RE: event id 7023

Hello Dan,

Thank you for posting to the SBS Newsgroup.

I understand that you got Event ID 7023 on your SBS 2K3 Server. If I have
misunderstood your issue, please let me know.

There are various factors may cause error 7023. Please take your time to
read through my suggestions below. If the issue persists, please help me to
gather more detail information for research:

1. Check whether the following Registry key is missing or not populated:

On the server, type "regedit" (without quotation marks). Expand to
Hkey_Local_Machine/System/CurrentControlSet/Services/LanManServer/Parameters

To resolve this issue, import this key from a working server and/or add the
keys manually.

The following entries are located in the Parameters key:

Name: autodisconnect
Type: REG_DWORD
Data: 0xf

Name: enableforcedlogoff
Type: REG_DWORD
Data: 0x1

Name: enablesecuritysignature
Type: REG_DWORD
Data: 0x1

Name: requiresecuritysignature
Type: REG_DWORD
Data: 0x1

Name: restrictnullsessaccess
Type: REG_DWORD
Data: 0x1

Name: NullSessionPipes
Type: REG_MULTI_SZ
Data: COMNAP
COMNODE
SQL\QUERY
SPOOLSS
EPMAPPER
LOCATOR
TrkWks
TrkSvr

Name: NullSessionShares
Type: REG_MULTI_SZ
Data: COMCFG
DFS$

Name: ServiceDll
Type: REG_EXPAND_SZ
Data: %SystemRoot%\System32\srvsvc.dll

Name: Lmannounce
Type: REG_DWORD
Data: 0

Name: Size
Type: REG_DWORD
Data: 0x3

Name: Guid
Type: REG_BINARY
Data:
<Restore Data key from a backup>.

Name: DisableDownLevelTimewarp
Type: REG_DWORD
Data: 0

If you cannot find these Value Names, please go to Edit -> New, and
manually create them.

2. On the server, search the file wkssvc.dll, and check whether it is
located at C:\Windows\System32. If not, you need to exact them from the
Setup CD into the folders C:\Windows\System32 and
C:\Windows\System32\DllCache. To do so, please see:

a) On the server, go to Start, run "msconfig", click "OK" and you are in
the "System Configuration Utility".
b) Select "General" tab, check "Normal Startup - load all device drivers
and service" and click "Expand File".
c) Specify the file you would like to restore in "File to restore".
d) In the "Restore from" blank, type "x:\i386" (where x is the CD-Drive).
e) In the "Save file in" blank, type "C:\windows\system32" (I assumed that
the system partition is C).
f) Click "Expand" and finish rest of the part.
g) Repeat step c), d), in the "Save file in" blank, type
"C:\windows\system32\DllCache"

After finishing steps above, open a command window, type "regsvr32
C:\Windows\System32\wkssvc.dll" (without quotation marks) to re-register
the .dll file again.

If this file already exists, you may open a Command Prompt window, rename
it by using the command "rename wkssvc.dll wkssvc.old", perform the above
steps to extract the file, reboot the server and then register it.

If the issue persists after you have performed all the steps above, please
help to gather the following information for further research:

1. Run "eventvwr" (without quotation marks) on the server, check there is
any other error, if yes, double click the error, click the Copy button, and
paste the full content of the error to the Newsgroup.

2. What is the version of your SBS server, have you installed any service
packs or updates on it?

3. Does your server work well? If no, please fully describe what exactly
issue your server have got.

I am appreciated your time and hope this information helps. If you have any
further questions or concerns on this issue, please feel free to let me
know. I am looking forward to hearing from you.

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
From: "Dan Booth" <dboothatoxspringdotcom>
Subject: event id 7023
Date: Thu, 23 Feb 2006 13:57:49 -0000
Lines: 8
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-RFC2646: Format=Flowed; Original
Message-ID: <ejPtjEIOGHA.3924@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: mail.oxspring.com 81.174.230.29
Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:246847
X-Tomcat-NG: microsoft.public.windows.server.sbs

Anyone know how to solve an Event ID: 7023 "The Workstation service
terminated with the following error: The specified module could not be
found" (on SBS2003 Std)?

Thanks.





.