Workstation and Server Services quadruple boot time

[EiEiO]

I've been experiencing outrageous boot up times up to seven minutes in
a laptop that is two weeks old.

I've created a new profile, run virus scans and spyware scans as well
as defrag but nothing seems to help.

Using msconfig, I've narrowed the problem down to the Workstation and
Server Services. When I disable them, I boot in no time. I can start
the services and they start in seconds. But when I load them at start
up, it hangs like crazy.

Can anyone offer a suggestion?

TIA
EiEiO

WIndows xp 2002 sp2
Intel Core 2 duo 3gig memory

 

[Shenan Stanley]

I've been experiencing outrageous boot up times up to seven minutes
in a laptop that is two weeks old.

I've created a new profile, run virus scans and spyware scans as
well as defrag but nothing seems to help.

Using msconfig, I've narrowed the problem down to the Workstation
and Server Services. When I disable them, I boot in no time. I can
start the services and they start in seconds. But when I load them
at start up, it hangs like crazy.

Can anyone offer a suggestion?

TIA
EiEiO

WIndows xp 2002 sp2
Intel Core 2 duo 3gig memory

Why SP2?
Are the drivers up to date - have you checked for newer?
What all is loading at startup?
What do those you purchased the lapto from say?
What antivirus application are you running?
What antispyware applications have you ran?
Was it like this on day one? two? three? 12? 13? 14?
What changed?

 

[Ken Blake, MVP]

I've been experiencing outrageous boot up times up to seven minutes in
a laptop that is two weeks old.

I've created a new profile, run virus scans and spyware scans as well
as defrag but nothing seems to help.

Using msconfig, I've narrowed the problem down to the Workstation and
Server Services. When I disable them, I boot in no time. I can start
the services and they start in seconds. But when I load them at start
up, it hangs like crazy.

Can anyone offer a suggestion?

Read Shenan's reply, which is very good, but let me add the following
standard reply that I make to questions like this:

My personal view is that the attention many people pay to how long it
takes to boot is unwarranted. Assuming that the computer's speed is
otherwise satisfactory, it may not be worth worrying about. Most
people start their computers once a day or even less frequently. In
the overall scheme of things, even a few minutes to start up isn't
very important. Personally I power on my computer when I get up in the
morning, then go get my coffee. When I come back, it's done booting. I
don't know how long it took to boot and I don't care.

However if you do want to address it, it may be because of what
programs start automatically, and you may want to stop some of them
from starting that way. On each program you don't want to start
automatically, check its Options to see if it has the choice not to
start (make sure you actually choose the option not to run it, not
just a "don't show icon" option). Many can easily and best be stopped
that way. If that doesn't work, run MSCONFIG from the Start | Run
line, and on the Startup tab, uncheck the programs you don't want to
start automatically.

However, if I were you, I wouldn't do this just for the purpose of
running the minimum number of programs. Despite what many people tell
you, you should be concerned, not with how *many* of these programs
you run, but *which*. Some of them can hurt performance severely, but
others have no effect on performance.

Don't just stop programs from running willy-nilly. What you should do
is determine what each program is, what its value is to you, and what
the cost in performance is of its running all the time. You can get
more information about these with google searches and asking about
specifics here.

Once you have that information, you can make an intelligent informed
decision about what you want to keep and what you want to get rid of.

Over and above what I say above, I would suspect that you may be
infected with malware. You say you have "run virus scans and spyware
scans," but you say nothing about what software you have used. Please
clarify that; not all anti-virus or anti-spyware programs are equally
good.

 

[Gerry]

Does the problem arise if only one is disabled? Both have other services
which are dependent on them not being disabled, so what you are
attributing to them may actually be caused by a dependent service.

Is your system free from error?

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[EiEiO]

Why SP2? JUst installed SP3
Are the drivers up to date - have you checked for newer? All dirvers ar up to date
What all is loading at startup? Disabled statrt up
What do those you purchased the lapto from say? I havent yet contactesd them
What antivirus application are you running? McAfee
What antispyware applications have you ran? Spybot Search & Destroy
Was it like this on day one?  two?  three? 12? 13? 14?

It was fine until I travelled outside the US and
connected to the internet/vpn via iPass

What changed?

I installed Blackberry Desktop manager and Blackberry
Roxio Media Manager (I have since uninstalled)

 

[EiEiO]

Does the problem arise if only one is disabled? Both have other services
which are dependent on them not being disabled, so what you are
attributing to them may actually be caused by a dependent service.

Is your system free from error?

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.


You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

*************************************************8
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 4:10:48 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 7/3/2009
Time: 4:10:43 PM
User: N/A
Computer: CHI-EIEIO
Description:
Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does
not exist or could not be contacted.
Enrollment will not be performed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 4:10:41 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/3/2009
Time: 4:08:34 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows saved user MYCOMPANY\EiEiO registry while an application or
service was still using the registry during log off. The memory used
by the user's registry has not been freed. The registry will be
unloaded when it is no longer in use.

