View Single Post
  #2  
Old 01-05-2006, 05:58 AM
Thomas Wendell
 
Posts: n/a
Default Re: Faulting application services.exe... faulting module esent.dll.. Help!

You could try NetSwitcher?
http://www.netswitcher.com/


--
************************************************** ****
Most learned on these newsgroups
Tumppi, Helsinki, FINLAND
(translations from/to FI not always accurate)
************************************************** ****




"rfrendreiss" <rfrendreiss.1zl0lz@pcbanter.net> kirjoitti
viestissä:rfrendreiss.1zl0lz@pcbanter.net...
>
> Thanks for all of your responses. I am getting this error too on a
> laptop that was removed from the domain. There is a need to be able to
> remove yourself from one domain and add to another, especially if you
> travel to different companies and do consulting work. I have to change
> my domain constantly. Perhaps Microsoft could change their app to allow
> multiple domain connection configuration.... Oh well. Anyway thanks
> for the fix ideas. I have tried them and am waiting to see if I still
> get this message. Hopefully Microsoft will decide to put a fix out
> there for this.
> Jeff Vandervoort Wrote:
>> And, at this writing at least, the bug still does not appear to be
>> documented on Microsoft's Knowledge Base. I've requested that it be
>> added...for whatever that's worth.
>>
>> --
>> Jeff Vandervoort
>> JRVsystems
>> "Bosmm" Bosmm@discussions.microsoft.com wrote in message
>> news:19D71B2A-80BA-4117-AD65-493841DB511F@microsoft.com...
>> I am soo glad I found this post!!!!
>>
>> I too am having the exact same problem. I had users that were
>> disjoined
>> from
>> the Domain when we opened up an outstation. After all my searching for
>> a
>> problem I was convinced it had to be something specific with the
>> "other"
>> network they are now on. I am going to start wading through your fixes
>> and
>> see where I get.
>>
>> There was definately a business reason for removing the computers from
>> the
>> Domain and I would DEFINATELY call this a BUG...
>>
>> Thanks again!
>>
>> "Jeff Vandervoort" wrote:
>>
>> That didn't happen on my test system, but I don't like that
>> workaround
>> anyway...too many side-effects. So I've only done it on one system,
>> just
>> to
>> confirm PSS's results.
>>
>> My suggestion is to create a Startup Script that adds the Restricted
>> Groups
>> to the local SAM instead of using the AD Restricted Groups feature.
>>
>> Also, an update for all lurkers...make sure to append your "me too"
>> message
>> to this thread and keep it alive. I just received a call from MS PSS
>> and
>> they are evaluating the cost-effectiveness of fixing this issue. The
>> guy
>> I
>> spoke to was skeptical that it affected many people...his reasoning
>> was,
>> "How many people disjoin a computer from a domain?". My client has a
>> good
>> reason to do so...how about you? I've given the Google Search URL for
>> this
>> thread to them and have reason to believe it's being monitored. I'm
>> going
>> to
>> forward it again to the PSS contact who's preparing the business case
>> for
>> fixing it. So keep posting, folks!
>>
>> --
>> Jeff Vandervoort
>> JRVsystems
>> "DSipp" DSipp@discussions.microsoft.com wrote in message
>> news:25CAB71F-2D03-404E-84A2-8FCB2DD9BBB0@microsoft.com...
>> How do I move those files? The system says they are locked and in
>> safe
>> mode
>> they are gone?
>>
>> "Jeff Vandervoort" wrote:
>>
>> We're seeing the same thing here; I can confirm the results. And
>> since
>> Tomas
>> posted a reply here, I thought I should too!
>>
>> Tomas' workaround worked for me, too, but while it fixes the
>> ESENT.DLL
>> crash, it has side effects you need to be aware of. If there are
>> other
>> security policies in GPO, they will not be removed when the computer
>> is
>> removed from the domain. The SceCli and Userenv errors will continue
>> (although the SceCli one will change a bit).
>>
>> The only complete solution I know of is not to use Restricted Groups
>> that
>> have domain accounts among their members in a GPO that is in scope
>> for
>> a
>> computer that will be removed from a domain. Fortunately, that was
>> an
>> option
>> for us in this case, with only modest hardship. I haven't done this,
>> yet,
