EVENT 20158 Remote Access?

A

ADAM

I was looking at my event log this morning, trying to
figure out why exchange was down when I noticed an event
that I didn't recognize. The event ID is 20158 and the
source says Remote Access. In the description box it
says:
"The user pppaccount successfully established a
connection to RAC Connection using the device RACPORT."
I am running Windows 2000 Server which, as I
understand, does not have Remote Access, only terminal
Service. We are running Exchange 2000 and Norton
Antivirus corporate Edition. Does anyone know what this
event means and why it occured?

Any info on the subject would be much appreciated.

ADAM
 
D

Dave Patrick

This link may help.

http://www.eventid.net/display.asp?eventid=20158&eventno=160&source=RemoteAccess&phase=1

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| I was looking at my event log this morning, trying to
| figure out why exchange was down when I noticed an event
| that I didn't recognize. The event ID is 20158 and the
| source says Remote Access. In the description box it
| says:
| "The user pppaccount successfully established a
| connection to RAC Connection using the device RACPORT."
| I am running Windows 2000 Server which, as I
| understand, does not have Remote Access, only terminal
| Service. We are running Exchange 2000 and Norton
| Antivirus corporate Edition. Does anyone know what this
| event means and why it occured?
|
| Any info on the subject would be much appreciated.
|
| ADAM
 
D

dcdon

Hi there,

Recently my pretty bride went out and bot me a prize. She had heard me talk about
pen drives, and she just waltzed in with it. It's a Lexar, 128M, USB 1.1(but I
didn't tell her
it could have been 2.0; She may have told me that I would complain, if I were hung
with a knew Hemp rope) (lit on both end of course). Little humor. BTW, the little
drive is so cute.

Checking my Event Viewer for the System, the following Error was generated. I have
attached the PrintScreen, which is Error 7, and has the description as,

Type: Error
Event Source: Removable Storage Service
Event Category: None
Event ID: 17
Date: 4/13/2004
Time: 3:48:10 PM
User: N/A
Computer: InternalCommandHQ
Description:
RSM cannot manage library PhysicalDrive1. It encountered an unspecified error. This
can be caused by a number of problems including, but not limited to, database
corruption, failure communicating with the library, or insufficient system
resources.

BTW, this is when the jump-drive is inserted.

When it is removed, I get an information event that is Error 135, and the
information is thus.

Event Type: Information
Event Source: Removable Storage Service
Event Category: None
Event ID: 135
Date: 4/13/2004
Time: 3:48:33 PM
User: N/A
Computer: InternalCommandHQ
Description:
Received a device interface REMOVAL notification for device:

\\?\USBSTOR#Disk&Ven_LEXAR&Prod_JUMPDRIVE&Rev_1.30#G249120418010&0#{53f56307-b6bf-11
d0-94f2-00a0c91efb8b}
Data:
0000: f2 00 00 00 05 00 00 00 ò.......
0008: 00 00 00 00 07 63 f5 53 .....cõS
0010: bf b6 d0 11 94 f2 00 a0 ¿¶Ð.?ò.
0018: c9 1e fb 8b 5c 00 5c 00 É.û?\.\.
0020: 3f 00 5c 00 55 00 53 00 ?.\.U.S.
0028: 42 00 53 00 54 00 4f 00 B.S.T.O.
0030: 52 00 23 00 44 00 69 00 R.#.D.i.
0038: 73 00 6b 00 26 00 56 00 s.k.&.V.
0040: 65 00 6e 00 5f 00 4c 00 e.n._.L.
0048: 45 00 58 00 41 00 52 00 E.X.A.R.
0050: 26 00 50 00 72 00 6f 00 &.P.r.o.
0058: 64 00 5f 00 4a 00 55 00 d._.J.U.
0060: 4d 00 50 00 44 00 52 00 M.P.D.R.
0068: 49 00 56 00 45 00 26 00 I.V.E.&.
0070: 52 00 65 00 76 00 5f 00 R.e.v._.
0078: 31 00 2e 00 33 00 30 00 1...3.0.
0080: 23 00 47 00 32 00 34 00 #.G.2.4.
0088: 39 00 31 00 32 00 30 00 9.1.2.0.
0090: 34 00 31 00 38 00 30 00 4.1.8.0.
0098: 31 00 30 00 26 00 30 00 1.0.&.0.
00a0: 23 00 7b 00 35 00 33 00 #.{.5.3.
00a8: 66 00 35 00 36 00 33 00 f.5.6.3.
00b0: 30 00 37 00 2d 00 62 00 0.7.-.b.
00b8: 36 00 62 00 66 00 2d 00 6.b.f.-.
00c0: 31 00 31 00 64 00 30 00 1.1.d.0.
00c8: 2d 00 39 00 34 00 66 00 -.9.4.f.
00d0: 32 00 2d 00 30 00 30 00 2.-.0.0.
00d8: 61 00 30 00 63 00 39 00 a.0.c.9.
00e0: 31 00 65 00 66 00 62 00 1.e.f.b.
00e8: 38 00 62 00 7d 00 00 00 8.b.}...
00f0: 00 00 ..

