?
    Thanks
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    Blog: http://www.windows-support.co.uk 
    Twitter:   LinkedIn:

  • Exchange server 2013 showing some error on event Log ( "DCOM" and "MSExchangeMapiMailboxAppPool" )

    Error : DCOM was unable to communicate with the computer ADCB.ABCD.net using any of the configured protocols; requested by PID     2bec (c:\windows\system32\inetsrv\w3wp.exe).
    Error: A process serving application pool 'MSExchangeMapiMailboxAppPool' suffered a fatal communication error with the Windows Process Activation Service. The process id was '2412'. The data field contains the error number.
    Please suggest

    Hi Parvez,
    According to the error message, I understand that the Event error 10009 is received on DC. Please correct me if there is any misunderstand.
    To solve this issue, please follow the steps below:
    a. Please ensure that the remote computer is online.
    b. This problem maybe the result of a firewall blocking the connection.
    c. Other reasons for the problem might be found in the Extended RPC error information that is available in Event Viewer.
    More details in the following article:
    Event ID 10009 — COM Remote Service Availability
    http://technet.microsoft.com/en-us/library/cc774368(WS.10).aspx
    If the Remote server contains some 32 bit Applications, please make sure that each Application Pool in IIS, under "Advanced Settings" has "Enable 32 bit Application" set to "True".
    Thanks
    Mavis
    Mavis Huang
    TechNet Community Support

  • New Windows Server 2012 unable connect to Netlogon Service or update DNS records

    Hi everybody, all of my Windows Servers 2012 decided to collapse after innocuous group policy update that was meant to make user passwords more secure.
    The AD and DNS seem to be functioning "normally", I am able to add new Windows7 and Windows Server 2008 machines to the domain, I can see them in listed in the AD and DNS record are update correctly, however, as soon as I try to join Windows Server
    2012 it breaks.
    The event log is littered on the new server with:
    The system failed to register host (A or AAAA) resource records (RRs) for network adapter
    with settings:
               Adapter Name : {DB7F73CE-E011-4F3C-BEBC-2CE7A871DF51}
               Host Name : CHEETAH
               Primary Domain Suffix : somedomain.com
               DNS server list :
    192.168.0.5
               Sent update to server : <?>
               IP Address(es) :
    192.168.0.15
    The reason the system could not register these RRs was because the update request it sent to the DNS server timed out. The most likely cause of this is that the DNS server authoritative for the name it was attempting to register or update is not running
    at this time.
    You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator.
    and
    Name resolution for the name _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.somedomain.com. timed out after none of the configured DNS servers responded.
    When I try to ping the primary DC (WS2003) it fails, the Secondary DC (WS2012) responds.
    The >nltest /sc_query:somedomain.com on Windows Servers 2012 returns:
    Flags: 0
    Trusted DC Name
    Trusted DC Connection Status Status = 1311 0x51f ERROR_NO_LOGON_SERVERS
    The command completed successfully
    yet it works on all other machines.
    I tried removing 2012 servers from the domain and rejoining - without success. The cookie crumbled when I added two new installations of Windows Server 2012 & 2008 and 2008 worked fine but 2012 showed same symptoms.
    There is one peculiar thing that I had noticed on all Windows 2012 machines, it constantly showing "Workplace Connection - Connecting" in the networks pane on the right side of the screen, which I can't say i ever noticed before.
    Unfortunately, the secondary DC is a multihoming server with Direct Access role - I am not sure if this may play some part but our existing configuration worked for a year now without any problems. Issue appeared when I changed the password complexity rule,
    which boggles the mind. I wonder if there has been some other changes in GPO that did not propagate from years ago and finally comeback to break things.
    Any suggestions would be really appreciated.
    wmin

    Hello Ace, i wish you a Happy New Year! I hope your break was enjoyable and filled with cheer.
    In the end I had to bite the bullet and reinstall all troublesome servers. Your recommendations from above removed some serious problems with the DA and DNS resolution.
    I was able to attach new server to the domain without any problems and begin painful process of rebuild.
    I have promoted TIGER to full DC controller role, but having some issues with replication. Although running >repadmid /showrepl gives positive
    feedback, the sysvol folder on the secondary DC is empty.
    Also there is a couple of warnings in the event log:
    Event ID 4012
    Log Name: DNS Server
    Source: DNS-Server-Service
    The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial synchronization of the directory has been completed. The DNS server service cannot start until the initial
    synchronization is complete because critical DNS data might not yet be replicated onto this domain controller. If events in the AD DS event log indicate that there is a problem with DNS name resolution, consider adding the IP address of another DNS server
    for this domain to the DNS server list in the Internet Protocol properties of this computer. This event will be logged every two minutes until AD DS has signaled that the initial synchronization has successfully completed.
    - which has not repeated since 3rd of Jan.
    These events occur on the primary DC every few minutes:
    Event ID 1030
    Source: Userenv
    Log Name: NT AUTHORITY\SYSTEM
    Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.
    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Event ID 1058
    Source: Userenv
    Log Name: NT AUTHORITY\SYSTEM
    Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=somedomain,DC=com. The file must be present at the location <\\somedomain.com\sysvol\somedomain.com\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>.
    (The network name cannot be found. ). Group Policy processing aborted.
    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    Should sysvol folder be shared on the secondary DC? Another interesting thing to point out is that
    \\somedomain.com\sysvol\somedomain.com\Policies\ can be access
    from all other machines except the DC1.
    Cheers!
    kind regards,
    wmin

  • SQL Server monitoring error event log 4001

    hello Experts ,
    We have SCOM 2012 R2 environment ,I have installed SQL SERVER MPs 6.5.0.1 and installed SCOM agent on some of SQL Server. Some of the SQL Server are monitoring working properly not all SQL Server but getting error  for some of SQL Server in event log
    Event :4001
    Management Group: SCOMMgtGroup. Script: Main Module: CPUUsagePercentDataSource.ps1 : 
    Computer Name = 'MHSSCOM01.memnet.org' WMI = 'ComputerManagement11' Service Name = 'MSSQLSERVER' SQL Instance Name = 'MSSQLSERVER'
    Exception calling "Fill" with "1" argument(s): "The user does not have permission to perform this action."Error occured during CPU Usage for SQL Instances data source executing.
    Computer:MHSSCOM01 
    Reason: Exception calling "Fill" with "1" argument(s): "The user does not have permission to perform this action."
    also not getting Database information within the SQL Server instances for these SQL Server within "Instances Summary "
    for resolution ,I have created a Run as account (windows)for SQL monitoring then associated it with Run as profile with SQL Server default account,Discovery account and Monitoring account and distribute it securely to each SQL Server health service object
    .The run as account have  added to local admin group on each SQL server.
    How to resolved the event log error and how to get database information for all instances of sql server.
    Thanks
    RICHA

    Hi,
    It seems like that the action account that run the script does not have enough permissions on the monitored SQL server, I would like to suggest you follow the below link to check your runas account configuration:
    http://blogs.technet.com/b/kevinholman/archive/2010/09/08/configuring-run-as-accounts-and-profiles-in-r2-a-sql-management-pack-example.aspx
    And make sure the action account also have SQL admin account to the SQL server.
    Here is also a link that may be helpful for you:
    http://blogs.technet.com/b/momteam/archive/2014/05/12/kb-event-4001-in-the-operations-manager-log-during-sql-server-2012-monitoring.aspx
    Regards,
    Yan Li
    Regards, Yan Li

  • Intermittent loss of UNC path access on Windows Server 2012

    Hi All,
    I hope someone can help with a major headache we've been having on two Windows Server 2012 boxes since September this year. Basically, these servers will intermittently lose the ability to browse network shares from windows explorer and the only way we have
    found to resolve this is to reboot. When the issue happens, we can't even log into the server as it sits at 'applying user settings' - presumably as it is failing to access the netlogon share on our DCs. If we have an active RDP session when the issue occurs,
    we can connect. In this instance we see that if you enter a UNC path in Windows explorer and hit enter, nothing happens - no error messages or anything. The only way I can get any response is when trying to access the IPC$ share on another server, which gives
    the following response:
    \\server\ipc$ is not accessible. You might not have permission to use this resource, Contact the administrator of this server to find out if you have access permissions.
    The parameter is incorrect.
    Everything looks right from a physical network perspective, as we can ping from the affected servers and DNS queries are working fine. I can even run net view from powershell and see the local servers and shares on these, however any attempt to access shares
    just hangs the powershell session.
    If I look in the SMBClient event logs, I can see entries like the following:
    Event ID 30805
    The client lost its session to the server.
    Error: The transport connection is now disconnected.
    This is made worse by the fact that when this issue happens, we can't even cleanly reboot the server (it just hangs) and have to perform a cold boot.
    The firewall has been turned off and we have taken off our antivirus software to eliminate it as a possible cause. We have even rebuilt one of these servers on a clean install of 2012 R2, but the issue re-appeared. We have also tried using different NIC
    drivers (Broadcom NICs installed) to no avail. We have also tried disabling IPv6.
    We have logged a ticket with Microsoft support, who have come back telling us that this could be related to a known bug with DFS in 2012 for which a fix is being tested prior to release in a few weeks. However, I can't sit around on my hands until then on
    the off chance that this fix will resolve our problem. These servers are hosting our production Lync 2013 front end service and when this issue occurs it breaks the address book search and response group services, so this issue is of critical importance for
    us to get resolved asap.
    Any help on this would be greatly appreciated.

    Hi,
    That's right, if you hit enter absolutely nothing happens, no error messages. It makes no difference if I try name or IP address - even trying \\localhost doesn't work. A few minutes later after trying, an entry appears in the SMBClient event logs as mentioned
    in my original post. To me it looks like something deep within the networking operations of the OS is randomly breaking. Also, if I try to browse the network from Windows explorer, it just hangs. When I try to restart the workstation service, it just gets
    permanently stuck in a stopping state and the server has to be cold booted. Once it boots up, everything is working fine again....until the next time. There is absolutely nothing appearing in the application or system event logs indicating the root cause.
    I've checked and DNS resolution is working OK and I can telnet to other hosts on all the required ports.
    I had originally thought it might be related to the Broadcom NICs as we've had issues with them in the past, but we switched over to use the 2012 inbox driver for them and the same issue happens. I should also mention that one server is a blade and the other
    a rackmount box. Dell support have run full diagnostics on both and have come up clean, so it doesn't appear to be a hardware issue. The even more baffling thing is that we have a third server with identical spec and config that does not have the problem.
    The only difference with this third server is that it is not part of a Lync pool pairing using DFS and sits in a remote location on a different LAN.
    I had thought of trying to drop back to use SMB1 by disabling SMB2 and 3, but I'm not sure if this would adversely affect any other services.
    This one really has me stumped.

  • Windows Update fails on Server 2012 R2 Virtual Machine

    I have set up a virtual network with two virtual machines. The first VM is Server 2008 R2 and is set up as a domain controller. The second VM is Server 2012 R2, and has been joined to the domain.  The DC (TestVM1) is also set up as a DNS server. 
    From TestVM2 (Server 2012 R2), I am able to log in using a domain login, and I am able to browse to a public website.
    I was able to run Windows Updates from TestVM1, but when I attempt to run Windows Updates from TestVM2, it fails.
    The Windows Update client shows "Error(s) found:" and "Code 8024402F". 
    Errors in WindowsUpdate.log include
    2014-10-17 18:26:14:235  800 950 Setup FATAL: GetClientUpdateUrl failed, err = 0x8024D009
    2014-10-17 18:26:26:238  800 950 Misc WARNING: Send failed with hr = 80072ee7.
    2014-10-17 18:26:26:238  800 950 Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2014-10-17 18:26:26:238  800 950 Misc WARNING: Send request failed, hr:0x80072ee7
    2014-10-17 18:26:26:238  800 950 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://v4.download.windowsupdate.com/c/msdownload/update/others/2014/08/13518740_b1b71791444e5dec0018bcd60303445108442c12.cab>.
    error 0x8024402c
    2014-10-17 18:26:26:238  800 950 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
    2014-10-17 18:26:26:238  800 950 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
    2014-10-17 18:26:26:238  800 950 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
    2014-10-17 18:26:26:238  800 950 Misc WARNING: WinHttp: WinHttpQueryHeaders(WINHTTP_QUERY_CONTENT_TYPE) for X-CID failed. error 0x80072ef3
    2014-10-17 18:26:26:238  800 950 PT WARNING: ECP: DownloadCabFile: failed to get CDN Provider for error reporting, hr = 0X80072EF3
    2014-10-17 18:26:26:238  800 950 Misc WARNING: WinHttp: WinHttpQueryHeaders(WINHTTP_QUERY_CONTENT_TYPE) for X-CCC failed. error 0x80072ef3
    2014-10-17 18:26:26:238  800 950 PT WARNING: ECP: DownloadCabFile: failed to get CDN Country for error reporting, hr = 0X80072EF3
    2014-10-17 18:26:26:238  800 950 PT WARNING: ECP: Failed to download cab file from
    http://download.windowsupdate.com/c/msdownload/update/others/2014/08/13518740_b1b71791444e5dec0018bcd60303445108442c12.cab with error 0x8024402c
    2014-10-17 18:26:26:238  800 950 PT WARNING: ECP: This roundtrip contained some optimized updates which failed. New Update count = 34, Old Count = 60
    2014-10-17 18:26:26:317  800 950 PT   + SyncUpdates round trips: 1
    2014-10-17 18:26:26:317  800 950 PT WARNING: Sync of Updates: 0x8024402f
    2014-10-17 18:26:26:317  800 950 PT WARNING: SyncServerUpdatesInternal failed: 0x8024402f
    2014-10-17 18:26:26:317  800 950 Agent   * WARNING: Failed to synchronize, error = 0x8024402F
    2014-10-17 18:26:26:317  800 950 Agent   * WARNING: Exit code = 0x8024402F
    This is blocking further work.  Assistance would be greatly appreciated.

