Re: SBS Restarting!! DS Promotion? and Other such problems



Michael,

You might be interested in this:

http://groups.google.com/group/microsoft.public.windows.server.general/browse_thread/thread/228d7e333ad6f9a9/d11d1acb345c588f?lnk=st#anchor_9df45d32609c58c4

Michael Tovey wrote:
Hello all,

I have what i think is a very big problem.

I have come inthis morning to find that Our SBS server is powered down....
After carming the MD down and unplugging the power and leaving for a min' I
got the server back up and running. I checked the Logs on the server and
found some very strange errors, like the below.

"The configuration information of the performance library
"C:\WINDOWS\system32\inetsrv\w3ctrs.dll" for the "W3SVC" service does not
match the trusted performance library information stored in the registry. The
functions in this library will not be treated as trusted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.";

"The data buffer created for the "MSExchangeIS" service in the "C:\Program
Files\Exchsrvr\bin\mdbperf.dll" library is not aligned on an 8-byte boundary.
This may cause problems for applications that are trying to read the
performance data buffer. Contact the manufacturer of this library or service
to have this problem corrected or to get a newer version of this library.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.";

"A provider, PerfProv, has been registered in the WMI namespace,
ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the
HostingModel property. This provider will be run using the LocalSystem
account. This account is privileged and the provider may cause a security
violation if it does not correctly impersonate user requests. Ensure that
provider has been reviewed for security behavior and update the HostingModel
property of the provider registration to an account with the least privileges
possible for the required functionality.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.";


"MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC
will continue to function and will use the existing security settings. Error
Specifics: d:\nt\com\complus\dtc\dtc\adme\uiname.cpp:9280, Pid: 1088
No Callstack,
CmdLine: C:\WINDOWS\system32\msdtc.exe

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.";


Sry for all the wordy bit.

The one that I have the biggest problem understanding is the DC problem, I
have done nothing with teh server for months and apart from the odd restart
both planned and unplanned these is not reason that I can see for this.

I'm wondering if i have a Hacker! what is the best way to check?

"Successful Network Logon:
User Name: ServerName$
Domain: Domain
Logon ID: (0x0,0x3CF6A2)
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name:
Logon GUID: {e6854fc2-4474-29c2-ebd7-1cbfcc544f75}
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.x.x
Source Port: 0


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.";


Should I be worried about this I have heard, i think, that if you have an
error 540 that this can be a problem.

I hope that someone can helpme because im getting a little twitch here. :)

Thanks
--
SBS 2003 - Admin
SVR 2003 - Admin
SQL 2005 - Admin

.



Relevant Pages

  • Re: Perflib errors in event logs after SP2 installation
    ... the server does seem to be working fine. ... System account is a potential security risk. ... Policy provider runs under the Local System account, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot start services
    ... The solution in my case....once I got the server back in the domain I copied ... see Help and Support Center at ... | A provider, PerfProv, has been registered in the WMI namespace, ... | will be run using the LocalSystem account. ...
    (microsoft.public.windows.server.general)
  • SBS Restarting!! DS Promotion? and Other such problems
    ... I have come inthis morning to find that Our SBS server is powered down.... ... see Help and Support Center at ... This provider will be run using the LocalSystem ...
    (microsoft.public.windows.server.sbs)
  • RE: Server Performance Report: No Server Specifications shown
    ... Please go ahead to test the reinstallation of the Monitoring and Reporting. ... Microsoft Online Partner Support ... >This account is privileged and the provider may cause a security violation ... On the Component Selection page, in the Action column, change Server ...
    (microsoft.public.windows.server.sbs)
  • RE: Printer Redirects, But No Output
    ... On local machine, login as Admin. ... > the TS server and client is able to access the printer from applications. ... see Help and Support Center at ...
    (microsoft.public.win2000.termserv.apps)