Windows 2003: Schtasks /create ERROR in Kernel32.dll

Question

In running the following command from a remote computer, a small percentage of our Windows 2003 servers will get this error:
schtasks /create /tn ANYNAME /tr \\servername\sharename\batchfile.bat /sc ONCE /sd 2011/06/04 /st 17:30:00 /s SERVERNAME /u domain\adminuser /p password
ERROR: C:\WINDOWS\system32\kernel32.dll
Why is it getting this error on 7 out of 63 servers?  There are times when it finally successfully creates it on one or two, after trying again and again. What's the deal?

Answer 1

Hi,
This
kernel32.dll file and some other system files are loaded into a protected part of the computer's memory for use by other programs. In rare cases, a program may attempt to overwrite the protected memory area, which can
trigger a system crash, causing the system to display an error message in white text on a blue background, or to restart itself. Errors such as these may be caused by incompatible software, but are infrequent.
Here, I would like to suggest you temporarily turn off DEP on the problematic servers for test purpose.
Refer to the link below:
Change Data Execution Prevention settings
http://windows.microsoft.com/en-US/windows-vista/Change-Data-Execution-Prevention-settings
Besides, please go to Event Viewer to check whether there is any error. If so, collect the Event log for further research.
Collect Event log
============
1. Start Event Viewer.
2. Navigate to Windows Logs\System right click it and choose Import Custom View File.
3. On the Import Custom View File dialog box, in Name, enter a name for the imported custom view.
For your convenience, I have created a workspace for you. You can upload the information files to the following link. (Please choose "Send Files to Microsoft")
Workspace URL:
https://sftus.one.microsoft.com/choosetransfer.aspx?key=9f6719ba-41e7-4043-8831-74d75d350fe7
Password: k]Jn$AMwR1Y
Note: Due to differences in text formatting with various email clients, the workspace link above may appear to be broken. Please be sure to include all
text between '(' and ')' when typing or copying the workspace link into your browser. Meanwhile, please note that files uploaded for more than 72 hours will be deleted automatically. Please ensure to notify me timely after you have uploaded the files. Thank
you for your understanding.
Regards,
Cecilia Zhou
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not
actually answer your question. This can be beneficial to other community members reading the thread.