WIA and hibernation again
in [Windows XP Basics]
|
Prev: Pressing Change Password -button in WIN XP causes reboot
Next: Microsoft caught pirating somebody's patent again!!!
From: William B. Lurie on 3 Apr 2010 14:40 As the saying goes, John, you EARNED it. Now please see my post at bottom of this message. Unknown wrote: > Don't be modest. I've followed your posts for a long time and you're the > best. > (Most intelligent). > "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message > news:%23bX5TY00KHA.4420(a)TK2MSFTNGP02.phx.gbl... >> Thanks for the compliment... or surely you jest. Some in these groups >> have forgotten more than I will ever know... >> >> John >> >> Unknown wrote: >>> Wholeheartedly agree with you. He's the best (and is an MVP) on all >>> newsgroups. >>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>> news:O4YWWMr0KHA.3652(a)TK2MSFTNGP04.phx.gbl... >>>> Went there again, UN, and read many many posts, all >>>> describing the same problem, and no solution I could find >>>> other than going back to earlier versions (7). I doubt >>>> that I could get it if I wanted it, and doubt that I'd >>>> go way back and ignore what must have been real improvements >>>> since then. Interesting that nobody has a solution, altho' I >>>> though John was leading me to one. Let's believe in him; he >>>> makes the most sense. >>>> >>>> Unknown wrote: >>>>> Do a Google search for 'CRT Event ID 45062' >>>>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>>>> news:OE4MLrp0KHA.4548(a)TK2MSFTNGP06.phx.gbl... >>>>>> William B. Lurie wrote: >>>>>>> John John - MVP wrote: >>>>>>>> William B. Lurie wrote: >>>>>>>>> John John - MVP wrote: >>>>>>>>>> William B. Lurie wrote: >>>>>>>>>>> (snip) >>>>>>>>>>> >>>>>>>>>>>> At the command prompt do: >>>>>>>>>>>> >>>>>>>>>>>> sc config klif start= demand >>>>>>>>>>>> sc config ftsata2 start= demand >>>>>>>>>>>> >>>>>>>>>>>> You should get a ChangeServiceConfig message indicating success >>>>>>>>>>>> or failure. >>>>>>>>>>>> >>>>>>>>>>> Right. They both worked fine, and both showed 'Success'. >>>>>>>>>>> I hope that's good. >>>>>>>>>> Yes, thats good. The Event Viewer errors relating to these two >>>>>>>>>> drivers should now disappear. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> I'll make another run with phone line disconnected, >>>>>>>>>>> but I've done that before. Meanwhile, you have a record of >>>>>>>>>>> what my Loaded Modules look like.....can you tell me which >>>>>>>>>>> ones I must absolutely not delete because the System won't >>>>>>>>>>> function >>>>>>>>>>> without them? There aren't that many (I assume you're referring >>>>>>>>>>> to what the Task Manager shows me). >>>>>>>>>> Reboot the machine and give us a fresh list for the Net Start and >>>>>>>>>> Tasklist /svc commands. >>>>>>>>>> >>>>>>>>>> Keep checking the Event Log to see if new errors are being >>>>>>>>>> recorded, if you are lucky an event in the log might provide a >>>>>>>>>> clue that will lead to the cause of the problem. If there are no >>>>>>>>>> clues in the Event Log then you will have to look at the loaded >>>>>>>>>> modules for more clues. Weeding through the list of modules is >>>>>>>>>> significantly more arduous than disabling unneeded services. To >>>>>>>>>> see the loaded modules enter the following in the Start Menu Run >>>>>>>>>> box: >>>>>>>>>> >>>>>>>>>> msinfo32 /category SWEnvLoadedModules >>>>>>>>>> >>>>>>>>>> John >>>>>>>>> Okay, what might be good news. Maybe you can kill this one gremlin. >>>>>>>>> >>>>>>>>> The run I started at 6:25 PM should have run to hibernate at 8:25. >>>>>>>>> >>>>>>>>> Instead, when I came in to look at 8:05, my desktop was on. >>>>>>>> 6:25 to 8:05... that's less than your 2 hour set time to hibernate. >>>>>>>> It won't hibernate if you disturb it before its designated hibernate >>>>>>>> time, leave it alone for the full 2 hours. If you set the screen >>>>>>>> saver to 'None' then it's normal for the desktop to remain on. >>>>>>>> >>>>>>>> >>>>>>>>> So I discontinued at looked at Event Log. Sure enough, there was >>>>>>>>> one event (the only one at all) and it was at 7:49. If hibernate >>>>>>>>> had >>>>>>>>> been set at 1 hr it would have done so. All consistent. This is an >>>>>>>>> event we've seen before (but not lately). >>>>>>>>> >>>>>>>>>> Event Type: Error >>>>>>>>>> Event Source: ati2mtag >>>>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>>>> Date: 4/1/2010 >>>>>>>>>> Time: 7:49:25 PM >>>>>>>>>> User: N/A >>>>>>>>>> Computer: COMPAQ-2006 >>>>>>>>>> Description: >>>>>>>>>> CRT invalid display type >>>>>>>>>> Data: >>>>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>>>> I've mentioned this error before but nobody latched onto >>>>>>>>> it. Since Screen Saver is an issue, maybe this is >>>>>>>>> the missing link. While I wait for your next comments, >>>>>>>>> I'll repeat last run exactly, but with screen saver 'none'. >>>>>>>> This at2mtag error was also discussed in an earlier post. It's a >>>>>>>> bug in the ATI driver, the solution (which was published in a KB on >>>>>>>> the ATI site) was to change a registry setting or roll back the >>>>>>>> drivers to an earlier version. ATI has removed the KB article from >>>>>>>> their site but even with the newer drivers some users are still >>>>>>>> seeing the error and the registry edit is still recommended by >>>>>>>> experienced ATI users. You can try the newest ATI drivers and see if >>>>>>>> it fixes the error, if it doesn't you should do the registry edit. >>>>>>>> Get the drivers here: >>>>>>>> http://support.amd.com/us/Pages/AMDSupportHub.aspx >>>>>>>> >>>>>>>> John >>>>>>>> >>>>>>> I did the MDM correction, John. And I downloaded the ATI Catalyst >>>>>>> v10.3 full suite. I'll install it in my clone and see wha' hoppen. >>>>>>> When I >>>>>>> downloaded some time ago, they led me to a v10.2 Legacy suite that >>>>>>> I didn't like (but I don't remember why). >>>>>> And now the latest news...... I installed the full ATI downloaded >>>>>> Catalyst system, did the Clean Boot and made a 2+ hour run. Results >>>>>> below. The interruption every hour is still there. And the >>>>>> Events errors are the same ati2mtag. Nothing else of consequence. >>>>>> Run started 12:27 ... events occurred at 1:11 2:13 and then 2:49. >>>>>> I will get the loaded module list, which I haven't done yet. >>>>>> I thought new drivers would fix the ATI error....... >>>>>> >>>>>>> These Windows services are started: >>>>>>> >>>>>>> COM+ Event System >>>>>>> Cryptographic Services >>>>>>> DCOM Server Process Launcher >>>>>>> DHCP Client >>>>>>> Event Log >>>>>>> Fast User Switching Compatibility >>>>>>> Help and Support >>>>>>> IPSEC Services >>>>>>> Network Connections >>>>>>> Network Location Awareness (NLA) >>>>>>> Plug and Play >>>>>>> Protected Storage >>>>>>> Remote Access Connection Manager >>>>>>> Remote Procedure Call (RPC) >>>>>>> Security Accounts Manager >>>>>>> Server >>>>>>> Shell Hardware Detection >>>>>>> System Event Notification >>>>>>> Telephony >>>>>>> Terminal Services >>>>>>> Themes >>>>>>> Windows Audio >>>>>>> Windows Firewall/Internet Connection Sharing (ICS) >>>>>>> Windows Management Instrumentation >>>>>>> Wireless Zero Configuration >>>>>>> Workstation >>>>>>> >>>>>>> The command completed successfully. >>>>>>> >>>>>>> Image Name PID Services ========================= >>>>>>> ====== ============================================= >>>>>>> System Idle Process 0 N/A System 4 >>>>>>> N/A smss.exe 1200 N/A csrss.exe 1280 N/A >>>>>>> winlogon.exe 1312 N/A services.exe 1356 Eventlog, >>>>>>> PlugPlay lsass.exe 1368 PolicyAgent, >>>>>>> ProtectedStorage, SamSs svchost.exe 1528 DcomLaunch, >>>>>>> TermService