>> but will likely substitute a startup script that adds the group for
>> me
>> and
>> the hardship will disappear; I don't care if the group doesn't get
>> removed
>> when the machine is removed from the domain.
>>
>> On a related note, I opened a Microsoft PSS incident for this. They
>> have
>> reproduced the behavior in their lab. PSS carefully avoided giving
>> me
>> any
>> information about whether they intended to develop a fix; hopefully
>> they
>> will. This strikes me as a significant bug.
>>
>> --
>> Jeff Vandervoort
>> JRVsystems
>> "T0MAS" T0MAS.1q1k2c@ wrote in message
>> news:fPKdndBzirQPjz3fRVn_vg@giganews.com...
>>
>> I have solved same problem with crashing services.exe.
>>
>> User on bussiness trip removed his notebook from domain.
>> He reports problem with error message :
>> Title of window : Services and Controller app
>> in error message: Error signature szAppName: Services.exe .....
>> in event log was event 1000 Faulting application services.exe,
>> version
>> 5.1.2600.2180, faulting module esent.dll, version 5.1.2600.2180,
>> fault
>> address 0x0002334c.
>> After clicking on Close button apears automatic shutdown counter
>> and
>> in
>> 30 seconds system was restarted.
>> This same behaviour repeated several times.
>> In evet log I found misc. events with probably related with this
>> problem:
>>
>> The Group Policy client-side extension Security failed to execute
>> (event 1085)
>> Faulting application services.exe
>> Security policies were propagated with warning. 0x428 (event 1202)
>>
>> in winlogon.log (I have enabled debug for that purpose) I found:
>> ----Configure Group Membership...
>> Configure Administrators.
>> Error 1332: No mapping between account names and security IDs was
>> done.
>> Error occurred during lookup of all accounts.
>>
>> It was seems that some domain policy that contains Restricted group
>> feature remains on notebook and periodically in moment when policy
>> was
>> refreshed caused error with services.exe. I knew that when notebook
>> was
>> removed from domain then domain policy cannot applied to non-member
>> computer.
>> I made several actions : I again joined notebook to domain(then
>> restart) and again I removed it and problem occured again and
>> again.
>> I
>> disabled background policy refresh, I set refresh interval to max
>> value
>> 45 days and nothing helps. When automatic shutdown apears I stoped
>> it
>> every time by command shutdown /a.
>> Every time I found in winlogon.log that some policy tryed manage
>> membership in groups and ends with error because probably did not
>> have
>> access to domain (notebook was removed from domain).
>>
>> I have tryed to check consistency od secedit.sdb by esentutl /g
>> %windir%\Security\Database\Secedit.sdb and all was OK.
>> Excuse my english.
>> After that i crossed my mind that it may not caused by deffective
>> remained domain policy but it may caused by local group policy
>> which
>> contain domain accounts (SIDs). Thats my deduction.
>> After that I moved c:\WINDOWS\security\Database\secedit.sdb and
>> c:\WINDOWS\security\*edb* and c:\WINDOWS\security\*.log to backup
>> folder and after restart local group policy was reseted and after
>> that
>> user confirmed that error never apears and all works fine.
>>
>> In my case (case of one of my users) problem with crashing
>> services.exe
>> and periodical restarts was solved by reseting local group policy
>> (by
>> removing database and related files).
>>
>> When I begin solving of this problem I spent to much time with
>> searching similar problem on Internet but I din't found equal. This
>> page was not usefull exactly in my cause but everytime when I
>> searching
>> on Inet by using misc. search engines I everytime get this page
>> therefore I decided to write my solution here.
>> I have writed in this my article too much informations because each
>> user searching this problem on Internet with miscelaneous with
>> keywords
>> and therefore I writed so much (for search engines too).
>>
>> I hope that same case may happen to someone and my story may helps
>> him.
>>
>> Admin from Slovak Republic (Slovakia not Slovenia)
>>
>>
>> --
>> T0MASPosted from http://www.pcreview.co.uk/ newsgroup access
>>
>>
>>
>>
>>
>>
>>

>
>
> --
> rfrendreiss



Reply With Quote