Hi how are you? Sorry this post is so long, I just want all known information on the table. So here it goes...
First I have 65 machines on my network. 9 of them are NT 4.0 Servers (SP6a), all of which have been working "flawless" for a long time. I recently talked my boss into purchasing RAdmin so that we could better support our users and help us with the implementation of MS security patches.
I recently created a batch file that will install all the missing MS patches and install RAdmin. Here is the batch (I use ScriptIT to map the network drive)
Setlocal
echo Setting PATH TO FIXES
Set PATHTOFIXES=y:\updates\post
if exist "c:\winnt\system32\raddrv.dll" goto update
:radmin
echo Installing RAdmin
rem The following code will install RAdmin
copy "%PATHTOFIXES%\r_server.exe" "c:\winnt\system32\r_server.exe"
copy "%PATHTOFIXES%\raddrv.dll" "c:\winnt\system32\raddrv.dll"
copy "%PATHTOFIXES%\admdll.dll" "c:\winnt\system32\admdll.dll"
c:\winnt\system32\r_server.exe /install /silence
regedit.exe /s %PATHTOFIXES%\settings.reg
echo RAdmin Complete
goto update
:update
echo Installing MS01-041
rem Malformed RPC Request Can Cause Service Problems
%PATHTOFIXES%\ms01-041\Q299444i.exe -z -m
echo ms01-041 Complete
echo Installing MS01-048
rem Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail
%PATHTOFIXES%\ms01-048\q305399i.exe -z -m
echo ms01-048 Complete
echo Installing MS02-006
rem Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run
%PATHTOFIXES%\ms02-006\Q314147i.exe -z -m
echo ms02-006 Complete
echo Installing MS02-009
rem Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files
%PATHTOFIXES%\ms02-009\vbs55men.exe -q
echo ms02-009 Complete
echo Installing MS02-013
rem Java Applet Can Redirect Browser Traffic
%PATHTOFIXES%\ms02-013\nt\msjavx86.exe -q
echo ms02-013 Complete
echo Installing MS02-014
rem Unchecked Buffer in Windows Shell Could Lead to Code Execution
%PATHTOFIXES%\ms02-014\nt\q313829i.exe -z -m
echo ms02-014 Complete
echo Running Qchain
rem Use QChain.exe to Install Multiple Hotfixes with Only One Reboot
%PATHTOFIXES%\qchain.exe
echo QCHAIN Ran
echo Sending Completion Message to IT
rem Completion notification sent via net send
net send REDTECH Patches Completed, sending reboot command
echo Rebooting machine
rem SD.exe is psshutdown.exe by SysInternals
%PATHTOFIXES%\sd.exe -r -l -t 10 -m "Patches Complete - System is Rebooting"
This works great… However, out of 65 machines, I’m now getting problems on 2. Unfortunately these 2 machines are BDC. The problems that I’m seeing are…
BDC1-
Event Id: 2020 Source: SRV – The server was unable to allocate from the system paged pool because the pool was empty.
Event Id: 1000 Source: Userenv – RegLoadKey failed with error 1450 for C:\WINNT\Profiles\DOMAIN ADMIN\ntuser.dat
Any attempt to login (remotely or locally) results in the server either sitting at the blue default background or an error stating that the profile could not load, and I will be using the default system profile.
I have re-serviced packed and re-applied the patches and turned off the RAdmin service. I also changed the RSL to 96MB as [Q124594] stated. I have also read [Q185198] the permissions to %system root%\Profiles has everyone set with full control. There is 3Gb free on the system partition and as stated above the RSL bumped to 96MB.
BDC2-
Exhibits the same as BDC1 with a twist. It will kill the DHCP server and the event viewer will report Event Id: 1014 Source: DhcpServer – The JET Database call returned the following Error: -510
I’m at a loss here. I don’t know what to do, nor have I ever seen this before. Bouncing the servers will result in normal working condition, and then (after an unknown period of time) the process starts all over again. I have contacted RAdmin, and they weren’t aware of any problems like this and cut and pasted the Cause section from [Q185198].
As much as I like Ohio and S. Carolina, I’m not interested in flying back there to reload these bad boys. Has anyone recovered from these issues I have stated?