svchost.exe 1624 RpcSs svchost.exe 1796 >>>>>>> AudioSrv, CryptSvc, Dhcp, EventSystem, >>>>>>> FastUserSwitchingCompatibility, helpsvc, lanmanserver, >>>>>>> lanmanworkstation, Netman, Nla, RasMan, SENS, SharedAccess, >>>>>>> ShellHWDetection, TapiSrv, Themes, winmgmt, WZCSVC explorer.exe 652 >>>>>>> N/A ctfmon.exe 1416 N/A cmd.exe 1620 N/A >>>>>>> tasklist.exe 2036 N/A wmiprvse.exe 1748 N/A Event >>>>>>> Type: Error >>>>>>> Event Source: ati2mtag >>>>>>> Event Category: CRT Event ID: 45062 >>>>>>> Date: 4/2/2010 >>>>>>> Time: 2:13:08 PM >>>>>>> User: N/A >>>>>>> Computer: COMPAQ-2006 >>>>>>> Description: >>>>>>> CRT invalid display type >>>>>>> Data: >>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>> >>>>>>> Event Type: Error >>>>>>> Event Source: ati2mtag >>>>>>> Event Category: CRT Event ID: 45062 >>>>>>> Date: 4/2/2010 >>>>>>> Time: 2:13:08 PM >>>>>>> User: N/A >>>>>>> Computer: COMPAQ-2006 >>>>>>> Description: >>>>>>> CRT invalid display type >>>>>>> Data: >>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ > > John, I went back to the clone and changed a few things, and for the first time I got a run which did go to hibernation at some time within the period 12:40 to 1400. I think the changes I made were to re-enable ATI Smart and ATI Hotkey as Manual......and I may have re-enabled WIA. I'll go back and check. Meanwhile, here are the pertinent Logs etcetera. I know it's kinda long but I figure you want to see it. > Time Source Category Event User Computer > Failure Audit 4/3/2010 2:00:09 PM Security Policy Change 615 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:58 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:58 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:54 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:54 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:36 PM Security Policy Change 848 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:35 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:22 PM Security Logon/Logoff 540 ANONYMOUS LOGON COMPAQ-2006 > Success Audit 4/3/2010 12:22:20 PM Security Policy Change 615 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:12 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:12 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:11 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:09 PM Security Privilege Use 576 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff 528 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:22:09 PM Security Account Logon 680 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff 538 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:22:09 PM Security Privilege Use 576 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff 528 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:22:09 PM Security Account Logon 680 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:08 PM Security Policy Change 806 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 518 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:20:41 PM Security System Event 513 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:20:39 PM Security Logon/Logoff 538 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:20:34 PM Security Logon/Logoff 551 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:19:04 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:19:04 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Policy Change 848 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:18:59 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:18:58 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:43 PM Security Logon/Logoff 540 ANONYMOUS LOGON COMPAQ-2006 > Success Audit 4/3/2010 12:18:41 PM Security Policy Change 615 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:18:33 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:32 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:32 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:31 PM Security Privilege Use 576 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff 528 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:18:31 PM Security Account Logon 680 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff 538 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:18:31 PM Security Privilege Use 576 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff 528 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 12:18:31 PM Security Account Logon 680 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:30 PM Security Policy Change 806 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security Privilege Use 576 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 518 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:17:31 PM Security System Event 513 SYSTEM COMPAQ-2006 > Success Audit 4/3/2010 12:17:25 PM Security Logon/Logoff 551 Compaq_Owner COMPAQ-2006 > Success Audit 4/3/2010 10:45:50 AM Security System Event 517 SYSTEM COMPAQ-2006 > Type Date Time Source Category Event User Computer > Information 4/3/2010 2:02:37 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 2:02:36 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 > Information 4/3/2010 2:00:10 PM Tcpip None 4201 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 Compaq_Owner COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 > Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:21:40 PM Tcpip None 4201 N/A COMPAQ-2006 > Information 4/3/2010 12:22:04 PM eventlog None 6005 N/A COMPAQ-2006 > Information 4/3/2010 12:22:04 PM eventlog None 6009 N/A COMPAQ-2006 > Information 4/3/2010 12:20:41 PM eventlog None 6006 N/A COMPAQ-2006 > Information 4/3/2010 12:20:40 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 Compaq_Owner COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 SYSTEM COMPAQ-2006 > Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A COMPAQ-2006 > Information 4/3/2010 12:18:07 PM Tcpip None 4201 N/A COMPAQ-2006 > Information 4/3/2010 12:18:26 PM eventlog None 6005 N/A COMPAQ-2006 > Information 4/3/2010 12:18:26 PM eventlog None 6009 N/A COMPAQ-2006 > Information 4/3/2010 12:17:31 PM eventlog None 6006 N/A COMPAQ-2006 > These Windows services are started: > > COM+ Event System > Cryptographic Services > DCOM Server Process Launcher > DHCP Client > Error Reporting Service > Event Log > Fast User Switching Compatibility > Help and Support > IPSEC Services > Network Connections > Network Location Awareness (NLA) > Plug and Play > Protected Storage > Remote Access Connection Manager > Remote Procedure Call (RPC) > Security Accounts Manager > Server > Shell Hardware Detection > System Event Notification > Telephony > Terminal Services > Themes > Windows Audio > Windows Firewall/Internet Connection Sharing (ICS) > Windows Image Acquisition (WIA) > Windows Management Instrumentation > Wireless Zero Configuration > Workstation > > The command completed successfully. > > > > Image Name PID Services > ========================= ====== ============================================= > System Idle Process 0 N/A > System 4 N/A > smss.exe 1200 N/A > csrss.exe 1284 N/A > winlogon.exe 1316 N/A > services.exe 1360 Eventlog, PlugPlay > lsass.exe 1372 PolicyAgent, ProtectedStorage, SamSs > svchost.exe 1532 DcomLaunch, TermService > svchost.exe 1640 RpcSs > svchost.exe 1812 AudioSrv, CryptSvc, Dhcp, ERSvc, > EventSystem, FastUserSwitchingCompatibility, > helpsvc, lanmanserver, lanmanworkstation, > Netman, Nla, RasMan, SENS, SharedAccess, > ShellHWDetection, TapiSrv, Themes, winmgmt, > WZCSVC > explorer.exe 648 N/A > mmc.exe 1612 N/A > svchost.exe 376 stisvc > cmd.exe 1000 N/A > tasklist.exe 308 N/A > wmiprvse.exe 720 N/A I'm going back to verify that I said above.