    I am having the exact same issue. Fresh build of Server 2012 R2 from the Microsoft Volume Licensing ISO. I tried before and after joining to the domain. Same error every time.  Firewall is turned off. No AV. We do have a cloud proxy service, but I bypassed
    that as a test and got the same error message.  I also tried to stop wuauserv and cleaning out the folder and starting it back up.  No joy as well.  This is a VM server running on ESXi 5.1.  Server 2008 servers dont seem to have
    an issue.  Server 2012 server don't seem to have an issue.  Only this new Server 2012 R2 server.  My logs are below:
    2014-10-28 14:28:46:104  696 4a4 AU ###########  AU: Uninitializing Automatic Updates  ###########
    2014-10-28 14:28:46:104  696 4a4 WuTask Uninit WU Task Manager
    2014-10-28 14:28:46:198  696 4a4 Service *********
    2014-10-28 14:28:46:198  696 4a4 Service **  END  **  Service: Service exit [Exit code = 0x240001]
    2014-10-28 14:28:46:198  696 4a4 Service *************
    2014-10-28 14:29:24:198  696 5c8 Misc ===========  Logging initialized (build: 7.9.9600.17092, tz: -0400)  ===========
    2014-10-28 14:29:24:198  696 5c8 Misc   = Process: C:\Windows\system32\svchost.exe
    2014-10-28 14:29:24:198  696 5c8 Misc   = Module: c:\windows\system32\wuaueng.dll
    2014-10-28 14:29:24:198  696 5c8 Service *************
    2014-10-28 14:29:24:198  696 5c8 Service ** START **  Service: Service startup
    2014-10-28 14:29:24:198  696 5c8 Service *********
    2014-10-28 14:29:24:214  696 5c8 Agent   * WU client version 7.9.9600.17092
    2014-10-28 14:29:24:214  696 5c8 Agent   * Base directory: C:\Windows\SoftwareDistribution
    2014-10-28 14:29:24:214  696 5c8 Agent   * Access type: No proxy
    2014-10-28 14:29:24:214  696 5c8 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2014-10-28 14:29:24:214  696 5c8 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2014-10-28 14:29:24:214  696 5c8 Agent   * Network state: Connected
    2014-10-28 14:29:24:214  696 5c8 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 1.
    2014-10-28 14:29:24:214  696 5c8 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 1.
    2014-10-28 14:29:24:510  696 5c8 DtaStor Default service for AU is {00000000-0000-0000-0000-000000000000}
    2014-10-28 14:29:24:510  696 5c8 DtaStor Default service for AU is {9482F4B4-E343-43B6-B170-9A65BC822C77}
    2014-10-28 14:29:24:542  696 5c8 DtaStor Data store successfully created
    2014-10-28 14:29:24:542  696 5c8 Agent ***********  Agent: Initializing global settings cache  ***********
    2014-10-28 14:29:24:542  696 5c8 Agent   * Endpoint Provider: 00000000-0000-0000-0000-000000000000
    2014-10-28 14:29:24:542  696 5c8 Agent   * WSUS server: <NULL>
    2014-10-28 14:29:24:542  696 5c8 Agent   * WSUS status server: <NULL>
    2014-10-28 14:29:24:542  696 5c8 Agent   * Target group: (Unassigned Computers)
    2014-10-28 14:29:24:542  696 5c8 Agent   * Windows Update access disabled: No
    2014-10-28 14:29:24:542  696 5c8 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
    2014-10-28 14:29:24:542  696 5c8 WuTask WuTaskManager delay initialize completed successfully..
    2014-10-28 14:29:24:542  696 5c8 Report WARNING: Failed to initialize event uploader for new server {9482F4B4-E343-43B6-B170-9A65BC822C77} with hr = 8024043d.
    2014-10-28 14:29:24:542  696 5c8 Report CWERReporter::Init succeeded
    2014-10-28 14:29:24:542  696 5c8 Agent ***********  Agent: Initializing Windows Update Agent  ***********
    2014-10-28 14:29:24:542  696 5c8 DnldMgr Download manager restoring 0 downloads
    2014-10-28 14:29:24:557  696 5c8 AU ###########  AU: Initializing Automatic Updates  ###########
    2014-10-28 14:29:24:557  696 5c8 AU AIR Mode is disabled
    2014-10-28 14:29:24:557  696 5c8 AU   # AU disabled through User preference
    2014-10-28 14:29:24:557  696 5c8 AU   # Will interact with non-admins (Non-admins are elevated (User preference))
    2014-10-28 14:29:24:557  696 5c8 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
    2014-10-28 14:29:24:557  696 5c8 AU AU finished delayed initialization
    2014-10-28 14:29:24:557  696 234 DnldMgr Asking handlers to reconcile their sandboxes
    2014-10-28 14:29:35:776  696 578 IdleTmr Incremented idle timer priority operation counter to 1
    2014-10-28 14:29:37:307  696 52c AU Triggering AU detection through DetectNow API
    2014-10-28 14:29:37:307  696 52c AU Triggering Online detection (interactive)
    2014-10-28 14:29:37:323  696 5c8 AU #############
    2014-10-28 14:29:37:323  696 5c8 AU ## START ##  AU: Search for updates
    2014-10-28 14:29:37:323  696 5c8 AU #########
    2014-10-28 14:29:37:323  696 5c8 SLS Retrieving SLS response from server...
    2014-10-28 14:29:37:323  696 5c8 SLS Making request with URL
    HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=871&L=en-US&P=&PT=0x7&WUA=7.9.9600.17092
    2014-10-28 14:29:58:339  696 5c8 Misc WARNING: Proxy List used: <172.25.7.9:80> Bypass List used : <(null)> Auth Schemes used : <None>
    2014-10-28 14:29:58:339  696 5c8 Misc WARNING: Send request failed, hr:0x80072ee2
    2014-10-28 14:29:58:339  696 5c8 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=871&L=en-US&P=&PT=0x7&WUA=7.9.9600.17092>.
    error 0x80072ee2
    2014-10-28 14:29:58:339  696 5c8 Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2014-10-28 14:29:58:339  696 5c8 Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2014-10-28 14:29:58:339  696 5c8 Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2014-10-28 14:29:58:339  696 5c8 SLS FATAL: SLS:CSLSDownloader::GetUrlContent: DoFileDownload failed with 0x80072ee2.
    2014-10-28 14:29:58:339  696 5c8 SLS FATAL: GetResponse failed with hresult 0x80072ee2...
    2014-10-28 14:29:58:339  696 5c8 EP FATAL: EP: CSLSEndpointProvider::GetWUClientDataAndInitParser - failed to get SLS data, error = 0x80072EE2
    2014-10-28 14:29:58:339  696 5c8 EP FATAL: EP: CSLSEndpointProvider::GetEndpointFromSLS - Failed to get client data and init parser, error = 0x80072EE2
    2014-10-28 14:29:58:339  696 5c8 EP FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80072EE2
    2014-10-28 14:29:58:339  696 5c8 Agent WARNING: Failed to obtain the authorization cab URL for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0
    2014-10-28 14:29:58:339  696 5c8 Agent FATAL: Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80072EE2
    2014-10-28 14:29:58:339  696 5c8 IdleTmr WU operation (CSearchCall::Init ID 1) started; operation # 7; does use network; is not at background priority
    2014-10-28 14:29:58:339  696 5c8 IdleTmr Incremented PDC RefCount for Network to 1
    2014-10-28 14:29:58:339  696 5c8 IdleTmr Incremented idle timer priority operation counter to 2
    2014-10-28 14:29:58:385  696 5c8 Report ***********  Report: Initializing static reporting data  ***********
    2014-10-28 14:29:58:385  696 5c8 Report   * OS Version = 6.3.9600.0.0.196880
    2014-10-28 14:29:58:385  696 5c8 Report   * OS Product Type = 0x00000007
    2014-10-28 14:29:58:401  696 5c8 Report   * Computer Brand = VMware, Inc.
    2014-10-28 14:29:58:401  696 5c8 Report   * Computer Model = VMware Virtual Platform
    2014-10-28 14:29:58:401  696 5c8 Report   * Platform Role = 1
    2014-10-28 14:29:58:401  696 5c8 Report   * AlwaysOn/AlwaysConnected (AOAC) = 0
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Revision = 6.00
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Name = PhoenixBIOS 4.0 Release 6.0    
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Release Date = 2013-08-16T00:00:00
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Sku Number unavailable.
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Vendor = Phoenix Technologies LTD
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Family unavailable.
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Major Release = 4
    2014-10-28 14:29:58:401  696 5c8 Report   * Bios Minor Release = 6
    2014-10-28 14:29:58:401  696 5c8 Report   * Locale ID = 1033
    2014-10-28 14:29:58:401  696 5c8 Agent *** START ***  Queueing Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 1]
    2014-10-28 14:29:58:401  696 5c8 AU <<## SUBMITTED ## AU: Search for updates  [CallId = {4A8CCE12-100B-4178-998D-608DFBB0B2D0} ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}]
    2014-10-28 14:29:58:432  696 b0c Agent ***  END  ***  Queueing Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 1]
    2014-10-28 14:29:58:432  696 b0c Agent *************
    2014-10-28 14:29:58:432  696 b0c Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 1]
    2014-10-28 14:29:58:432  696 b0c Agent *********
    2014-10-28 14:29:58:432  696 b0c Agent   * Online = Yes; Ignore download priority = No
    2014-10-28 14:29:58:432  696 b0c Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1
    or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
    2014-10-28 14:29:58:432  696 b0c Agent   * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update
    2014-10-28 14:29:58:432  696 b0c Agent   * Search Scope = {Machine & All Users}
    2014-10-28 14:29:58:432  696 b0c Agent   * Caller SID for Applicability: S-1-5-21-600452275-980750782-2124898778-9669
    2014-10-28 14:29:58:432  696 b0c SLS Retrieving SLS response from server...
    2014-10-28 14:29:58:432  696 b0c SLS Making request with URL
    HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=871&L=en-US&P=&PT=0x7&WUA=7.9.9600.17092
    2014-10-28 14:29:59:135  696 b0c Misc Validating signature for C:\Windows\SoftwareDistribution\SLS\9482F4B4-E343-43B6-B170-9A65BC822C77\sls.cab with dwProvFlags 0x00000080:
    2014-10-28 14:29:59:135  696 b0c Misc  Microsoft signed: NA
    2014-10-28 14:29:59:135  696 b0c Misc  Infrastructure signed: Yes
    2014-10-28 14:29:59:135  696 b0c Misc Validating signature for C:\Windows\SoftwareDistribution\SLS\9482F4B4-E343-43B6-B170-9A65BC822C77\TMP3958.tmp with dwProvFlags 0x00000080:
    2014-10-28 14:29:59:135  696 b0c Misc  Microsoft signed: NA
    2014-10-28 14:29:59:135  696 b0c Misc  Infrastructure signed: Yes
    2014-10-28 14:29:59:135  696 b0c EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "117cab2d-82b1-4b5a-a08c-4d62dbee7782"
    2014-10-28 14:29:59:135  696 b0c SLS FATAL: SLS:CSLSRequest::RetrieveAdditionalAttributesIfRequired: CoCreateInstance failed with 0x80040154.
    2014-10-28 14:29:59:135  696 b0c Agent WARNING: Failed to retrieve SLS response data for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, error = 0x80040154
    2014-10-28 14:29:59:135  696 b0c Agent FATAL: Caller Service Recovery failed to opt in to service 117cab2d-82b1-4b5a-a08c-4d62dbee7782, hr=0X80040154
    2014-10-28 14:29:59:135  696 b0c EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir Client/Server URL: "https://fe2.update.microsoft.com/v6/ClientWebService/client.asmx"
    2014-10-28 14:29:59:135  696 b0c Setup Checking for agent SelfUpdate
    2014-10-28 14:29:59:135  696 b0c Setup Client version: Core: 7.9.9600.17092  Aux: 7.9.9600.17031
    2014-10-28 14:29:59:135  696 b0c EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SelfUpdate URL: "https://fe2.update.microsoft.com/v10/3/windowsupdate/selfupdate"
    2014-10-28 14:30:00:151  696 b0c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab with dwProvFlags 0x00000080:
    2014-10-28 14:30:00:151  696 b0c Misc  Microsoft signed: NA
    2014-10-28 14:30:00:151  696 b0c Misc  Infrastructure signed: Yes
    2014-10-28 14:30:00:151  696 b0c Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\TMP3D51.tmp with dwProvFlags 0x00000080:
    2014-10-28 14:30:00:167  696 b0c Misc  Microsoft signed: NA
    2014-10-28 14:30:00:167  696 b0c Misc  Infrastructure signed: Yes
    2014-10-28 14:30:00:167  696 b0c Setup FATAL: GetClientUpdateUrl failed, err = 0x8024D009
    2014-10-28 14:30:00:167  696 b0c Setup Skipping SelfUpdate check based on the /SKIP directive in wuident
    2014-10-28 14:30:00:167  696 b0c Setup SelfUpdate check completed.  SelfUpdate is NOT required.
    2014-10-28 14:30:00:323  696 b0c PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-10-28 14:30:00:323  696 b0c PT   + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL =
    https://fe2.update.microsoft.com/v6/ClientWebService/client.asmx
    2014-10-28 14:30:01:104  696 b0c PT WARNING: Cached cookie has expired or new PID is available
    2014-10-28 14:30:01:104  696 b0c PT WARNING: PTWarn: Anonymous plug-in skipped for WU
    2014-10-28 14:30:01:198  696 b0c Agent Reading cached app categories using lifetime 604800 seconds
    2014-10-28 14:30:01:198  696 b0c Agent Read 1 cached app categories
    2014-10-28 14:30:40:917  696 b0c PT WARNING: ECP: Failed to validate cab file digest downloaded from
    http://download.windowsupdate.com/d/msdownload/update/others/2013/09/9242543_a77d372b9c8b13c599a3daf4b321ea1903da9a72.cab with error 0x80091007
    2014-10-28 14:30:40:917  696 b0c PT WARNING: ECP: This roundtrip contained some optimized updates which failed. New Update count = 57, Old Count = 60
    2014-10-28 14:30:41:151  696 b0c PT   + SyncUpdates round trips: 14
    2014-10-28 14:30:41:151  696 b0c PT WARNING: Sync of Updates: 0x8024402f
    2014-10-28 14:30:41:151  696 b0c PT WARNING: SyncServerUpdatesInternal failed: 0x8024402f
    2014-10-28 14:30:41:151  696 b0c Agent   * WARNING: Failed to synchronize, error = 0x8024402F
    2014-10-28 14:30:41:151  696 b0c Agent   * WARNING: Exit code = 0x8024402F
    2014-10-28 14:30:41:151  696 b0c Agent *********
    2014-10-28 14:30:41:151  696 b0c Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdatesWuApp  Id = 1]
    2014-10-28 14:30:41:151  696 b0c Agent *************
    2014-10-28 14:30:41:151  696 b0c Agent WARNING: WU client failed Searching for update with error 0x8024402f
    2014-10-28 14:30:41:151  696 b0c IdleTmr WU operation (CSearchCall::Init ID 1, operation # 7) stopped; does use network; is not at background priority
    2014-10-28 14:30:41:151  696 b0c IdleTmr Decremented PDC RefCount for Network to 0
    2014-10-28 14:30:41:151  696 b0c IdleTmr Decremented idle timer priority operation counter to 1
    2014-10-28 14:30:41:151  696 6fc AU >>##  RESUMED  ## AU: Search for updates [CallId = {4A8CCE12-100B-4178-998D-608DFBB0B2D0} ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}]
    2014-10-28 14:30:41:151  696 6fc AU   # WARNING: Search callback failed, result = 0x8024402F
    2014-10-28 14:30:41:151  696 6fc AU #########
    2014-10-28 14:30:41:151  696 6fc AU ##  END  ##  AU: Search for updates  [CallId = {4A8CCE12-100B-4178-998D-608DFBB0B2D0} ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}]
    2014-10-28 14:30:41:151  696 6fc AU #############
    2014-10-28 14:30:41:151  696 6fc AU All AU searches complete.
    2014-10-28 14:30:41:151  696 6fc AU   # WARNING: Failed to find updates with error code 8024402f
    Derek
    Systems Engineer
    Derek Desktop Engineer

