2-hour hibernate failure
in [Windows XP Basics]
|
Prev: modem & AVG
Next: Just-In-Time Debugging
From: John John - MVP on 11 Apr 2010 10:05 William B. Lurie wrote: > This is a new thread. See old stuff for history. > > Okay, John, I'm using Clone2 and have started running your > investigatory programs. Is the computer a laptop or a desktop? Run the batch file below, it will change the following services: Ati HotKey Poller from Auto to Manual ATI Smart from Auto to Manual Browser from Auto to Manual Dnscache from Auto to Manual Eventlog from Manual to Auto lanmanserver from Auto to Manual LmHosts from Auto to Manual MDM from Auto to Manual psqlWGE from Auto to Manual Speed Disk service from Auto to Manual TermService from Auto to Manual TrkWks from Auto to Manual W32Time from Auto to Manual WebClient from Auto to Manual WZCSVC fom Auto to Manual and change previously discovered nonexistent drivers: sc config klif start= demand sc config ftsata2 start= demand Copy the stuff between the === lines and save it as a .bat file then run the batch file (double click on it). ========================================= rem first set of changes sc config Alerter= Disabled sc config ALG= Manual sc config AppMgmt= Manual sc config aspnet_state= Manual sc config Ati HotKey Poller= Manual sc config ATI Smart= Manual sc config AudioSrv= Auto sc config Automatic LiveUpdate Scheduler= Disabled sc config BITS= Manual sc config Browser= Manual sc config CiSvc= Manual sc config ClipSrv= Disabled sc config clr_optimization_v2.0.50727_32= Manual sc config COMSysApp= Manual sc config CryptSvc= Auto sc config DcomLaunch= Auto sc config Dhcp= Auto sc config dmadmin= Manual sc config dmserver= Manual sc config Dnscache= Manual sc config ERSvc= Manual sc config Eventlog= Auto sc config EventSystem= Manual sc config FastUserSwitchingCompatibility= Manual sc config Fax= Manual sc config FontCache3.0.0.0= Manual sc config GEARSecurity= Disabled sc config helpsvc= Auto sc config HidServ= Disabled sc config HTTPFilter= Manual sc config IDriverT= Manual sc config idsvc= Manual sc config Imapi Helper= Manual sc config ImapiService= Manual sc config lanmanserver= Disabled sc config lanmanworkstation= Auto sc config LexBceS= Auto sc config LiveUpdate= Manual sc config LmHosts= Manual sc config lxct_device= Auto sc config MBAMService= Manual sc config MDM= Manual sc config Messenger= Disabled sc config mnmsrvc= Manual sc config MSIServer= Manual sc config NetDDE= Disabled sc config NetDDEdsdm= Disabled sc config Netlogon= Manual sc config Netman= Manual sc config NetTcpPortSharing= Disabled sc config Nla= Manual sc config Norton AntiVirus= Auto sc config Norton Save and Restore= Auto sc config NProtectService= Auto sc config NtLmSsp= Manual sc config NtmsSvc= Manual sc config ose= Manual sc config PlugPlay= Auto sc config PolicyAgent= Manual sc config ProtectedStorage= Auto sc config psqlWGE= Manual sc config RasAuto= Disabled sc config RasMan= Manual sc config RDSessMgr= Manual sc config RemoteAccess= Disabled sc config RpcLocator= Manual sc config RpcSs= Auto sc config RSVP= Manual sc config SamSs= Auto sc config SCardSvr= Manual sc config Schedule= Auto sc config seclogon= Auto sc config SENS= Auto sc config SharedAccess= Auto sc config ShellHWDetection= Auto sc config Speed Disk service= Manual sc config Spooler= Auto sc config srservice= Auto sc config SSDPSRV= Manual sc config stisvc= Auto sc config SwPrv= Manual sc config Symantec RemoteAssist= Manual sc config SysmonLog= Manual sc config TapiSrv= Manual sc config TermService= Manual sc config Themes= Auto sc config TrkWks= Manual sc config upnphost= Manual sc config UPS= Manual sc config Viewpoint Manager Service= Auto sc config VSS= Manual sc config W32Time= Manual sc config WebClient= Manual sc config winmgmt= Auto sc config WmdmPmSN= Manual sc config WmiApSrv= Manual sc config WMPNetworkSvc= Manual sc config wscsvc= Disabled sc config wuauserv= Auto sc config WudfSvc= Manual sc config WZCSVC= Manual sc config xmlprov= Manual sc config klif start= demand sc config ftsata2 start= demand ============================================ I'm still pretty busy with other things so I probably won't be back until much later on. John PS. Were you trying to disable Services with CodeStuff Starter or just items in the "Startups" tab?
