H
Hans-Jochen Trost
All,
I am trying to track down hang-ups and blue screens (0xD1 and others,
usually reporting IRQL_NOT_LESS_OR_EQUAL) on home-built machines that
are run under Windows 2000 Professional. Please bear with me, the
explanation of what I know and don't know has become a little lengthy.
"Home-built machine" means the following hardware:
- PC/104+ format cpu card, pentium 166 MHz, 128 MB, MMX, Intel
network chip
- PC/104+ format frame grabber
- PC/104 format serial expansion card(s)
- 40 GB Western Digital IDE harddrive
- 48x or similar IDE CD
- Mitsumi floppy
- USB connection to PC/104 motion controller (separate stack).
Network driver is installed, usually no external connection made, for
the sake of a software licensing scheme we have to use.
This beast controls a printing machine and is not meant to be a
general service computer, even though it may see, e.g., MS Office
pieces (foremost Excel) installed.
When looking through the processes running on the various machines, I
found with SP3 only two instances of svchost.exe, driving
- RpcSs,
- Netman.
With SP4, there are three instances of svchost.exe, driving
- RpcSs,
- EventSys,Netman,NtmsSvc,RasMan,SENS,TapiSrv
- wuauserv
I suspect that some of the additional services may be responsible for
the hang-ups and blue screens.
I have found all DLLs for those extraneous services, except
"EventSys". I think I can get rid of activities from wuauserv by
disabling the Automatic Windows Update. I think that RpcSs and Netman
can and should stay active. That leaves the other services in the
second instance of svchost, which is started with the command line
parameters "-k netsvcs". I know how to get into Administrator
Tools->Services and create a mess there.
Questions:
1. What/who is "EventSys"?
2. What does NtmsSvc really do ("Remote Storage Service")? How can I
stop it?
3. What does RasMan really do ("Remote access connection manager")?
How can I stop it?
4. What does SENS really do ("System Event Notification Service")?
How can I stop it?
5. What does TapiSrv really do ("MS Win Telephony Server")? How can
I stop it? (Actually, I think I located this one in
AdminTools->Services and could stop it in its "Properties" page.)
6. If I connect to a Win2k Server LAN, which of the SP4-introduced
services does really need to stay around? The LAN purpose would be
for file exchange and access to remote printers from the PC/104
computer; no interactive remote login to this computer is desired.
I'd appreciate any and all suggestions.
Cheers, Jochen
hjtrost at microfab dot com
Nil nimium studeo, Caesar, tibi velle placere,
nec scire ut an sis albus an ater homo.
Catullus
I am trying to track down hang-ups and blue screens (0xD1 and others,
usually reporting IRQL_NOT_LESS_OR_EQUAL) on home-built machines that
are run under Windows 2000 Professional. Please bear with me, the
explanation of what I know and don't know has become a little lengthy.
"Home-built machine" means the following hardware:
- PC/104+ format cpu card, pentium 166 MHz, 128 MB, MMX, Intel
network chip
- PC/104+ format frame grabber
- PC/104 format serial expansion card(s)
- 40 GB Western Digital IDE harddrive
- 48x or similar IDE CD
- Mitsumi floppy
- USB connection to PC/104 motion controller (separate stack).
Network driver is installed, usually no external connection made, for
the sake of a software licensing scheme we have to use.
This beast controls a printing machine and is not meant to be a
general service computer, even though it may see, e.g., MS Office
pieces (foremost Excel) installed.
When looking through the processes running on the various machines, I
found with SP3 only two instances of svchost.exe, driving
- RpcSs,
- Netman.
With SP4, there are three instances of svchost.exe, driving
- RpcSs,
- EventSys,Netman,NtmsSvc,RasMan,SENS,TapiSrv
- wuauserv
I suspect that some of the additional services may be responsible for
the hang-ups and blue screens.
I have found all DLLs for those extraneous services, except
"EventSys". I think I can get rid of activities from wuauserv by
disabling the Automatic Windows Update. I think that RpcSs and Netman
can and should stay active. That leaves the other services in the
second instance of svchost, which is started with the command line
parameters "-k netsvcs". I know how to get into Administrator
Tools->Services and create a mess there.
Questions:
1. What/who is "EventSys"?
2. What does NtmsSvc really do ("Remote Storage Service")? How can I
stop it?
3. What does RasMan really do ("Remote access connection manager")?
How can I stop it?
4. What does SENS really do ("System Event Notification Service")?
How can I stop it?
5. What does TapiSrv really do ("MS Win Telephony Server")? How can
I stop it? (Actually, I think I located this one in
AdminTools->Services and could stop it in its "Properties" page.)
6. If I connect to a Win2k Server LAN, which of the SP4-introduced
services does really need to stay around? The LAN purpose would be
for file exchange and access to remote printers from the PC/104
computer; no interactive remote login to this computer is desired.
I'd appreciate any and all suggestions.
Cheers, Jochen
hjtrost at microfab dot com
Nil nimium studeo, Caesar, tibi velle placere,
nec scire ut an sis albus an ater homo.
Catullus