  • File/Storage Errors in Server 2012

    Hi
    We are running Server 2012 (proper, downloaded from licensing portal) and are using it as an NFS server for some of our VM Ware machines.
    Yesterday the NFS storage went offline for approx. 15 minutes, and then came back online.  The following errors are found in Event Viewer, these errors appear to have been happening since 21/08 but this the first time the NFS server has gone offline.
    This error is found in the Applications Log:
    File Server Resource Manager finished syncing claims from Active Directory and encountered errors during the sync (0x80072030, There is no such object on the server.
    ).  Please check previous event logs for details.
    And is accompanied by this error:
    File Server Resource Manager failed to find the claim list 'Global Resource Property List' in Active Directory (ADsPath:
    LDAP://mydc.mydomain.local/CN=Global Resource Property List,CN=Resource Property Lists,CN=Claims Configuration,CN=Services,CN=Configuration,DC=mydc,DC=local). Please check that the claims list configured for
    this machine in Group Policy exists in Active Directory.
    Additionally the following error appears in the System log, but not at the same time as the above:
    The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before
    the next startup or logon for this user, and this may result in slow startup and boot performance.
    Our PDC is Server 2003 R2, we have a 2008R2 DC and the 2012 server seems to be authenticating with this DC.  There are no errors on that DC.
    Any help appreciated.
    Many thanks

    I thing the following site gives a solution:
    It is a schema problem...
    Event ID 12339 and 12344: File Server Resource Manager failed to find claim list
    Problem: You are running a Windows Server 2012 file server and you see the error messages in your logs every 15 minutes or so.
    1) Event ID: 12339
    File Server Resource  Manager failed to find the claim list 'Global Resource Property List' in Active Directory (ADsPath: LDAP://dc1.domain.local/CN=Global Resource Property List,CN=Resource Property Lists,CN=Claims Configuration,CN=Services,CN=Configuration,DC=domain,DC=local). 
    Please check that the claims list configured for this machine in Group Policy exists in Active Directory.
    2) Event ID: 12344
    File Server Resource  Manager finished syncing claims from Active Directory and encountered errors during the sync (0x80072030, There is no such object on the server.) Please check previous event logs for details.
    Solution: You can either upgrade the Active Directory schema to version 56 (Windows Server 2012) or safely ignore the error messages.
    If you can update the schema of your domain. Follow these steps:
    1)
    log on to Windows Server 2012 as Administrator of your domain
    2)
    Copy from "support \adprep" in the media of Windows Server 2012 to "c:\"
    3)
    run this command
    c:\adprep\adprep.exe /forestprep
    THANKS to KIM HELLMAN
    Search for kim hellman blogspot and the error message

  • DirectAccess multisite on Server 2012 R2: 'The remote access configuration task (raconfigtask) in Windows Task Scheduler cannot be disabled"

    Dear all,
    I'm an experiencing an issue when configuring 2012 R2 DirectAccess multisite.
    The initial configuration of the first site in a multisite setup works fine, however when i try to add ANY other server on another site, i see the below screenshot, the full text of which is: "The remote access configuration task (raconfigtask) in Windows
    Task Scheduler cannot be disabled" while the entry point is added.
    THere are no logged events on the remote server, but on the controlling server i see this in the event log:
    Log Name:      Microsoft-Windows-TaskScheduler/Operational
    Source:        Microsoft-Windows-TaskScheduler
    Date:          10/15/2014 12:55:58 AM
    Event ID:      140
    Task Category: Task registration updated
    Level:         Information
    Keywords:      
    User:          SYSTEM
    Computer:      WWCLORAS01.apco.net
    Description:
    User "S-1-5-18"  updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
        <EventID>140</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>140</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
        <EventRecordID>1738</EventRecordID>
        <Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
        <Execution ProcessID="840" ThreadID="3852" />
        <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
        <Computer>WWCLORAS01.apco.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="TaskUpdated">
        <Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
        <Data Name="UserName">S-1-5-18</Data>
      </EventData>
    </Event>Log Name:      Microsoft-Windows-TaskScheduler/Operational
    Source:        Microsoft-Windows-TaskScheduler
    Date:          10/15/2014 12:55:58 AM
    Event ID:      140
    Task Category: Task registration updated
    Level:         Information
    Keywords:      
    User:          SYSTEM
    Computer:      WWCLORAS01.apco.net
    Description:
    User "S-1-5-18"  updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
        <EventID>140</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>140</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
        <EventRecordID>1738</EventRecordID>
        <Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
        <Execution ProcessID="840" ThreadID="3852" />
        <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
        <Computer>WWCLORAS01.apco.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="TaskUpdated">
        <Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
        <Data Name="UserName">S-1-5-18</Data>
      </EventData>
    </Event>
    And this in the taskscheduler:
    Log Name:      Microsoft-Windows-TaskScheduler/Operational
    Source:        Microsoft-Windows-TaskScheduler
    Date:          10/15/2014 12:55:58 AM
    Event ID:      140
    Task Category: Task registration updated
    Level:         Information
    Keywords:      
    User:          SYSTEM
    Computer:      WWCLORAS01.apco.net
    Description:
    User "S-1-5-18"  updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
        <EventID>140</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>140</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
        <EventRecordID>1738</EventRecordID>
        <Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
        <Execution ProcessID="840" ThreadID="3852" />
        <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
        <Computer>WWCLORAS01.apco.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="TaskUpdated">
        <Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
        <Data Name="UserName">S-1-5-18</Data>
      </EventData>
    </Event>
    Any ideas what might be causing this? All servers are in the same domain, firewalls don't seem to be dropping anything, SCCM client is installed, but thats it.
    Appreciate any feedback.
    Jim

    Dear all,
    I'm an experiencing an issue when configuring 2012 R2 DirectAccess multisite.
    The initial configuration of the first site in a multisite setup works fine, however when i try to add ANY other server on another site, i see the below screenshot, the full text of which is: "The remote access configuration task (raconfigtask) in Windows
    Task Scheduler cannot be disabled" while the entry point is added.
    THere are no logged events on the remote server, but on the controlling server i see this in the event log:
    Log Name:      Microsoft-Windows-TaskScheduler/Operational
    Source:        Microsoft-Windows-TaskScheduler
    Date:          10/15/2014 12:55:58 AM
    Event ID:      140
    Task Category: Task registration updated
    Level:         Information
    Keywords:      
    User:          SYSTEM
    Computer:      WWCLORAS01.apco.net
    Description:
    User "S-1-5-18"  updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
        <EventID>140</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>140</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
        <EventRecordID>1738</EventRecordID>
        <Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
        <Execution ProcessID="840" ThreadID="3852" />
        <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
        <Computer>WWCLORAS01.apco.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="TaskUpdated">
        <Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
        <Data Name="UserName">S-1-5-18</Data>
      </EventData>
    </Event>Log Name:      Microsoft-Windows-TaskScheduler/Operational
    Source:        Microsoft-Windows-TaskScheduler
    Date:          10/15/2014 12:55:58 AM
    Event ID:      140
    Task Category: Task registration updated
    Level:         Information
    Keywords:      
    User:          SYSTEM
    Computer:      WWCLORAS01.apco.net
    Description:
    User "S-1-5-18"  updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
        <EventID>140</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>140</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
        <EventRecordID>1738</EventRecordID>
        <Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
        <Execution ProcessID="840" ThreadID="3852" />
        <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
        <Computer>WWCLORAS01.apco.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="TaskUpdated">
        <Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
        <Data Name="UserName">S-1-5-18</Data>
      </EventData>
    </Event>
    And this in the taskscheduler:
    Log Name:      Microsoft-Windows-TaskScheduler/Operational
    Source:        Microsoft-Windows-TaskScheduler
    Date:          10/15/2014 12:55:58 AM
    Event ID:      140
    Task Category: Task registration updated
    Level:         Information
    Keywords:      
    User:          SYSTEM
    Computer:      WWCLORAS01.apco.net
    Description:
    User "S-1-5-18"  updated Task Scheduler task "\Microsoft\Windows\RemoteAccess\RaConfigTask"
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-TaskScheduler" Guid="{DE7B24EA-73C8-4A09-985D-5BDADCFA9017}" />
        <EventID>140</EventID>
        <Version>0</Version>
        <Level>4</Level>
        <Task>140</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8000000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-15T07:55:58.432317300Z" />
        <EventRecordID>1738</EventRecordID>
        <Correlation ActivityID="{D4236B4E-E841-0003-E5BA-23D441E8CF01}" />
        <Execution ProcessID="840" ThreadID="3852" />
        <Channel>Microsoft-Windows-TaskScheduler/Operational</Channel>
        <Computer>WWCLORAS01.apco.net</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData Name="TaskUpdated">
        <Data Name="TaskName">\Microsoft\Windows\RemoteAccess\RaConfigTask</Data>
        <Data Name="UserName">S-1-5-18</Data>
      </EventData>
    </Event>
    Any ideas what might be causing this? All servers are in the same domain, firewalls don't seem to be dropping anything, SCCM client is installed, but thats it.
    Appreciate any feedback.
    Jim

