Hi all
I'm having a issue which is extreme hard to resolve.
We have a virtual Windows 2008 R2 Server, which has the PDC-Role, WSUS, DNS, DHCP, Fileservice & Printservices, in our company. My boss merged an older snaphot with the vhd a few days before. After that action the server starts up as usual, but as he
tried to log on, he got a 0x00000050 STOP Bluescreen "PAGE_FAULT_IN-NONPAGED_AREA".
In this situation we have no possibility to get into the OS. The strange thing is, that the server runs completely without errors or warnings, besides the missing possibility to log on to it. In safe mode I'm able to log in, but I can't find any reason for
the error. CHKDSK (/f /r) runs without finding any errors. My investigation brought me to too KB articels which possible could resolve my problem. These are KB966319 and KB951418.
KB966319:
This issue occurs when the computer contains corrupted user profiles.
Windows Server 2008 and Windows Vista SP1 try to correct profiles when the profiles are corrupted. However, the registry self-correcting feature incorrectly calculates a structure size. Therefore, the system accesses an invalid memory address.
KB951418:
This issue occurs because of a timing issue in the Server service driver. This timing issue involves the operation that adds a new SMB session to the global session table and the operation that closes an SMB session. In this timing issue, the Server service
driver synchronizes these operations incorrectly. When this behavior occurs, an SMB session is added to the global session table after the session is deleted. Therefore, an entry in the global session table references freed memory. When the freed memory is
accessed, you receive the Stop error message that is mentioned in the "Symptoms" section.
Both hotfixes topics are fitting to the situation I have on this server. Unfortunately I don't get them installed. I tried to do this with psexec with different options. All attempts writing the whole command in one line (psexec -u <username> -p <password>
wusa.exe C:\TEMP\Windows6.1-KB951418-x64.msu /quiet /log:c:\TEMP\wusa.log) are terminating with an access denied in the wusa.log and in the event viewer. If I start the command box remote with (psexec -u <LOGIN> -p <PASSWORD>
\\<server> cmd.exe) and then type the wusa commands separate, get me to a frozen command box, just like that, that apears, if you get a graphical dialog. This should not be, if I start the command with the /quiet switch.
So I got no resolution out of that. If I start the server in safe mode I have no possibility to install anything with wusa.exe - the service is not running in safe mode. Unfortunately I'm not able bringing the hotfixes to the machine over import to WSUS,
too. The server is the WSUS server and the wsusadmin webconsole is not found. (Don't know if this feature ever was running...?)
Our plan B is to set up a new server to get into the domain and getting the FSMO-roles transfered... but I'm still unhappy with leaving this case unsolved.
Do you have any ideas, from the point of the error message till to the point of installing the hotfixes?
I'm really thankful.
Juergen
