Terminal services shut down unexpectedly

[Christian P]

Hi!

I've got a strange problem and with my terminal services servers with Citrix
Metaframe Installed.
I get "ESENT Event IDs 1000, 1202, 412, and 454 Are Logged Repeatedly in
the Application Event Log" and I have done the changes in the article
Q278316, but I still get the events on the servers.
And sometimes the reboot unexpectedly which is most anoying for my users.

I've been spoking with Citrix about this problem but the believe it's an
Microsoft problem.

It is Windows 2000 Server, SP2 and Metaframe XP, FR2 and SP2 installed on
the servers.

Does anyone got any ideas?

Regards,

Christian

 

[Buz [MSFT]]

Could try this but you may want to consider calling in if this box is
critical to you:

1. Open the %SystemRoot%\Security folder, create a new folder, and then name
it "OldSecurity".

2. Move all of the files ending in .log from the %SystemRoot%\Security
folder to
the OldSecurity folder.

3. Find the Secedit.sdb file in the %SystemRoot%\Security\Database folder,
and
then rename this file to "Secedit.old".

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Christian P]

Hi Buz!

I've tried the fix you reccomend, but it is still doing the same thing.
I have got a lot of Warnings regarding Group Policy on my Terminal servers,
so I believe that the problem got something to do with it.

Regards,

Christian P

 

[Buz [MSFT]]

Can you upgrade this box to SP4? Also if the server reboots unexpectedaly
then you are likely receiving a STOP error in conjunction with a memory
dump. Perhaps you should pursue that angle further. If possible reply to
this post with the exact details of the errors you are getting. Does this
machine run Exchange? Are the 1000s and 1202s Userenv or ESENT errors as
well?

Is Netbios over Tcp\ip disabled on this machine?

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[Christian P]

Hi Buz!

I've got 4 TS/citrix-servers and they are all going down now and then.
There is no exchange-server installed on theese machines.

I can of course upgrade to SP4 but it's alot of postfixes for Citrix when
applying SP4, but I'll guess I have to do it ;-)

There's a lot of 1000 and 1002 userenv and ESENT errors.

I have not disabled Netbios over tcp/ip!! Should I do that?

Regards,

Christian

 

[Buz [MSFT]]

You can apply SP4 to the boxes, perhaps it is a bug that has been fixed.
This would be the cross-your-fingers route but it shouldn't hurt anything.

Netbios over TCP should already be enabled on these machines.

If your machines are randomly crashing and you have a full memory dump
perhaps you should call into MS Support and get a Setup guy to analyze the
dump.

The good part about that is, if it is happening on 4 machines at the same
time there is a chance that it could be an MS related bug that requires a
Hotfix and Hotfix issues are free. However if it turns out to be something
else or Citrix, expect to be charged.

Perhaps if you post all the details from the "ESENT Event IDs 1000, 1202,
412, and 454 errors you are getting I could assist you further. It is
unlikely that fixing the ESENT issues will fix your randomly rebooting
problem. The random reboots probably caused the database corruption in the
first place and may cause more problems in the future.

I will do a separate post discussing Random Reboots.


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Hi Buz!

I've got 4 TS/citrix-servers and they are all going down now and then.
There is no exchange-server installed on theese machines.

I can of course upgrade to SP4 but it's alot of postfixes for Citrix when
applying SP4, but I'll guess I have to do it ;-)

There's a lot of 1000 and 1002 userenv and ESENT errors.

I have not disabled Netbios over tcp/ip!! Should I do that?

Regards,

Christian

Can you upgrade this box to SP4? Also if the server reboots unexpectedaly
then you are likely receiving a STOP error in conjunction with a memory
dump. Perhaps you should pursue that angle further. If possible reply to
this post with the exact details of the errors you are getting. Does this
machine run Exchange? Are the 1000s and 1202s Userenv or ESENT errors as
well?

Is Netbios over Tcp\ip disabled on this machine?

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Hi Buz!

I've tried the fix you reccomend, but it is still doing the same thing.
I have got a lot of Warnings regarding Group Policy on my Terminal servers,
so I believe that the problem got something to do with it.

Regards,

Christian P


"Buz [MSFT]" <[email protected]> skrev i meddelandet
Could try this but you may want to consider calling in if this box is
critical to you:

1. Open the %SystemRoot%\Security folder, create a new folder, and then
name
it "OldSecurity".

2. Move all of the files ending in .log from the %SystemRoot%\Security
folder to
the OldSecurity folder.

3. Find the Secedit.sdb file in the %SystemRoot%\Security\Database folder,
and
then rename this file to "Secedit.old".

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



Hi!