  • Unable to install SQL Server 2012 on my Surface 3 computerr w/Windows 8.1 as the OS

    Another user,
    Cheer08, has replied to a thread you have subscribed to in the
    SQL Server Express Forum.
    Here are the error messages:
    Error 2
    Error 1
    Hello,
    This error is related to Microsoft Visual C++ 2005. Could you try to download and install Microsoft Visual C++ 2005 with service pack 1 (SP1) included:
    http://www.microsoft.com/en-us/download/details.aspx?id=5638 (x86 or 32-bit)
    http://www.microsoft.com/en-us/download/details.aspx?id=18471
    (x64 or 64-bit)
    Hope this helps.
    Regards,
    Alberto Morillo
    SQLCoffee.com
    Thread Title Unable to install SQL Server 2012 on my Surface 3 computerr w/Windows 8.1 as the OS.
    Started by: FenixRising
    Reply:
    Fenix, this is SQL Server forum. Regarding the Visual C++ 2005 SP1 Redistributable setup issue, you need to post question in
    visual studio forum to get better help.
    After installing Visual C++ 2005 SP1 Redistributable successfully,are you able to install SQL Server? If not, share us SQL Server setup logs. This link
    https://msdn.microsoft.com/en-us/library/ms143702(v=sql.110).aspx will help you View and Read SQL Server Setup Log Files
    Im going to run it now. Get back to you.

    Hi,
        I am unable to install SQL Server 2012. I have the install log, but I don't can't read them.
    Overall summary:
      Final result:                  Failed: see details below
      Exit code (Decimal):           -2053898239
      Start time:                    2015-02-08 23:03:01
      End time:                      2015-02-08 23:07:31
      Requested action:              Install
    Setup completed with required actions for features.
    Troubleshooting information for those features:
      Next step for Adv_SSMS:        Use the following information to resolve the error, and then try the setup process again.
      Next step for SSMS:            Use the following information to resolve the error, and then try the setup process again.
      Next step for RS:              Use the following information to resolve the error, and then try the setup process again.
      Next step for SQLEngine:       Use the following information to resolve the error, and then try the setup process again.
      Next step for FullText:        Use the following information to resolve the error, and then try the setup process again.
      Next step for Replication:     Use the following information to resolve the error, and then try the setup process again.
    Machine Properties:
      Machine name:                  RLC_WORK
      Machine processor count:       4
      OS version:                    Future Windows Version
      OS service pack:               
      OS region:                     United States
      OS language:                   English (United States)
      OS architecture:               x64
      Process architecture:          64 Bit
      OS clustered:                  No
    Product features discovered:
      Product              Instance             Instance ID                   
    Feature                                  Language            
    Edition              Version         Clustered  Configured
      SQL Server 2012                                                         
    Client Tools Connectivity                1033                                     
    11.2.5058.0     No         Yes       
      SQL Server 2012                                                         
    Client Tools Backwards Compatibility     1033                                     
    11.2.5058.0     No         Yes       
      SQL Server 2012                                                         
    Client Tools SDK                         1033                                     
    11.2.5058.0     No         Yes       
      SQL Server 2012                                                         
    SQL Server Data Tools                    1033                 Express Edition     
    11.2.5058.0     No         Yes       
      SQL Server 2012                                                         
    LocalDB                                  1033                
    Express Edition      11.0.2100.60    No         Yes       
    Package properties:
      Description:                   Microsoft SQL Server 2012
      ProductName:                   SQL Server 2012
      Type:                          RTM
      Version:                       11
      Installation location:         C:\76766b629842c4dc54646a47c04202\x64\setup\
      Installation edition:          Express
      Slipstream:                    True
      SP Level                       2
    Product Update Status:
      Success: KB 2958429
    Product Updates Selected for Installation:
      Title:                         Service Pack 2
      Knowledge Based Article:       KB 2958429
      Version:                       11.2.5058.0
      Architecture:                  x64
      Language:                      1033
      Update Source:                 Slipstream
    User Input Settings:
      ACTION:                        Install
      ADDCURRENTUSERASSQLADMIN:      true
      AGTSVCACCOUNT:                 NT AUTHORITY\NETWORK SERVICE
      AGTSVCPASSWORD:                *****
      AGTSVCSTARTUPTYPE:             Disabled
      ASBACKUPDIR:                   Backup
      ASCOLLATION:                   Latin1_General_CI_AS
      ASCONFIGDIR:                   Config
      ASDATADIR:                     Data
      ASLOGDIR:                      Log
      ASPROVIDERMSOLAP:              1
      ASSERVERMODE:                  MULTIDIMENSIONAL
      ASSVCACCOUNT:                  <empty>
      ASSVCPASSWORD:                 <empty>
      ASSVCSTARTUPTYPE:              Automatic
      ASSYSADMINACCOUNTS:            <empty>
      ASTEMPDIR:                     Temp
      BROWSERSVCSTARTUPTYPE:         Disabled
      CLTCTLRNAME:                   <empty>
      CLTRESULTDIR:                  <empty>
      CLTSTARTUPTYPE:                0
      CLTSVCACCOUNT:                 <empty>
      CLTSVCPASSWORD:                <empty>
      CLTWORKINGDIR:                 <empty>
      COMMFABRICENCRYPTION:          0
      COMMFABRICNETWORKLEVEL:        0
      COMMFABRICPORT:                0
      CONFIGURATIONFILE:             
      CTLRSTARTUPTYPE:               0
      CTLRSVCACCOUNT:                <empty>
      CTLRSVCPASSWORD:               <empty>
      CTLRUSERS:                     <empty>
      ENABLERANU:                    true
      ENU:                           true
      ERRORREPORTING:                true
      FEATURES:                      SQLENGINE, REPLICATION, FULLTEXT, RS, SSMS, ADV_SSMS
      FILESTREAMLEVEL:               0
      FILESTREAMSHARENAME:           <empty>
      FTSVCACCOUNT:                  NT Service\MSSQLFDLauncher$SQLEXPRESS
      FTSVCPASSWORD:                 <empty>
      HELP:                          false
      IACCEPTSQLSERVERLICENSETERMS:  true
      INDICATEPROGRESS:              false
      INSTALLSHAREDDIR:              C:\Program Files\Microsoft SQL Server\
      INSTALLSHAREDWOWDIR:           C:\Program Files (x86)\Microsoft SQL Server\
      INSTALLSQLDATADIR:             <empty>
      INSTANCEDIR:                   C:\Program Files\Microsoft SQL Server\
      INSTANCEID:                    SQLEXPRESS
      INSTANCENAME:                  SQLEXPRESS
      ISSVCACCOUNT:                  NT AUTHORITY\Network Service
      ISSVCPASSWORD:                 <empty>
      ISSVCSTARTUPTYPE:              Automatic
      MATRIXCMBRICKCOMMPORT:         0
      MATRIXCMSERVERNAME:            <empty>
      MATRIXNAME:                    <empty>
      NPENABLED:                     0
      PID:                           *****
      QUIET:                         false
      QUIETSIMPLE:                   false
      ROLE:                          AllFeatures_WithDefaults
      RSINSTALLMODE:                 DefaultNativeMode
      RSSHPINSTALLMODE:              DefaultSharePointMode
      RSSVCACCOUNT:                  NT Service\ReportServer$SQLEXPRESS
      RSSVCPASSWORD:                 <empty>
      RSSVCSTARTUPTYPE:              Automatic
      SAPWD:                         <empty>
      SECURITYMODE:                  <empty>
      SQLBACKUPDIR:                  <empty>
      SQLCOLLATION:                  SQL_Latin1_General_CP1_CI_AS
      SQLSVCACCOUNT:                 NT Service\MSSQL$SQLEXPRESS
      SQLSVCPASSWORD:                <empty>
      SQLSVCSTARTUPTYPE:             Automatic
      SQLSYSADMINACCOUNTS:           RLC_WORK\Robert
      SQLTEMPDBDIR:                  <empty>
      SQLTEMPDBLOGDIR:               <empty>
      SQLUSERDBDIR:                  <empty>
      SQLUSERDBLOGDIR:               <empty>
      SQMREPORTING:                  true
      TCPENABLED:                    0
      UIMODE:                        AutoAdvance
      UpdateEnabled:                 true
      UpdateSource:                  Slipstream
      X86:                           false
      Configuration file:            C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log\20150208_230228\ConfigurationFile.ini
    Detailed results:
      Feature:                       Management Tools - Complete
      Status:                        Failed: see logs for details
      Reason for failure:            An error occurred for a dependency of the feature causing the setup process for the feature to fail.
      Next Step:                     Use the following information to resolve the error, and then try the setup process again.
      Component name:                Microsoft .NET Framework 3.5
      Component error code:          0x85940001
      Error description:             Error while enabling Windows feature : NetFx3, Error Code : -2146498270 , Please try enabling Windows feature : NetFx3 from Windows management tools and then run
    setup again. For more information on how to enable Windows features , see http://go.microsoft.com/fwlink/?linkid=227143
      Error help link:               http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.5058.0&EvtType=0x681D636F%401428%401&EvtType=0x681D636F%401428%401
      Feature:                       Management Tools - Basic
      Status:                        Failed: see logs for details
      Reason for failure:            An error occurred for a dependency of the feature causing the setup process for the feature to fail.
      Next Step:                     Use the following information to resolve the error, and then try the setup process again.
      Component name:                Microsoft .NET Framework 3.5
      Component error code:          0x85940001
      Error description:             Error while enabling Windows feature : NetFx3, Error Code : -2146498270 , Please try enabling Windows feature : NetFx3 from Windows management tools and then run
    setup again. For more information on how to enable Windows features , see http://go.microsoft.com/fwlink/?linkid=227143
      Error help link:               http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.5058.0&EvtType=0x681D636F%401428%401&EvtType=0x681D636F%401428%401
      Feature:                       Reporting Services - Native
      Status:                        Failed: see logs for details
      Reason for failure:            An error occurred for a dependency of the feature causing the setup process for the feature to fail.
      Next Step:                     Use the following information to resolve the error, and then try the setup process again.
      Component name:                Microsoft .NET Framework 3.5
      Component error code:          0x85940001
      Error description:             Error while enabling Windows feature : NetFx3, Error Code : -2146498270 , Please try enabling Windows feature : NetFx3 from Windows management tools and then run
    setup again. For more information on how to enable Windows features , see http://go.microsoft.com/fwlink/?linkid=227143
      Error help link:               http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.5058.0&EvtType=0x681D636F%401428%401&EvtType=0x681D636F%401428%401
      Feature:                       Database Engine Services
      Status:                        Failed: see logs for details
      Reason for failure:            An error occurred for a dependency of the feature causing the setup process for the feature to fail.
      Next Step:                     Use the following information to resolve the error, and then try the setup process again.
      Component name:                Microsoft .NET Framework 3.5
      Component error code:          0x85940001
      Error description:             Error while enabling Windows feature : NetFx3, Error Code : -2146498270 , Please try enabling Windows feature : NetFx3 from Windows management tools and then run
    setup again. For more information on how to enable Windows features , see http://go.microsoft.com/fwlink/?linkid=227143
      Error help link:               http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.5058.0&EvtType=0x681D636F%401428%401&EvtType=0x681D636F%401428%401
      Feature:                       Full-Text and Semantic Extractions for Search
      Status:                        Failed: see logs for details
      Reason for failure:            An error occurred for a dependency of the feature causing the setup process for the feature to fail.
      Next Step:                     Use the following information to resolve the error, and then try the setup process again.
      Component name:                Microsoft .NET Framework 3.5
      Component error code:          0x85940001
      Error description:             Error while enabling Windows feature : NetFx3, Error Code : -2146498270 , Please try enabling Windows feature : NetFx3 from Windows management tools and then run
    setup again. For more information on how to enable Windows features , see http://go.microsoft.com/fwlink/?linkid=227143
      Error help link:               http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.5058.0&EvtType=0x681D636F%401428%401&EvtType=0x681D636F%401428%401
      Feature:                       SQL Server Replication
      Status:                        Failed: see logs for details
      Reason for failure:            An error occurred for a dependency of the feature causing the setup process for the feature to fail.
      Next Step:                     Use the following information to resolve the error, and then try the setup process again.
      Component name:                Microsoft .NET Framework 3.5
      Component error code:          0x85940001
      Error description:             Error while enabling Windows feature : NetFx3, Error Code : -2146498270 , Please try enabling Windows feature : NetFx3 from Windows management tools and then run
    setup again. For more information on how to enable Windows features , see http://go.microsoft.com/fwlink/?linkid=227143
      Error help link:               http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.5058.0&EvtType=0x681D636F%401428%401&EvtType=0x681D636F%401428%401
    Rules with failures:
    Global rules:
    Scenario specific rules:
    Rules report file:               C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log\20150208_230228\SystemConfigurationCheck_Report.htm
    Fenix

  • [Forum FAQ] "Unable to connect to the server by using Windows PowerShell Remoting" error while installing RDS roles on Server 2012 R2

    When you try to install RDS role on server 2012 R2 using standard deployment, this issue may occur (Figure 1).
    “Unable to connect to the server by using Windows PowerShell remoting”.
    Figure 1: Unable to connect to the server by using Windows PowerShell remoting
    First of all, we need to verify the configurations as it suggested:
    1. The server must be available by using Windows PowerShell remotely.
    2. The server must be joined to a domain.
    3. The server must be running at least Windows Server 2012 R2.
    4. The currently logged on user must be a member of the local Administrators group on the server.
    5. Remote Desktop Services connections must be enabled by using Group Policy.
    In addition, we need to check if the “Windows Remote Management “service is running and related firewall exceptions have been created for WinRM listener.
    To enabling PowerShell remoting, we can run this PowerShell command as administrator (Figure 2).
    Enable-PSRemoting -Force
    Figure 2: Enable PowerShell Remoting
    However, if issue persists, we need to check whether it has enough memory to work.
    By default, remote shell allots only 150 MB of memory. If we have IIS or SharePoint App pool, 150 MB of memory is not sufficient to perform the remoting task. Therefore, we need to increase
    the memory via the PowerShell command below:
    Set-Item WSMan:\localhost\Shell\MaxMemoryPerShellMB 1000
    Then, you need to restart the server and the issue should be resolved.
    You can get more information regarding Remote Troubleshooting by below link:
    about_Remote_Troubleshooting
    If you need further assistance, welcome to post your questions in the
    RDS forum.
    Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

    i found another possible reason, this solution worked for me:
    http://oyvindnilsen.com/solution-for-powershell-remoting-error-it-cannot-determine-the-content-type-of-the-http-response-from-the-destination-computer/
    I tried to set up powershell remoting on a server and kept getting this error:
    Enter-PSSession : Connecting to remote server failed with the following error message : The WinRM client cann
    ot process the request. It cannot determine the content type of the HTTP response from the destination comput
    er. The content type is absent or invalid. For more information, see the about_Remote_Troubleshooting Help to
    pic.
    After a bit of troubleshooting I discovered that the problem was that the authentication packets was to big (over 16k), this will cause WinRM to reject the request. The reason for authentication packets getting too big can be because the user is member of very
    many security groups or in my case because of the SidHistory attribute.
    The solution was to increase the MaxFieldLength and MaxRequestBytes keys in the registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\HTTP\Parameters
    If the keys does not exists you can create them, be sure to use the DWORD type.
    I sat MaxFieldLength to DEC value 40000 and MaxRequestBytes to DEC value 32768 and rebooted the server. Problem solved.

  • MDT 2013 Roles and features failing to install for server 2012 r2

    I am having issues trying to apply Server 2012r2 Roles and features via MDT 2013.
    Below I have attached the log.
    <![LOG[Microsoft Deployment Toolkit version: 6.2.5019.0]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[The task sequencer log is located at C:\Users\ADMINI~1\AppData\Local\Temp\SMSTSLog\SMSTS.LOG.  For task sequence failures, please consult this log.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole"
    context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Roles will be installed.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Roles specified in Role:]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  FileAndStorage-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[RoleServices specified in RoleService:]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  File-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Storage-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Features specified in Feature:]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  NET-Framework-Features]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  NET-Framework-Core]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  NET-WCF-TCP-PortSharing45]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  InkAndHandwritingServices]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Server-Media-Foundation]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  RDC]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  SNMP-Service]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  SNMP-WMI-Provider]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Telnet-Client]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  User-Interfaces-Infra]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Server-Gui-Mgmt-Infra]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Desktop-Experience]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Server-Gui-Shell]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  PowerShellRoot]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  PowerShell]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  PowerShell-V2]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSRoles.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSRoleServices.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSFeatures.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[ZTI Heartbeat: Processing roles (0% complete]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Property Parameters is now = -FeatureName FileAndStorage-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Validating connection to \\WIN-7VSNJRF3PNO\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context=""
    type="1" thread="" file="ZTIOSRole">
    <![LOG[Mapping server share: \\WIN-7VSNJRF3PNO\DeploymentShare$]LOG]!><time="10:45:24.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Already connected to server WIN-7VSNJRF3PNO as that is where this script is running from.]LOG]!><time="10:45:24.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread=""
    file="ZTIOSRole">
    <![LOG[Copying source files locally from \\WIN-7VSNJRF3PNO\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs]LOG]!><time="10:45:24.000+000" date="08-25-2014" component="ZTIOSRole"
    context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[ZTI ERROR - Unhandled error returned by ZTIOSRole: Path not found (76)]LOG]!><time="10:45:27.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="3" thread="" file="ZTIOSRole">

    I have narrowed this issue down to .net 3.5 install.
    I have boot, efi, sources, support, autorun, bootmgr, bootmgr.edi, and setup.
    I have confirmed that the sxs folder is there. 
    I also just added WindowsSource=%DeployRoot%\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs to my customsettings and updated the boot iso.  I am still receiving the errors.  
    One last bit of information I am able to get to the deployment share with the sxs folder in it from the reference machine I am creating but when I manually try to install .net 3.5 from roles and features to the share it fails. But if I copy the files local
    they work fine.
    I seem to have permission issues with other subfolders also.
    Thanks,
    Anthony

  • Windows Server 2012 reboots while removing the Hyper-V vSwitch.

    I have a WIn2k12 server with Hyper-V running. While removing the vSwitch configured in Hyper-V, the server got rebooted. In the event logs below mentioned error was notices.
    he computer has rebooted from a bugcheck.  The bugcheck was: 0x00000019 (0x0000000000000024, 0x00000000000000f2, 0x0000000000000001, 0xfffffa800b9ba6c0). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 072314-20248-01.
    The Windows has generated a MEMORY.dump which is ~570MB in size. Is it possible to analyze the MEMORY.dump and find the cause for a server reboot.
    Can you please someone help me to narrow down the root cause of this issue and how to avoid this issue in the future.

    Hi,
    Thanks for your reply. I analyses the the MEMORY.DMP using the WinDbg. Provided the debug output below. Will this help you to narrow down the root cause and let me know if any similar issue faced by someone else.
    Microsoft (R) Windows Debugger Version 6.3.9600.17029 AMD64
    Copyright (c) Microsoft Corporation. All rights reserved.
    Loading Dump File [C:\Users\Administrator.HORNET\Desktop\MEMORY.DMP]
    Kernel Bitmap Dump File: Only kernel address space is available
    ************* Symbol Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
    Symbol search path is: SRV*C:\Windows\symbol_cache*http://msdl.microsoft.com/download/symbols
    Executable search path is:
    Windows 8 Kernel Version 9200 MP (8 procs) Free x64
    Product: Server, suite: TerminalServer DataCenter SingleUserTS
    Built by: 9200.16384.amd64fre.win8_rtm.120725-1247
    Machine Name:
    Kernel base = 0xfffff802`46e1b000 PsLoadedModuleList = 0xfffff802`470e5a60
    Debug session time: Wed Jul 23 00:21:33.552 2014 (UTC - 7:00)
    System Uptime: 21 days 23:35:15.105
    Loading Kernel Symbols
    Loading User Symbols
    Loading unloaded module list
    *                        Bugcheck Analysis                                   
    Use !analyze -v to get detailed debugging information.
    BugCheck 19, {24, f2, 1, fffffa800b9ba6c0}
    Probably caused by : Pool_Corruption ( nt!ExFreePool+7ab )
    Followup: Pool_corruption
    7: kd> !analyze -v
    *                        Bugcheck Analysis                                   
    BAD_POOL_HEADER (19)
    The pool is already corrupt at the time of the current request.
    This may or may not be due to the caller.
    The internal pool links must be walked to figure out a possible cause of
    the problem, and then special pool applied to the suspect tags or the driver
    verifier to a suspect driver.
    Arguments:
    Arg1: 0000000000000024,
    Arg2: 00000000000000f2
    Arg3: 0000000000000001
    Arg4: fffffa800b9ba6c0
    Debugging Details:
    BUGCHECK_STR:  0x19_24
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  System
    CURRENT_IRQL:  0
    ANALYSIS_VERSION: 6.3.9600.17029 (debuggers(dbg).140219-1702) amd64fre
    LAST_CONTROL_TRANSFER:  from fffff8024708b8b1 to fffff80246e96040
    STACK_TEXT:  
    fffff880`0baf01a8 fffff802`4708b8b1 : 00000000`00000019 00000000`00000024 00000000`000000f2 00000000`00000001 : nt!KeBugCheckEx
    fffff880`0baf01b0 fffff802`46ff8126 : fffffa80`0b9ab000 fffff8a0`07514f10 fffff880`00000000 fffff802`746e6f43 : nt!ExFreePool+0x7ab
    fffff880`0baf0290 fffff802`4756ad69 : fffffa80`087efc60 fffffa80`0891a3d0 fffff8a0`07514f10 fffff802`4756ad5c : nt! ?? ::FNODOBFM::`string'+0x20768
    fffff880`0baf02d0 fffff880`014dac48 : fffffa80`08915d02 fffffa80`087efc60 fffffa80`0b9ab000 fffffa80`0891a3d0 : hal!HalFreeCommonBuffer+0xd
    fffff880`0baf0300 fffff880`01478d21 : fffffa80`0b9ab000 fffff880`0baf0301 00000000`0000f6c0 fffffa80`087d31a0 : NDIS!ndisFreeSharedMemory+0xa8
    fffff880`0baf0350 fffff880`0419948a : fffffa80`0b600000 fffff880`0baf03d0 00000000`000000fa 00000000`206c644d : NDIS!NdisMFreeSharedMemory+0x65
    fffff880`0baf0390 fffff880`014da127 : fffffa80`087d31a0 00000000`00000000 fffffa80`0863abb0 fffffa80`0863abb0 : b57nd60a!UM_Initialize+0xf5a
    fffff880`0baf03e0 fffff880`014f583c : 00000000`00000000 00000000`00000006 00000000`0000017e fffffa80`087d31a0 : NDIS!ndisMInvokeHalt+0x47
    fffff880`0baf0410 fffff880`014d6094 : fffffa80`087d31a0 fffffa80`0000017e fffff880`0baf0700 fffffa80`087d31a0 : NDIS!ndisMCommonHaltMiniport+0x4ac
    fffff880`0baf04a0 fffff880`014f7b3f : fffffa80`087d31a0 fffffa80`087d31a0 fffffa80`0f5d67c0 fffffa80`0863abb0 : NDIS!ndisMHaltMiniport+0x4c
    fffff880`0baf04d0 fffff880`014dc3a4 : fffffa80`087d31a0 fffffa80`087d31a0 fffffa80`0fedf5f0 fffffa80`087d3050 : NDIS!ndisPnPRemoveDevice+0x24f
    fffff880`0baf0660 fffff880`014f9320 : fffffa80`0fedf5f0 fffffa80`087d3050 00000000`00000000 fffffa80`087d3100 : NDIS!ndisPnPRemoveDeviceEx+0x84
    fffff880`0baf0690 fffff880`014eb8a7 : fffffa80`0fedf5f0 fffff880`0baf0720 fffffa80`087d31a0 00000000`00000000 : NDIS!ndisPnPIrpRemoveDevice+0xd8
    fffff880`0baf06f0 fffff802`471a3337 : fffffa80`087d3001 fffffa80`087d3050 00000000`00000001 fffff880`02d6e180 : NDIS!ndisPnPDispatch+0x2f8b7
    fffff880`0baf0750 fffff802`472b371c : 00000000`00000002 fffff880`0baf0819 fffffa80`0834b770 fffffa80`0834d880 : nt!IopSynchronousCall+0xc7
    fffff880`0baf07c0 fffff802`46f22f01 : fffff8a0`06dd3010 00000000`00000000 fffffa80`0834b770 00000000`00000000 : nt!IopRemoveDevice+0x100
    fffff880`0baf0880 fffff802`472b3544 : fffffa80`0834d880 fffffa80`0834b770 00000000`00000016 fffff8a0`06ff0f01 : nt!PnpRemoveLockedDeviceNode+0x22d
    fffff880`0baf08d0 fffff802`472b3415 : 00000000`00000000 00000000`00000000 fffff8a0`06ff0f70 fffffa80`0834b770 : nt!PnpDeleteLockedDeviceNode+0x78
    fffff880`0baf0910 fffff802`472b1c88 : 00000000`00000000 fffff880`0baf0a70 fffff8a0`00e90aa0 00000000`00000000 : nt!PnpDeleteLockedDeviceNodes+0xa1
    fffff880`0baf0970 fffff802`472a5acd : fffff880`00000000 00000000`00000000 fffff8a0`02318b00 fffff8a0`00000000 : nt!PnpProcessQueryRemoveAndEject+0xbd8
    fffff880`0baf0ae0 fffff802`4719f6e5 : fffff8a0`06dd3010 00000000`00000000 00000000`00000001 0000113b`ab6c0c00 : nt!PnpProcessTargetDeviceEvent+0xa1
    fffff880`0baf0b20 fffff802`46ece391 : fffffa80`0e2d1880 fffff8a0`00e90aa0 fffff802`4719f400 fffffa80`0c9a3090 : nt!PnpDeviceEventWorker+0x2e5
    fffff880`0baf0b80 fffff802`46e3d521 : fffffa80`0ffae120 00000000`00000080 fffff802`46ece250 fffffa80`0e2d1880 : nt!ExpWorkerThread+0x142
    fffff880`0baf0c10 fffff802`46e7bdd6 : fffff880`02c00180 fffffa80`0e2d1880 fffff880`02c0bf40 fffffa80`07967340 : nt!PspSystemThreadStartup+0x59
    fffff880`0baf0c60 00000000`00000000 : fffff880`0baf1000 fffff880`0baeb000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
    STACK_COMMAND:  kb
    FOLLOWUP_IP:
    nt!ExFreePool+7ab
    fffff802`4708b8b1 cc              int     3
    SYMBOL_STACK_INDEX:  1
    SYMBOL_NAME:  nt!ExFreePool+7ab
    FOLLOWUP_NAME:  Pool_corruption
    IMAGE_NAME:  Pool_Corruption
    DEBUG_FLR_IMAGE_TIMESTAMP:  0
    IMAGE_VERSION:  6.2.9200.16384
    MODULE_NAME: Pool_Corruption
    BUCKET_ID_FUNC_OFFSET:  7ab
    FAILURE_BUCKET_ID:  0x19_24_nt!ExFreePool
    BUCKET_ID:  0x19_24_nt!ExFreePool
    ANALYSIS_SOURCE:  KM
    FAILURE_ID_HASH_STRING:  km:0x19_24_nt!exfreepool
    FAILURE_ID_HASH:  {c3047b92-37bb-1137-aca7-b38e46a08f03}
    Followup: Pool_corruption