From: Unknown on 3 Apr 2010 15:02 Was hibernate time set for 2 hours? "William B. Lurie" <billurie(a)nospam.net> wrote in message news:%23jWRo010KHA.364(a)TK2MSFTNGP02.phx.gbl... > As the saying goes, John, you EARNED it. > Now please see my post at bottom of this message. > > Unknown wrote: >> Don't be modest. I've followed your posts for a long time and you're the >> best. >> (Most intelligent). >> "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message >> news:%23bX5TY00KHA.4420(a)TK2MSFTNGP02.phx.gbl... >>> Thanks for the compliment... or surely you jest. Some in these groups >>> have forgotten more than I will ever know... >>> >>> John >>> >>> Unknown wrote: >>>> Wholeheartedly agree with you. He's the best (and is an MVP) on all >>>> newsgroups. >>>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>>> news:O4YWWMr0KHA.3652(a)TK2MSFTNGP04.phx.gbl... >>>>> Went there again, UN, and read many many posts, all >>>>> describing the same problem, and no solution I could find >>>>> other than going back to earlier versions (7). I doubt >>>>> that I could get it if I wanted it, and doubt that I'd >>>>> go way back and ignore what must have been real improvements >>>>> since then. Interesting that nobody has a solution, altho' I >>>>> though John was leading me to one. Let's believe in him; he >>>>> makes the most sense. >>>>> >>>>> Unknown wrote: >>>>>> Do a Google search for 'CRT Event ID 45062' >>>>>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>>>>> news:OE4MLrp0KHA.4548(a)TK2MSFTNGP06.phx.gbl... >>>>>>> William B. Lurie wrote: >>>>>>>> John John - MVP wrote: >>>>>>>>> William B. Lurie wrote: >>>>>>>>>> John John - MVP wrote: >>>>>>>>>>> William B. Lurie wrote: >>>>>>>>>>>> (snip) >>>>>>>>>>>> >>>>>>>>>>>>> At the command prompt do: >>>>>>>>>>>>> >>>>>>>>>>>>> sc config klif start= demand >>>>>>>>>>>>> sc config ftsata2 start= demand >>>>>>>>>>>>> >>>>>>>>>>>>> You should get a ChangeServiceConfig message indicating >>>>>>>>>>>>> success or failure. >>>>>>>>>>>>> >>>>>>>>>>>> Right. They both worked fine, and both showed 'Success'. >>>>>>>>>>>> I hope that's good. >>>>>>>>>>> Yes, thats good. The Event Viewer errors relating to these two >>>>>>>>>>> drivers should now disappear. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> I'll make another run with phone line disconnected, >>>>>>>>>>>> but I've done that before. Meanwhile, you have a record of >>>>>>>>>>>> what my Loaded Modules look like.....can you tell me which >>>>>>>>>>>> ones I must absolutely not delete because the System won't >>>>>>>>>>>> function >>>>>>>>>>>> without them? There aren't that many (I assume you're referring >>>>>>>>>>>> to what the Task Manager shows me). >>>>>>>>>>> Reboot the machine and give us a fresh list for the Net Start >>>>>>>>>>> and Tasklist /svc commands. >>>>>>>>>>> >>>>>>>>>>> Keep checking the Event Log to see if new errors are being >>>>>>>>>>> recorded, if you are lucky an event in the log might provide a >>>>>>>>>>> clue that will lead to the cause of the problem. If there are >>>>>>>>>>> no clues in the Event Log then you will have to look at the >>>>>>>>>>> loaded modules for more clues. Weeding through the list of >>>>>>>>>>> modules is significantly more arduous than disabling unneeded >>>>>>>>>>> services. To see the loaded modules enter the following in the >>>>>>>>>>> Start Menu Run box: >>>>>>>>>>> >>>>>>>>>>> msinfo32 /category SWEnvLoadedModules >>>>>>>>>>> >>>>>>>>>>> John >>>>>>>>>> Okay, what might be good news. Maybe you can kill this one >>>>>>>>>> gremlin. >>>>>>>>>> >>>>>>>>>> The run I started at 6:25 PM should have run to hibernate at >>>>>>>>>> 8:25. >>>>>>>>>> >>>>>>>>>> Instead, when I came in to look at 8:05, my desktop was on. >>>>>>>>> 6:25 to 8:05... that's less than your 2 hour set time to >>>>>>>>> hibernate. It won't hibernate if you disturb it before its >>>>>>>>> designated hibernate time, leave it alone for the full 2 hours. >>>>>>>>> If you set the screen saver to 'None' then it's normal for the >>>>>>>>> desktop to remain on. >>>>>>>>> >>>>>>>>> >>>>>>>>>> So I discontinued at looked at Event Log. Sure enough, there was >>>>>>>>>> one event (the only one at all) and it was at 7:49. If hibernate >>>>>>>>>> had >>>>>>>>>> been set at 1 hr it would have done so. All consistent. This is >>>>>>>>>> an >>>>>>>>>> event we've seen before (but not lately). >>>>>>>>>> >>>>>>>>>>> Event Type: Error >>>>>>>>>>> Event Source: ati2mtag >>>>>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>>>>> Date: 4/1/2010 >>>>>>>>>>> Time: 7:49:25 PM >>>>>>>>>>> User: N/A >>>>>>>>>>> Computer: COMPAQ-2006 >>>>>>>>>>> Description: >>>>>>>>>>> CRT invalid display type >>>>>>>>>>> Data: >>>>>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>> I've mentioned this error before but nobody latched onto >>>>>>>>>> it. Since Screen Saver is an issue, maybe this is >>>>>>>>>> the missing link. While I wait for your next comments, >>>>>>>>>> I'll repeat last run exactly, but with screen saver 'none'. >>>>>>>>> This at2mtag error was also discussed in an earlier post. It's a >>>>>>>>> bug in the ATI driver, the solution (which was published in a KB >>>>>>>>> on the ATI site) was to change a registry setting or roll back the >>>>>>>>> drivers to an earlier version. ATI has removed the KB article >>>>>>>>> from their site but even with the newer drivers some users are >>>>>>>>> still seeing the error and the registry edit is still recommended >>>>>>>>> by experienced ATI users. You can try the newest ATI drivers and >>>>>>>>> see if it fixes the error, if it doesn't you should do the >>>>>>>>> registry edit. Get the drivers here: >>>>>>>>> http://support.amd.com/us/Pages/AMDSupportHub.aspx >>>>>>>>> >>>>>>>>> John >>>>>>>>> >>>>>>>> I did the MDM correction, John. And I downloaded the ATI Catalyst >>>>>>>> v10.3 full suite. I'll install it in my clone and see wha' hoppen. >>>>>>>> When I >>>>>>>> downloaded some time ago, they led me to a v10.2 Legacy suite that >>>>>>>> I didn't like (but I don't remember why). >>>>>>> And now the latest news...... I installed the full ATI downloaded >>>>>>> Catalyst system, did the Clean Boot and made a 2+ hour run. Results >>>>>>> below. The interruption every hour is still there. And the >>>>>>> Events errors are the same ati2mtag. Nothing else of consequence. >>>>>>> Run started 12:27 ... events occurred at 1:11 2:13 and then >>>>>>> 2:49. >>>>>>> I will get the loaded module list, which I haven't done yet. >>>>>>> I thought new drivers would fix the ATI error....... >>>>>>> >>>>>>>> These Windows services are started: >>>>>>>> >>>>>>>> COM+ Event System >>>>>>>> Cryptographic Services >>>>>>>> DCOM Server Process Launcher >>>>>>>> DHCP Client >>>>>>>> Event Log >>>>>>>> Fast User Switching Compatibility >>>>>>>> Help and Support >>>>>>>> IPSEC Services >>>>>>>> Network Connections >>>>>>>> Network Location Awareness (NLA) >>>>>>>> Plug and Play >>>>>>>> Protected Storage >>>>>>>> Remote Access Connection Manager >>>>>>>> Remote Procedure Call (RPC) >>>>>>>> Security Accounts Manager >>>>>>>> Server >>>>>>>> Shell Hardware Detection >>>>>>>> System Event Notification >>>>>>>> Telephony >>>>>>>> Terminal Services >>>>>>>> Themes >>>>>>>> Windows Audio >>>>>>>> Windows Firewall/Internet Connection Sharing (ICS) >>>>>>>> Windows Management Instrumentation >>>>>>>> Wireless Zero Configuration >>>>>>>> Workstation >>>>>>>> >>>>>>>> The command completed successfully. >>>>>>>> >>>>>>>> Image Name PID Services ========================= >>>>>>>> ====== ============================================= >>>>>>>> System Idle Process 0 N/A System >>>>>>>> 4 N/A smss.exe 1200 N/A csrss.exe 1280 N/A >>>>>>>> winlogon.exe 1312 N/A services.exe 1356 Eventlog, >>>>>>>> PlugPlay lsass.exe 1368 PolicyAgent, >>>>>>>> ProtectedStorage, SamSs svchost.exe 1528 >>>>>>>> DcomLaunch, TermService svchost.exe 1624 RpcSs >>>>>>>> svchost.exe 1796 AudioSrv, CryptSvc, Dhcp, EventSystem, >>>>>>>> FastUserSwitchingCompatibility, helpsvc, lanmanserver, >>>>>>>> lanmanworkstation, Netman, Nla, RasMan, SENS, SharedAccess, >>>>>>>> ShellHWDetection, TapiSrv, Themes, winmgmt, WZCSVC explorer.exe >>>>>>>> 652 N/A ctfmon.exe 1416 N/A cmd.exe 1620 N/A >>>>>>>> tasklist.exe 2036 N/A wmiprvse.exe 1748 N/A Event >>>>>>>> Type: Error >>>>>>>> Event Source: ati2mtag >>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>> Date: 4/2/2010 >>>>>>>> Time: 2:13:08 PM >>>>>>>> User: N/A >>>>>>>> Computer: COMPAQ-2006 >>>>>>>> Description: >>>>>>>> CRT invalid display type >>>>>>>> Data: >>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>>> >>>>>>>> Event Type: Error >>>>>>>> Event Source: ati2mtag >>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>> Date: 4/2/2010 >>>>>>>> Time: 2:13:08 PM >>>>>>>> User: N/A >>>>>>>> Computer: COMPAQ-2006 >>>>>>>> Description: >>>>>>>> CRT invalid display type >>>>>>>> Data: >>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >> >> > > John, I went back to the clone and changed a few things, and for the first > time I got a run which did go to hibernation at some time > within the period 12:40 to 1400. I think the changes I made were to > re-enable ATI Smart and ATI Hotkey as Manual......and I may have > re-enabled WIA. I'll go back and check. Meanwhile, here are the > pertinent Logs etcetera. I know it's kinda long but I figure you > want to see it. > >> Time Source Category Event User Computer >> Failure Audit 4/3/2010 2:00:09 PM Security Policy Change 615 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:58 PM Security Privilege Use 576 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:58 PM Security Logon/Logoff 528 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:54 PM Security Privilege Use 576 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:54 PM Security Logon/Logoff 528 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy Change 848 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:35 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:22 PM Security Logon/Logoff 540 ANONYMOUS >> LOGON COMPAQ-2006 >> Success Audit 4/3/2010 12:22:20 PM Security Policy Change 615 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:12 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:12 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:11 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Privilege Use 576 >> Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff 528 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Account Logon 680 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff 538 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Privilege Use 576 >> Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff 528 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Account Logon 680 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:08 PM Security Policy Change 806 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security Privilege Use 576 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security Logon/Logoff 528 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 518 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:20:41 PM Security System Event 513 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:20:39 PM Security Logon/Logoff 538 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:20:34 PM Security Logon/Logoff 551 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:19:04 PM Security Privilege Use 576 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:19:04 PM Security Logon/Logoff 528 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 850 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 849 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy Change 848 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Privilege Use 576 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Logon/Logoff 528 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:58 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:43 PM Security Logon/Logoff 540 ANONYMOUS >> LOGON COMPAQ-2006 >> Success Audit 4/3/2010 12:18:41 PM Security Policy Change 615 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:33 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:32 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:32 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Privilege Use 576 >> Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff 528 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Account Logon 680 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff 538 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Privilege Use 576 >> Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff 528 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Account Logon 680 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:30 PM Security Policy Change 806 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security Privilege Use 576 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security Logon/Logoff 528 NETWORK >> SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 518 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 515 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System Event 514 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:17:31 PM Security System Event 513 SYSTEM >> COMPAQ-2006 >> Success Audit 4/3/2010 12:17:25 PM Security Logon/Logoff 551 Compaq_Owner >> COMPAQ-2006 >> Success Audit 4/3/2010 10:45:50 AM Security System Event 517 SYSTEM >> COMPAQ-2006 > >> Type Date Time Source Category Event User Computer >> Information 4/3/2010 2:02:37 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 2:02:36 PM Service Control Manager None 7035 SYSTEM >> COMPAQ-2006 >> Information 4/3/2010 2:00:10 PM Tcpip None 4201 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 >> Compaq_Owner COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 SYSTEM >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 SYSTEM >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7035 SYSTEM >> COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:21:40 PM Tcpip None 4201 N/A COMPAQ-2006 >> Information 4/3/2010 12:22:04 PM eventlog None 6005 N/A COMPAQ-2006 >> Information 4/3/2010 12:22:04 PM eventlog None 6009 N/A COMPAQ-2006 >> Information 4/3/2010 12:20:41 PM eventlog None 6006 N/A COMPAQ-2006 >> Information 4/3/2010 12:20:40 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 >> Compaq_Owner COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 SYSTEM >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 SYSTEM >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7035 SYSTEM >> COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager None 7036 N/A >> COMPAQ-2006 >> Information 4/3/2010 12:18:07 PM Tcpip None 4201 N/A COMPAQ-2006 >> Information 4/3/2010 12:18:26 PM eventlog None 6005 N/A COMPAQ-2006 >> Information 4/3/2010 12:18:26 PM eventlog None 6009 N/A COMPAQ-2006 >> Information 4/3/2010 12:17:31 PM eventlog None 6006 N/A COMPAQ-2006 > >> These Windows services are started: >> >> COM+ Event System >> Cryptographic Services >> DCOM Server Process Launcher >> DHCP Client >> Error Reporting Service >> Event Log >> Fast User Switching Compatibility >> Help and Support >> IPSEC Services >> Network Connections >> Network Location Awareness (NLA) >> Plug and Play >> Protected Storage >> Remote Access Connection Manager >> Remote Procedure Call (RPC) >> Security Accounts Manager >> Server >> Shell Hardware Detection >> System Event Notification >> Telephony >> Terminal Services >> Themes >> Windows Audio >> Windows Firewall/Internet Connection Sharing (ICS) >> Windows Image Acquisition (WIA) >> Windows Management Instrumentation >> Wireless Zero Configuration >> Workstation >> >> The command completed successfully. >> >> >> Image Name PID Services >> ========================= ====== >> ============================================= >> System Idle Process 0 N/A >> System 4 N/A >> smss.exe 1200 N/A >> csrss.exe 1284 N/A >> winlogon.exe 1316 N/A >> services.exe 1360 Eventlog, PlugPlay >> lsass.exe 1372 PolicyAgent, ProtectedStorage, SamSs >> svchost.exe 1532 DcomLaunch, TermService >> svchost.exe 1640 RpcSs >> svchost.exe 1812 AudioSrv, CryptSvc, Dhcp, ERSvc, >> EventSystem, FastUserSwitchingCompatibility, helpsvc, lanmanserver, >> lanmanworkstation, Netman, Nla, RasMan, SENS, SharedAccess, >> ShellHWDetection, TapiSrv, Themes, winmgmt, WZCSVC >> explorer.exe 648 N/A >> mmc.exe 1612 N/A >> svchost.exe 376 stisvc >> cmd.exe 1000 N/A >> tasklist.exe 308 N/A >> wmiprvse.exe 720 N/A > > I'm going back to verify that I said above.
