none
Errors on my windows 2008 server

    Question

  • Hello and sorry for my english.

    I have got a windows 2008 R8, all updates installed. It is a domain controlleur, WSUS and antivirus sever. That 's all.

    Sometimes, explorer.exe is in error and i can 't do anything. I can 't click on "start".
    When i try to shudown the server, it is say: "waiting for System Event Notification Service" and the server don 't want shutdown !

    In the serveur i tried lot of errors like this :

    ID 129, source : vhdmp
    The description for Event ID 129 from source vhdmp cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

    If the event originated on another computer, the display information had to be saved with the event.

    The following information was included with the event:

    \Device\RaidPort1


    And after, i have :

     

    ID 3, source : filtermanager :
    Filter Manager failed to attach to volume '\Device\Harddisk1\DR5'.  This volume will be unavailable for filtering until a reboot.  The final status was 0xc03a001c

    i dont know what is the problem ?
    thanks for help

     

    Wednesday, February 23, 2011 9:03 AM

Answers

  • Navigate to following reg key HKLM\SYSTEM\CurrentControlSet\Services\FileScreenFilter Change "START" key to a value of "4" to disable FileScreenFilter driver
    http://www.virmansec.com/blogs/skhairuddin
    Wednesday, February 23, 2011 10:06 AM
  • Please post the thing on symantec and see if they help u
    http://www.virmansec.com/blogs/skhairuddin
    Wednesday, February 23, 2011 11:19 AM
  • Hi,

     

    For the “filtermanager” event error, you can check the following link:

     

    http://www.symantec.com/connect/forums/event-id-4-filtermanager     

     

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Hope it will be helpful. For more information, you can ask Symantec for help as Syed mentioned.

     

    Also, I noticed you said that “explorer.exe is in error and i can 't do anything”, can you write down the exact error here for research. You can check whether this error occurs in Clean Boot mode and Safe Mode to help narrow down the root cause as well.

     

    Thanks.

    Nina


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Thursday, February 24, 2011 9:04 AM
    Moderator

All replies

  • Its not recommended to Install any other applications on the domain controller as you have mentioned you have got AV server also installed on the DC. The error clearly indicated that there is problem with File Screen Filter Driver whicjh is nothing but AV driver. Do you ahve Symantec Installed on the server if yes then probably its the culprit.

     

     


    http://www.virmansec.com/blogs/skhairuddin
    Wednesday, February 23, 2011 9:18 AM
  • "Its not recommended to Install any other applications on the domain controller "
    yes, i know.

     

    "you have got AV server also installed on the DC"
    yes , i have symantec endpoint protection

     

    what i can do ?

    Wednesday, February 23, 2011 9:44 AM
  • Navigate to following reg key HKLM\SYSTEM\CurrentControlSet\Services\FileScreenFilter Change "START" key to a value of "4" to disable FileScreenFilter driver
    http://www.virmansec.com/blogs/skhairuddin
    Wednesday, February 23, 2011 10:06 AM
  • no risk ?

     

    what is the consequence to disable this option ?

    Wednesday, February 23, 2011 10:22 AM
  • Please post the thing on symantec and see if they help u
    http://www.virmansec.com/blogs/skhairuddin
    Wednesday, February 23, 2011 11:19 AM
  • Hi,

     

    For the “filtermanager” event error, you can check the following link:

     

    http://www.symantec.com/connect/forums/event-id-4-filtermanager     

     

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Hope it will be helpful. For more information, you can ask Symantec for help as Syed mentioned.

     

    Also, I noticed you said that “explorer.exe is in error and i can 't do anything”, can you write down the exact error here for research. You can check whether this error occurs in Clean Boot mode and Safe Mode to help narrow down the root cause as well.

     

    Thanks.

    Nina


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Thursday, February 24, 2011 9:04 AM
    Moderator
  • i found that the error :

    "waiting for System Event Notification Service"
    explorer.exe is in error and i can 't do anything

    it is because of process smc.exe so symantec

    Thursday, February 24, 2011 11:12 AM
  • Thanks for the updates that means you werer pointed to the right direction.
    http://www.virmansec.com/blogs/skhairuddin
    Thursday, February 24, 2011 11:25 AM
  • Hi aplcmul - where you able to resolve the ID 129, source:vhdmp error?  I'm seeing the same error every 30 seconds on a Windows 2008 R2 server.  If you were able to resolve it can you point me in the right direction?

    Thanks for your help.

    Tuesday, May 31, 2011 4:27 PM
  • Hello Mr Syed,

    After navigating to the reg key:

    HKLM\SYSTEM\CurrentControlSet\Services

    I can't find FileScreenFilter

    Please, help

    Thank you in advance,

    Garish Shunker,

    Support Admin,

    Orentis Ltd,

    Paris, France

    Tuesday, July 31, 2012 3:46 PM