Sorry about posting all of this. Please excuse me. I had, and thought it amy help.

Any thoughts? I have gone to their sight, called a couple folks, and they didn't
know.

BTW, I can not find any adverse effects generated by the Event Errors. It uses the
Removable Storage Service. This service has not been changed. It is started
autmatically, and has the normal dependency of RPC.

Thank you in Advance,

don
;o)




I was looking at my event log this morning, trying to
figure out why exchange was down when I noticed an event
that I didn't recognize. The event ID is 20158 and the
source says Remote Access. In the description box it
says:
"The user pppaccount successfully established a
connection to RAC Connection using the device RACPORT."
I am running Windows 2000 Server which, as I
understand, does not have Remote Access, only terminal
Service. We are running Exchange 2000 and Norton
Antivirus corporate Edition. Does anyone know what this
event means and why it occured?

Any info on the subject would be much appreciated.

ADAM
 
D

Dave Patrick

This link may help.

http://www.eventid.net/display.asp?eventid=17&eventno=855&source=Removable Storage Service&phase=1

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| Hi there,
|
| Recently my pretty bride went out and bot me a prize. She had heard me
talk about
| pen drives, and she just waltzed in with it. It's a Lexar, 128M, USB
1.1(but I
| didn't tell her
| it could have been 2.0; She may have told me that I would complain, if I
were hung
| with a knew Hemp rope) (lit on both end of course). Little humor. BTW, the
little
| drive is so cute.
|
| Checking my Event Viewer for the System, the following Error was
generated. I have
| attached the PrintScreen, which is Error 7, and has the description as,
|
| Type: Error
| Event Source: Removable Storage Service
| Event Category: None
| Event ID: 17
| Date: 4/13/2004
| Time: 3:48:10 PM
| User: N/A
| Computer: InternalCommandHQ
| Description:
| RSM cannot manage library PhysicalDrive1. It encountered an unspecified
error. This
| can be caused by a number of problems including, but not limited to,
database
| corruption, failure communicating with the library, or insufficient system
| resources.
|
| BTW, this is when the jump-drive is inserted.
|
| When it is removed, I get an information event that is Error 135, and the
| information is thus.
|
| Event Type: Information
| Event Source: Removable Storage Service
| Event Category: None
| Event ID: 135
| Date: 4/13/2004
| Time: 3:48:33 PM
| User: N/A
| Computer: InternalCommandHQ