  • BSOD - Server 2012 R2 - SESSION_HAS_VALID_POOL_ON_EXIT

    We have a 2012 R2 RDS at one of our clients. Today it rebooted randomly, output from the memory.dmp is below. The server itself is a virtual machine running on Hyper-V
    We have researched the issue, and while we found similar occurrences, there was nothing that matches.  We do not have update 2862768 installed on the server as per:
    http://social.technet.microsoft.com/Forums/en-US/528782e7-30a3-41d8-a79a-38b3eafa2d19/sessionhasvalidpoolonexit-blue-screen-server-2012-r2?forum=winserver8gen
    Opened log file 'c:\debuglog.txt'
    3: kd> .sympath srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    Expanded Symbol search path is: srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    ************* Symbol Path validation summary **************
    Response                         Time (ms)     Location
    Deferred                                       srv*c:\symbols*http://msdl.microsoft.com/download/symbols
    3: kd> .reload;!analyze -v;r;kv;lmnt;.logclose;q
    Loading Kernel Symbols
    Loading User Symbols
    PEB is paged out (Peb.Ldr = 00007ff6`7738b018).  Type ".hh dbgerr001" for details
    Loading unloaded module list
    *                        Bugcheck Analysis                                   
    SESSION_HAS_VALID_POOL_ON_EXIT (ab)
    Caused by a session driver not freeing its pool allocations prior to a
    session unload.  This indicates a bug in win32k.sys, atmfd.dll,
    rdpdd.dll or a video driver.
    Arguments:
    Arg1: 0000000000000008, session ID
    Arg2: 0000000000000000, number of paged pool bytes that are leaking
    Arg3: 0000000000000020, number of nonpaged pool bytes that are leaking
    Arg4: 0000000100000000, total number of paged and nonpaged allocations that are leaking.
     nonpaged allocations are in the upper half of this word,
     paged allocations are in the lower half of this word.
    Debugging Details:
    Use !poolused 8 to dump allocation info for leaked session pooltags.
    TAG_NOT_DEFINED_405: Dfsm
    BUGCHECK_STR:  0xAB_Dfsm
    DEFAULT_BUCKET_ID:  WIN8_DRIVER_FAULT
    PROCESS_NAME:  csrss.exe
    CURRENT_IRQL:  0
    ANALYSIS_VERSION: 6.3.9600.17237 (debuggers(dbg).140716-0327) amd64fre
    LAST_CONTROL_TRANSFER:  from fffff800ca1aff7e to fffff800c9d6cfa0
    STACK_TEXT: 
    ffffd000`58fa3958 fffff800`ca1aff7e : 00000000`000000ab 00000000`00000008 00000000`00000000 00000000`00000020 : nt!KeBugCheckEx
    ffffd000`58fa3960 fffff800`ca0f282a : ffffd000`5b757000 00000000`00000000 ffffd000`5b757b40 ffffd000`5b757b40 : nt! ?? ::NNGAKEGL::`string'+0x6c90e
    ffffd000`58fa39b0 fffff800`ca0ba4b8 : 00000000`00000008 ffffe000`d7882900 00000000`00000000 ffffe000`d7c90080 : nt!MiDereferenceSessionFinal+0x12e
    ffffd000`58fa3a00 fffff800`ca01c0b8 : 00000000`001a5a41 ffffe000`d7c90080 ffffe000`d7c90080 ffffe000`d7882900 : nt!MiDereferenceSession+0x38
    ffffd000`58fa3a30 fffff800`ca0363b8 : 00000000`00040000 ffffd000`58fa3b80 00000000`00000000 fffff800`ca037dea : nt!MmCleanProcessAddressSpace+0x1b0
    ffffd000`58fa3a90 fffff800`c9ff83ce : ffffe000`d7882900 ffffc000`d5a06ae0 ffffd000`58fa3b80 00000000`00000000 : nt!PspRundownSingleProcess+0xac
    ffffd000`58fa3b20 fffff800`c9fa862b : 00000000`00000000 ffffe000`d7c90080 ffffe000`d7c90001 00000000`00000000 : nt!PspExitThread+0x52e
    ffffd000`58fa3c30 fffff800`c9d735c6 : ffffd000`52fac180 ffffe000`d7c90080 ffffe000`d65d7080 00000000`00000000 : nt!PspTerminateThreadByPointer+0x47
    ffffd000`58fa3c60 00000000`00000000 : ffffd000`58fa4000 ffffd000`58f9e000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
    STACK_COMMAND:  kb
    FOLLOWUP_IP:
    nt! ?? ::NNGAKEGL::`string'+6c90e
    fffff800`ca1aff7e cc              int     3
    SYMBOL_STACK_INDEX:  1
    SYMBOL_NAME:  nt! ?? ::NNGAKEGL::`string'+6c90e
    FOLLOWUP_NAME:  MachineOwner
    MODULE_NAME: nt
    IMAGE_NAME:  ntkrnlmp.exe
    DEBUG_FLR_IMAGE_TIMESTAMP:  53388e13
    FAILURE_BUCKET_ID:  LEAKED_SESSION_POOLTAG_Dfsm
    BUCKET_ID:  LEAKED_SESSION_POOLTAG_Dfsm
    ANALYSIS_SOURCE:  KM
    FAILURE_ID_HASH_STRING:  km:leaked_session_pooltag_dfsm
    FAILURE_ID_HASH:  {f5abb35a-f9e8-cce7-0cb1-4bd9b597b503}
    Followup: MachineOwner
    rax=0000000000000000 rbx=ffffd0005b757000 rcx=00000000000000ab
    rdx=0000000000000008 rsi=0000000000000020 rdi=0000000000000000
    rip=fffff800c9d6cfa0 rsp=ffffd00058fa3958 rbp=0000000000000000
     r8=0000000000000000  r9=0000000000000020 r10=0000000000000003
    r11=0000000000000003 r12=0000000000000000 r13=fffff800c9ed0b20
    r14=0000000000000001 r15=0000000000000001
    iopl=0         nv up ei pl nz na po nc
    cs=0010  ss=0018  ds=002b  es=002b  fs=0053  gs=002b             efl=00000206
    nt!KeBugCheckEx:
    fffff800`c9d6cfa0 48894c2408      mov     qword ptr [rsp+8],rcx ss:0018:ffffd000`58fa3960=00000000000000ab
    Child-SP          RetAddr           : Args to Child                                                          
    : Call Site
    ffffd000`58fa3958 fffff800`ca1aff7e : 00000000`000000ab 00000000`00000008 00000000`00000000 00000000`00000020 : nt!KeBugCheckEx
    ffffd000`58fa3960 fffff800`ca0f282a : ffffd000`5b757000 00000000`00000000 ffffd000`5b757b40 ffffd000`5b757b40 : nt! ?? ::NNGAKEGL::`string'+0x6c90e
    ffffd000`58fa39b0 fffff800`ca0ba4b8 : 00000000`00000008 ffffe000`d7882900 00000000`00000000 ffffe000`d7c90080 : nt!MiDereferenceSessionFinal+0x12e
    ffffd000`58fa3a00 fffff800`ca01c0b8 : 00000000`001a5a41 ffffe000`d7c90080 ffffe000`d7c90080 ffffe000`d7882900 : nt!MiDereferenceSession+0x38
    ffffd000`58fa3a30 fffff800`ca0363b8 : 00000000`00040000 ffffd000`58fa3b80 00000000`00000000 fffff800`ca037dea : nt!MmCleanProcessAddressSpace+0x1b0
    ffffd000`58fa3a90 fffff800`c9ff83ce : ffffe000`d7882900 ffffc000`d5a06ae0 ffffd000`58fa3b80 00000000`00000000 : nt!PspRundownSingleProcess+0xac
    ffffd000`58fa3b20 fffff800`c9fa862b : 00000000`00000000 ffffe000`d7c90080 ffffe000`d7c90001 00000000`00000000 : nt!PspExitThread+0x52e
    ffffd000`58fa3c30 fffff800`c9d735c6 : ffffd000`52fac180 ffffe000`d7c90080 ffffe000`d65d7080 00000000`00000000 : nt!PspTerminateThreadByPointer+0x47
    ffffd000`58fa3c60 00000000`00000000 : ffffd000`58fa4000 ffffd000`58f9e000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16
    start             end                 module name
    fffff800`c8e93000 fffff800`c8e9c000   kd       kd.dll       Thu Aug 22 05:40:43 2013 (5215F8BB)
    fffff800`c9c19000 fffff800`ca3a2000   nt       ntkrnlmp.exe Sun Mar 30 15:35:15 2014 (53388E13)
    fffff800`ca3a2000 fffff800`ca412000   hal      hal.dll      Sun Jun 01 16:49:12 2014 (538BADE8)
    fffff801`5cc00000 fffff801`5cc88000   CI       CI.dll       Sat Feb 22 05:12:12 2014 (5308941C)
    fffff801`5cc88000 fffff801`5ccd0000   msiscsi  msiscsi.sys  Sun Apr 06 08:04:00 2014 (53415ED0)
    fffff801`5ccd1000 fffff801`5cd37000   mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Thu Aug 22 05:40:16 2013 (5215F8A0)
    fffff801`5cd37000 fffff801`5cd45000   werkernel werkernel.sys Thu Aug 22 05:40:24 2013 (5215F8A8)
    fffff801`5cd45000 fffff801`5cda6000   CLFS     CLFS.SYS     Wed Mar 19 02:12:20 2014 (53295164)
    fffff801`5cda6000 fffff801`5cdc8000   tm       tm.sys       Thu Aug 22 05:39:33 2013 (5215F875)
    fffff801`5cdc8000 fffff801`5cddd000   PSHED    PSHED.dll    Sat Sep 14 07:57:19 2013 (52346B3F)
    fffff801`5cddd000 fffff801`5cde7000   BOOTVID  BOOTVID.dll  Thu Aug 22 05:40:26 2013 (5215F8AA)
    fffff801`5cde7000 fffff801`5cdf5000   fdc      fdc.sys      Thu Aug 22 05:40:18 2013 (5215F8A2)
    fffff801`5ce00000 fffff801`5ce18000   acpiex   acpiex.sys   Thu Aug 22 05:37:47 2013 (5215F80B)
    fffff801`5ce18000 fffff801`5ce23000   WppRecorder WppRecorder.sys Thu Aug 22 05:39:40 2013 (5215F87C)
    fffff801`5ce23000 fffff801`5cead000   ACPI     ACPI.sys     Sat Feb 22 05:13:57 2014 (53089485)
    fffff801`5cead000 fffff801`5ceb7000   WMILIB   WMILIB.SYS   Thu Aug 22 05:40:23 2013 (5215F8A7)
    fffff801`5cec3000 fffff801`5cf20000   msrpc    msrpc.sys    Thu Aug 22 05:39:22 2013 (5215F86A)
    fffff801`5cf20000 fffff801`5cfef000   Wdf01000 Wdf01000.sys Thu Aug 22 05:38:56 2013 (5215F850)
    fffff801`5cfef000 fffff801`5d000000   WDFLDR   WDFLDR.SYS   Thu Aug 22 05:39:03 2013 (5215F857)
    fffff801`5d000000 fffff801`5d010000   kbdclass kbdclass.sys Thu Aug 22 05:39:23 2013 (5215F86B)
    fffff801`5d010000 fffff801`5d020000   mouclass mouclass.sys Thu Aug 22 05:39:13 2013 (5215F861)
    fffff801`5d020000 fffff801`5d02d000   serenum  serenum.sys  Thu Aug 22 05:40:17 2013 (5215F8A1)
    fffff801`5d037000 fffff801`5d0c3000   cng      cng.sys      Thu May 29 01:45:47 2014 (5386E5AB)
    fffff801`5d0c3000 fffff801`5d0dd000   serial   serial.sys   Thu Aug 22 05:40:08 2013 (5215F898)
    fffff801`5d0de000 fffff801`5d1f6000   NDIS     NDIS.SYS     Sat Feb 22 05:12:58 2014 (5308944A)
    fffff801`5d200000 fffff801`5d21f000   AgileVpn AgileVpn.sys Wed Apr 30 00:41:07 2014 (53609B03)
    fffff801`5d21f000 fffff801`5d23e000   i8042prt i8042prt.sys Thu Aug 22 05:39:15 2013 (5215F863)
    fffff801`5d23e000 fffff801`5d2b7000   NETIO    NETIO.SYS    Thu Aug 22 05:37:08 2013 (5215F7E4)
    fffff801`5d2b7000 fffff801`5d2c1000   msisadrv msisadrv.sys Thu Aug 22 05:39:03 2013 (5215F857)
    fffff801`5d2c1000 fffff801`5d309000   pci      pci.sys      Sat Feb 22 05:12:41 2014 (53089439)
    fffff801`5d309000 fffff801`5d316000   vdrvroot vdrvroot.sys Thu Aug 22 05:38:49 2013 (5215F849)
    fffff801`5d316000 fffff801`5d332000   pdc      pdc.sys      Thu Oct 31 22:58:42 2013 (52733502)
    fffff801`5d332000 fffff801`5d34a000   partmgr  partmgr.sys  Thu Aug 22 05:40:20 2013 (5215F8A4)
    fffff801`5d34a000 fffff801`5d3ab000   spaceport spaceport.sys Mon Mar 31 22:16:52 2014 (533A3DB4)
    fffff801`5d3ab000 fffff801`5d3c0000   volmgr   volmgr.sys   Thu Aug 22 05:39:53 2013 (5215F889)
    fffff801`5d3c0000 fffff801`5d3fd000   ndiswan  ndiswan.sys  Thu Aug 22 05:35:55 2013 (5215F79B)
    fffff801`5d400000 fffff801`5d44b000   stcvsm   stcvsm.sys   Tue Jan 15 13:26:37 2013 (50F5BB7D)
    fffff801`5d44b000 fffff801`5d45c000   umbus    umbus.sys    Thu Aug 22 05:38:59 2013 (5215F853)
    fffff801`5d467000 fffff801`5d4c6000   volmgrx  volmgrx.sys  Thu Aug 22 05:40:23 2013 (5215F8A7)
    fffff801`5d4c6000 fffff801`5d4cf000   intelide intelide.sys Thu Aug 22 05:40:03 2013 (5215F893)
    fffff801`5d4cf000 fffff801`5d4de000   PCIIDEX  PCIIDEX.SYS  Thu Aug 22 05:39:41 2013 (5215F87D)
    fffff801`5d4de000 fffff801`5d4fb000   vmbus    vmbus.sys    Thu Aug 22 05:36:39 2013 (5215F7C7)
    fffff801`5d4fb000 fffff801`5d512000   vmbkmcl  vmbkmcl.sys  Thu Aug 22 05:38:58 2013 (5215F852)
    fffff801`5d512000 fffff801`5d527000   winhv    winhv.sys    Thu Aug 22 05:40:00 2013 (5215F890)
    fffff801`5d527000 fffff801`5d542000   mountmgr mountmgr.sys Thu Aug 22 05:40:04 2013 (5215F894)
    fffff801`5d542000 fffff801`5d54c000   atapi    atapi.sys    Thu Aug 22 05:40:39 2013 (5215F8B7)
    fffff801`5d54c000 fffff801`5d581000   ataport  ataport.SYS  Thu Aug 22 05:39:38 2013 (5215F87A)
    fffff801`5d581000 fffff801`5d5dd000   fltmgr   fltmgr.sys   Sun Apr 06 08:10:42 2014 (53416062)
    fffff801`5d5dd000 fffff801`5d5fa000   rassstp  rassstp.sys  Thu Aug 22 05:36:10 2013 (5215F7AA)
    fffff801`5d600000 fffff801`5d626000   dfsc     dfsc.sys     Thu Mar 06 02:22:50 2014 (53183E6A)
    fffff801`5d626000 fffff801`5d63d000   ahcache  ahcache.sys  Thu Aug 22 05:39:54 2013 (5215F88A)
    fffff801`5d63d000 fffff801`5d833000   Ntfs     Ntfs.sys     Tue Mar 18 21:58:52 2014 (532915FC)
    fffff801`5d833000 fffff801`5d84f000   ksecdd   ksecdd.sys   Sat Sep 21 01:59:44 2013 (523D51F0)
    fffff801`5d84f000 fffff801`5d85b000   storvsc  storvsc.sys  Thu Aug 22 05:37:34 2013 (5215F7FE)
    fffff801`5d85b000 fffff801`5d8ba000   storport storport.sys Sun Apr 06 08:08:55 2014 (53415FF7)
    fffff801`5d8ba000 fffff801`5d8ca000   pcw      pcw.sys      Thu Aug 22 02:46:34 2013 (5215CFEA)
    fffff801`5d8ca000 fffff801`5d8d5000   Fs_Rec   Fs_Rec.sys   Thu Aug 22 02:46:33 2013 (5215CFE9)
    fffff801`5d8d5000 fffff801`5d906000   ksecpkg  ksecpkg.sys  Sat Mar 08 02:24:07 2014 (531AE1B7)
    fffff801`5d906000 fffff801`5d95b000   CLASSPNP CLASSPNP.SYS Wed Apr 09 00:53:25 2014 (5344EE65)
    fffff801`5d95b000 fffff801`5d989000   cdrom    cdrom.sys    Thu Aug 22 02:46:35 2013 (5215CFEB)
    fffff801`5d989000 fffff801`5d9f9000   rdbss    rdbss.sys    Tue Dec 17 00:21:22 2013 (52AFFB72)
    fffff801`5da05000 fffff801`5dc79000   tcpip    tcpip.sys    Tue May 27 07:19:14 2014 (538490D2)