I've got a strange problem and with my terminal services servers with
Citrix
Metaframe Installed.
I get "ESENT Event IDs 1000, 1202, 412, and 454 Are Logged Repeatedly
in
the Application Event Log" and I have done the changes in the article
Q278316, but I still get the events on the servers.
And sometimes the reboot unexpectedly which is most anoying for my
users.

I've been spoking with Citrix about this problem but the believe

it's

an
Microsoft problem.

It is Windows 2000 Server, SP2 and Metaframe XP, FR2 and SP2 installed
on
the servers.

Does anyone got any ideas?

Regards,

Christian

 

[Buz [MSFT]]

1. A computer running Windows 2000 may restart without warning if it

Bugchecks (a.k.a. Blue Screens or Stops ) you can change this behaviour by

changing the value data in the AutoReboot value to 0 (zero), instead of 1,

in the following key:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CrashControl

Now the computer should show a STOP error of some sort if this is what is

occurring.

Stop errors occurr for numerous different reasons. Is there anything

specific the user is doing when the reboot occurs? Is the error occurring at

night only or at very specific times of the day? If so is there any

automated processes that run and that may be triggering the Stop? If the

reboot is random perhaps there is a memory leak of some sort.

If there is no Stop error and the computer is in fact spontaneously

rebooting you should examine the hardware on this system. Keep in mind that

when you actually get a Stop error the server is working as it should (sort

of). The Operating System is Intentionally stopping itself because a problem

of some sort has been detected that may result in corrupt or lost data.

There may be severe hardware issues (power related?) that cannot be foreseen

by the Operating System and therefore the Stop does not have a chance to

occur.

Search the KB for the parameters of the Stop error (e.g. 0x0000000a...) or

call in to Microsoft and have someone read a full memory dump.

Check the hardware if no Stop occurs. For example perhaps this is heat

related and there may be an option in the BIOS to reboot if the processor

overheats or something.

174630 Windows Restarts Continuously with Blue Screen

http://support.microsoft.com/?id=174630

Buz Brodin

MCSE NT4 / Win2K

Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for

newsgroup purposes only.

 

[Christian P]

Hi Buz!

Didn't see your reply until today. Sorry about that.

I've been struggling with my servers and have tried several things to fix
the problem.
One thing was to reinstall one of my TS/Citrix -servers and see if I got the
same behaviour again after a clean installation.
Therefore I believe it's a user-specific error, because:
1. Servers just reboot randomly during working ours.
2. It's not only on one specific server.

I have seen one blue-screen message when a server rebooted, but this server
rebooted after restarting the server and it was a known issue.
But the server did leave the same message in the event viewer: The previous
shut down was unexpected

The error message was:

The system is shutting down. Please save all work in progress and log off.
Any unsaved changes will be lost. This shutdown was initiated by NT
AUTHORITY\SYSTEM.
The system process C:\WINNT\SYSTEM32\SERVICES.EXE terminated unexpectedly
with status code 128. The system will shut down and restart.

Knowledge Base-article - 318447

There is a registry-fix mentioned in the article but I don't think it will
correct my problem. What do you think?
I believe that it's a user related problem and I'm thinking of deleting all
the profiles for the users which I suspect is causing the problem.
Do you have any ideas how I do this in an easy way?

Best regards,

Christian P

You can apply SP4 to the boxes, perhaps it is a bug that has been fixed.
This would be the cross-your-fingers route but it shouldn't hurt anything.

Netbios over TCP should already be enabled on these machines.

If your machines are randomly crashing and you have a full memory dump
perhaps you should call into MS Support and get a Setup guy to analyze the
dump.

The good part about that is, if it is happening on 4 machines at the same
time there is a chance that it could be an MS related bug that requires a
Hotfix and Hotfix issues are free. However if it turns out to be something
else or Citrix, expect to be charged.

Perhaps if you post all the details from the "ESENT Event IDs 1000, 1202,
412, and 454 errors you are getting I could assist you further. It is
unlikely that fixing the ESENT issues will fix your randomly rebooting
problem. The random reboots probably caused the database corruption in the
first place and may cause more problems in the future.

