Error logs - What do these mean?

360bhp · Jan 3, 2011

Looking through Event Viewer, found these following errors. Can anyone please explain what they mean, and how to correct them?

Terminal Service start failed. The relevant status code was Server execution failed

Code:

 [URL="http://www.vistax64.com/#"]-[/URL] <Event xmlns="[B][URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL][/B]">
   [URL="http://www.vistax64.com/#"]-[/URL] <System>
     <Provider Name="[B]Microsoft-Windows-TerminalServices-LocalSessionManager[/B]" Guid="[B]{5d896912-022d-40aa-a3a8-4fa5515c76d7}[/B]" EventSourceName="[B]LSM[/B]" />  

    <EventID  Qualifiers="[B]49152[/B]">1048</EventID> 

    <Version>0</Version> 

    <Level>2</Level> 

    <Task>0</Task> 

    <Opcode>0</Opcode> 

    <Keywords>0x80000000000000</Keywords> 

    <TimeCreated SystemTime="[B]2011-01-03T23:03:54.000Z[/B]" /> 

    <EventRecordID>16814</EventRecordID> 

    <Correlation />  

    <Execution ProcessID="[B]0[/B]" ThreadID="[B]0[/B]" />  

    <Channel>System</Channel> 

    <Computer>PC</Computer> 

    <Security />  

   </System>


  [URL="http://www.vistax64.com/#"]-[/URL] <EventData>
     <Data>Server execution failed</Data> 

   </EventData>


   </Event>

The server {F9A874B6-F8A8-4D73-B5A8-AB610816828B} did not register with DCOM within the required timeout.

Code:

 [URL="http://www.vistax64.com/#"]-[/URL] <Event xmlns="[B][URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL][/B]">
   [URL="http://www.vistax64.com/#"]-[/URL] <System>
     <Provider Name="[B]Microsoft-Windows-DistributedCOM[/B]" Guid="[B]{1B562E86-B7AA-4131-BADC-B6F3A001407E}[/B]" EventSourceName="[B]DCOM[/B]" />  

    <EventID  Qualifiers="[B]49152[/B]">10010</EventID> 

    <Version>0</Version> 

    <Level>2</Level> 

    <Task>0</Task> 

    <Opcode>0</Opcode> 

    <Keywords>0x80000000000000</Keywords> 

    <TimeCreated SystemTime="[B]2011-01-03T23:03:54.000Z[/B]" /> 

    <EventRecordID>16813</EventRecordID> 

    <Correlation />  

    <Execution ProcessID="[B]0[/B]" ThreadID="[B]0[/B]" />  

    <Channel>System</Channel> 

    <Computer>PC</Computer> 

    <Security />  

   </System>


  [URL="http://www.vistax64.com/#"]-[/URL] <EventData>
     <Data Name="[B]param1[/B]">{F9A874B6-F8A8-4D73-B5A8-AB610816828B}</Data>  

   </EventData>


   </Event>

The TermService service terminated with the following error:
Access is denied.

Code:

 [URL="http://www.vistax64.com/#"]-[/URL] <Event xmlns="[B][URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL][/B]">
   [URL="http://www.vistax64.com/#"]-[/URL] <System>
     <Provider Name="[B]Service Control Manager[/B]" Guid="[B]{555908D1-A6D7-4695-8E1E-26931D2012F4}[/B]" EventSourceName="[B]Service Control Manager[/B]" /> 

    <EventID  Qualifiers="[B]49152[/B]">7023</EventID> 

    <Version>0</Version> 

    <Level>2</Level> 

    <Task>0</Task> 

    <Opcode>0</Opcode> 

    <Keywords>0x80000000000000</Keywords> 

    <TimeCreated SystemTime="[B]2011-01-03T23:03:48.000Z[/B]" /> 

    <EventRecordID>16804</EventRecordID> 

    <Correlation />  

    <Execution ProcessID="[B]0[/B]" ThreadID="[B]0[/B]" />  

    <Channel>System</Channel> 

    <Computer>PC</Computer> 

    <Security />  

   </System>


  [URL="http://www.vistax64.com/#"]-[/URL] <EventData>
     <Data Name="[B]param1[/B]">TermService</Data>  

    <Data Name="[B]param2[/B]">%%5</Data> 

   </EventData>


   </Event>

Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

Code:

 [URL="http://www.vistax64.com/#"]-[/URL] <Event xmlns="[B][URL]http://schemas.microsoft.com/win/2004/08/events/event[/URL][/B]">
   [URL="http://www.vistax64.com/#"]-[/URL] <System>
     <Provider Name="[B]Microsoft-Windows-HttpEvent[/B]" Guid="[B]{7b6bc78c-898b-4170-bbf8-1a469ea43fc5}[/B]" EventSourceName="[B]HTTP[/B]" />  

    <EventID  Qualifiers="[B]49152[/B]">15016</EventID> 

    <Version>0</Version> 

    <Level>2</Level> 

    <Task>0</Task> 

    <Opcode>0</Opcode> 

    <Keywords>0x80000000000000</Keywords> 

    <TimeCreated SystemTime="[B]2011-01-03T23:03:06.709Z[/B]" /> 

    <EventRecordID>16725</EventRecordID> 

    <Correlation />  

    <Execution ProcessID="[B]4[/B]" ThreadID="[B]484[/B]" />  

    <Channel>System</Channel> 

    <Computer>PC</Computer> 

    <Security />  

   </System>


  [URL="http://www.vistax64.com/#"]-[/URL] <EventData>
     <Data Name="[B]DeviceObject[/B]">\Device\Http\ReqQueue</Data>  

    <Data Name="[B]SecurityPackage[/B]">Kerberos</Data> 

    <Binary>000004000200300000000000A83A00C00000000000000000000000000000000000000000000000000E030980</Binary>  

   </EventData>


   </Event>

richc46 · Jan 3, 2011

Welcome
This will show you how to analzye and give us the correct Event IDS
How to use event viewer to troubleshoot your computer.
Give me the Event ID and descriptions shown in the second pic.
We will go from there.
We can get the description of the ID and additional information if necessary.

