| Event Date | 9/29/10 |
| Problem: | Windows XP user reports that they had to use a temporary profile when they logged on. |
| Resolution: | Same error message as reported on 8/31/10 for a different user with USER level
permissions. Rebooting did not resolve the problem but, backing up their existing profile, deleting it and restoring
via RDP did restore profile functionality. The event log showed the following Errors:
Event ID: 1500, Source: Userenv, Type: Error
Windows cannot log you on because your profile cannot be loaded. Check that you are
conencted to the network, or that your network is functioning correctly. If this
problem persists, copntact your network administrator.
DETAIL - Insufficient system resources exist to complete the requested service.
Event ID: 1508, Source: Userenv, Type: Error
Windows was unable to load the registry. This is often caused by insufficient memory
or insufficient rights.
DETAIL - Insufficient system resources exist to complete the requested service. for
C:\Documents and Settings\<username>\ntuser.dat
Computer contined to exhibit an inability to conenct to one printer on the print server
Connect to Printer
You do not have sufficient access to your computer to connect to the selected printer.
This issue is addressed in the next ticket (below).
|
| Reference Issues: | [8/31/10] |
| External Links: | Error message on a Windows Server 2003-based computer: "You do not have sufficient access to your computer to connect to the selected printer" Error Message: You Do Not Have Sufficient Access to Your Machine to Connect to the Selected Printer |
| Event Date | 9/29/10 |
| Problem: | "Windows cannot connect to the printer. Operation failed with error 0x00000002" when adding network printer on Windows 7 |
| Resolution: | Running the following from an Administrative command prompt and then re-adding the printers resulted
in expected operation: net stop spooler net start spooler Internet reports also suggest granting users full permissions to C:\windows\system32\spool\printers. |
| Event Date | 9/29/10 |
| Problem: | Failed disk in mirror (RAID 1) not automatically reported to I.T. |
| Resolution: | IN PROGRESS... Computer Management > Storage > Disk Management > Volume (C:) showed the mirrored volume was in Failed Redundancy (System) status. The System Event Log showed:
Event ID: 2, Source: dmboot, Type: Warning
dmboot: Volume Volume1 (C:) started in failed redundancy mode.
Both disks were shown as online so, we reactivated the disk and after synchronizing the status became, "Healthy".
|
| External Links: | TechNet: A mirrored volume's status is Failed Redundancy. TechNet: Reactivate a mirrored volume |
| Event Date | 9/30/10 |
| Problem: | User encountered fake Microsoft Secuity Essentials (MSE) message |
| Resolution: | The fake message was a convincing replication of an actual MSE messge:
[Fake][Real] Note the missing "What do the alert levels mean?" link, the missing drop down box under "Recomendation:, no short-cut key designators, the slightly font change on thte title and background coloring. Other obvious clues were the inability to open task manager or a command prompt. The rogue process in task manager was "hotfix.exe", located in "%USERPROFILE%\Application Data\hotfix.exe". There was also a batch file in "%USERPROFILE%\Local Settings\Temp\hgksfg.bat" which included the following lines: @echo off :dsfgdfh del "C:\DOCUME~1\DAVIDK~1.BAR\LOCALS~1\Temp\0.4959872508990939.exe" if exist "C:\DOCUME~1\DAVIDK~1.BAR\LOCALS~1\Temp\0.4959872508990939.exe" goto dsfgdfhFollowed instructions in link below to remove infection and normal operation appeared to return and rebuilt shortly thereafter. |
| Reference Issues: | [8/19/09] |
| External Links: | Remove the fake Microsoft Security Essentials Alert (Uninstall Instructions) |
| Event Date | 10/1/10 |
| Problem: | Managing a Windows Server 2008 DHCP Server from the Command Line |
| Resolution: | use the "netsh dhcp" command. Here are some examples: To list the clients using a DHCP scope: netsh dhcp server \\myServer scope 192.168.2.0 show clients Back up DHCP configuration information: netsh dhcp server dump > DHCPconfig.cfg Restoring DHCP configuration from dump: netsh exec DHCPconfig.cfg |
| External Links: | Managing a Windows Server 2008 DHCP Server from the Command Line TechNet: Netsh Technical Reference |
| Event Date | 10/19/10 |
| Problem: | File downloaded from internet is truncated at space character. |
| Resolution: | Repeat from 3/25/10 and for the same website. This is a bug with Microsoft IIS and the simplest solution is to rename the file to its full file name after downloading it. In this case from "999.25019.0036" to "999.25019.0036 - SVR013 - REV 02 - A.zip" or, even better, "999.25019.0036_-_SVR013_-_REV_02_-_A.zip". |
| Reference Issues: | [3/25/10] |
| Event Date | 10/21/10 |
| Problem: | vsftpd shows "426 Failure writing network stream" error. |
| Resolution: | User was attempting to FTP a file from a mounted windows share via a linux/ubuntu vsftpd 2.0.7 server. This problem have been observed in combination with CIFFS mounts and smbmounts (particularly with FAT file systems). If you happen to have your files on a CIFFS mount, or on any other mount that does not support sendfile. To resolve, add a "use_sendfile=NO" line to the vsftpd.conf file. Sample mount commands: sudo -u myFTPuser smbmount //myServer/myShare to /var/ftp/myFTPuser/myDir -o username=myUser,password=myPass,rw,uid=myFTPuser mount.cifs //myServer/myShare /var/ftp/myFTPuser/myDir -o user=myUser%myPass uid=myFTPuser forceuid |
| External Links: | vsftpd 426 “Failure writing network stream” vsftpd wiki vsftpd 2.0.7 FAQ |