I will do a separate post discussing Random Reboots.


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Hi Buz!

I've got 4 TS/citrix-servers and they are all going down now and then.
There is no exchange-server installed on theese machines.

I can of course upgrade to SP4 but it's alot of postfixes for Citrix when
applying SP4, but I'll guess I have to do it ;-)

There's a lot of 1000 and 1002 userenv and ESENT errors.

I have not disabled Netbios over tcp/ip!! Should I do that?

Regards,

Christian

Can you upgrade this box to SP4? Also if the server reboots unexpectedaly
then you are likely receiving a STOP error in conjunction with a memory
dump. Perhaps you should pursue that angle further. If possible reply to
this post with the exact details of the errors you are getting. Does this
machine run Exchange? Are the 1000s and 1202s Userenv or ESENT errors as
well?

Is Netbios over Tcp\ip disabled on this machine?

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



Hi Buz!

I've tried the fix you reccomend, but it is still doing the same thing.
I have got a lot of Warnings regarding Group Policy on my Terminal
servers,
so I believe that the problem got something to do with it.

Regards,

Christian P


"Buz [MSFT]" <[email protected]> skrev i meddelandet
Could try this but you may want to consider calling in if this box is
critical to you:

1. Open the %SystemRoot%\Security folder, create a new folder, and then
name
it "OldSecurity".

2. Move all of the files ending in .log from the %SystemRoot%\Security
folder to
the OldSecurity folder.

3. Find the Secedit.sdb file in the %SystemRoot%\Security\Database
folder,
and
then rename this file to "Secedit.old".

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no
rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



Hi!

I've got a strange problem and with my terminal services servers with
Citrix
Metaframe Installed.
I get "ESENT Event IDs 1000, 1202, 412, and 454 Are Logged Repeatedly
in
the Application Event Log" and I have done the changes in the article
Q278316, but I still get the events on the servers.
And sometimes the reboot unexpectedly which is most anoying for my
users.

I've been spoking with Citrix about this problem but the believe it's
an
Microsoft problem.

It is Windows 2000 Server, SP2 and Metaframe XP, FR2 and SP2 installed
on
the servers.

Does anyone got any ideas?

Regards,

Christian

 

[Buz [MSFT]]

Thanks for the exact error it is very helpful:

1. 315105 Error Message: SERVICES.EXE Terminated Unexpectedly with Status
Code 128
http://support.microsoft.com/?id=315105

2. 318447 "SERVICES.EXE Terminated Unexpectedly with Status Code 128" Error
http://support.microsoft.com/?id=318447

3. This cna be caused by a corrupted document sitting in the print queue for
your default
printer.

Note: If you look at the printer, you may notice 1 or more documents
pending.
However, when you attempt to view the documents, you may either get the
above error
(restarting the computer) or you will notice that the documents are just
"gobly gook".

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
<>
*** Resolution ***

RESOLUTION
==========

To resolve this behavior, do the following:

1. Open printer properties and delete the problematic printer.

2. If this is a network printer, contact the network administrator to purge
the
print queue.

Sometimes the print queue can be cleared by deleting the printer and
turning the
printer off.
Otherwise, double-click the printer (to open the print queue), click on
Printer,
and select "Cancel all documents"

3. Restart the computer (and printer if applicable) and reinstall the
printer.

MORE INFORMATION
================

As a work around, you can install an alternate printer and set it as the
default.
The error is generated when the problematic printer is set as the default
for the
print subsystem.

4. CAUSE
======
Too many sids are asscociated with the logon as a service rights in default
dc
policy.
We found that by enabling winlogon logging.
Those sids are associated with deleted accounts.

RESOLUTION
============
Deleted all those sids from logon as a service rights and reapply the
policy.

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
<>

The most common cause is by registry corruption, most commonly under the
HKLM\System\CurrentControlSet\Services\Lanmanserver\Shares key. This can
also be caused by shared printers, Novell Client and older Anti-VIrus
software.

Your problem is most likely occurring because of one of the causes listed
above.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Hi Buz!

Didn't see your reply until today. Sorry about that.

I've been struggling with my servers and have tried several things to fix
the problem.
One thing was to reinstall one of my TS/Citrix -servers and see if I got the
same behaviour again after a clean installation.
Therefore I believe it's a user-specific error, because:
1. Servers just reboot randomly during working ours.
2. It's not only on one specific server.

