Re: Windows Server 2003 keeps rebooting?

Tech-Archive recommends: Fix windows errors by optimizing your registry



"RPC call service was initiated by NT Authority/Systems. Windows must
restart because remote procedure call (RPC) terminated unexpectedly."

Other possible symptoms:
Two errors below seen everytime Windows is started:

Lsass.exe error, the computer will shutdown in 60 seconds (this window pops
up before logging onto windows)

-or-

When the log on screens pops up and I enter the password it says I can't log
in because the "handle is invalid"

Probable reasons, listed in order of likelihood.
1) A worm such as blaster or a variant such a w32korgo has infected the
machine.
2) A hotfix is needed. See below.

Possible problems with Lsass.exe.

Windows Server 2003-Based Computer Becomes Slow and Unresponsive After
Running for Several Days:
http://support.microsoft.com/?scid=kb;en-us;821008

Computer Does Not Respond to Client Requests After Lsass.exe Stops
Responding:
http://support.microsoft.com/?scid=kb;en-us;821265

The Server Stops Responding and an Access Violation Occurs in Lsass.exe When
the Server Reloads Certain Policy Parameters:
http://support.microsoft.com/Default.aspx?scid=kb;en-us;826819

Reference:
http://www.microsoft.com/security/incident/blast.mspx -- description of
blaster worm
http://www.trendmicro.com/download/dcs.asp -- copy Sysclean and pattern
file into same folder to execute from.
http://www.trendmicro.com/download/pattern.asp
http://www.microsoft.com/smallbusiness/gtm/securityguidance/hub.mspx --
Microsoft security guidance.
http://www.microsoft.com/technet/security/guidance/avdind_0.mspx --
Microsoft AntiVirus Defense-in-depth Guide.

--
Todd J Heron, MCSE
Windows Server 2003/2000/NT; CCA
----------------------------------------------------------------------------
This posting is provided "as is" with no warranties and confers no rights

.



Relevant Pages

  • RE: Stop Error 0x0000008E after logging on locally
    ... > "STOP 0x0000008E" Error Message Occurs When You Upgrade to Windows Server ... > 840216 Stop 0x0000008e error occurs on a server that is running Microsoft ... try a clean boot of the server and see if the issue persists. ...
    (microsoft.public.windows.server.sbs)
  • Re: MSINFO32.exe will not open.
    ... At the command prompt, type net start helpsvc, and then press ENTER. ... Windows Server 2003: ... language versions of Windows Server 2003, such as the Japanese version of ... If the issue persists, please do clean boot on the SBS to narrow ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to list printers, error: 0x800706BF. The remote procedure call failed
    ... the print spooler on Windows 2000 transfers up to 1 MB of data ... The default on Windows Server 2003 is 50 MB. ... the data for the EnumPrinters RPC call can be greater than 1MB. ...
    (microsoft.public.win2000.printing)
  • Re: In-place upgrade from NT to 2003, member server question
    ... I'm aware of the NT4Emulator key, but this is not the answer that I'm ... You say that "based on your experience, you needen't reboot the win2k member ... > use Windows Server 2003 interim Functional Level. ... > sufficient Windows 2k3 domain controllers, ...
    (microsoft.public.windows.server.migration)
  • Re: Installed 2 new hard drives now file copy is very slow
    ... tasks like open a Windows Explorer window and have to wait forever ... You seem to have Windows Server 2003 installed, ... Event Type: Error ... Event Source: Application Error ...
    (microsoft.public.windowsxp.perform_maintain)