CSRSS.exe, Terminal services and password issues

Discussion in 'Computer Support' started by stoland@ncml.com.au, Jan 26, 2006.

  1. Guest

    We are having serious issues Auts wide where we have lost Terminal
    Service Connection to the Domain Controllers.

    Hot fixes will not run that we have been sent and we are worried about
    an reboot.

    Need help in a resolution

    Errors on the local Member Server in event viewer are as below

    Event Type: Warning
    Event Source: SceCli
    Event Category: None
    Event ID: 1202
    Date: 25/01/2006
    Time: 7:51:52 PM
    User: N/A
    Computer: xxxxx
    Description:
    Security policies were propagated with warning. 0x4b8 : An extended
    error has occurred.

    For best results in resolving this event, log on with a
    non-administrative account and search http://support.microsoft.com for
    "Troubleshooting Event 1202s".

    -----

    Event Type: Warning
    Event Source: SpntLog
    Event Category: (4)
    Event ID: 222
    Date: 25/01/2006
    Time: 7:42:21 PM
    User: NT AUTHORITY\SYSTEM
    Computer: xxxxx
    Description:
    The description for Event ID ( 222 ) in Source ( SpntLog ) cannot be
    found. The local computer may not have the necessary registry
    information or message DLL files to display messages from a remote
    computer. You may be able to use the /AUXSOURCE= flag to retrieve this
    description; see Help and Support for details. The following
    information is part of the event: D:\Program
    Files\BackupExec\NT\ECM\bumodule.jar, 100.

    -----

    Event Type: Error
    Event Source: EventSystem
    Event Category: (3)
    Event ID: 4097
    Date: 25/01/2006
    Time: 7:36:33 PM
    User: N/A
    Computer: xxxxxx
    Description:
    The description for Event ID ( 4097 ) in Source ( EventSystem ) cannot
    be found. The local computer may not have the necessary registry
    information or message DLL files to display messages from a remote
    computer. You may be able to use the /AUXSOURCE= flag to retrieve this
    description; see Help and Support for details. The following
    information is part of the event: .\eventsystem2.cpp, 329, 800705AA.

    -----

    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1000
    Date: 25/01/2006
    Time: 7:36:32 PM
    User: NT AUTHORITY\SYSTEM
    Computer: xxxxxx
    Description:
    Windows cannot create a temporary profile directory. Contact your
    network administrator.

    DETAIL - Insufficient system resources exist to complete the requested
    service.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Warning
    Event Source: SpntLog
    Event Category: (4)
    Event ID: 211
    Date: 25/01/2006
    Time: 7:26:07 PM
    User: NT AUTHORITY\SYSTEM
    Computer: xxxxxx
    Description:
    The description for Event ID ( 211 ) in Source ( SpntLog ) cannot be
    found. The local computer may not have the necessary registry
    information or message DLL files to display messages from a remote
    computer. You may be able to use the /AUXSOURCE= flag to retrieve this
    description; see Help and Support for details. The following
    information is part of the event:
    F:\software\Symantec.Norton.Ghost.v9.0.Incl.Keygen-SSG.zip,
    nortonghost90p4.rar, 2.

    -----

    Event Type: Warning
    Event Source: MRxSmb
    Event Category: None
    Event ID: 3019
    Date: 25/01/2006
    Time: 7:19:51 PM
    User: N/A
    Computer: xxxxx
    Description:
    The redirector failed to determine the connection type.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Information
    Event Source: Application Popup
    Event Category: None
    Event ID: 26
    Date: 25/01/2006
    Time: 7:13:40 PM
    User: N/A
    Computer: xxxxxx
    Description:
    Application popup: Explorer.EXE - Application Error : The instruction
    at "0x7831886a" referenced memory at "0x00000000". The memory could not
    be "read".

    Click on OK to terminate the program

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Information
    Event Source: Application Popup
    Event Category: None
    Event ID: 26
    Date: 25/01/2006
    Time: 7:13:03 PM
    User: N/A
    Computer: xxxxxxx
    Description:
    Application popup: File Error : Cannot find NETWORK.DRV

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Warning
    Event Source: Srv
    Event Category: None
    Event ID: 2022
    Date: 25/01/2006
    Time: 7:03:18 PM
    User: N/A
    Computer: xxxxxxx
    Description:
    The server was unable to find a free connection 9 times in the last 60
    seconds. This indicates a spike in network traffic. If this is
    happening frequently, you should consider increasing the minimum number
    of free connections to add headroom. To do that, modify the
    MinFreeConnections and MaxFreeConnections for the LanmanServer in the
    registry.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Information
    Event Source: Application Popup
    Event Category: None
    Event ID: 26
    Date: 25/01/2006
    Time: 6:57:34 PM
    User: N/A
    Computer: xxxxxxx
    Description:
    Application popup: csrss.exe - Unable To Locate DLL : The dynamic link
    library winsrv could not be found in the specified path Default Load
    Path.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
    , Jan 26, 2006
    #1
    1. Advertising

  2. zarathustra Guest

    gibbered:

    >We are having serious issues Auts wide where we have lost Terminal
    >Service Connection to the Domain Controllers.
    >
    >Hot fixes will not run that we have been sent and we are worried about
    >an reboot.
    >
    >Need help in a resolution
    >
    >Errors on the local Member Server in event viewer are as below
    > The following
    >information is part of the event:
    >F:\software\Symantec.Norton.Ghost.v9.0.Incl.Keygen-SSG.zip,
    >nortonghost90p4.rar, 2.


    Some fuckhead's trafficking in warez on your domain. Go kick their
    arse - _hard_, then employ a decent admin to resolve your issues.
    zarathustra, Jan 28, 2006
    #2
    1. Advertising

  3. Re: Re: CSRSS.exe, Terminal services and password issues

    zarathustra wrote:

    gibbered:
    >
    >
    >Some fuckhead's trafficking in warez on your domain. Go kick their
    >arse - _hard_, then employ a decent admin to resolve your issues.
    >
    >


    Do you want my domain?
    Liza Smorgaborgsson, Jan 30, 2006
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. =?Utf-8?B?aXMgVGVybWluYWwgc2VydmVycyBjb21wYXRpYmxl

    Terminal services and VNC

    =?Utf-8?B?aXMgVGVybWluYWwgc2VydmVycyBjb21wYXRpYmxl, Jan 13, 2005, in forum: Wireless Networking
    Replies:
    2
    Views:
    7,376
    =?Utf-8?B?U3RldmU=?=
    Feb 3, 2005
  2. Tony Sperling

    Re: CSRSS.EXE consuming CPU on startup of XP Pro

    Tony Sperling, Dec 17, 2006, in forum: Windows 64bit
    Replies:
    2
    Views:
    401
    Tony Sperling
    Dec 18, 2006
  3. Replies:
    2
    Views:
    557
  4. oscartheswede

    Multiple redundant csrss.exe processes cause crash

    oscartheswede, Dec 5, 2007, in forum: Windows 64bit
    Replies:
    4
    Views:
    3,937
  5. S K Thilakan

    CSRSS.exe and system taking 100% CPU

    S K Thilakan, Aug 25, 2008, in forum: Windows 64bit
    Replies:
    0
    Views:
    493
    S K Thilakan
    Aug 25, 2008
Loading...

Share This Page