I have seen one blue-screen message when a server rebooted, but this server
rebooted after restarting the server and it was a known issue.
But the server did leave the same message in the event viewer: The previous
shut down was unexpected

The error message was:

The system is shutting down. Please save all work in progress and log off.
Any unsaved changes will be lost. This shutdown was initiated by NT
AUTHORITY\SYSTEM.
The system process C:\WINNT\SYSTEM32\SERVICES.EXE terminated unexpectedly
with status code 128. The system will shut down and restart.

Knowledge Base-article - 318447

There is a registry-fix mentioned in the article but I don't think it will
correct my problem. What do you think?
I believe that it's a user related problem and I'm thinking of deleting all
the profiles for the users which I suspect is causing the problem.
Do you have any ideas how I do this in an easy way?

Best regards,

Christian P

You can apply SP4 to the boxes, perhaps it is a bug that has been fixed.
This would be the cross-your-fingers route but it shouldn't hurt anything.

Netbios over TCP should already be enabled on these machines.

If your machines are randomly crashing and you have a full memory dump
perhaps you should call into MS Support and get a Setup guy to analyze the
dump.

The good part about that is, if it is happening on 4 machines at the same
time there is a chance that it could be an MS related bug that requires a
Hotfix and Hotfix issues are free. However if it turns out to be something
else or Citrix, expect to be charged.

Perhaps if you post all the details from the "ESENT Event IDs 1000, 1202,
412, and 454 errors you are getting I could assist you further. It is
unlikely that fixing the ESENT issues will fix your randomly rebooting
problem. The random reboots probably caused the database corruption in the
first place and may cause more problems in the future.

I will do a separate post discussing Random Reboots.


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Hi Buz!

I've got 4 TS/citrix-servers and they are all going down now and then.
There is no exchange-server installed on theese machines.

I can of course upgrade to SP4 but it's alot of postfixes for Citrix when
applying SP4, but I'll guess I have to do it ;-)

There's a lot of 1000 and 1002 userenv and ESENT errors.

I have not disabled Netbios over tcp/ip!! Should I do that?

Regards,

Christian

"Buz [MSFT]" <[email protected]> skrev i meddelandet
Can you upgrade this box to SP4? Also if the server reboots unexpectedaly
then you are likely receiving a STOP error in conjunction with a memory
dump. Perhaps you should pursue that angle further. If possible

reply

to

errors

as

well?

Is Netbios over Tcp\ip disabled on this machine?

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



Hi Buz!

I've tried the fix you reccomend, but it is still doing the same thing.
I have got a lot of Warnings regarding Group Policy on my Terminal
servers,
so I believe that the problem got something to do with it.

Regards,

Christian P


"Buz [MSFT]" <[email protected]> skrev i meddelandet
Could try this but you may want to consider calling in if this

box
is

critical to you:

1. Open the %SystemRoot%\Security folder, create a new folder, and
then
name
it "OldSecurity".

2. Move all of the files ending in .log from the %SystemRoot%\Security
folder to
the OldSecurity folder.

3. Find the Secedit.sdb file in the %SystemRoot%\Security\Database
folder,
and
then rename this file to "Secedit.old".

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no
rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



Hi!

I've got a strange problem and with my terminal services servers
with
Citrix
Metaframe Installed.
I get "ESENT Event IDs 1000, 1202, 412, and 454 Are Logged
Repeatedly
in
the Application Event Log" and I have done the changes in the
article
Q278316, but I still get the events on the servers.
And sometimes the reboot unexpectedly which is most anoying

for

my

 

[Christian P]

Hi Buz!

I think this will solve my problem!
Going to look into this immediately.

I will send you an e-mail when I have tried it!!

Regards,

Christian

Thanks for the exact error it is very helpful:

1. 315105 Error Message: SERVICES.EXE Terminated Unexpectedly with Status
Code 128
http://support.microsoft.com/?id=315105

2. 318447 "SERVICES.EXE Terminated Unexpectedly with Status Code 128" Error
http://support.microsoft.com/?id=318447

3. This cna be caused by a corrupted document sitting in the print queue for
your default
printer.

Note: If you look at the printer, you may notice 1 or more documents
pending.
However, when you attempt to view the documents, you may either get the
above error
(restarting the computer) or you will notice that the documents are just
"gobly gook".