From: William B. Lurie on 11 Apr 2010 11:35 John John - MVP wrote: > William B. Lurie wrote: >> This is a new thread. See old stuff for history. >> >> Okay, John, I'm using Clone2 and have started running your >> investigatory programs. > > Is the computer a laptop or a desktop? > > Run the batch file below, it will change the following services: > > Ati HotKey Poller from Auto to Manual > ATI Smart from Auto to Manual > Browser from Auto to Manual > Dnscache from Auto to Manual > Eventlog from Manual to Auto > lanmanserver from Auto to Manual > LmHosts from Auto to Manual > MDM from Auto to Manual > psqlWGE from Auto to Manual > Speed Disk service from Auto to Manual > TermService from Auto to Manual > TrkWks from Auto to Manual > W32Time from Auto to Manual > WebClient from Auto to Manual > WZCSVC fom Auto to Manual > > and change previously discovered nonexistent drivers: > > sc config klif start= demand > sc config ftsata2 start= demand > > Copy the stuff between the === lines and save it as a .bat file then run > the batch file (double click on it). > > > ========================================= > rem first set of changes > > sc config Alerter= Disabled > sc config ALG= Manual > sc config AppMgmt= Manual > sc config aspnet_state= Manual > sc config Ati HotKey Poller= Manual > sc config ATI Smart= Manual > sc config AudioSrv= Auto > sc config Automatic LiveUpdate Scheduler= Disabled > sc config BITS= Manual > sc config Browser= Manual > sc config CiSvc= Manual > sc config ClipSrv= Disabled > sc config clr_optimization_v2.0.50727_32= Manual > sc config COMSysApp= Manual > sc config CryptSvc= Auto > sc config DcomLaunch= Auto > sc config Dhcp= Auto > sc config dmadmin= Manual > sc config dmserver= Manual > sc config Dnscache= Manual > sc config ERSvc= Manual > sc config Eventlog= Auto > sc config EventSystem= Manual > sc config FastUserSwitchingCompatibility= Manual > sc config Fax= Manual > sc config FontCache3.0.0.0= Manual > sc config GEARSecurity= Disabled > sc config helpsvc= Auto > sc config HidServ= Disabled > sc config HTTPFilter= Manual > sc config IDriverT= Manual > sc config idsvc= Manual > sc config Imapi Helper= Manual > sc config ImapiService= Manual > sc config lanmanserver= Disabled > sc config lanmanworkstation= Auto > sc config LexBceS= Auto > sc config LiveUpdate= Manual > sc config LmHosts= Manual > sc config lxct_device= Auto > sc config MBAMService= Manual > sc config MDM= Manual > sc config Messenger= Disabled > sc config mnmsrvc= Manual > sc config MSIServer= Manual > sc config NetDDE= Disabled > sc config NetDDEdsdm= Disabled > sc config Netlogon= Manual > sc config Netman= Manual > sc config NetTcpPortSharing= Disabled > sc config Nla= Manual > sc config Norton AntiVirus= Auto > sc config Norton Save and Restore= Auto > sc config NProtectService= Auto > sc config NtLmSsp= Manual > sc config NtmsSvc= Manual > sc config ose= Manual > sc config PlugPlay= Auto > sc config PolicyAgent= Manual > sc config ProtectedStorage= Auto > sc config psqlWGE= Manual > sc config RasAuto= Disabled > sc config RasMan= Manual > sc config RDSessMgr= Manual > sc config RemoteAccess= Disabled > sc config RpcLocator= Manual > sc config RpcSs= Auto > sc config RSVP= Manual > sc config SamSs= Auto > sc config SCardSvr= Manual > sc config Schedule= Auto > sc config seclogon= Auto > sc config SENS= Auto > sc config SharedAccess= Auto > sc config ShellHWDetection= Auto > sc config Speed Disk service= Manual > sc config Spooler= Auto > sc config srservice= Auto > sc config SSDPSRV= Manual > sc config stisvc= Auto > sc config SwPrv= Manual > sc config Symantec RemoteAssist= Manual > sc config SysmonLog= Manual > sc config TapiSrv= Manual > sc config TermService= Manual > sc config Themes= Auto > sc config TrkWks= Manual > sc config upnphost= Manual > sc config UPS= Manual > sc config Viewpoint Manager Service= Auto > sc config VSS= Manual > sc config W32Time= Manual > sc config WebClient= Manual > sc config winmgmt= Auto > sc config WmdmPmSN= Manual > sc config WmiApSrv= Manual > sc config WMPNetworkSvc= Manual > sc config wscsvc= Disabled > sc config wuauserv= Auto > sc config WudfSvc= Manual > sc config WZCSVC= Manual > sc config xmlprov= Manual > sc config klif start= demand > sc config ftsata2 start= demand > ============================================ > > I'm still pretty busy with other things so I probably won't be back > until much later on. > > John > > PS. Were you trying to disable Services with CodeStuff Starter or just > items in the "Startups" tab? First, this is an HP-Compaq Presario Desktop, late 2006 model. The drives I am now testing with are IDE. I can't give an honest answer about Startups versus Services. Their onboard info is no minimal, I just had to grope. BTW...your ATI fix. I don't know if it's carried over to this clone. Should I do it routinely anyway? I will do the above this afternoon. And thanks again for your patience and perseverance. Bill
From: William B. Lurie on 11 Apr 2010 12:21 John John - MVP wrote: > William B. Lurie wrote: >> This is a new thread. See old stuff for history. >> >> Okay, John, I'm using Clone2 and have started running your >> investigatory programs. > > Is the computer a laptop or a desktop? > > Run the batch file below, it will change the following services: > > Ati HotKey Poller from Auto to Manual > ATI Smart from Auto to Manual > Browser from Auto to Manual > Dnscache from Auto to Manual > Eventlog from Manual to Auto > lanmanserver from Auto to Manual > LmHosts from Auto to Manual > MDM from Auto to Manual > psqlWGE from Auto to Manual > Speed Disk service from Auto to Manual > TermService from Auto to Manual > TrkWks from Auto to Manual > W32Time from Auto to Manual > WebClient from Auto to Manual > WZCSVC fom Auto to Manual > > and change previously discovered nonexistent drivers: > > sc config klif start= demand > sc config ftsata2 start= demand > > Copy the stuff between the === lines and save it as a .bat file then run > the batch file (double click on it). > > > ========================================= > rem first set of changes > > sc config Alerter= Disabled > sc config ALG= Manual > sc config AppMgmt= Manual > sc config aspnet_state= Manual > sc config Ati HotKey Poller= Manual > sc config ATI Smart= Manual > sc config AudioSrv= Auto > sc config Automatic LiveUpdate Scheduler= Disabled > sc config BITS= Manual > sc config Browser= Manual > sc config CiSvc= Manual > sc config ClipSrv= Disabled > sc config clr_optimization_v2.0.50727_32= Manual > sc config COMSysApp= Manual > sc config CryptSvc= Auto > sc config DcomLaunch= Auto > sc config Dhcp= Auto > sc config dmadmin= Manual > sc config dmserver= Manual > sc config Dnscache= Manual > sc config ERSvc= Manual > sc config Eventlog= Auto > sc config EventSystem= Manual > sc config FastUserSwitchingCompatibility= Manual > sc config Fax= Manual > sc config FontCache3.0.0.0= Manual > sc config GEARSecurity= Disabled > sc config helpsvc= Auto > sc config HidServ= Disabled > sc config HTTPFilter= Manual > sc config IDriverT= Manual > sc config idsvc= Manual > sc config Imapi Helper= Manual > sc config ImapiService= Manual > sc config lanmanserver= Disabled > sc config lanmanworkstation= Auto > sc config LexBceS= Auto > sc config LiveUpdate= Manual > sc config LmHosts= Manual > sc config lxct_device= Auto > sc config MBAMService= Manual > sc config MDM= Manual > sc config Messenger= Disabled > sc config mnmsrvc= Manual > sc config MSIServer= Manual > sc config NetDDE= Disabled > sc config NetDDEdsdm= Disabled > sc config Netlogon= Manual > sc config Netman= Manual > sc config NetTcpPortSharing= Disabled > sc config Nla= Manual > sc config Norton AntiVirus= Auto > sc config Norton Save and Restore= Auto > sc config NProtectService= Auto > sc config NtLmSsp= Manual > sc config NtmsSvc= Manual > sc config ose= Manual > sc config PlugPlay= Auto > sc config PolicyAgent= Manual > sc config ProtectedStorage= Auto > sc config psqlWGE= Manual > sc config RasAuto= Disabled > sc config RasMan= Manual > sc config RDSessMgr= Manual > sc config RemoteAccess= Disabled > sc config RpcLocator= Manual > sc config RpcSs= Auto > sc config RSVP= Manual > sc config SamSs= Auto > sc config SCardSvr= Manual > sc config Schedule= Auto > sc config seclogon= Auto > sc config SENS= Auto > sc config SharedAccess= Auto > sc config ShellHWDetection= Auto > sc config Speed Disk service= Manual > sc config Spooler= Auto > sc config srservice= Auto > sc config SSDPSRV= Manual > sc config stisvc= Auto > sc config SwPrv= Manual > sc config Symantec RemoteAssist= Manual > sc config