360bhp · Jan 3, 2011

Hi Richard, hope this is what you meant.

Terminal Service start failed. The relevant status code was Server execution failed

The TermService service terminated with the following error:
Access is denied.

Source: Service Control Manager Eventlog Provider
Event ID: 7023

----------------

The server {F9A874B6-F8A8-4D73-B5A8-AB610816828B} did not register with DCOM within the required timeout.

The server {F9A874B6-F8A8-4D73-B5A8-AB610816828B} did not register with DCOM within the required timeout.

Source: DistributedCOM
Event ID: 10010

----------------

The TermService service terminated with the following error:
Access is denied.

Terminal Service start failed. The relevant status code was Server execution failed
.

Source: TerminalServices-LocalSessionManager
Event ID: 1048

----------------

Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

Source: HttpEvent
Event ID: 15016

360bhp · Jan 3, 2011

I've attached a printscreen of some of the errors. It seems a few of these (not sure which ones) occur just before I get a BSOD and a restart.

Another warning from the Event Viewer is:
An error was detected on device \Device\CdRom0 during a paging operation.
Source: cdrom
Event ID: 51

As it would not let me into Vista at all today, I unplugged my IDE HDD, and changed the location of the SATA ports of my HDD and CD-ROM drive. I noticed when I finally got into Vista, the clock was an hour behind, and Vista found and installed the CD-ROM drive which was already installed. Not sure if this is normal.

richc46 · Jan 3, 2011

Most event viewers are filled with errors, warnings and information, only errors need be of concern.
To use the event viewer properly you should refer to it only if you have a problem using the computer. The time of the problem will coincide with the time shown on the viewer to help identifiy.
But to help answer your question

7023

Use this
http://www.chicagotech.net/wineventid.htm
Then you look for the code with the correct description Terminal Service etc
That will bring you to this
Error 10045, 4292, 7023
It refers to installing the SP or other Software. If you are not having problems with your software and this error does not occur many times, its not a problem move on
Its getting late here, so I leave the rest to you.
If you have problems just post and I will try to help

OK Ill do one more
10010
It refers to IE and running slow. Solution use System restore.
Again, not a big problem
http://www.chicagotech.net/netforums/viewtopic.php?t=1238

Regarding the BSOD, event viewer is not the way to go. If you get a BSOD, you give me the minidump report and I will find the precise cause for you. Go to crashes for information that you need to post
http://www.vistax64.com/crashes-debugging/282419-blue-screen-death-bsod-posting-instructions.html

This is an old chart that actually makes reference to XP, but it has never failed me

Any other help with this, Ill be here tomorrow

richc46 · Jan 3, 2011

Error 51 does not seem to be listed
It may be a bit more serious. The problem is with your HD or a CD drive
I would back up everything just in case and then take a HD test
Test Hard Drive HD Diagnostic or this test Hard Drive Diagnostics Tools and Utilities (Storage) - TACKtech Corp.
For any Event ID not listed just Google Event ID

This will probably lead to nothing but go to search and type cmd
In cmd type driverquery
Then look for the driver sptd. If you have it uninstall Daemon, or Alchohol or other virtualization software and use the uninstall tool.
I have seen sptd problems with BSODs before.
http://www.duplexsecure.com/en/faq

360bhp · Jan 4, 2011

Just burning the Samsung HD test to a disc now, and will run it in a minute. Now you mention it, I have seen one or two errors with both the HDD and CD-ROM drive in event viewer. Just cant seem to find them in my log of 17,000 events at the moment.

richc46 · Jan 4, 2011

The important thing is to ascertain, through the tests, if you HD is in danger of imminent failure.

360bhp · Jan 4, 2011

The Samsung Hutil application doesn't boot up from CD. Gives me this error:

Can't open cd driver CD001. SHSUCDX Can't install. Your ram drive is loaded at C; out of memory error - Bad command or filename'

Tried putting it onto a USB, but can't seem to boot it up. Tried selecting in the boot order, USB-HDD, USB-ZIP etc - Doesn't detect it as harddrive either. USB stick has on it just a .exe and a .cfg file. Any ideas? Is there any other similar software you reccommend?

Also, typing driverquery into cmd, it scans, but once done closes itself. Doesn't give me a chance to even look at it.

richc46 · Jan 4, 2011

The only free tools that I know of are the ones that I gave you and going to the website of the hard drive manufacturer.

Try to boot another CD from the drive to test drive
Then try to boot the CD from another computer.

360bhp · Jan 4, 2011

Used HD Tune Pro here. It says I have 4 unstable sectors.

richc46 · Jan 4, 2011

Im not familiar with that software, but if you trust it
back up your stuff and begin looking for a new HD.
Even if you dont trust the software, back up your stuff and pronto.

Error logs - What do these mean?

360bhp

My Computer

System One

richc46

My Computer

System One

360bhp

My Computer

System One

360bhp

Attachments

My Computer

System One

richc46

My Computer

System One

richc46

My Computer

System One

360bhp

My Computer

System One

richc46

My Computer

System One

360bhp

My Computer

System One

richc46

My Computer

System One

360bhp

Attachments

My Computer

System One

richc46

My Computer

System One