Again sorry so lengthy… Thanks
First I have 65 machines on my network. 9 of them are NT 4.0 Servers (SP6a), all of which have been working "flawless" for a long time. I recently talked my boss into purchasing RAdmin so that we could better support our users and help us with the implementation of MS security patches.
I recently created a batch file that will install all the missing MS patches and install RAdmin. Here is the batch (I use ScriptIT to map the network drive)
Setlocal
echo Setting PATH TO FIXES
Set PATHTOFIXES=y:\updates\post
if exist "c:\winnt\system32\raddrv.dll" goto update
:radmin
echo Installing RAdmin
rem The following code will install RAdmin
copy "%PATHTOFIXES%\r_server.exe" "c:\winnt\system32\r_server.exe"
copy "%PATHTOFIXES%\raddrv.dll" "c:\winnt\system32\raddrv.dll"
copy "%PATHTOFIXES%\admdll.dll" "c:\winnt\system32\admdll.dll"
c:\winnt\system32\r_server.exe /install /silence
regedit.exe /s %PATHTOFIXES%\settings.reg
echo RAdmin Complete
goto update
:update
echo Installing MS01-041
rem Malformed RPC Request Can Cause Service Problems
%PATHTOFIXES%\ms01-041\Q299444i.exe -z -m
echo ms01-041 Complete
echo Installing MS01-048
rem Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail
%PATHTOFIXES%\ms01-048\q305399i.exe -z -m
echo ms01-048 Complete
echo Installing MS02-006
rem Unchecked Buffer in SNMP Service Could Enable Arbitrary Code to be Run
%PATHTOFIXES%\ms02-006\Q314147i.exe -z -m
echo ms02-006 Complete
echo Installing MS02-009
rem Incorrect VBScript Handling in IE can Allow Web Pages to Read Local Files
%PATHTOFIXES%\ms02-009\vbs55men.exe -q
echo ms02-009 Complete
echo Installing MS02-013
rem Java Applet Can Redirect Browser Traffic
%PATHTOFIXES%\ms02-013\nt\msjavx86.exe -q
echo ms02-013 Complete
echo Installing MS02-014
rem Unchecked Buffer in Windows Shell Could Lead to Code Execution
%PATHTOFIXES%\ms02-014\nt\q313829i.exe -z -m
echo ms02-014 Complete
echo Running Qchain
rem Use QChain.exe to Install Multiple Hotfixes with Only One Reboot
%PATHTOFIXES%\qchain.exe
echo QCHAIN Ran
echo Sending Completion Message to IT
rem Completion notification sent via net send
net send REDTECH Patches Completed, sending reboot command
echo Rebooting machine
rem SD.exe is psshutdown.exe by SysInternals
%PATHTOFIXES%\sd.exe -r -l -t 10 -m "Patches Complete - System is Rebooting"
This works great… However, out of 65 machines, I’m now getting problems on 2. Unfortunately these 2 machines are BDC. The problems that I’m seeing are…
BDC1-
Event Id: 2020 Source: SRV – The server was unable to allocate from the system paged pool because the pool was empty.
Event Id: 1000 Source: Userenv – RegLoadKey failed with error 1450 for C:\WINNT\Profiles\DOMAIN ADMIN\ntuser.dat
Any attempt to login (remotely or locally) results in the server either sitting at the blue default background or an error stating that the profile could not load, and I will be using the default system profile.
I have re-serviced packed and re-applied the patches and turned off the RAdmin service. I also changed the RSL to 96MB as [Q124594] stated. I have also read [Q185198] the permissions to %system root%\Profiles has everyone set with full control. There is 3Gb free on the system partition and as stated above the RSL bumped to 96MB.
BDC2-
Exhibits the same as BDC1 with a twist. It will kill the DHCP server and the event viewer will report Event Id: 1014 Source: DhcpServer – The JET Database call returned the following Error: -510
I’m at a loss here. I don’t know what to do, nor have I ever seen this before. Bouncing the servers will result in normal working condition, and then (after an unknown period of time) the process starts all over again. I have contacted RAdmin, and they weren’t aware of any problems like this and cut and pasted the Cause section from [Q185198].
As much as I like Ohio and S. Carolina, I’m not interested in flying back there to reload these bad boys. Has anyone recovered from these issues I have stated?
Again sorry so lengthy… Thanks
