cluberti

In the GPO that's affecting the client machines (not users, but machine accounts), go to computer configuration > administrative templates > windows components > windows update You'll notice a policy setting for non-administrators to receive update notifications. Enabling that policy should re-enable what you want.

I personally just make a hardware determination, and copy based on desktop/laptop, and it runs in a vbscript in my RunOnceEx like so: ' // ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ' // Set variables for script ' // Set objShell = CreateObject("WSCript.shell") Const HKEY_LOCAL_MACHINE = &H80000002 strComputer = "." Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _ strComputer & "\root\default:StdRegProv") strKeyPath = "SOFTWARE\Microsoft\Windows\CurrentVersion\Setup" objReg.CreateKey HKEY_LOCAL_MACHINE,strKeyPath Set objWMIService = GetObject("winmgmts:" _ & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2") Set colChassis = objWMIService.ExecQuery _ ("Select * from Win32_SystemEnclosure") ' // ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ' // Determine machine hardware and copy i386 for laptops ' // For Each objChassis in colChassis For Each strChassisType in objChassis.ChassisTypes Select Case strChassisType Case 1 strEntryName = "MACHINETYPE" strValue = "Other" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 2 strEntryName = "MACHINETYPE" strValue = "Unknown" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 3 strEntryName = "MACHINETYPE" strValue = "Desktop" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 4 strEntryName = "MACHINETYPE" strValue = "Low_Profile_Desktop" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 5 strEntryName = "MACHINETYPE" strValue = "Pizza_Box" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 6 strEntryName = "MACHINETYPE" strValue = "Mini_Tower" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 7 strEntryName = "MACHINETYPE" strValue = "Tower" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 8 strEntryName = "MACHINETYPE" strValue = "Portable" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 9 strEntryName = "MACHINETYPE" strValue = "Laptop" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 10 strEntryName = "MACHINETYPE" strValue = "Notebook" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 11 strEntryName = "MACHINETYPE" strValue = "Handheld" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 12 strEntryName = "MACHINETYPE" strValue = "Docking_Station" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 13 strEntryName = "MACHINETYPE" strValue = "All-in-One" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 14 strEntryName = "MACHINETYPE" strValue = "Sub-Notebook" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" Case 15 strEntryName = "MACHINETYPE" strValue = "Space_Saving" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 16 strEntryName = "MACHINETYPE" strValue = "Lunch_Box" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 17 strEntryName = "MACHINETYPE" strValue = "Main_System_Chassis" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 18 strEntryName = "MACHINETYPE" strValue = "Expansion_Chassis" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 19 strEntryName = "MACHINETYPE" strValue = "Sub-Chassis" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 20 strEntryName = "MACHINETYPE" strValue = "Bus_Expansion_Chassis" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 21 strEntryName = "MACHINETYPE" strValue = "Peripheral_Chassis" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 22 strEntryName = "MACHINETYPE" strValue = "Storage_Chassis" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 23 strEntryName = "MACHINETYPE" strValue = "Rack_Mount_Chassis" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case 24 strEntryName = "MACHINETYPE" strValue = "Sealed-Case_PC" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue Case Else strEntryName = "MACHINETYPE" strValue = "Unknown" objReg.SetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strEntryName,strValue objShell.Run "robocopy \\RISserver\REMINST\full_source_xpsp2 %systemdrive%\i386 /E" End Select Next Next

Bingo. I'd guess it's an issue during SPNEGO, perhaps something that's requiring kerberos auth first, and when that fails (and logs the error), falls back to NTLM and works.

And you are correct, it's likely a permissions issue on logon by one of the svchost.exe processes (or a DCOM misconfiguration, as SP1 changes quite a few services to run as NETWORK SERVICE rather than LOCAL SYSTEM).

Note that these stop 0x8E errors are almost always hardware or driver related, so the suggestion of safe mode is a good one - if the issue doesn't occur in safe mode, then it's a driver issue (as most drivers don't load in safe mode). However, if you still experience a stop 0x8E in safe mode, it's likely hardware at fault. Is your system configured for a full memory dump, and is your pagefile on C: and at least RAM+50MB? If so, the next time it happens your machine should create a memory.dmp file in \Windows after the reboot, and if you PM me, I can probably tell you exactly what is happening.

Uninstall the KAV, and run msconfig and disable all non-Microsoft services and all startup items and reboot. Does the problem then persist?

The real question is, which svchost.exe process is running at that PID? It seems odd that the svchost would be doing any logon operations, although reading from that key wouldn't be entirely odd if it were the netsvcs or dcom svchost process. It'll likely be a permissions issue, but we need to know which svchost process is causing it first.

You might want to post this to the RIS subforum of the Unattended Windows forum here, as you'll get more bites .

No problem. I only ask because there are over 100 possible bugchecks, so saying you've got one without saying which makes it a bit hard to troubleshoot . Glad to hear a driver update helped.

I would suggest multiple autologons and runonceex to do this.

Is this happening on all clients, or just some clients? Also, do you have any software installed on these clients that would modify or replace the stock GINA (like PCAnywhere or the Novell client)?

SCSI clusters were the way of NT4.0, and with the advances in HBA/fiber tech, there's really no reason (other than cost) not to go with a fiber solution at this point, especially on busy clusters. Good luck .

What's the bugcheck code, first of all...

Yes, especially before and after - the error should go away when you remove /3GB, but it'd be wise to have the numbers just in case. I've heard so many differing opinions regarding /3GB and /PAE when running a SQL server, and I've heard some say you need /3GB below 16GB of RAM, some say you don't need /3GB at all, etc. It's true that you may need it if you do find your SQL processes running out of their default 2GB process space, but otherwise /3GB shouldn't be used on a SQL server (especially if no other applications on the server can take advantage of the additional 1GB of process space) due to the kernel memory restrictions, which can be exacerbated in a cluster environment which requires more kernel memory to run efficiently. Ultimately, my stance is that I would not recommend use of the /3GB switch with /PAE because of the limitation of kernel mode memory with the /3GB switch, and the use of /3GB with /PAE should only be used when absolutely necessary. With SQL 2005 64bit and Windows Server 2003 x64, it is now much more efficient to upgrade to a 64bit database product on a 64bit OS than to fight with the limitations of the 32bit architecture . This will also apply to Exchange 12 when it's released as well - we've reached a wall with 32bit architectures and the way Windows is able to manage memory, and the only real option to make memory-hungry databases and email servers (etc) is to go to 64bit. Even SQL 2000 SP4 on a Server 2003 x64 box gets the benefit of all 4GB of process space, due to it not being split into 2GB/2GB or 3GB/1GB as with 32bit Windows.

From the horse's mouth: http://support.ap.dell.com/support/edocs/s...c60.htm#1049445

The use of /3GB means you have 50% less kernel paged and nonpaged pool memory available from the start, and if you do a lot of heavy lifting via SQL, you'll find yourself running out of one (or both) relatively quickly. Since SQL is pretty good at it's own memory management your servers haven't crashed or hung with 2019s or 2020s, but you're probably dangerously close all of the time .

Sorry, I probably should've been more forthcoming. You can use ethereal to do just this - http://www.ethereal.com/. Network tracing or monitoring isn't difficult, but I wouldn't call it a novice activity either. You can find pretty good documentation on using ethereal at that site as well on the documentation page.

Where exactly are you seeing this setting, or where did you hear about it? Are you talking about folder redirection?

Usually, when you get an 1130 or 1450, you're out of kernel nonpaged pool or kernel paged pool memory on one of the nodes (or you have some, but not enough available to service the request). I've got a poolmon utility script you can run to get that information from these machines - PM me and I'll provide it for you (it's much better than poolmon.exe, before anyone complains that you can just run poolmon.exe ).

Start > Run > gpedit.msc Computer Configuration > Windows Settings > Scripts > Shutdown

Unfortunately, you really can't. Exchange believes that it should handle mail for domain.*, as it has been configured to do, and as such when you send mail to someone@domain.* it's going to try and find that user in Exchange, not elsewhere. You could get away with this by creating contacts in AD that point to other users, but this would still require them to have an email address that wasn't someone@domain.*.

What exactly happens when you send a message to an external user? We'll need a bit more info (and possibly the headers from a bounced message, if that's what is happening) before we can make anything more than a guess.

One thing you can do, considering the installation of the SSL cert probably isn't necessary (or we also would have trouble accessing the site), is to get a network trace of your machine connecting to the site (well, actually, a trace of the error occurring). You could at least see what is coming "across the wire", and see what kind of HTTP error the server is giving.

Wow - that's a loaded question. What is the purpose of the server(s) you're building? What kind of hardware will the server(s) be running? How many administrators are in the environment? How well do you code (not script)? As to pro's and con's, everyone will have different answers based on their experiences and the experiences of others - personally I prefer Windows 2003 and Debian due to stability and ease of administration, but you'll find just as many users pushing Fedore Core or CentOS, or some other Linux distribution. With all that said, the most important question you should always ask yourself in these scenarios is, what do YOU have experience with? Unless you are able to learn on the job with production systems (and I certainly hope not), go with what you're familiar with first, and learn others in a test environment. I'll say it again, don't test in production!!! Your nights and weekends are not worth it .

I personally get prompted to accept an SSL certificate before I am allowed to view the site. Perhaps you have an old version of the cert, or you have IE locked down too far to accept the cert? I can view the page just fine once I click "Yes" in the cert dialog box, on IE 5.5, IE 6.x, and IE7. Didn't try with Firefox yet, but I'm pretty sure it'll work there too... I would consider turning off friendly errors in IE and then view the page again - at least this time you should get more information, although the error seems to me to be stating that you're not on the ACL for the site - perhaps you need to install their SSL cert into your cert store first, before you'll be allowed access?