Getting “Patrol Read Aborted on PD" warning message on MegaRAID Storage Manager. After research I found that Patrol Read and Consistency Check (CC) was scheduled by controller to run at the same time (which not supposed to happen) on IBM web site if CC and RP are running at the same time I should get " ServeRAID Event Log Message: "Patrol Read can't be started" message. I'm trying to figure out if this error occurs for the same reason or it's related to something else.
I have a question. Server is running Windows Server 2008 R2. Originally had Microsoft .Net4.0 installed on it and I had to upgrade it to 4.5. Now due to some issues I have to uninstall it. My question is, if I will uninstall 4.5 would it automatically roll back to 4.0? 4.0?
Since we rebuilt our servers to windows servers 2008 x64 r2 we have perpetual problems with scheduled backup (shadow copy).
In the Application event log, the following events are logged on both nodes:
The description for Event ID 4112 from source TsmVssPlugin cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
VSS processing encountered error 'VSS_E_UNEXPECTED_PROVIDER_ERROR' in the Volume Shadow Copy API 'AddToSnapshotSet'. For more information, see the IBM Tivoli Storage Manager client error log.
Re installing TSM didn't change anything and still logging same events.
TSM Error log file shows following:
ANS1327W The snapshot operation for 'C:' failed with error code: -1. ANS5250E An unexpected error was encountered. TSM function name : BaStartSnapshot TSM function : initializeSnapshotSet() failed, check Microsoft Application event log for VSS errors TSM return code : -1
I need to find out the firmware version of the NIC(s) on on IBM Windows Server 2008 using CMD, Powershell or by any other means.I also should note that I can't reboot the server to go to bios or use IBM Update Express
Are Symantec Endpoint Protection virus definition files protected by "Protect Symantec security software from being tampered with or shutdown" option?
In other words I want to know if virus definition files have tamper protection in SEP?
I've been noticing that my 40 GB C: drive on the Windows 2008 Server keeps getting filled up. After investigation I found that this is a known issue with SEP described in article TECH180056 on symantec websit: Article URL http://www.symantec.com/docs/TECH180056 Symantec Endpoint Protection 12.1 is holding onto more than one set of definitions at a time, using up additional disk space.As of now definitions folder ballooned to over 9GB and keeps growing slowly with every update. The only way to fix this issue for me is to re-install SEP, but I can't do this since this is a critical server and downtime must be scheduled with great advance. When I'm trying ot remove old definitions it's saying access is denied despite my admin account. And I also can't change Read-only attribute to the folder. Does anyone have any idea how to delete old definitions?
I have a problem with a virtual Windows Server 2008 R2 SP1 server running withing VMWare. The server is running Citrix and also has Symantec Endpoint protection installed. It randomly crashes and goes to BSOD.
Investigating the event log didn't yield any useful information about the cause of the crash. I ran windows debug and generated the report shown below. Apparently it points to a failed driver. The problem is I can't pinpoint what driver is causing it. I'm wondering if anyone can offer some help.
----------
## Bugcheck Analysis ##
SYSTEM_SERVICE_EXCEPTION (3b)
An exception happened while executing a system service routine.
Arguments:
Arg1: 00000000c0000005, Exception code that caused the bugcheck
Arg2: fffff9600008744d, Address of the instruction which caused the bugcheck
Arg3: fffff88007ba3de0, Address of the context record for the exception that caused the bugcheck
Arg4: 0000000000000000, zero.
Debugging Details:
------------------
Page 125923 not present in the dump file. Type ".hh dbgerr004" for details
EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
FAULTING_IP:
win32k!xxxInternalInvalidate+7d
fffff960`0008744d f6473208 test byte ptr [rdi+32h],8
CONTEXT: fffff88007ba3de0 -- (.cxr 0xfffff88007ba3de0)
rax=0000000000000000 rbx=0000000000010485 rcx=0000000000000000
rdx=0000000000000b02 rsi=0000000000000000 rdi=0000000000000000
rip=fffff9600008744d rsp=fffff88007ba47c0 rbp=0000000000000000
r8=0000000000010485 r9=0000000000000000 r10=fffff900000004c0
r11=fffff900c26eac30 r12=0000000000000000 r13=0000000000000001
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl zr na po nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00010246
win32k!xxxInternalInvalidate+0x7d:
fffff960`0008744d f6473208 test byte ptr [rdi+32h],8 ds:002b:00000000`00000032=??
Resetting default scope
DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT
BUGCHECK_STR: 0x3B
PROCESS_NAME: csrss.exe
CURRENT_IRQL: 0
LAST_CONTROL_TRANSFER: from fffff960001351a2 to fffff9600008744d
STACK_TEXT:
fffff880`07ba47c0 fffff960`001351a2 : 00000000`00000000 00000000`00000040 fffffa80`0678d330 00000000`00000000 : win32k!xxxInternalInvalidate+0x7d
fffff880`07ba4840 fffff960`001352a2 : fffffa80`0678d330 00000000`00000000 fffff880`07ba4ca0 fffffa80`06109ab0 : win32k!xxxInternalUserChangeDisplaySettings+0x486
fffff880`07ba4900 fffff960`001330e3 : 00000000`00000000 00000000`00000000 fffff900`c0f9ead0 fffff900`00000040 : win32k!xxxUserChangeDisplaySettings+0x92
fffff880`07ba49f0 fffff960`00115cba : 00000000`00000001 00000000`00aff960 00000000`00000000 ffffffff`ffffffff : win32k!xxxRemoteReconnect+0x6d7
fffff880`07ba4bf0 fffff800`016d9ed3 : fffffa80`06f66b00 fffff880`07ba4ca0 00000000`00000000 00000000`00000000 : win32k!NtUserCallOneParam+0x4e
fffff880`07ba4c20 000007fe`fd1b2aea : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`00aff918 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x000007fe`fd1b2aea
FOLLOWUP_IP:
win32k!xxxInternalInvalidate+7d
fffff960`0008744d f6473208 test byte ptr [rdi+32h],8
SYMBOL_STACK_INDEX: 0
SYMBOL_NAME: win32k!xxxInternalInvalidate+7d
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: win32k
IMAGE_NAME: win32k.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 50e64bda
STACK_COMMAND: .cxr 0xfffff88007ba3de0 ; kb
FAILURE_BUCKET_ID: X64_0x3B_win32k!xxxInternalInvalidate+7d
BUCKET_ID: X64_0x3B_win32k!xxxInternalInvalidate+7d
Followup: MachineOwner
---------