cluberti

Yes, with cache disabled, it's very slow. However, you don't necessarily need to disable the PROCESSOR'S cache, you need to disable the BIOS caching and BIOS shadowing.

You can't generally do what you're wanting to do without the FSRM from R2.

I'd say avast is a good alternative to nod32, but if you require nod32 perhaps you can contact them and tell them your problem . Glad to hear you figured it out.

Have you Searched The Forums or the internet? Seems this has been discussed before, with limited success.

OK, but kernel-mode drivers don't unload when their user-mode services are disabled. Can you uninstall your firewall and antivirus software to remove the kernel-mode drivers and retest?

Do you have any firewall software installed?

The system process spikes in safe mode - hmmm... OK, how long do these spikes last? We know they occur every 5 seconds, but how long do they last?

If the bar utility works, then the problem is not Vista but Outlook 2007. Have you been able to get 2007 to work with your ISP on an XP machine, by chance?

Yes - load balancing or auto failover of multiple WAN interfaces is much more complicated than it sounds, especially if your upstream provider(s) are not involved providing CEF or Multilink PPP for your interfaces (and if they are, you're probably using higher-end Cisco routing equipment anyway).

Unless you're doing a 1-1 NAT (most consumer-grade routers call this the "DMZ host"), then all incoming unsolicited traffic will get dropped. If you have a 1-1 NAT (or a machine set as the "DMZ host"), then all incoming packets that do not have a NAT map request from another machine (unsolicited packets) get routed to the "DMZ host" by default. So your answer is, unless you've configured a DMZ host, incoming UDP packets that are unsolicited will be dropped at the external interface of the router.

Since the system process is a representation of kernel-mode activity, spiking CPU in the system process can literally be anything at all installed on the machine with kernel-mode components (like firewall, antivirus, antispyware, backup software, etc). The real question is, does it repro in safe mode?

DNS between AD domain controllers syncs on AD synch, unless configured otherwise.

You could run "ipconfig /flushdns" followed by "ipconfig /registerdns"

It's a redirector limit due to kernel memory constraints, and if you can't replace the software, you're pretty much stuck. Perhaps you could replace the backend server with a Unix box running Samba and try that, as there are some hacks for linux and bsd kernels to allow up to 64K connections per session.

You can use the Group Policy Management Console to back up group policy objects to a file for later import.

Note you need a custom SFC_OS.dll for these to even work, as the inbox .dll doesn't use these settings anymore. As to the wallpaper, I add my own during install. I have a $OEM$\$$\Web\Wallpaper folder in my source that contains my wallpaper .bmp, and I drop a .reg file in on boot that sets it in HKCU and HKU\.DEFAULT.

The users will need to be admins if they are going to install drivers for devices that don't have signed drivers. The inbox USB drivers are obviously signed, so allowing the Load and Unload device drivers right shouldn't affect this. When you plug in a USB device as an admin and it installs, check the device in device manager (specifically the driver) to see if it is signed or not. Note that there's no way around this, either, as the machine does an ACL check on your account (not your account's rights) to determine whether or not you can install drivers that are either non PNP and/or not signed. If it's not signed, you're SOL. If it's not PNP, it checks the Load and Unload device drivers right in GP. However, if it's a PNP driver but not signed, only admins can install those.

Are you using the same drivers as the previous install for your network components? Also, if you boot into safe mode, do you have the shutdown problem there?

The bugcheck error you are seeing is actually a kernel mode exception not handled bugcheck, due to the c000001d error: STATUS_ILLEGAL_INSTRUCTION # {EXCEPTION} # Illegal Instruction # An attempt was made to execute an illegal instruction. Assuming this is during an install (or right after), and you haven't installed any additional drivers or software, you should definitely try the basics as the others here have said. Also, this is a fairly common bugcheck with older machines with older BIOS levels, and can be caused by BIOS memory caching or shadowing (try disabling those, btw). Otherwise, upgrade the BIOS or try a different hard disk (yes, the BIOS and the hard disk together do matter if it's an old BIOS). Good luck, and with that machine, I'd stay sticking to Win98 would be best. It'd be painful to run WinXP without heavily nlite'ing it.

The error you're getting is: ERROR_MOD_NOT_FOUND The specified module could not be found. I would strongly suggest running process monitor while attempting to launch the application, and then see what files it says are "Not Found" or "Access Denied", as that will tell you what it's trying to use but cannot find or access.

If you can answer these questions, perhaps we can help. Since we know a reinstall did not resolve it, it's probably not a bad install causing this. Hopefully you can answer these questions: 1. Does WMP use up 85%+ CPU while it's not doing anything at all, or does it only occur when playing media files? 2. Did WMP 10 have this issue as well, or only WMP 11? 3. Is it always the same type of files that produce this issue, or do all media files produce this (if you can, please test this!) 4. If you download Media Player Classic and install it, and run the same media files inside MPC, do you get the same CPU issues with the mplayerc.exe binary in task manager? If the issue doesn't occur with mpc, then it's definitely a WMP11 problem - however, if you can produce the same CPU usage issues with mpc as with WMP11, then it's a codec problem. In any case, we'll probably need to gather a dump of the wmplayer.exe process when it's consuming the CPU to be entirely certain.

The first service pack for any client OS will likely generate more installs in corporate environments, thus more money, thus Microsoft is not going to hide anything. Also, the Vista SP1 codebase is the same as the Server 2008 codebase, so SP1 will not be officially released until around the time of the Server 2008 release, which won't be until Q4 of this year or Q1 of next.

The error you are seeing is related to SRV work item quota, not a quota on disk or any other resource: ERROR_WORKING_SET_QUOTA How are you copying these files? Is it through Windows Explorer, or some other file copy utility? Also, are these machines on a wireless LAN, or connected via a wired switch or hub? There are a few things in Vista which may affect the issue - UAC can be involved, as can Windows Defender. If you disable both of those temporarily, do the file copy issues persist? Also, have you made sure that you've uninstalled your antivirus product, to make sure that we aren't seeing a VirtualLock() issue here from the product's filter driver? The only other thing I would suggest you try is using an application other than Windows Explorer to copy the files, like robocopy from the resource kit, and see if the problem reproduces using that utility as well.

Not only that, but the event logs are completely memory-mapped, so disk hits are minimal. Memory-mapped files bypass the paging file when I/O operations are requested on them, and only sections of the file that are requested for use at the time are "mapped" and used, decreasing I/O. Also, I/O from memory-mapped files is committed to disk via the cache manager, so a committed I/O write isn't necessarily written to disk right then and there, but written to disk at a later time at a lazy interval (unless the FlushViewOfFile function is used, in which case we do just that if possible). For those who care, you can read more about how memory-mapped files work here, or bust out your handy "Windows Internals, 4th Edition" book (and I suppose if you do care about this, you've probably already read many times over chapter 7 anyway ).

This is a kernel constraint in 32bit Windows (and unix), and while you can somewhat easily modify this on most *nix systems, you are not able to modify this limit in Windows. The SRV redirector allows 16K files open per machine between a server and client, unless the users requesting the files are logged into a 2000 or 2003 server in true Terminal Services mode (not TS admin mode), in which case this is 16K files open per TS session to the remote server, rather than per machine. You can't change this, so I'd suggest finding a different way to use the bookkeeping program, or find a different program that doesn't require so many open files per user (perhaps one that uses a real database as a back-end, instead of flat files???????). So unless this is just a horridly-written application that does "bad things" on Windows, you've obviously outgrown this solution .