| Description:
| Received a device interface REMOVAL notification for device:
|
|
\\?\USBSTOR#Disk&Ven_LEXAR&Prod_JUMPDRIVE&Rev_1.30#G249120418010&0#{53f56307-b6bf-11
| d0-94f2-00a0c91efb8b}
| Data:
| 0000: f2 00 00 00 05 00 00 00 ò.......
| 0008: 00 00 00 00 07 63 f5 53 .....cõS
| 0010: bf b6 d0 11 94 f2 00 a0 ¿¶Ð.?ò.
| 0018: c9 1e fb 8b 5c 00 5c 00 É.û?\.\.
| 0020: 3f 00 5c 00 55 00 53 00 ?.\.U.S.
| 0028: 42 00 53 00 54 00 4f 00 B.S.T.O.
| 0030: 52 00 23 00 44 00 69 00 R.#.D.i.
| 0038: 73 00 6b 00 26 00 56 00 s.k.&.V.
| 0040: 65 00 6e 00 5f 00 4c 00 e.n._.L.
| 0048: 45 00 58 00 41 00 52 00 E.X.A.R.
| 0050: 26 00 50 00 72 00 6f 00 &.P.r.o.
| 0058: 64 00 5f 00 4a 00 55 00 d._.J.U.
| 0060: 4d 00 50 00 44 00 52 00 M.P.D.R.
| 0068: 49 00 56 00 45 00 26 00 I.V.E.&.
| 0070: 52 00 65 00 76 00 5f 00 R.e.v._.
| 0078: 31 00 2e 00 33 00 30 00 1...3.0.
| 0080: 23 00 47 00 32 00 34 00 #.G.2.4.
| 0088: 39 00 31 00 32 00 30 00 9.1.2.0.
| 0090: 34 00 31 00 38 00 30 00 4.1.8.0.
| 0098: 31 00 30 00 26 00 30 00 1.0.&.0.
| 00a0: 23 00 7b 00 35 00 33 00 #.{.5.3.
| 00a8: 66 00 35 00 36 00 33 00 f.5.6.3.
| 00b0: 30 00 37 00 2d 00 62 00 0.7.-.b.
| 00b8: 36 00 62 00 66 00 2d 00 6.b.f.-.
| 00c0: 31 00 31 00 64 00 30 00 1.1.d.0.
| 00c8: 2d 00 39 00 34 00 66 00 -.9.4.f.
| 00d0: 32 00 2d 00 30 00 30 00 2.-.0.0.
| 00d8: 61 00 30 00 63 00 39 00 a.0.c.9.
| 00e0: 31 00 65 00 66 00 62 00 1.e.f.b.
| 00e8: 38 00 62 00 7d 00 00 00 8.b.}...
| 00f0: 00 00 ..
|
| Sorry about posting all of this. Please excuse me. I had, and thought it
amy help.
|
| Any thoughts? I have gone to their sight, called a couple folks, and they
didn't
| know.
|
| BTW, I can not find any adverse effects generated by the Event Errors. It
uses the
| Removable Storage Service. This service has not been changed. It is
started
| autmatically, and has the normal dependency of RPC.
|
| Thank you in Advance,
|
| don
| ;o)
|
|
|
|
| | I was looking at my event log this morning, trying to
| figure out why exchange was down when I noticed an event
| that I didn't recognize. The event ID is 20158 and the
| source says Remote Access. In the description box it
| says:
| "The user pppaccount successfully established a
| connection to RAC Connection using the device RACPORT."
| I am running Windows 2000 Server which, as I
| understand, does not have Remote Access, only terminal
| Service. We are running Exchange 2000 and Norton
| Antivirus corporate Edition. Does anyone know what this
| event means and why it occured?
|
| Any info on the subject would be much appreciated.
|
| ADAM
|
|
|
|
|
 
