CSRSS.exe, Terminal services and password issues

Discussion in 'Computer Support' started by stoland, Jan 26, 2006.

  1. stoland

    stoland Guest

    We are having serious issues Auts wide where we have lost Terminal
    Service Connection to the Domain Controllers.

    Hot fixes will not run that we have been sent and we are worried about
    an reboot.

    Need help in a resolution

    Errors on the local Member Server in event viewer are as below

    Event Type: Warning
    Event Source: SceCli
    Event Category: None
    Event ID: 1202
    Date: 25/01/2006
    Time: 7:51:52 PM
    User: N/A
    Computer: xxxxx
    Description:
    Security policies were propagated with warning. 0x4b8 : An extended
    error has occurred.

    For best results in resolving this event, log on with a
    non-administrative account and search http://support.microsoft.com for
    "Troubleshooting Event 1202s".

    -----

    Event Type: Warning
    Event Source: SpntLog
    Event Category: (4)
    Event ID: 222
    Date: 25/01/2006
    Time: 7:42:21 PM
    User: NT AUTHORITY\SYSTEM
    Computer: xxxxx
    Description:
    The description for Event ID ( 222 ) in Source ( SpntLog ) cannot be
    found. The local computer may not have the necessary registry
    information or message DLL files to display messages from a remote
    computer. You may be able to use the /AUXSOURCE= flag to retrieve this
    description; see Help and Support for details. The following
    information is part of the event: D:\Program
    Files\BackupExec\NT\ECM\bumodule.jar, 100.

    -----

    Event Type: Error
    Event Source: EventSystem
    Event Category: (3)
    Event ID: 4097
    Date: 25/01/2006
    Time: 7:36:33 PM
    User: N/A
    Computer: xxxxxx
    Description:
    The description for Event ID ( 4097 ) in Source ( EventSystem ) cannot
    be found. The local computer may not have the necessary registry
    information or message DLL files to display messages from a remote
    computer. You may be able to use the /AUXSOURCE= flag to retrieve this
    description; see Help and Support for details. The following
    information is part of the event: .\eventsystem2.cpp, 329, 800705AA.

    -----

    Event Type: Error
    Event Source: Userenv
    Event Category: None
    Event ID: 1000
    Date: 25/01/2006
    Time: 7:36:32 PM
    User: NT AUTHORITY\SYSTEM
    Computer: xxxxxx
    Description:
    Windows cannot create a temporary profile directory. Contact your
    network administrator.

    DETAIL - Insufficient system resources exist to complete the requested
    service.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Warning
    Event Source: SpntLog
    Event Category: (4)
    Event ID: 211
    Date: 25/01/2006
    Time: 7:26:07 PM
    User: NT AUTHORITY\SYSTEM
    Computer: xxxxxx
    Description:
    The description for Event ID ( 211 ) in Source ( SpntLog ) cannot be
    found. The local computer may not have the necessary registry
    information or message DLL files to display messages from a remote
    computer. You may be able to use the /AUXSOURCE= flag to retrieve this
    description; see Help and Support for details. The following
    information is part of the event:
    F:\software\Symantec.Norton.Ghost.v9.0.Incl.Keygen-SSG.zip,
    nortonghost90p4.rar, 2.

    -----

    Event Type: Warning
    Event Source: MRxSmb
    Event Category: None
    Event ID: 3019
    Date: 25/01/2006
    Time: 7:19:51 PM
    User: N/A
    Computer: xxxxx
    Description:
    The redirector failed to determine the connection type.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Information
    Event Source: Application Popup
    Event Category: None
    Event ID: 26
    Date: 25/01/2006
    Time: 7:13:40 PM
    User: N/A
    Computer: xxxxxx
    Description:
    Application popup: Explorer.EXE - Application Error : The instruction
    at "0x7831886a" referenced memory at "0x00000000". The memory could not
    be "read".

    Click on OK to terminate the program

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Information
    Event Source: Application Popup
    Event Category: None
    Event ID: 26
    Date: 25/01/2006
    Time: 7:13:03 PM
    User: N/A
    Computer: xxxxxxx
    Description:
    Application popup: File Error : Cannot find NETWORK.DRV

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Warning
    Event Source: Srv
    Event Category: None
    Event ID: 2022
    Date: 25/01/2006
    Time: 7:03:18 PM
    User: N/A
    Computer: xxxxxxx
    Description:
    The server was unable to find a free connection 9 times in the last 60
    seconds. This indicates a spike in network traffic. If this is
    happening frequently, you should consider increasing the minimum number
    of free connections to add headroom. To do that, modify the
    MinFreeConnections and MaxFreeConnections for the LanmanServer in the
    registry.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    -----

    Event Type: Information
    Event Source: Application Popup
    Event Category: None
    Event ID: 26
    Date: 25/01/2006
    Time: 6:57:34 PM
    User: N/A
    Computer: xxxxxxx
    Description:
    Application popup: csrss.exe - Unable To Locate DLL : The dynamic link
    library winsrv could not be found in the specified path Default Load
    Path.

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.
     
    stoland, Jan 26, 2006
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.