From: William B. Lurie on 3 Apr 2010 17:30 William B. Lurie wrote: > As the saying goes, John, you EARNED it. > Now please see my post at bottom of this message. > > Unknown wrote: >> Don't be modest. I've followed your posts for a long time and you're >> the best. >> (Most intelligent). >> "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message >> news:%23bX5TY00KHA.4420(a)TK2MSFTNGP02.phx.gbl... >>> Thanks for the compliment... or surely you jest. Some in these >>> groups have forgotten more than I will ever know... >>> >>> John >>> >>> Unknown wrote: >>>> Wholeheartedly agree with you. He's the best (and is an MVP) on all >>>> newsgroups. >>>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>>> news:O4YWWMr0KHA.3652(a)TK2MSFTNGP04.phx.gbl... >>>>> Went there again, UN, and read many many posts, all >>>>> describing the same problem, and no solution I could find >>>>> other than going back to earlier versions (7). I doubt >>>>> that I could get it if I wanted it, and doubt that I'd >>>>> go way back and ignore what must have been real improvements >>>>> since then. Interesting that nobody has a solution, altho' I >>>>> though John was leading me to one. Let's believe in him; he >>>>> makes the most sense. >>>>> >>>>> Unknown wrote: >>>>>> Do a Google search for 'CRT Event ID 45062' >>>>>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>>>>> news:OE4MLrp0KHA.4548(a)TK2MSFTNGP06.phx.gbl... >>>>>>> William B. Lurie wrote: >>>>>>>> John John - MVP wrote: >>>>>>>>> William B. Lurie wrote: >>>>>>>>>> John John - MVP wrote: >>>>>>>>>>> William B. Lurie wrote: >>>>>>>>>>>> (snip) >>>>>>>>>>>> >>>>>>>>>>>>> At the command prompt do: >>>>>>>>>>>>> >>>>>>>>>>>>> sc config klif start= demand >>>>>>>>>>>>> sc config ftsata2 start= demand >>>>>>>>>>>>> >>>>>>>>>>>>> You should get a ChangeServiceConfig message indicating >>>>>>>>>>>>> success or failure. >>>>>>>>>>>>> >>>>>>>>>>>> Right. They both worked fine, and both showed 'Success'. >>>>>>>>>>>> I hope that's good. >>>>>>>>>>> Yes, thats good. The Event Viewer errors relating to these >>>>>>>>>>> two drivers should now disappear. >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>>> I'll make another run with phone line disconnected, >>>>>>>>>>>> but I've done that before. Meanwhile, you have a record of >>>>>>>>>>>> what my Loaded Modules look like.....can you tell me which >>>>>>>>>>>> ones I must absolutely not delete because the System won't >>>>>>>>>>>> function >>>>>>>>>>>> without them? There aren't that many (I assume you're referring >>>>>>>>>>>> to what the Task Manager shows me). >>>>>>>>>>> Reboot the machine and give us a fresh list for the Net Start >>>>>>>>>>> and Tasklist /svc commands. >>>>>>>>>>> >>>>>>>>>>> Keep checking the Event Log to see if new errors are being >>>>>>>>>>> recorded, if you are lucky an event in the log might provide >>>>>>>>>>> a clue that will lead to the cause of the problem. If there >>>>>>>>>>> are no clues in the Event Log then you will have to look at >>>>>>>>>>> the loaded modules for more clues. Weeding through the list >>>>>>>>>>> of modules is significantly more arduous than disabling >>>>>>>>>>> unneeded services. To see the loaded modules enter the >>>>>>>>>>> following in the Start Menu Run box: >>>>>>>>>>> >>>>>>>>>>> msinfo32 /category SWEnvLoadedModules >>>>>>>>>>> >>>>>>>>>>> John >>>>>>>>>> Okay, what might be good news. Maybe you can kill this one >>>>>>>>>> gremlin. >>>>>>>>>> >>>>>>>>>> The run I started at 6:25 PM should have run to hibernate at >>>>>>>>>> 8:25. >>>>>>>>>> >>>>>>>>>> Instead, when I came in to look at 8:05, my desktop was on. >>>>>>>>> 6:25 to 8:05... that's less than your 2 hour set time to >>>>>>>>> hibernate. It won't hibernate if you disturb it before its >>>>>>>>> designated hibernate time, leave it alone for the full 2 >>>>>>>>> hours. If you set the screen saver to 'None' then it's normal >>>>>>>>> for the desktop to remain on. >>>>>>>>> >>>>>>>>> >>>>>>>>>> So I discontinued at looked at Event Log. Sure enough, there was >>>>>>>>>> one event (the only one at all) and it was at 7:49. If >>>>>>>>>> hibernate had >>>>>>>>>> been set at 1 hr it would have done so. All consistent. This >>>>>>>>>> is an >>>>>>>>>> event we've seen before (but not lately). >>>>>>>>>> >>>>>>>>>>> Event Type: Error >>>>>>>>>>> Event Source: ati2mtag >>>>>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>>>>> Date: 4/1/2010 >>>>>>>>>>> Time: 7:49:25 PM >>>>>>>>>>> User: N/A >>>>>>>>>>> Computer: COMPAQ-2006 >>>>>>>>>>> Description: >>>>>>>>>>> CRT invalid display type >>>>>>>>>>> Data: >>>>>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>> I've mentioned this error before but nobody latched onto >>>>>>>>>> it. Since Screen Saver is an issue, maybe this is >>>>>>>>>> the missing link. While I wait for your next comments, >>>>>>>>>> I'll repeat last run exactly, but with screen saver 'none'. >>>>>>>>> This at2mtag error was also discussed in an earlier post. It's >>>>>>>>> a bug in the ATI driver, the solution (which was published in a >>>>>>>>> KB on the ATI site) was to change a registry setting or roll >>>>>>>>> back the drivers to an earlier version. ATI has removed the KB >>>>>>>>> article from their site but even with the newer drivers some >>>>>>>>> users are still seeing the error and the registry edit is still >>>>>>>>> recommended by experienced ATI users. You can try the newest >>>>>>>>> ATI drivers and see if it fixes the error, if it doesn't you >>>>>>>>> should do the registry edit. Get the drivers here: >>>>>>>>> http://support.amd.com/us/Pages/AMDSupportHub.aspx >>>>>>>>> >>>>>>>>> John >>>>>>>>> >>>>>>>> I did the MDM correction, John. And I downloaded the ATI >>>>>>>> Catalyst v10.3 full suite. I'll install it in my clone and see >>>>>>>> wha' hoppen. When I >>>>>>>> downloaded some time ago, they led me to a v10.2 Legacy suite that >>>>>>>> I didn't like (but I don't remember why). >>>>>>> And now the latest news...... I installed the full ATI downloaded >>>>>>> Catalyst system, did the Clean Boot and made a 2+ hour run. >>>>>>> Results below. The interruption every hour is still there. And the >>>>>>> Events errors are the same ati2mtag. Nothing else of consequence. >>>>>>> Run started 12:27 ... events occurred at 1:11 2:13 and then >>>>>>> 2:49. >>>>>>> I will get the loaded module list, which I haven't done yet. >>>>>>> I thought new drivers would fix the ATI error....... >>>>>>> >>>>>>>> These Windows services are started: >>>>>>>> >>>>>>>> COM+ Event System >>>>>>>> Cryptographic Services >>>>>>>> DCOM Server Process Launcher >>>>>>>> DHCP Client >>>>>>>> Event Log >>>>>>>> Fast User Switching Compatibility >>>>>>>> Help and Support >>>>>>>> IPSEC Services >>>>>>>> Network Connections >>>>>>>> Network Location Awareness (NLA) >>>>>>>> Plug and Play >>>>>>>> Protected Storage >>>>>>>> Remote Access Connection Manager >>>>>>>> Remote Procedure Call (RPC) >>>>>>>> Security Accounts Manager >>>>>>>> Server >>>>>>>> Shell Hardware Detection >>>>>>>> System Event Notification >>>>>>>> Telephony >>>>>>>> Terminal Services >>>>>>>> Themes >>>>>>>> Windows Audio >>>>>>>> Windows Firewall/Internet Connection Sharing (ICS) >>>>>>>> Windows Management Instrumentation >>>>>>>> Wireless Zero Configuration >>>>>>>> Workstation >>>>>>>> >>>>>>>> The command completed successfully. >>>>>>>> >>>>>>>> Image Name PID Services >>>>>>>> ========================= ====== >>>>>>>> ============================================= >>>>>>>> System Idle Process 0 N/A >>>>>>>> System 4 N/A smss.exe >>>>>>>> 1200 N/A csrss.exe 1280 N/A winlogon.exe 1312 N/A >>>>>>>> services.exe 1356 Eventlog, PlugPlay lsass.exe >>>>>>>> 1368 PolicyAgent, ProtectedStorage, SamSs >>>>>>>> svchost.exe 1528 DcomLaunch, TermService >>>>>>>> svchost.exe 1624 RpcSs svchost.exe 1796 >>>>>>>> AudioSrv, CryptSvc, Dhcp, EventSystem, >>>>>>>> FastUserSwitchingCompatibility, helpsvc, lanmanserver, >>>>>>>> lanmanworkstation, Netman, Nla, RasMan, SENS, SharedAccess, >>>>>>>> ShellHWDetection, TapiSrv, Themes, winmgmt, WZCSVC explorer.exe >>>>>>>> 652 N/A ctfmon.exe 1416 N/A cmd.exe 1620 N/A >>>>>>>> tasklist.exe 2036 N/A wmiprvse.exe 1748 N/A Event >>>>>>>> Type: Error >>>>>>>> Event Source: ati2mtag >>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>> Date: 4/2/2010 >>>>>>>> Time: 2:13:08 PM >>>>>>>> User: N/A >>>>>>>> Computer: COMPAQ-2006 >>>>>>>> Description: >>>>>>>> CRT invalid display type >>>>>>>> Data: >>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>>> >>>>>>>> Event Type: Error >>>>>>>> Event Source: ati2mtag >>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>> Date: 4/2/2010 >>>>>>>> Time: 2:13:08 PM >>>>>>>> User: N/A >>>>>>>> Computer: COMPAQ-2006 >>>>>>>> Description: >>>>>>>> CRT invalid display type >>>>>>>> Data: >>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >> >> > > John, I went back to the clone and changed a few things, and for the > first time I got a run which did go to hibernation at some time > within the period 12:40 to 1400. I think the changes I made were to > re-enable ATI Smart and ATI Hotkey as Manual......and I may have > re-enabled WIA. I'll go back and check. Meanwhile, here are the > pertinent Logs etcetera. I know it's kinda long but I figure you > want to see it. > >> Time Source Category Event User Computer >> Failure Audit 4/3/2010 2:00:09 PM Security Policy >> Change 615 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:58 PM Security Privilege >> Use 576 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:58 PM Security >> Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:54 PM Security Privilege >> Use 576 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:54 PM Security >> Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:36 PM Security Policy >> Change 848 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:35 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:22 PM Security >> Logon/Logoff 540 ANONYMOUS LOGON COMPAQ-2006 >> Success Audit 4/3/2010 12:22:20 PM Security Policy >> Change 615 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:12 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:12 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:11 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Privilege >> Use 576 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security >> Logon/Logoff 528 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Account >> Logon 680 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security >> Logon/Logoff 538 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Privilege >> Use 576 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security >> Logon/Logoff 528 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:22:09 PM Security Account >> Logon 680 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:08 PM Security Policy >> Change 806 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security Privilege >> Use 576 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security >> Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 518 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:22:04 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:20:41 PM Security System >> Event 513 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:20:39 PM Security >> Logon/Logoff 538 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:20:34 PM Security >> Logon/Logoff 551 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:19:04 PM Security Privilege >> Use 576 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:19:04 PM Security >> Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 850 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 849 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Policy >> Change 848 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security Privilege >> Use 576 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:59 PM Security >> Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:58 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:43 PM Security >> Logon/Logoff 540 ANONYMOUS LOGON COMPAQ-2006 >> Success Audit 4/3/2010 12:18:41 PM Security Policy >> Change 615 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:33 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:32 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:32 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Privilege >> Use 576 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security >> Logon/Logoff 528 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Account >> Logon 680 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security >> Logon/Logoff 538 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Privilege >> Use 576 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security >> Logon/Logoff 528 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 12:18:31 PM Security Account >> Logon 680 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:30 PM Security Policy >> Change 806 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security Privilege >> Use 576 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security >> Logon/Logoff 528 NETWORK SERVICE COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 518 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 515 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:18:26 PM Security System >> Event 514 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:17:31 PM Security System >> Event 513 SYSTEM COMPAQ-2006 >> Success Audit 4/3/2010 12:17:25 PM Security >> Logon/Logoff 551 Compaq_Owner COMPAQ-2006 >> Success Audit 4/3/2010 10:45:50 AM Security System >> Event 517 SYSTEM COMPAQ-2006 > >> Type Date Time Source Category Event User Computer >> Information 4/3/2010 2:02:37 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 2:02:36 PM Service Control Manager >> None 7035 SYSTEM COMPAQ-2006 >> Information 4/3/2010 2:00:10 PM Tcpip None 4201 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7035 Compaq_Owner COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7035 SYSTEM COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7035 SYSTEM COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7035 SYSTEM COMPAQ-2006 >> Information 4/3/2010 12:23:27 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:21:40 PM Tcpip None 4201 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:22:04 PM eventlog None 6005 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:22:04 PM eventlog None 6009 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:20:41 PM eventlog None 6006 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:20:40 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7035 Compaq_Owner COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7035 SYSTEM COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7035 SYSTEM COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7035 SYSTEM COMPAQ-2006 >> Information 4/3/2010 12:19:54 PM Service Control Manager >> None 7036 N/A COMPAQ-2006 >> Information 4/3/2010 12:18:07 PM Tcpip None 4201 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:18:26 PM eventlog None 6005 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:18:26 PM eventlog None 6009 >> N/A COMPAQ-2006 >> Information 4/3/2010 12:17:31 PM eventlog None 6006 >> N/A COMPAQ-2006 > >> These Windows services are started: >> >> COM+ Event System >> Cryptographic Services >> DCOM Server Process Launcher >> DHCP Client >> Error Reporting Service >> Event Log >> Fast User Switching Compatibility >> Help and Support >> IPSEC Services >> Network Connections >> Network Location Awareness (NLA) >> Plug and Play >> Protected Storage >> Remote Access Connection Manager >> Remote Procedure Call (RPC) >> Security Accounts Manager >> Server >> Shell Hardware Detection >> System Event Notification >> Telephony >> Terminal Services >> Themes >> Windows Audio >> Windows Firewall/Internet Connection Sharing (ICS) >> Windows Image Acquisition (WIA) >> Windows Management Instrumentation >> Wireless Zero Configuration >> Workstation >> >> The command completed successfully. >> >> >> >> Image Name PID >> Services ========================= >> ====== ============================================= >> System Idle Process 0 >> N/A >> System 4 >> N/A >> smss.exe 1200 >> N/A >> csrss.exe 1284 >> N/A >> winlogon.exe 1316 >> N/A >> services.exe 1360 Eventlog, >> PlugPlay lsass.exe 1372 >> PolicyAgent, ProtectedStorage, SamSs >> svchost.exe 1532 DcomLaunch, >> TermService svchost.exe 1640 >> RpcSs >> svchost.exe 1812 AudioSrv, CryptSvc, Dhcp, >> ERSvc, EventSystem, >> FastUserSwitchingCompatibility, >> helpsvc, lanmanserver, lanmanworkstation, >> Netman, Nla, RasMan, SENS, >> SharedAccess, ShellHWDetection, >> TapiSrv, Themes, winmgmt, >> WZCSVC >> explorer.exe 648 >> N/A >> mmc.exe 1612 >> N/A >> svchost.exe 376 >> stisvc >> cmd.exe 1000 >> N/A >> tasklist.exe 308 >> N/A >> wmiprvse.exe 720 N/A > > I'm going back to verify that I said above. I repeated that run, very carefully, hibernate set for 2 hours (as with every one of these tests, UNk), and got same results. Screen was dark right up to when ut went into hibernate at 2 hours. I rechecked the Events Log and it is clean, no errors. Some info. But the point is that Events log shows no events for full 2 hours after the run started, right up to when it hibernated. After the run I checked on services: 2 ATI's show 'stopped'. I had set them at Manual before the run. I can't explain that. In msconfig, I set it, in clean boot, to Hide All Micro, and when I checked after run, the box was unchecked. I can't splain that either. And it shows Load Sys..... Load Original Boot items AND Load startup items. And I can't 'splain that. But it's working...twice went 2 hours and hibernated. Over to you, John.