D

dcdon

Thank you Dave,
I appreciate you and will report back.

don


This link may help.

http://www.eventid.net/display.asp?eventid=17&eventno=855&source=Removable Storage Service&phase=1

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| Hi there,
|
| Recently my pretty bride went out and bot me a prize. She had heard me
talk about
| pen drives, and she just waltzed in with it. It's a Lexar, 128M, USB
1.1(but I
| didn't tell her
| it could have been 2.0; She may have told me that I would complain, if I
were hung
| with a knew Hemp rope) (lit on both end of course). Little humor. BTW, the
little
| drive is so cute.
|
| Checking my Event Viewer for the System, the following Error was
generated. I have
| attached the PrintScreen, which is Error 7, and has the description as,
|
| Type: Error
| Event Source: Removable Storage Service
| Event Category: None
| Event ID: 17
| Date: 4/13/2004
| Time: 3:48:10 PM
| User: N/A
| Computer: InternalCommandHQ
| Description:
| RSM cannot manage library PhysicalDrive1. It encountered an unspecified
error. This
| can be caused by a number of problems including, but not limited to,
database
| corruption, failure communicating with the library, or insufficient system
| resources.
|
| BTW, this is when the jump-drive is inserted.
|
| When it is removed, I get an information event that is Error 135, and the
| information is thus.
|
| Event Type: Information
| Event Source: Removable Storage Service
| Event Category: None
| Event ID: 135
| Date: 4/13/2004
| Time: 3:48:33 PM
| User: N/A
| Computer: InternalCommandHQ
| Description:
| Received a device interface REMOVAL notification for device:
|
|
\\?\USBSTOR#Disk&Ven_LEXAR&Prod_JUMPDRIVE&Rev_1.30#G249120418010&0#{53f56307-b6bf-11
| d0-94f2-00a0c91efb8b}
| Data:
| 0000: f2 00 00 00 05 00 00 00 ò.......
| 0008: 00 00 00 00 07 63 f5 53 .....cõS
| 0010: bf b6 d0 11 94 f2 00 a0 ¿¶Ð.?ò.
| 0018: c9 1e fb 8b 5c 00 5c 00 É.û?\.\.
| 0020: 3f 00 5c 00 55 00 53 00 ?.\.U.S.
| 0028: 42 00 53 00 54 00 4f 00 B.S.T.O.
| 0030: 52 00 23 00 44 00 69 00 R.#.D.i.
| 0038: 73 00 6b 00 26 00 56 00 s.k.&.V.
| 0040: 65 00 6e 00 5f 00 4c 00 e.n._.L.
| 0048: 45 00 58 00 41 00 52 00 E.X.A.R.
| 0050: 26 00 50 00 72 00 6f 00 &.P.r.o.
| 0058: 64 00 5f 00 4a 00 55 00 d._.J.U.
| 0060: 4d 00 50 00 44 00 52 00 M.P.D.R.
| 0068: 49 00 56 00 45 00 26 00 I.V.E.&.
| 0070: 52 00 65 00 76 00 5f 00 R.e.v._.
| 0078: 31 00 2e 00 33 00 30 00 1...3.0.
| 0080: 23 00 47 00 32 00 34 00 #.G.2.4.
| 0088: 39 00 31 00 32 00 30 00 9.1.2.0.
| 0090: 34 00 31 00 38 00 30 00 4.1.8.0.
| 0098: 31 00 30 00 26 00 30 00 1.0.&.0.
| 00a0: 23 00 7b 00 35 00 33 00 #.{.5.3.
| 00a8: 66 00 35 00 36 00 33 00 f.5.6.3.
| 00b0: 30 00 37 00 2d 00 62 00 0.7.-.b.
| 00b8: 36 00 62 00 66 00 2d 00 6.b.f.-.
| 00c0: 31 00 31 00 64 00 30 00 1.1.d.0.
| 00c8: 2d 00 39 00 34 00 66 00 -.9.4.f.
| 00d0: 32 00 2d 00 30 00 30 00 2.-.0.0.
| 00d8: 61 00 30 00 63 00 39 00 a.0.c.9.
| 00e0: 31 00 65 00 66 00 62 00 1.e.f.b.
| 00e8: 38 00 62 00 7d 00 00 00 8.b.}...
| 00f0: 00 00 ..
|
| Sorry about posting all of this. Please excuse me. I had, and thought it
amy help.
|
| Any thoughts? I have gone to their sight, called a couple folks, and they
didn't
| know.
|
| BTW, I can not find any adverse effects generated by the Event Errors. It
uses the
| Removable Storage Service. This service has not been changed. It is
started
| autmatically, and has the normal dependency of RPC.
|
| Thank you in Advance,
|
| don
| ;o)
|
|
|
|
| | I was looking at my event log this morning, trying to
| figure out why exchange was down when I noticed an event
| that I didn't recognize. The event ID is 20158 and the
| source says Remote Access. In the description box it
| says:
| "The user pppaccount successfully established a
| connection to RAC Connection using the device RACPORT."
| I am running Windows 2000 Server which, as I
| understand, does not have Remote Access, only terminal
| Service. We are running Exchange 2000 and Norton
| Antivirus corporate Edition. Does anyone know what this
| event means and why it occured?
|
| Any info on the subject would be much appreciated.
|
| ADAM
|
|
|
|
|
 
D

dcdon

Dave,

I read through all of the posts concerning this media, but nothing really was clear
to fix it.

I proceeded by stopping RPC, and changing it "manual" start. Then went back to plug
in the pen drive, and did not have any Error. Afterward, left clicked the icon,
which appears in the System Tray, and removed the unit without any Event Error.

I thank you for responding. As before, I am in your debt.

don
================

Thank you Dave,
I appreciate you and will report back.

don


This link may help.

http://www.eventid.net/display.asp?eventid=17&eventno=855&source=Removable Storage Service&phase=1