<>
*** Resolution ***

RESOLUTION
==========

To resolve this behavior, do the following:

1. Open printer properties and delete the problematic printer.

2. If this is a network printer, contact the network administrator to purge
the
print queue.

Sometimes the print queue can be cleared by deleting the printer and
turning the
printer off.
Otherwise, double-click the printer (to open the print queue), click on
Printer,
and select "Cancel all documents"

3. Restart the computer (and printer if applicable) and reinstall the
printer.

MORE INFORMATION
================

As a work around, you can install an alternate printer and set it as the
default.
The error is generated when the problematic printer is set as the default
for the
print subsystem.

4. CAUSE
======
Too many sids are asscociated with the logon as a service rights in default
dc
policy.
We found that by enabling winlogon logging.
Those sids are associated with deleted accounts.

RESOLUTION
============
Deleted all those sids from logon as a service rights and reapply the
policy.

<>

The most common cause is by registry corruption, most commonly under the
HKLM\System\CurrentControlSet\Services\Lanmanserver\Shares key. This can
also be caused by shared printers, Novell Client and older Anti-VIrus
software.

Your problem is most likely occurring because of one of the causes listed
above.

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Hi Buz!

Didn't see your reply until today. Sorry about that.

I've been struggling with my servers and have tried several things to fix
the problem.
One thing was to reinstall one of my TS/Citrix -servers and see if I got the
same behaviour again after a clean installation.
Therefore I believe it's a user-specific error, because:
1. Servers just reboot randomly during working ours.
2. It's not only on one specific server.

I have seen one blue-screen message when a server rebooted, but this server
rebooted after restarting the server and it was a known issue.
But the server did leave the same message in the event viewer: The previous
shut down was unexpected

The error message was:

The system is shutting down. Please save all work in progress and log off.
Any unsaved changes will be lost. This shutdown was initiated by NT
AUTHORITY\SYSTEM.
The system process C:\WINNT\SYSTEM32\SERVICES.EXE terminated unexpectedly
with status code 128. The system will shut down and restart.

Knowledge Base-article - 318447

There is a registry-fix mentioned in the article but I don't think it will
correct my problem. What do you think?
I believe that it's a user related problem and I'm thinking of deleting all
the profiles for the users which I suspect is causing the problem.
Do you have any ideas how I do this in an easy way?

Best regards,

Christian P

requires

a

Hotfix and Hotfix issues are free. However if it turns out to be something
else or Citrix, expect to be charged.

Perhaps if you post all the details from the "ESENT Event IDs 1000, 1202,
412, and 454 errors you are getting I could assist you further. It is
unlikely that fixing the ESENT issues will fix your randomly rebooting
problem. The random reboots probably caused the database corruption in the
first place and may cause more problems in the future.

I will do a separate post discussing Random Reboots.


Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.










Hi Buz!

I've got 4 TS/citrix-servers and they are all going down now and then.
There is no exchange-server installed on theese machines.

I can of course upgrade to SP4 but it's alot of postfixes for Citrix when
applying SP4, but I'll guess I have to do it ;-)

There's a lot of 1000 and 1002 userenv and ESENT errors.

I have not disabled Netbios over tcp/ip!! Should I do that?

Regards,

Christian

"Buz [MSFT]" <[email protected]> skrev i meddelandet
Can you upgrade this box to SP4? Also if the server reboots
unexpectedaly
then you are likely receiving a STOP error in conjunction with a memory
dump. Perhaps you should pursue that angle further. If possible

reply

to
this post with the exact details of the errors you are getting. Does
this
machine run Exchange? Are the 1000s and 1202s Userenv or ESENT

errors

as
well?

Is Netbios over Tcp\ip disabled on this machine?

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no
rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.



Hi Buz!

I've tried the fix you reccomend, but it is still doing the same
thing.
I have got a lot of Warnings regarding Group Policy on my Terminal
servers,
so I believe that the problem got something to do with it.

Regards,

Christian P


"Buz [MSFT]" <[email protected]> skrev i meddelandet
Could try this but you may want to consider calling in if this box
is
critical to you:

1. Open the %SystemRoot%\Security folder, create a new folder, and
then
name
it "OldSecurity".

2. Move all of the files ending in .log from the
%SystemRoot%\Security
folder to
the OldSecurity folder.

3. Find the Secedit.sdb file in the %SystemRoot%\Security\Database
folder,
and
then rename this file to "Secedit.old".

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and

confers

no is
for for