Vista "server" service problem
Hi,I have two vista PCs. One has files I want to access from the other PC. Let's call it the server for discussion purposes. When the server has just booted, all is well. I can see the server on the network, browse the folders and access files.After a while, I can still see the server on the network but I get a timeout if I try to access folders or files.If I shutdown the server BEFORE I lose access to the files: no problem. If I try to shut down AFTER I have lost access to the files: it stays on the shutting down screen for hours and I have to reset the machine.If I try to restart the server service on the server AFTER I lose access, it will not do so. It just hangs there saying it is in the process of shutting down the service. That's why I think my problem is related to the server service. No problem if I try to do so BEFORE I lose access.I have tried disabling the NIC shutdown to save power to see if that was the problem and it did not help.Here are events I think might be related to this problem:I have 1600 of these in the last 24h:The machine-default permission settings do not grant Local Activationpermission for the COM Server application with CLSID{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from addressLocalHost (Using LRPC). This security permission can be modified usingthe Component Services administrative tool.- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System> <Provider Name="Microsoft-Windows-DistributedCOM"Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" /> <EventID Qualifiers="49152">10016</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-02-11T22:42:13.000Z" /> <EventRecordID>53058</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>Cuisine</Computer> <Security UserID="S-1-5-20" /> </System>- <EventData> <Data Name="param1">machine-default</Data> <Data Name="param2">Local</Data> <Data Name="param3">Activation</Data> <Data Name="param4">{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}</Data> <Data Name="param5">NT AUTHORITY</Data> <Data Name="param6">NETWORK SERVICE</Data> <Data Name="param7">S-1-5-20</Data> <Data Name="param8">LocalHost (Using LRPC)</Data> </EventData> </Event>-----I have one of these: The description for Event ID 54 from source srv cannot be found. Eitherthe component that raises this event is not installed on your localcomputer or the installation is corrupted. You can install or repair thecomponent on the local computer.If the event originated on another computer, the display information hadto be saved with the event.The following information was included with the event:\Device\LanmanServerthe message resource is present but the message is not found in thestring/message table- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System> <Provider Name="srv" /> <EventID Qualifiers="32772">54</EventID> <Level>3</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-01-23T00:41:30.272Z" /> <EventRecordID>49371</EventRecordID> <Channel>System</Channel> <Computer>Cuisine</Computer> <Security /> </System>- <EventData> <Data>\Device\LanmanServer</Data> <Binary>00000000010000000000000036000480000000000000000000000000000000000000000000000000</Binary> </EventData> </Event>-----I have 16 of these warnings in the last 24 hours:The server was unable to allocate a work item 23 times in the last 60seconds.- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">- <System> <Provider Name="srv" /> <EventID Qualifiers="32768">2021</EventID> <Level>3</Level> <Task>0</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2009-01-23T00:21:06.221Z" /> <EventRecordID>49363</EventRecordID> <Channel>System</Channel> <Computer>Cuisine</Computer> <Security /> </System>- <EventData> <Data>\Device\LanmanServer</Data> <Data>23</Data> <Data>60</Data> <Binary>000000000300280000000000E5070080000000009A0000C000000000000000000000000000000000</Binary> </EventData> </Event>Thank you
February 12th, 2009 5:32am

Hi, Thank you for posting. If everything worked before, a quick solution is to restore the system back to the previous status when the issue didnt occur with System Restore. (Note: Performing a system restore may cause the loss of the current system settings; therefore, before doing this, please make sure that the system restore point is not too old and set a restore point for the current status.) Based on my research, I will suggest the following. Please try the following suggestions: 1. Scan your system to make sure that the system is virus free. Temporarily disable your anti-virus software to see if this problem is gone. 2. Please check if your firewall has been configured to allow file sharing. Please also disable the firewall to see if the sharing status is fine and you can shut down the computer. 3. Please check if the computer has second hard drive, Optical Disk Drive or some particular specifications. If so, please temporarily unplug the devices to test the issue again. In other words, we can remove all the unnecessary hardware and only leave the essential one on the computer to have a test. 4. Please disable the share and re-configure the sharing with the following documents: File and Printer Sharing in Windows Vista http://technet.microsoft.com/en-us/library/bb727037.aspx Enable file and printer sharing http://windowshelp.microsoft.com/Windows/en-US/Help/e2e03106-2546-4085-bd07-6c3ac95003111033.mspx 5. Please perform a Clean Boot to check the issue. Clean boot ================= 1) Click the Start Button type "msconfig" (without quotation marks) in the Search box, and then press Enter. Note: If prompted, please click Continue on the User Account Control (UAC) window. 2) Click the "Services" tab, check the "Hide All Microsoft Services" box and click "Disable All" (if it is not gray). 3) Click the "Startup" tab, click "Disable All" and click "OK". Then, restart the computer. When the "System Configuration Utility" window appears, please check the "Don't show this message or launch the System Configuration Utility when Windows starts" box and click OK. NOTE: we can go back to normal boot by running msconfig again and checking on Normal Startup in the General tab. In the Clean Boot Environment, the third party services and applications are disabled, please check if the issue reoccurs at this time. If the problem does not occur, it indicates that the problem is related to one application or service we have disabled. You may use the MSCONFIG tool again to re-enable the disabled item one by one to find out the culprit. Meanwhile, just for tests, please try to access the share with both \\computer name\folder and XXX.XXX.XXX.XXX\folder to see if they works. Please also try ping the computer with computer name or IP address to see how it works. Please run ipconfig/all on the problematic computer when the issue occurs and post the report and we will perform some further research. Thanks. Nicholas Li - MSFT
Free Windows Admin Tool Kit Click here and download it now
February 13th, 2009 12:47pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics