virtualization

Blue Screen (SYSTEM_SERVICE_EXCEPTION) on WS08R2

Posted on Updated on

One of our Remote Desktop Session Hosts (RDSHs) experienced a blue screen (Blue Screen of Death or BSoD) a few weeks ago. I didn’t actually see the BSoD, but I was aware due to the following event being logged in the System event log at boot time (after the BSoD had occurred of course):

Event ID: 1001

Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x0000003b (0x0000000080000003, 0xfffff880050a88eb, 0xfffff88007224d10, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 060112-27736-01.

Source: BugCheck

Level: Error

User: N/A

Computer: YOUR_SYSTEM

Logged: DATE_AND_TIME

Task Category: None

Keywords: Classic

OpCode: Info Read the rest of this entry »

Advertisements

Remote Desktop Session Host has a BSOD (PAGE_FAULT_IN_NONPAGED_AREA)

Posted on Updated on

One of our Remote Desktop Session Hosts (RDSHs) experienced a blue screen (Blue Screen of Death or BSoD) a few weeks ago. I didn’t actually see the BSOD, but I was aware due to the following event being logged in the System event log at boot time (well, only after the BSOD had occurred of course):

Event ID: 1001

Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x00000050 (0xfffffa803f166210, 0x0000000000000000, 0xfffff8800b7257e7, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 050212-24320-01.

Source: BugCheck

Level: Error

User: N/A

Computer: YOUR_SYSTEM

Logged: DATE_AND_TIME

Task Category: None

Keywords: Classic

OpCode: Info Read the rest of this entry »

DCOM timeout error (TSTheme)

Posted on Updated on

On some systems the following error appears in the System event log:

Event ID: 10010

Description: The server {AAC1009F-AB33-48F9-9A21-7F5B88426A2E} did not register with DCOM within the required timeout.
Source: DistributedCOM

Level: Error

User: N/A

Computer: YOUR_SYSTEM

Logged: DATE_AND_TIME

Task Category: None

Keywords: Classic

OpCode: Info Read the rest of this entry »

DCOM error related to WSRM

Posted on Updated on

(or what you need to know about DCOM and WSRM)

On some systems the following error appears in the System event log:

Event ID: 10016

Description: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

{E8BCFFAC-B864-4574-B2E8-F1FB21DFDC18}

and APPID

{0643C58D-5861-4F0C-AE82-FC867CCEDD7A}

to the user DOMAIN\USER SID (SID) from address LocalHost (Using LRPC). This security permission can be modified using the Component Services administrative tool.

Source: DistributedCOM

Level: Error

User: DOMAIN\USER

Computer: YOUR_SYSTEM

Logged: DATE_AND_TIME

Task Category: None

Keywords: Classic

OpCode: Info Read the rest of this entry »

Windows Startup Application (wininit.exe) loads custom libraries

Posted on Updated on

My Remote Desktop Session Hosts (RDSHs) show the following warning in the System event log at boot time:

Event ID: 11

Description: Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

Source: Wininit

Level: Warning

User: SYSTEM

Computer: YOUR_SYSTEM

Logged: DATE_AND_TIME

Task Category: None

Keywords:

OpCode: Info Read the rest of this entry »

rdpdd.dll not supported by pnterm

Posted on Updated on

My Remote Desktop Session Hosts (RDSHs) have pieces of the vWorkspace client installed. vWorkspace is a product from Quest Software (well, it was a product from Provision Networks, but Quest Software took them over) and is a software package meant to extend RDS with extra broker functionality, web access, its own hosted application virtualization (like RemoteApp), and so forth. It’s an alternative to Citrix’ XenDesktop/XenApp.

On those servers I see the following warning event logged in the System event log after a startup of the system:

Event ID: 1

Description: Provision Networks Termianl Services started!

rdpdd.dll (version 6.1.7601.17514) is not supported.

File Signature: 6.1.7601.17514.F3919A6179F54F548B8BBCC35191CADC1
Source: pnterm

Level: Warning

User: N/A

Computer: YOUR_SYSTEM

Logged: DATE_AND_TIME

Task Category: None

Keywords: Classic

OpCode: Info Read the rest of this entry »

DFSS doesn’t work as expected

Posted on Updated on

ATTENTION: this blog post is a replacement for a previous blog post about the same topic (https://windoh.wordpress.com/2012/01/24/dfss-gets-disabled-automatically). In my previous blog post not every piece of information was correct. I’ve done some more research and I have new information about this topic. That’s why I have written a completely new article. Please ignore my previous blog post completely!

Dynamic Fair Share Scheduling (DFSS) is a new feature for a Remote Desktop Session Host (RDSH) (so only on Windows Server 2008 R2) and is enabled by default when the RDSH role is installed. Read the rest of this entry »