    fffff801`5dc79000 fffff801`5dce5000   fwpkclnt fwpkclnt.sys Sun Mar 30 19:39:34 2014 (5338C756)
    fffff801`5dce5000 fffff801`5dd0a000   wfplwfs  wfplwfs.sys  Sat Mar 08 02:22:45 2014 (531AE165)
    fffff801`5dd0a000 fffff801`5dd19000   vmstorfl vmstorfl.sys Thu Aug 22 05:37:06 2013 (5215F7E2)
    fffff801`5dd19000 fffff801`5dd69000   volsnap  volsnap.sys  Thu Mar 06 02:26:33 2014 (53183F49)
    fffff801`5dd69000 fffff801`5dd7e000   crashdmp crashdmp.sys Thu Aug 22 05:40:03 2013 (5215F893)
    fffff801`5dd7e000 fffff801`5dd92000   lltdio   lltdio.sys   Thu Aug 22 05:36:18 2013 (5215F7B2)
    fffff801`5dd95000 fffff801`5dd9e000   Null     Null.SYS     Thu Aug 22 05:40:24 2013 (5215F8A8)
    fffff801`5dd9e000 fffff801`5ddac000   BasicRender BasicRender.sys Sat Feb 22 05:14:02 2014 (5308948A)
    fffff801`5ddaf000 fffff801`5ddc6000   mup      mup.sys      Thu Aug 22 05:40:28 2013 (5215F8AC)
    fffff801`5ddc6000 fffff801`5ddcb500   VMBusHID VMBusHID.sys Thu Aug 22 05:37:50 2013 (5215F80E)
    fffff801`5ddd2000 fffff801`5ddee000   disk     disk.sys     Thu Aug 22 05:39:47 2013 (5215F883)
    fffff801`5ddee000 fffff801`5ddfd000   CompositeBus CompositeBus.sys Thu Aug 22 05:38:48 2013 (5215F848)
    fffff801`5e000000 fffff801`5e092000   afd      afd.sys      Thu May 29 21:03:01 2014 (5387F4E5)
    fffff801`5e092000 fffff801`5e09e000   npsvctrig npsvctrig.sys Thu Aug 22 05:38:22 2013 (5215F82E)
    fffff801`5e09e000 fffff801`5e0aa000   mssmbios mssmbios.sys Thu Aug 22 05:39:41 2013 (5215F87D)
    fffff801`5e0aa000 fffff801`5e0b6000   ndistapi ndistapi.sys Thu Aug 22 05:39:16 2013 (5215F864)
    fffff801`5e0b8000 fffff801`5e239000   dxgkrnl  dxgkrnl.sys  Thu Jun 12 16:32:12 2014 (539A2A6C)
    fffff801`5e239000 fffff801`5e24b000   watchdog watchdog.sys Sat Feb 22 05:14:39 2014 (530894AF)
    fffff801`5e24b000 fffff801`5e2ac000   dxgmms1  dxgmms1.sys  Thu Mar 06 02:22:14 2014 (53183E46)
    fffff801`5e2ac000 fffff801`5e2be000   BasicDisplay BasicDisplay.sys Thu Aug 22 05:39:31 2013 (5215F873)
    fffff801`5e2be000 fffff801`5e2c5000   lmimirr  lmimirr.sys  Tue Apr 10 16:32:45 2007 (461C108D)
    fffff801`5e2c5000 fffff801`5e2d8000   VIDEOPRT VIDEOPRT.SYS Thu Aug 22 05:39:31 2013 (5215F873)
    fffff801`5e2d8000 fffff801`5e2ec000   Npfs     Npfs.SYS     Thu Aug 22 05:40:25 2013 (5215F8A9)
    fffff801`5e2ec000 fffff801`5e2f8000   Msfs     Msfs.SYS     Thu Aug 22 05:40:24 2013 (5215F8A8)
    fffff801`5e2f8000 fffff801`5e318000   tdx      tdx.sys      Thu Aug 22 05:36:34 2013 (5215F7C2)
    fffff801`5e318000 fffff801`5e326000   TDI      TDI.SYS      Thu Aug 22 05:39:01 2013 (5215F855)
    fffff801`5e326000 fffff801`5e372000   netbt    netbt.sys    Thu Aug 22 05:37:01 2013 (5215F7DD)
    fffff801`5e372000 fffff801`5e39c000   pacer    pacer.sys    Thu Aug 22 05:36:06 2013 (5215F7A6)
    fffff801`5e39c000 fffff801`5e3ad000   netbios  netbios.sys  Thu Aug 22 05:38:58 2013 (5215F852)
    fffff801`5e3ad000 fffff801`5e3c6000   wanarp   wanarp.sys   Thu Aug 22 05:35:45 2013 (5215F791)
    fffff801`5e3c6000 fffff801`5e3e7000   sbmount  sbmount.SYS  Tue Jan 15 14:09:48 2013 (50F5C59C)
    fffff801`5e3e7000 fffff801`5e3f5000   nsiproxy nsiproxy.sys Thu Aug 22 05:36:34 2013 (5215F7C2)
    fffff801`5e3f5000 fffff801`5e400000   kdnic    kdnic.sys    Thu Aug 22 05:38:26 2013 (5215F832)
    fffff801`5e400000 fffff801`5e40a000   dump_atapi dump_atapi.sys Thu Aug 22 05:40:39 2013 (5215F8B7)
    fffff801`5e40a000 fffff801`5e418000   monitor  monitor.sys  Thu Aug 22 05:36:37 2013 (5215F7C5)
    fffff801`5e418000 fffff801`5e43c000   luafv    luafv.sys    Sat Feb 22 05:14:25 2014 (530894A1)
    fffff801`5e43c000 fffff801`5e45a000   sbapifs  sbapifs.sys  Tue Nov 06 19:07:02 2012 (5099C246)
    fffff801`5e463000 fffff801`5e482000   HIDCLASS HIDCLASS.SYS Thu Mar 06 02:24:40 2014 (53183ED8)
    fffff801`5e482000 fffff801`5e489f00   HIDPARSE HIDPARSE.SYS Thu Aug 22 05:40:26 2013 (5215F8AA)
    fffff801`5e48a000 fffff801`5e494000   hyperkbd hyperkbd.sys Thu Aug 22 05:37:49 2013 (5215F80D)
    fffff801`5e494000 fffff801`5e4a2000   dmvsc    dmvsc.sys    Thu Aug 22 05:37:14 2013 (5215F7EA)
    fffff801`5e4a2000 fffff801`5e4ae000   HyperVideo HyperVideo.sys Thu Aug 22 05:39:20 2013 (5215F868)
    fffff801`5e4ae000 fffff801`5e4ca000   netvsc63 netvsc63.sys Thu Aug 22 05:36:43 2013 (5215F7CB)
    fffff801`5e4ca000 fffff801`5e4d3000   vms3cap  vms3cap.sys  Thu Aug 22 05:38:37 2013 (5215F83D)
    fffff801`5e4d3000 fffff801`5e4f1000   intelppm intelppm.sys Thu Aug 22 02:46:35 2013 (5215CFEB)
    fffff801`5e4f1000 fffff801`5e4fb000   vmgencounter vmgencounter.sys Thu Aug 22 05:38:23 2013 (5215F82F)
    fffff801`5e4fb000 fffff801`5e51c000   raspptp  raspptp.sys  Thu Aug 22 05:35:51 2013 (5215F797)
    fffff801`5e51c000 fffff801`5e540000   rasl2tp  rasl2tp.sys  Thu Aug 22 05:35:51 2013 (5215F797)
    fffff801`5e540000 fffff801`5e54b000   NdisVirtualBus NdisVirtualBus.sys Thu Aug 22 05:36:25 2013 (5215F7B9)
    fffff801`5e54b000 fffff801`5e566000   raspppoe raspppoe.sys Thu Aug 22 05:36:37 2013 (5215F7C5)
    fffff801`5e566000 fffff801`5e567600   swenum   swenum.sys   Thu Aug 22 05:39:29 2013 (5215F871)
    fffff801`5e568000 fffff801`5e5b6000   ks       ks.sys       Thu May 08 17:06:38 2014 (536C0DFE)
    fffff801`5e5b6000 fffff801`5e5c1000   rdpbus   rdpbus.sys   Thu Aug 22 05:38:52 2013 (5215F84C)
    fffff801`5e5c1000 fffff801`5e5d8000   NDProxy  NDProxy.SYS  Thu Aug 22 05:38:15 2013 (5215F827)
    fffff801`5e5d8000 fffff801`5e5e4000   flpydisk flpydisk.sys Thu Aug 22 05:40:18 2013 (5215F8A2)
    fffff801`5e5e4000 fffff801`5e5f1000   mouhid   mouhid.sys   Thu Aug 22 05:39:13 2013 (5215F861)
    fffff801`5e5f1000 fffff801`5e5fe000   dump_dumpata dump_dumpata.sys Thu Aug 22 05:39:53 2013 (5215F889)
    fffff801`5e651000 fffff801`5e669000   rspndr   rspndr.sys   Thu Aug 22 05:36:34 2013 (5215F7C2)
    fffff801`5e669000 fffff801`5e689000   bowser   bowser.sys   Thu Aug 22 05:38:38 2013 (5215F83E)
    fffff801`5e689000 fffff801`5e6a0000   mpsdrv   mpsdrv.sys   Thu Aug 22 05:36:06 2013 (5215F7A6)
    fffff801`5e6a0000 fffff801`5e70c000   mrxsmb   mrxsmb.sys   Wed Apr 30 00:41:44 2014 (53609B28)
    fffff801`5e70c000 fffff801`5e745000   mrxsmb20 mrxsmb20.sys Sat May 31 00:27:45 2014 (53897661)
    fffff801`5e745000 fffff801`5e7ee000   peauth   peauth.sys   Sat Feb 22 05:09:37 2014 (53089381)
    fffff801`5e805000 fffff801`5e8ff000   HTTP     HTTP.sys     Mon Jan 27 12:48:02 2014 (52E6B7F2)
    fffff801`5e8ff000 fffff801`5e906000   RaInfo   RaInfo.sys   Fri Jan 11 05:19:28 2013 (50F00350)
    fffff801`5e906000 fffff801`5e919000   LMIRfsDriver LMIRfsDriver.sys Mon Jul 14 10:26:56 2008 (487B7E50)
    fffff801`5e919000 fffff801`5e964000   mrxsmb10 mrxsmb10.sys Thu Mar 06 02:19:36 2014 (53183DA8)
    fffff801`5e964000 fffff801`5e96f000   secdrv   secdrv.SYS   Wed Sep 13 07:18:38 2006 (4508052E)
    fffff801`5e96f000 fffff801`5e9b2000   srvnet   srvnet.sys   Thu Mar 27 00:16:13 2014 (5333C22D)
    fffff801`5e9b2000 fffff801`5e9c2000   condrv   condrv.sys   Thu Aug 22 05:40:17 2013 (5215F8A1)
    fffff801`5e9c2000 fffff801`5e9d4000   tcpipreg tcpipreg.sys Thu Mar 06 02:19:59 2014 (53183DBF)
    fffff801`5e9d4000 fffff801`5e9ef000   TSFairShare TSFairShare.sys Thu Aug 22 05:36:31 2013 (5215F7BF)
    fffff801`5ea00000 fffff801`5ea98000   srv      srv.sys      Sat Oct 05 05:01:15 2013 (524FF17B)
    fffff801`5ea98000 fffff801`5eaa3000   rdpvideominiport rdpvideominiport.sys Thu Aug 22 05:38:52 2013 (5215F84C)
    fffff801`5eaa3000 fffff801`5ead7000   rdpdr    rdpdr.sys    Thu Aug 22 05:36:46 2013 (5215F7CE)
    fffff801`5eadc000 fffff801`5eb89000   srv2     srv2.sys     Wed Apr 02 20:53:54 2014 (533CCD42)
    fffff801`5eb89000 fffff801`5ebb6000   tunnel   tunnel.sys   Thu Aug 22 05:35:45 2013 (5215F791)
    fffff801`5ebb6000 fffff801`5ebd9000   tsusbhub tsusbhub.sys Thu Aug 22 05:35:58 2013 (5215F79E)
    fffff801`5ebd9000 fffff801`5ebe6000   terminpt terminpt.sys Thu Aug 22 05:39:16 2013 (5215F864)
    fffff801`5ebe6000 fffff801`5ebf3000   gfiark   gfiark.sys   Thu May 23 06:39:22 2013 (519E0DFA)
    fffff801`5ebf3000 fffff801`5ebfe000   gfiutil  gfiutil.sys  Wed Sep 04 12:57:40 2013 (522782A4)
    fffff960`000f1000 fffff960`00500000   win32k   win32k.sys   Fri Aug 22 18:41:48 2014 (53F7E34C)
    fffff960`006f1000 fffff960`006fa000   TSDDD    TSDDD.dll    Thu Aug 22 05:40:32 2013 (5215F8B0)
    fffff960`008da000 fffff960`00915000   cdd      cdd.dll      Thu Mar 06 05:39:53 2014 (53186C99)
    fffff960`00a16000 fffff960`00a3c000   RDPUDD   RDPUDD.dll   Thu Aug 22 05:40:31 2013 (5215F8AF)
    Unloaded modules:
    fffff801`5f09b000 fffff801`5f102000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f072000 fffff801`5f0d9000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f02a000 fffff801`5f091000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f061000 fffff801`5f0c8000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f003000 fffff801`5f06a000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f008000 fffff801`5f06f000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f045000 fffff801`5f0ac000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f01c000 fffff801`5f083000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f058000 fffff801`5f0bf000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f08d000 fffff801`5f0f4000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5f0b9000 fffff801`5f120000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ece7000 fffff801`5ed4e000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec29000 fffff801`5ec90000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec8b000 fffff801`5ecf2000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec6d000 fffff801`5ecd4000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec81000 fffff801`5ece8000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecaf000 fffff801`5ed16000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecfa000 fffff801`5ed61000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec66000 fffff801`5eccd000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec66000 fffff801`5eccd000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecf7000 fffff801`5ed5e000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec59000 fffff801`5ecc0000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec8a000 fffff801`5ecf1000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecd8000 fffff801`5ed3f000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecfb000 fffff801`5ed62000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec7a000 fffff801`5ece1000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ece6000 fffff801`5ed4d000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecb5000 fffff801`5ed1c000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecdc000 fffff801`5ed43000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec5b000 fffff801`5ecc2000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecc3000 fffff801`5ed2a000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecd3000 fffff801`5ed3a000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecb5000 fffff801`5ed1c000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec67000 fffff801`5ecce000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec21000 fffff801`5ec88000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecea000 fffff801`5ed51000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec77000 fffff801`5ecde000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecc6000 fffff801`5ed2d000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec06000 fffff801`5ec6d000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5eca1000 fffff801`5ed08000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec05000 fffff801`5ec6c000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec20000 fffff801`5ec87000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec59000 fffff801`5ecc0000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ecde000 fffff801`5ed45000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec1c000 fffff801`5ec83000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5eca1000 fffff801`5ed08000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec71000 fffff801`5ecd8000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec00000 fffff801`5ec67000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec44000 fffff801`5ecab000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    fffff801`5ec34000 fffff801`5ec9b000   rapportiaso64.sys
        Timestamp: unavailable (00000000)
        Checksum:  00000000
        ImageSize:  00067000
    Closing open log file c:\debuglog.txt

