MS event 7023,20035

[BILL4444]

I am getting these events about 3 times a minute.Service Control
Manager-event ID 7023 comes up first. Then RASMEN comes up with event ID
20035.They come up in the event viewer/system.Not sure if this means anything
in event viewer/application I get USERENV 1517. This happens when I close
the computer down.

 

[Ǝиçεl]

Hello Bill,

Use Disk Cleanup
<http://support.microsoft.com/kb/310312>

CCleaner - When Disk Cleanup is no longer enough
<http://www.vista4beginners.com/CCleaner>
-=-

Scan your disks for errors
<http://support.microsoft.com/kb/315265>
-=-

Defragment your hard drives
<http://support.microsoft.com/kb/314848>


Do all three in the order given.


Good luck
-=-

 

[Jose]

I am getting these events about 3 times a minute.Service Control
Manager-event ID 7023 comes up first. Then RASMEN  comes up with event ID
20035.They come up in the event viewer/system.Not sure if this means anything
 in event viewer/application I get USERENV 1517. This happens when I close
the computer down.

What version of XP and what Service Pack?

Double click the event of interest to open it. The Description box
has a link to click that will look up the information on the Microsoft
WWW site. There might not be a really good idea, but at least you can
say that you tried looking at it.

The best way to post Event Log information is to copy and paste single
event of interest by double clicking the event to open it, clicking
the copy event details to clipboard button (underneath the up and down
arrow buttons) and then pasting the results where you want (here).

Does your event say RASMEN or RASMAN? By pasting the actual event
contents, you can eliminate unnecessary questions and typos.

Here is an example of what your events of interest need to look like
when pasted:

Event Type: Success Audit
Event Source: Security
Event Category: System Event
Event ID: 517
Date: 8/1/2009
Time: 11:42:39 AM
User: NT AUTHORITY\SYSTEM
Computer: MYCOMPUTER
Description:
The audit log was cleared
Primary User Name: SYSTEM
Primary Domain: NT AUTHORITY
Primary Logon ID: (0x0,0x3E7)
Client User Name: WINDOWS
Client Domain: MYCOMPUTER
Client Logon ID: (0x0,0xD3DD)

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[BILL4444]

I have XP PRO SP 3,

GA-EP45-UD3P,VGA HIS H485QX512P,
CORS
TWIN2X4096-8500C5D,
INTEL/C2D E8500 3.16G 775 45N,
SS-650HT 650W ,
Hitachi HDS721010KLA330
IT/ ST 7K 32M SATA2 ST31000340AS,
Plextor PX-800A (IDE),
ATAPI iHAS120 6 (SATA)

Event
Date: Source: Service Control Manager
Time: 9:56:46AM Category None
Type: Error Event ID: 7023
User: N/A
Computer: HOME
Description:
The Remote Access Connection Manager Service terminated with the following
error:
Acces s is denied.



Event

Date 7/2912009 Source : Rasman
Time: 9:57:20 AM Category: NONE
None
Type:
User: Error
N/A Event ID: 20035

Computer : HOME
Description:
Remote Access Connection Manager failed to start because it could not create
buffers. Restart the computer. Access is denied.

 

[Jose]

I have XP PRO SP 3,

GA-EP45-UD3P,VGA HIS H485QX512P,                                            
                                                             CORS
TWIN2X4096-8500C5D,
INTEL/C2D E8500 3.16G 775 45N,
SS-650HT 650W ,
Hitachi HDS721010KLA330
IT/ ST 7K 32M SATA2 ST31000340AS,
Plextor PX-800A (IDE),
ATAPI iHAS120 6 (SATA)

Event
Date:   Source: Service Control Manager
Time:   9:56:46AM   Category None
Type:   Error   Event ID: 7023
User:   N/A
Computer: HOME
Description:
The Remote Access Connection Manager Service terminated with the following
error:
Acces s is denied.

Event                  

Date    7/2912009         Source :      Rasman
Time:   9:57:20 AM      Category: NONE
                        None
Type:
User:   Error
N/A     Event ID:       20035

Computer  : HOME
Description:
Remote Access Connection Manager failed to start because it could not create
buffers. Restart the computer. Access is denied.

Very good. The first messages from the RPC system and the USERENV
1517 at logoff are not related. We'll get to the 1517 annoyance
later.

How are you fixed for anti virus, firewall software - something that
running with for real time protection? McAfee, Zone Alarm, etc.
anything like that that has a firewall separate from the built in one
for XP?

If you are running your computer in a home environment where you have
no interest in connecting to other computers on a network and there is
no file server or domain involved (like in an office) you do not need
the RPC service to be running. We could figure out how to make it
run, but it is not needed if it is just you and your computer.

Click Start, Run and enter services.msc in the box and click OK to
launch the Services applet. Highlight and open the Remote Access
Connection Manager item and pay attention to the General, Log On and
Recovery tab settings. Write them down in case you need to change
them back later.

Set the Remote Access Connection Manager Service to Manual. The
Remote Access Auto Connection Manager should also be set to Manual.

OK your way out, reboot and see how that goes.

If for some reason you are unable to get back on the Internet, change
the Service(s) back to the way they were and reboot.

 

[BILL4444]

I am running ZA security suite,with firewall,anti virus (8.0.298-uptodate).
the Remote access connection manager is on MANUAL and CAN'T BE changed.The
error #5 comes up if you try and change it.
The remote access auto connection manager is on MANUAL and can't be
changed.The error 1068 comes up.
Copied the tabs of each (general,log on,recovery) to paint and saved for
future reference.

 

[Jose]

I am running ZA   security suite,with firewall,anti virus (8.0.298-uptodate).
the Remote access connection manager is on MANUAL and CAN'T BE changed.The
error #5 comes up if you try and change it.
The remote access auto connection manager is on MANUAL and can't be
changed.The error 1068 comes up.
 Copied the tabs of each (general,log on,recovery) to paint and saved for
future reference.

Do you see these errors when you try to start the service? You don't
need to start the service.

I am confused because you said you get "these events" about three
times a minute and listed, now you say when you try to start them you
get the error 5. DOS error 5 is access denied, usually a permissions
thing. We could make it start, but you don't need it.

Are you trying to start the service to try to relieve messages in the
Event Log for some reason and THEN see the error 5 or do you keep
seeing the error 5 in the Event Viewer? Both?

Was your event log post from one of those events or from when you
tried to start the service?

Now, personally, I particulalry don't care for ZA or it's firewall.
It carries a reputation for being a resource hog and interfering with
the built in XP firewall. Especially any real time protection. Some
people however, think it is great.

The "rule" for most folks is pick one firewall or the other, but never
both. The XP firewall is adequate for most users.

You would try to disable all of ZA or at least the firewall and see
how that goes. Turn it back on later if you want.

I am suspicious of ZA and it's firewall and will never use it - ever.

 

[BILL4444]

First I had tried shutting down ZA to see if it would help and it didn't.
With the RAACM ,RACM both on manual I tried to see if I could start one or
both.I couldn't. I received these error when trying to start either one of
those.The event log was from one of those events and not when I tried to
start them.
The only way I was able to stop these events from happening was to go
back 4 weeks with and older registry backup(ERUNT-old program).With these
events some how MS restore stopped working.Don't know if there was any
relationship between.
Still don't know why these events were happening.If you have any thoughts
of what might of caused this problem ,so in future I could fix,I would
welcome any IDEAS. So far its been about 12 HOURS and no events,execpt the
one in application -USERNEV-1517