SysmonLog= Manual > sc config TapiSrv= Manual > sc config TermService= Manual > sc config Themes= Auto > sc config TrkWks= Manual > sc config upnphost= Manual > sc config UPS= Manual > sc config Viewpoint Manager Service= Auto > sc config VSS= Manual > sc config W32Time= Manual > sc config WebClient= Manual > sc config winmgmt= Auto > sc config WmdmPmSN= Manual > sc config WmiApSrv= Manual > sc config WMPNetworkSvc= Manual > sc config wscsvc= Disabled > sc config wuauserv= Auto > sc config WudfSvc= Manual > sc config WZCSVC= Manual > sc config xmlprov= Manual > sc config klif start= demand > sc config ftsata2 start= demand > ============================================ > > I'm still pretty busy with other things so I probably won't be back > until much later on. > > John > > PS. Were you trying to disable Services with CodeStuff Starter or just > items in the "Startups" tab? ************************************************************ Continuing on, John, I did as requested above, and will let it run to see what happens. Already I found that it removed my printers so that I can't print out any events that get recorded. I don't know if you intended that, o what else it disabled, but for this test, I can live with it. More later. A couple of hours...... Bill
From: William B. Lurie on 11 Apr 2010 15:43 John John - MVP wrote: (snip) John, I did as requested and installed the .bat file and restarted around 1:50 PM. After just about an hour (I wasn't watching) it decided to restart, and I just recorder the Events Logs. I don't see anything big there, other than that at 2:36 the entry says "WIA entered the running state". So I now have the big list of services set as you asked, and something caused WIA to enter the running state. I have only one clue as to what might have rebooted the system.... I *thought* I saw my room lights flicker, but it was not enough to cause the clocks on appliances to request reset. It could have been brief power interruption, enough to cause reboot. I'm going to restart again on that clone system, and this evening I'll check the Events Logs again. Here's what I got just now; it's big but you can snip it. > nformation 4/11/2010 8:07:37 AM Norton AntiVirus None 34 SYSTEM COMPAQ-2006 > Information 4/10/2010 8:43:13 PM Norton AntiVirus None 35 SYSTEM COMPAQ-2006 > Information 4/10/2010 8:43:11 PM Norton AntiVirus None 34 SYSTEM COMPAQ-2006 > Error 4/10/2010 7:43:58 PM COM+ (98) 4691 N/A COMPAQ-2006 > Error 4/10/2010 7:43:58 PM MSDTC Client (10) 4427 N/A COMPAQ-2006 > Information 4/10/2010 7:38:47 PM Norton Save and Restore Medium Priority 100 N/A COMPAQ-2006 Type Date Time Source Category Event User Computer Success Audit 4/11/2010 3:04:04 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:04:04 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:45 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:43 PM Security Policy Change 848 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:42 PM Security Privilege Use 576 LOCAL SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:42 PM Security Logon/Logoff 528 LOCAL SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:41 PM Security Privilege Use 576 LOCAL SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:41 PM Security Logon/Logoff 528 LOCAL SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:41 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:41 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:17 PM Security Logon/Logoff 540 ANONYMOUS LOGON COMPAQ-2006 Success Audit 4/11/2010 3:03:10 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:10 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:09 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:09 PM Security Policy Change 806 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:08 PM Security Privilege Use 576 Compaq_Owner COMPAQ-2006 Success Audit 4/11/2010 3:03:08 PM Security Logon/Logoff 528 Compaq_Owner COMPAQ-2006 Success Audit 4/11/2010 3:03:08 PM Security Account Logon 680 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:08 PM Security Logon/Logoff 538 Compaq_Owner COMPAQ-2006 Success Audit 4/11/2010 3:03:08 PM Security Privilege Use 576 Compaq_Owner COMPAQ-2006 Success Audit 4/11/2010 3:03:08 PM Security Logon/Logoff 528 Compaq_Owner COMPAQ-2006 Success Audit 4/11/2010 3:03:08 PM