    Hi,
    Regarding to Bug Check 0xAB, it may indicate that a session unload occurred while a session driver still held
    memory. For more details, please refer to following article and check if can help you.
    Bug Check 0xAB: SESSION_HAS_VALID_POOL_ON_EXIT
    à
    We do not have update 2862768 installed on the server as per
    Please check if you have installed
    KB2982791 in the Windows Server 2012 R2. I noticed similar threads that some similar issues were related to the KB2982791. Just a confirmation. Thanks for your understanding.
    à
    This indicates a bug in win32k.sys, atmfd.dll, rdpdd.dll or a video driver.
    Please use
    sfc /scannow command to scan all protected system files. Meanwhile, please update necessary drivers and then monitor the result.
    By the way, troubleshoot this kind of kernel crash issue, we need to analyze the crash dump file to narrow down the root cause of the issue. However, it is not effective
    for us to debug the crash dump file here in the forum. If this issues is a state of emergency for you. Please contact Microsoft Customer Service and Support (CSS) via telephone so that a dedicated Support Professional can assist with your request.
    To obtain the phone numbers for specific technology request, please refer to the web site listed below:
    http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone#faq607
    Hope this helps.
    Best regards,
    Justin Gu

Maybe you are looking for

  • Performance tuning

    Hi guys! I'll be always in favour to you if u could really help me this out.The program displays all the Sales order(RMA's) who's series starts with number 6 in our company ie for Return Manufacturing Authoriazation.What ever the orders which are ret

  • Tables to find out Vendor Invoices without refrence to a PO

    Hi All, I need to extract all the invoices for a time period which have been raised without refrence to PO and with refrence to a GL account. If possible I need to get a table from where I can get all these invoices which have been raised with refren

  • Help with iCloud storage

    I bought more memory in iCloud for my daughter's Ipad but it went on the iPod touch and she doesn't have any on her Ipad can I switch them so the memory back on her ipad and off the ipod

  • REVERSE ENGINEERING SOAP XML TO SVO

    Hi We are using Oracle Integration Repository for webservices development . We have following soap xml . That soap xml needs to be processed by a webservice . For that I believe we have to generate the SVOs and AM looking at the SOAP xml . But my onl

  • SetVisible(false) doesn't work with JDialog

    Hi evry one in this forum, i am using JDialog to get some inputs from user, when the user click on the ok button, i start processing and the JDialog must be invisible, for that i use myJdialog.setVisible(false) methode, but the JDialog is still visib