This is often caused by services running as a user account, try
configuring the services to run in either the LocalService or
NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 3:48:18 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 7/3/2009
Time: 3:48:13 PM
User: N/A
Computer: CHI-EIEIO
Description:
Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does
not exist or could not be contacted.
Enrollment will not be performed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 3:48:12 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/3/2009
Time: 3:45:39 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows saved user MYCOMPANY\EiEiO registry while an application or
service was still using the registry during log off. The memory used
by the user's registry has not been freed. The registry will be
unloaded when it is no longer in use.

This is often caused by services running as a user account, try
configuring the services to run in either the LocalService or
NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 7/3/2009
Time: 3:05:13 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
A provider, Rsop Planning Mode Provider, has been registered in the
WMI namespace, root\RSOP, but did not specify the HostingModel
property. This provider will be run using the LocalSystem account.
This account is privileged and the provider may cause a security
violation if it does not correctly impersonate user requests. Ensure
that provider has been reviewed for security behavior and update the
HostingModel property of the provider registration to an account with
the least privileges possible for the required functionality.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


**************************************************

 

[SC Tom]

Is this computer a member of a business or home network? If not, something
installed thinks it is, and that's where your problem lies. Right-click on
My Computer, Properties, Computer Name, and see if it is listed as Domain or
Workgroup.

SC Tom

Does the problem arise if only one is disabled? Both have other services
which are dependent on them not being disabled, so what you are
attributing to them may actually be caused by a dependent service.

Is your system free from error?

Have a look in the System and Application logs in Event Viewer for
Errors and Warnings and post copies here. Don't post any more than 48
hours ago.


You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Run Event Viewer and double
click on the error you want to copy. In the window, which appears is a
button resembling two pages. Click the button and close Event
Viewer.Now start your message (email) and do a paste into the body of
the message. Make sure this is the first paste after exiting from
Event Viewer.

*************************************************8
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 4:10:48 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 7/3/2009
Time: 4:10:43 PM
User: N/A
Computer: CHI-EIEIO
Description:
Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does
not exist or could not be contacted.
Enrollment will not be performed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 4:10:41 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/3/2009
Time: 4:08:34 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows saved user MYCOMPANY\EiEiO registry while an application or
service was still using the registry during log off. The memory used
by the user's registry has not been freed. The registry will be
unloaded when it is no longer in use.

This is often caused by services running as a user account, try
configuring the services to run in either the LocalService or
NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 3:48:18 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: AutoEnrollment
Event Category: None
Event ID: 15
Date: 7/3/2009
Time: 3:48:13 PM
User: N/A
Computer: CHI-EIEIO
Description:
Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b). The specified domain either does
not exist or could not be contacted.
Enrollment will not be performed.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1054
Date: 7/3/2009
Time: 3:48:12 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows cannot obtain the domain controller name for your computer
network. (The specified domain either does not exist or could not be
contacted. ). Group Policy processing aborted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 7/3/2009
Time: 3:45:39 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
Windows saved user MYCOMPANY\EiEiO registry while an application or
service was still using the registry during log off. The memory used
by the user's registry has not been freed. The registry will be
unloaded when it is no longer in use.

This is often caused by services running as a user account, try
configuring the services to run in either the LocalService or
NetworkService account.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date: 7/3/2009
Time: 3:05:13 PM
User: NT AUTHORITY\SYSTEM
Computer: CHI-EIEIO
Description:
A provider, Rsop Planning Mode Provider, has been registered in the
WMI namespace, root\RSOP, but did not specify the HostingModel
property. This provider will be run using the LocalSystem account.
This account is privileged and the provider may cause a security
violation if it does not correctly impersonate user requests. Ensure
that provider has been reviewed for security behavior and update the
HostingModel property of the provider registration to an account with
the least privileges possible for the required functionality.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


**************************************************

 

[Shenan Stanley]

JUst installed SP3
All dirvers ar up to date
Disabled statrt up
I havent yet contactesd them
McAfee
Spybot Search & Destroy
It was fine until I travelled outside the US and
connected to the internet/vpn via iPass
I installed Blackberry Desktop manager and Blackberry
Roxio Media Manager (I have since uninstalled)

Reading elsewhere - I have to ask an additional question:

Is this machine a member of a domain? Meaning it is not truly a stand-alone
machine but joined to a (usually) business network for the purpose of
sharing resources and administrative control...

Also - although Spybot Search And Destroy is a fantastic application, I
believe you should run "MalwareBytes" and "SuperAntiSpyware" as well. Doing
a full scan with these two applications might uncover the unexpected.

 

[EiEiO]

Hi All,
I was forced to blitz and reinstall WIndows today.
Something got seriously whacked. I lost my VPN, IE wouldnt start,
Outlook was hanging.

I thank you all for your time and your help.

EiEiO