Security Account Logon 680 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 518 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 514 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 514 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 514 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 514 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 514 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 514 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 3:03:05 PM Security System Event 514 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:33 PM Security System Event 515 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:32 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:32 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:32 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:32 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:32 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:32 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:32 PM Security Policy Change 850 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 849 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:31 PM Security Policy Change 848 SYSTEM COMPAQ-2006 Success Audit 4/11/2010 12:02:30 PM Security Privilege Use 576 LOCAL SERVICE COMPAQ-2006 Type Date Time Source Category Event User Computer Information 4/11/2010 3:06:10 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:06:06 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7035 Compaq_Owner COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7036 N/A COMPAQ-2006 Information 4/11/2010 3:04:39 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 Information 4/11/2010 3:04:21 PM SRTSP None 2003 N/A COMPAQ-2006 Information 4/11/2010 3:02:50 PM Tcpip None 4201 N/A COMPAQ-2006 Information 4/11/2010 3:03:05 PM eventlog None 6005 N/A COMPAQ-2006 Information 4/11/2010 3:03:05 PM eventlog None 6009 N/A COMPAQ-2006 Information 4/11/2010 2:36:09 PM Service Control Manager None 7036 N/A COMPAQ-2006
From: William B. Lurie on 11 Apr 2010 19:31
William B. Lurie wrote: > John John - MVP wrote: > (snip) > John, I did as requested and installed the .bat file > and restarted around 1:50 PM. After just about an hour > (I wasn't watching) it decided to restart, and I just > recorder the Events Logs. I don't see anything big > there, other than that at 2:36 the entry says > "WIA entered the running state". So I now have the > big list of services set as you asked, and something > caused WIA to enter the running state. I have only > one clue as to what might have rebooted the system.... > I *thought* I saw my room lights flicker, but it was > not enough to cause the clocks on appliances to request > reset. It could have been brief power interruption, > enough to cause reboot. > > I'm going to restart again on that clone system, and this evening > I'll check the Events Logs again. Here's what I got just now; > it's big but you can snip it. > >> nformation 4/11/2010 8:07:37 AM Norton AntiVirus None >> 34 SYSTEM COMPAQ-2006 >> Information 4/10/2010 8:43:13 PM Norton AntiVirus None >> 35 SYSTEM COMPAQ-2006 >> Information 4/10/2010 8:43:11 PM Norton AntiVirus None >> 34 SYSTEM COMPAQ-2006 >> Error 4/10/2010 7:43:58 PM COM+ (98) 4691 N/A >> COMPAQ-2006 >> Error 4/10/2010 7:43:58 PM MSDTC Client (10) 4427 >> N/A COMPAQ-2006 >> Information 4/10/2010 7:38:47 PM Norton Save and Restore >> Medium Priority 100 N/A COMPAQ-2006 > > > > Type Date Time Source Category Event User Computer > Success Audit 4/11/2010 3:04:04 PM Security Privilege > Use 576 NETWORK > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:04:04 PM Security Logon/Logoff > 528 NETWORK > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:45 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:43 PM Security Policy > Change 848 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:42 PM Security Privilege > Use 576 LOCAL > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:42 PM Security Logon/Logoff > 528 LOCAL > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:41 PM Security Privilege > Use 576 LOCAL > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:41 PM Security Logon/Logoff > 528 LOCAL > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:41 PM Security Privilege > Use 576 NETWORK > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:41 PM Security Logon/Logoff > 528 NETWORK > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:17 PM Security Logon/Logoff > 540 > ANONYMOUS LOGON COMPAQ-2006 > Success Audit 4/11/2010 3:03:10 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:10 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:09 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:09 PM Security Policy > Change 806 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:08 PM Security Privilege > Use 576 > Compaq_Owner COMPAQ-2006 > Success Audit 4/11/2010 3:03:08 PM Security Logon/Logoff > 528 > Compaq_Owner COMPAQ-2006 > Success Audit 4/11/2010 3:03:08 PM Security Account > Logon 680 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:08 PM Security Logon/Logoff > 538 > Compaq_Owner COMPAQ-2006 > Success Audit 4/11/2010 3:03:08 PM Security Privilege > Use 576 > Compaq_Owner COMPAQ-2006 > Success Audit 4/11/2010 3:03:08 PM Security Logon/Logoff > 528 > Compaq_Owner COMPAQ-2006 > Success Audit 4/11/2010 3:03:08 PM Security Account > Logon 680 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security Privilege > Use 576 NETWORK > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security Logon/Logoff > 528 NETWORK > SERVICE COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 518 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 514 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 514 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 514 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 514 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 514 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 514 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 3:03:05 PM Security System Event > 514 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:33 PM Security System > Event 515 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:32 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:32 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:32 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:32 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:32 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:32 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:32 PM Security Policy > Change 850 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 849 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:31 PM Security Policy > Change 848 SYSTEM > COMPAQ-2006 > Success Audit 4/11/2010 12:02:30 PM Security Privilege > Use 576 LOCAL > SERVICE COMPAQ-2006 > > > Type Date Time Source Category Event User Computer > Information 4/11/2010 3:06:10 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:06:06 PM Service Control Manager > None 7035 > SYSTEM COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7035 > SYSTEM COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7035 > SYSTEM COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7035 > Compaq_Owner COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7035 > SYSTEM COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7035 > SYSTEM COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7035 > SYSTEM COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 > Information 4/11/2010 3:04:39 PM Service Control Manager > None 7035 > SYSTEM COMPAQ-2006 > Information 4/11/2010 3:04:21 PM SRTSP None 2003 > N/A COMPAQ-2006 > Information 4/11/2010 3:02:50 PM Tcpip None 4201 > N/A COMPAQ-2006 > Information 4/11/2010 3:03:05 PM eventlog None 6005 > N/A COMPAQ-2006 > Information 4/11/2010 3:03:05 PM eventlog None 6009 > N/A COMPAQ-2006 > Information 4/11/2010 2:36:09 PM Service Control Manager > None 7036 N/A > COMPAQ-2006 ************************************************ And now the latest news: I simply repeated the above run, from 3:45 to 7:15 PM, and the Log shows no errors at all, and not even any events to complain about. There was a repeat of the 7035/7936 'Info' events telling about WIA's involvement, but no hint of it ever having been asked to hibernate, or not to. Maybe this is almost the success you were looking for....namely, nothing is *stopping* it from hibernating.......now if you can resuscitate that, you hit the jack pot. (And of course, restore the Printer association, and whatever else you may have removed. Bill |