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| Hi there,
|
| Recently my pretty bride went out and bot me a prize. She had heard me
talk about
| pen drives, and she just waltzed in with it. It's a Lexar, 128M, USB
1.1(but I
| didn't tell her
| it could have been 2.0; She may have told me that I would complain, if I
were hung
| with a knew Hemp rope) (lit on both end of course). Little humor. BTW, the
little
| drive is so cute.
|
| Checking my Event Viewer for the System, the following Error was
generated. I have
| attached the PrintScreen, which is Error 7, and has the description as,
|
| Type: Error
| Event Source: Removable Storage Service
| Event Category: None
| Event ID: 17
| Date: 4/13/2004
| Time: 3:48:10 PM
| User: N/A
| Computer: InternalCommandHQ
| Description:
| RSM cannot manage library PhysicalDrive1. It encountered an unspecified
error. This
| can be caused by a number of problems including, but not limited to,
database
| corruption, failure communicating with the library, or insufficient system
| resources.
|
| BTW, this is when the jump-drive is inserted.
|
| When it is removed, I get an information event that is Error 135, and the
| information is thus.
|
| Event Type: Information
| Event Source: Removable Storage Service
| Event Category: None
| Event ID: 135
| Date: 4/13/2004
| Time: 3:48:33 PM
| User: N/A
| Computer: InternalCommandHQ
| Description:
| Received a device interface REMOVAL notification for device:
|
|
\\?\USBSTOR#Disk&Ven_LEXAR&Prod_JUMPDRIVE&Rev_1.30#G249120418010&0#{53f56307-b6bf-11
| d0-94f2-00a0c91efb8b}
| Data:
| 0000: f2 00 00 00 05 00 00 00 ò.......
| 0008: 00 00 00 00 07 63 f5 53 .....cõS
| 0010: bf b6 d0 11 94 f2 00 a0 ¿¶Ð.?ò.
| 0018: c9 1e fb 8b 5c 00 5c 00 É.û?\.\.
| 0020: 3f 00 5c 00 55 00 53 00 ?.\.U.S.
| 0028: 42 00 53 00 54 00 4f 00 B.S.T.O.
| 0030: 52 00 23 00 44 00 69 00 R.#.D.i.
| 0038: 73 00 6b 00 26 00 56 00 s.k.&.V.
| 0040: 65 00 6e 00 5f 00 4c 00 e.n._.L.
| 0048: 45 00 58 00 41 00 52 00 E.X.A.R.
| 0050: 26 00 50 00 72 00 6f 00 &.P.r.o.
| 0058: 64 00 5f 00 4a 00 55 00 d._.J.U.
| 0060: 4d 00 50 00 44 00 52 00 M.P.D.R.
| 0068: 49 00 56 00 45 00 26 00 I.V.E.&.
| 0070: 52 00 65 00 76 00 5f 00 R.e.v._.
| 0078: 31 00 2e 00 33 00 30 00 1...3.0.
| 0080: 23 00 47 00 32 00 34 00 #.G.2.4.
| 0088: 39 00 31 00 32 00 30 00 9.1.2.0.
| 0090: 34 00 31 00 38 00 30 00 4.1.8.0.
| 0098: 31 00 30 00 26 00 30 00 1.0.&.0.
| 00a0: 23 00 7b 00 35 00 33 00 #.{.5.3.
| 00a8: 66 00 35 00 36 00 33 00 f.5.6.3.
| 00b0: 30 00 37 00 2d 00 62 00 0.7.-.b.
| 00b8: 36 00 62 00 66 00 2d 00 6.b.f.-.
| 00c0: 31 00 31 00 64 00 30 00 1.1.d.0.
| 00c8: 2d 00 39 00 34 00 66 00 -.9.4.f.
| 00d0: 32 00 2d 00 30 00 30 00 2.-.0.0.
| 00d8: 61 00 30 00 63 00 39 00 a.0.c.9.
| 00e0: 31 00 65 00 66 00 62 00 1.e.f.b.
| 00e8: 38 00 62 00 7d 00 00 00 8.b.}...
| 00f0: 00 00 ..
|
| Sorry about posting all of this. Please excuse me. I had, and thought it
amy help.
|
| Any thoughts? I have gone to their sight, called a couple folks, and they
didn't
| know.
|
| BTW, I can not find any adverse effects generated by the Event Errors. It
uses the
| Removable Storage Service. This service has not been changed. It is
started
| autmatically, and has the normal dependency of RPC.
|
| Thank you in Advance,
|
| don
| ;o)
|
|
|
|
| | I was looking at my event log this morning, trying to
| figure out why exchange was down when I noticed an event
| that I didn't recognize. The event ID is 20158 and the
| source says Remote Access. In the description box it
| says:
| "The user pppaccount successfully established a
| connection to RAC Connection using the device RACPORT."
| I am running Windows 2000 Server which, as I
| understand, does not have Remote Access, only terminal
| Service. We are running Exchange 2000 and Norton
| Antivirus corporate Edition. Does anyone know what this
| event means and why it occured?
|
| Any info on the subject would be much appreciated.
|
| ADAM
|
|
|
|
|
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top