From: Unknown on 3 Apr 2010 18:18 My approach now would be to change only one item. Change ATI to auto and check to see if it hibernates. "William B. Lurie" <billurie(a)nospam.net> wrote in message news:e0JKjT30KHA.4168(a)TK2MSFTNGP02.phx.gbl... > William B. Lurie wrote: >> As the saying goes, John, you EARNED it. >> Now please see my post at bottom of this message. >> >> Unknown wrote: >>> Don't be modest. I've followed your posts for a long time and you're the >>> best. >>> (Most intelligent). >>> "John John - MVP" <audetweld(a)nbnot.nb.ca> wrote in message >>> news:%23bX5TY00KHA.4420(a)TK2MSFTNGP02.phx.gbl... >>>> Thanks for the compliment... or surely you jest. Some in these groups >>>> have forgotten more than I will ever know... >>>> >>>> John >>>> >>>> Unknown wrote: >>>>> Wholeheartedly agree with you. He's the best (and is an MVP) on all >>>>> newsgroups. >>>>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>>>> news:O4YWWMr0KHA.3652(a)TK2MSFTNGP04.phx.gbl... >>>>>> Went there again, UN, and read many many posts, all >>>>>> describing the same problem, and no solution I could find >>>>>> other than going back to earlier versions (7). I doubt >>>>>> that I could get it if I wanted it, and doubt that I'd >>>>>> go way back and ignore what must have been real improvements >>>>>> since then. Interesting that nobody has a solution, altho' I >>>>>> though John was leading me to one. Let's believe in him; he >>>>>> makes the most sense. >>>>>> >>>>>> Unknown wrote: >>>>>>> Do a Google search for 'CRT Event ID 45062' >>>>>>> "William B. Lurie" <billurie(a)nospam.net> wrote in message >>>>>>> news:OE4MLrp0KHA.4548(a)TK2MSFTNGP06.phx.gbl... >>>>>>>> William B. Lurie wrote: >>>>>>>>> John John - MVP wrote: >>>>>>>>>> William B. Lurie wrote: >>>>>>>>>>> John John - MVP wrote: >>>>>>>>>>>> William B. Lurie wrote: >>>>>>>>>>>>> (snip) >>>>>>>>>>>>> >>>>>>>>>>>>>> At the command prompt do: >>>>>>>>>>>>>> >>>>>>>>>>>>>> sc config klif start= demand >>>>>>>>>>>>>> sc config ftsata2 start= demand >>>>>>>>>>>>>> >>>>>>>>>>>>>> You should get a ChangeServiceConfig message indicating >>>>>>>>>>>>>> success or failure. >>>>>>>>>>>>>> >>>>>>>>>>>>> Right. They both worked fine, and both showed 'Success'. >>>>>>>>>>>>> I hope that's good. >>>>>>>>>>>> Yes, thats good. The Event Viewer errors relating to these two >>>>>>>>>>>> drivers should now disappear. >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>>> I'll make another run with phone line disconnected, >>>>>>>>>>>>> but I've done that before. Meanwhile, you have a record of >>>>>>>>>>>>> what my Loaded Modules look like.....can you tell me which >>>>>>>>>>>>> ones I must absolutely not delete because the System won't >>>>>>>>>>>>> function >>>>>>>>>>>>> without them? There aren't that many (I assume you're >>>>>>>>>>>>> referring >>>>>>>>>>>>> to what the Task Manager shows me). >>>>>>>>>>>> Reboot the machine and give us a fresh list for the Net Start >>>>>>>>>>>> and Tasklist /svc commands. >>>>>>>>>>>> >>>>>>>>>>>> Keep checking the Event Log to see if new errors are being >>>>>>>>>>>> recorded, if you are lucky an event in the log might provide a >>>>>>>>>>>> clue that will lead to the cause of the problem. If there are >>>>>>>>>>>> no clues in the Event Log then you will have to look at the >>>>>>>>>>>> loaded modules for more clues. Weeding through the list of >>>>>>>>>>>> modules is significantly more arduous than disabling unneeded >>>>>>>>>>>> services. To see the loaded modules enter the following in the >>>>>>>>>>>> Start Menu Run box: >>>>>>>>>>>> >>>>>>>>>>>> msinfo32 /category SWEnvLoadedModules >>>>>>>>>>>> >>>>>>>>>>>> John >>>>>>>>>>> Okay, what might be good news. Maybe you can kill this one >>>>>>>>>>> gremlin. >>>>>>>>>>> >>>>>>>>>>> The run I started at 6:25 PM should have run to hibernate at >>>>>>>>>>> 8:25. >>>>>>>>>>> >>>>>>>>>>> Instead, when I came in to look at 8:05, my desktop was on. >>>>>>>>>> 6:25 to 8:05... that's less than your 2 hour set time to >>>>>>>>>> hibernate. It won't hibernate if you disturb it before its >>>>>>>>>> designated hibernate time, leave it alone for the full 2 hours. >>>>>>>>>> If you set the screen saver to 'None' then it's normal for the >>>>>>>>>> desktop to remain on. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>>> So I discontinued at looked at Event Log. Sure enough, there was >>>>>>>>>>> one event (the only one at all) and it was at 7:49. If hibernate >>>>>>>>>>> had >>>>>>>>>>> been set at 1 hr it would have done so. All consistent. This is >>>>>>>>>>> an >>>>>>>>>>> event we've seen before (but not lately). >>>>>>>>>>> >>>>>>>>>>>> Event Type: Error >>>>>>>>>>>> Event Source: ati2mtag >>>>>>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>>>>>> Date: 4/1/2010 >>>>>>>>>>>> Time: 7:49:25 PM >>>>>>>>>>>> User: N/A >>>>>>>>>>>> Computer: COMPAQ-2006 >>>>>>>>>>>> Description: >>>>>>>>>>>> CRT invalid display type >>>>>>>>>>>> Data: >>>>>>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>>>>>> I've mentioned this error before but nobody latched onto >>>>>>>>>>> it. Since Screen Saver is an issue, maybe this is >>>>>>>>>>> the missing link. While I wait for your next comments, >>>>>>>>>>> I'll repeat last run exactly, but with screen saver 'none'. >>>>>>>>>> This at2mtag error was also discussed in an earlier post. It's a >>>>>>>>>> bug in the ATI driver, the solution (which was published in a KB >>>>>>>>>> on the ATI site) was to change a registry setting or roll back >>>>>>>>>> the drivers to an earlier version. ATI has removed the KB >>>>>>>>>> article from their site but even with the newer drivers some >>>>>>>>>> users are still seeing the error and the registry edit is still >>>>>>>>>> recommended by experienced ATI users. You can try the newest ATI >>>>>>>>>> drivers and see if it fixes the error, if it doesn't you should >>>>>>>>>> do the registry edit. Get the drivers here: >>>>>>>>>> http://support.amd.com/us/Pages/AMDSupportHub.aspx >>>>>>>>>> >>>>>>>>>> John >>>>>>>>>> >>>>>>>>> I did the MDM correction, John. And I downloaded the ATI Catalyst >>>>>>>>> v10.3 full suite. I'll install it in my clone and see wha' hoppen. >>>>>>>>> When I >>>>>>>>> downloaded some time ago, they led me to a v10.2 Legacy suite that >>>>>>>>> I didn't like (but I don't remember why). >>>>>>>> And now the latest news...... I installed the full ATI downloaded >>>>>>>> Catalyst system, did the Clean Boot and made a 2+ hour run. Results >>>>>>>> below. The interruption every hour is still there. And the >>>>>>>> Events errors are the same ati2mtag. Nothing else of consequence. >>>>>>>> Run started 12:27 ... events occurred at 1:11 2:13 and then >>>>>>>> 2:49. >>>>>>>> I will get the loaded module list, which I haven't done yet. >>>>>>>> I thought new drivers would fix the ATI error....... >>>>>>>> >>>>>>>>> These Windows services are started: >>>>>>>>> >>>>>>>>> COM+ Event System >>>>>>>>> Cryptographic Services >>>>>>>>> DCOM Server Process Launcher >>>>>>>>> DHCP Client >>>>>>>>> Event Log >>>>>>>>> Fast User Switching Compatibility >>>>>>>>> Help and Support >>>>>>>>> IPSEC Services >>>>>>>>> Network Connections >>>>>>>>> Network Location Awareness (NLA) >>>>>>>>> Plug and Play >>>>>>>>> Protected Storage >>>>>>>>> Remote Access Connection Manager >>>>>>>>> Remote Procedure Call (RPC) >>>>>>>>> Security Accounts Manager >>>>>>>>> Server >>>>>>>>> Shell Hardware Detection >>>>>>>>> System Event Notification >>>>>>>>> Telephony >>>>>>>>> Terminal Services >>>>>>>>> Themes >>>>>>>>> Windows Audio >>>>>>>>> Windows Firewall/Internet Connection Sharing (ICS) >>>>>>>>> Windows Management Instrumentation >>>>>>>>> Wireless Zero Configuration >>>>>>>>> Workstation >>>>>>>>> >>>>>>>>> The command completed successfully. >>>>>>>>> >>>>>>>>> Image Name PID Services >>>>>>>>> ========================= ====== >>>>>>>>> ============================================= >>>>>>>>> System Idle Process 0 N/A System >>>>>>>>> 4 N/A smss.exe 1200 N/A csrss.exe 1280 N/A >>>>>>>>> winlogon.exe 1312 N/A services.exe 1356 Eventlog, >>>>>>>>> PlugPlay lsass.exe 1368 PolicyAgent, >>>>>>>>> ProtectedStorage, SamSs svchost.exe 1528 >>>>>>>>> DcomLaunch, TermService svchost.exe 1624 RpcSs >>>>>>>>> svchost.exe 1796 AudioSrv, CryptSvc, Dhcp, EventSystem, >>>>>>>>> FastUserSwitchingCompatibility, helpsvc, lanmanserver, >>>>>>>>> lanmanworkstation, Netman, Nla, RasMan, SENS, SharedAccess, >>>>>>>>> ShellHWDetection, TapiSrv, Themes, winmgmt, WZCSVC explorer.exe >>>>>>>>> 652 N/A ctfmon.exe 1416 N/A cmd.exe 1620 N/A >>>>>>>>> tasklist.exe 2036 N/A wmiprvse.exe 1748 N/A Event >>>>>>>>> Type: Error >>>>>>>>> Event Source: ati2mtag >>>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>>> Date: 4/2/2010 >>>>>>>>> Time: 2:13:08 PM >>>>>>>>> User: N/A >>>>>>>>> Computer: COMPAQ-2006 >>>>>>>>> Description: >>>>>>>>> CRT invalid display type >>>>>>>>> Data: >>>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>>>>>>>> >>>>>>>>> Event Type: Error >>>>>>>>> Event Source: ati2mtag >>>>>>>>> Event Category: CRT Event ID: 45062 >>>>>>>>> Date: 4/2/2010 >>>>>>>>> Time: 2:13:08 PM >>>>>>>>> User: N/A >>>>>>>>> Computer: COMPAQ-2006 >>>>>>>>> Description: >>>>>>>>> CRT invalid display type >>>>>>>>> Data: >>>>>>>>> 0000: 00 00 00 00 01 00 5a 00 ......Z. >>>>>>>>> 0008: 2c 00 00 00 06 b0 00 c0 ,....�.� >>>>>>>>> 0010: 00 00 00 00 00 00 00 00 ........ >>>>>>>>> 0018: 00 00 00 00 00 00 00 00 ........ >>>>>>>>> 0020: 00 00 00 00 00 00 00 00 ........ >>> >>> >> >> John, I went back to the clone and changed a few things, and for the >> first time I got a run which did go to hibernation at some time >> within the period 12:40 to 1400. I think the changes I made were to >> re-enable ATI Smart and ATI Hotkey as Manual......and I may have >> re-enabled WIA. I'll go back and check. Meanwhile, here are the >> pertinent Logs etcetera. I know it's kinda long but I figure you >> want to see it. >> >>> Time Source Category Event User Computer >>> Failure Audit 4/3/2010 2:00:09 PM Security Policy Change >>> 615 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:58 PM Security Privilege Use >>> 576 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:58 PM Security Logon/Logoff >>> 528 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:54 PM Security Privilege Use >>> 576 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:54 PM Security Logon/Logoff >>> 528 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:36 PM Security Policy Change >>> 848 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:35 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:22 PM Security Logon/Logoff >>> 540 ANONYMOUS LOGON COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:20 PM Security Policy Change >>> 615 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:12 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:12 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:11 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:09 PM Security Privilege Use >>> 576 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff >>> 528 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:09 PM Security Account Logon >>> 680 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff >>> 538 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:09 PM Security Privilege Use >>> 576 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:09 PM Security Logon/Logoff >>> 528 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:09 PM Security Account Logon >>> 680 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:08 PM Security Policy Change >>> 806 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security Privilege Use >>> 576 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security Logon/Logoff >>> 528 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 518 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:22:04 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:20:41 PM Security System Event >>> 513 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:20:39 PM Security Logon/Logoff >>> 538 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:20:34 PM Security Logon/Logoff >>> 551 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:19:04 PM Security Privilege Use >>> 576 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:19:04 PM Security Logon/Logoff >>> 528 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 850 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 849 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Policy Change >>> 848 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Privilege Use >>> 576 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:59 PM Security Logon/Logoff >>> 528 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:58 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:43 PM Security Logon/Logoff >>> 540 ANONYMOUS LOGON COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:41 PM Security Policy Change >>> 615 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:33 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:32 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:32 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:31 PM Security Privilege Use >>> 576 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff >>> 528 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:31 PM Security Account Logon >>> 680 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff >>> 538 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:31 PM Security Privilege Use >>> 576 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:31 PM Security Logon/Logoff >>> 528 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:31 PM Security Account Logon >>> 680 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:30 PM Security Policy Change >>> 806 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security Privilege Use >>> 576 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security Logon/Logoff >>> 528 NETWORK SERVICE COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 518 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 515 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:18:26 PM Security System Event >>> 514 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:17:31 PM Security System Event >>> 513 SYSTEM COMPAQ-2006 >>> Success Audit 4/3/2010 12:17:25 PM Security Logon/Logoff >>> 551 Compaq_Owner COMPAQ-2006 >>> Success Audit 4/3/2010 10:45:50 AM Security System Event >>> 517 SYSTEM COMPAQ-2006 >> >>> Type Date Time Source Category Event User Computer >>> Information 4/3/2010 2:02:37 PM Service Control Manager None >>> 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 2:02:36 PM Service Control Manager None >>> 7035 SYSTEM COMPAQ-2006 >>> Information 4/3/2010 2:00:10 PM Tcpip None 4201 N/A >>> COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7035 Compaq_Owner COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7035 SYSTEM COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7035 SYSTEM COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7035 SYSTEM COMPAQ-2006 >>> Information 4/3/2010 12:23:27 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:21:40 PM Tcpip None 4201 N/A >>> COMPAQ-2006 >>> Information 4/3/2010 12:22:04 PM eventlog None 6005 >>> N/A COMPAQ-2006 >>> Information 4/3/2010 12:22:04 PM eventlog None 6009 >>> N/A COMPAQ-2006 >>> Information 4/3/2010 12:20:41 PM eventlog None 6006 >>> N/A COMPAQ-2006 >>> Information 4/3/2010 12:20:40 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7035 Compaq_Owner COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7035 SYSTEM COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7035 SYSTEM COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7035 SYSTEM COMPAQ-2006 >>> Information 4/3/2010 12:19:54 PM Service Control Manager >>> None 7036 N/A COMPAQ-2006 >>> Information 4/3/2010 12:18:07 PM Tcpip None 4201 N/A >>> COMPAQ-2006 >>> Information 4/3/2010 12:18:26 PM eventlog None 6005 >>> N/A COMPAQ-2006 >>> Information 4/3/2010 12:18:26 PM eventlog None 6009 >>> N/A COMPAQ-2006 >>> Information 4/3/2010 12:17:31 PM eventlog None 6006 >>> N/A COMPAQ-2006 >> >>> These Windows services are started: >>> >>> COM+ Event System >>> Cryptographic Services >>> DCOM Server Process Launcher >>> DHCP Client >>> Error Reporting Service >>> Event Log >>> Fast User Switching Compatibility >>> Help and Support >>> IPSEC Services >>> Network Connections >>> Network Location Awareness (NLA) >>> Plug and Play >>> Protected Storage >>> Remote Access Connection Manager >>> Remote Procedure Call (RPC) >>> Security Accounts Manager >>> Server >>> Shell Hardware Detection >>> System Event Notification >>> Telephony >>> Terminal Services >>> Themes >>> Windows Audio >>> Windows Firewall/Internet Connection Sharing (ICS) >>> Windows Image Acquisition (WIA) >>> Windows Management Instrumentation >>> Wireless Zero Configuration >>> Workstation >>> >>> The command completed successfully. >>> >>> >>> >>> Image Name PID Services >>> ========================= ====== >>> ============================================= >>> System Idle Process 0 N/A >>> System 4 N/A >>> smss.exe 1200 N/A >>> csrss.exe 1284 N/A >>> winlogon.exe 1316 N/A >>> services.exe 1360 Eventlog, PlugPlay >>> lsass.exe 1372 PolicyAgent, ProtectedStorage, SamSs >>> svchost.exe 1532 DcomLaunch, TermService >>> svchost.exe 1640 RpcSs >>> svchost.exe 1812 AudioSrv, CryptSvc, Dhcp, ERSvc, >>> EventSystem, FastUserSwitchingCompatibility, >>> helpsvc, lanmanserver, lanmanworkstation, Netman, Nla, RasMan, SENS, >>> SharedAccess, ShellHWDetection, >>> TapiSrv, Themes, winmgmt, WZCSVC >>> explorer.exe 648 N/A >>> mmc.exe 1612 N/A >>> svchost.exe 376 stisvc >>> cmd.exe 1000 N/A >>> tasklist.exe 308 N/A >>> wmiprvse.exe 720 N/A >> >> I'm going back to verify that I said above. > > I repeated that run, very carefully, hibernate set for 2 hours > (as with every one of these tests, UNk), and got same results. Screen was > dark right up to when ut went into hibernate at 2 hours. > > I rechecked the Events Log and it is clean, no errors. Some info. > But the point is that Events log shows no events for full 2 hours after > the run started, right up to when it hibernated. > After the run I checked on services: > 2 ATI's show 'stopped'. I had set them at Manual before the run. > I can't explain that. > In msconfig, I set it, in clean boot, to Hide All Micro, > and when I checked after run, the box was unchecked. > I can't splain that either. > And it shows Load Sys..... > Load Original Boot items > AND Load startup items. > And I can't 'splain that. > But it's working...twice went 2 hours and hibernated. > > Over to you, John.
From: William B. Lurie on 3 Apr 2010 18:37
Unknown wrote: > My approach now would be to change only one item. Change ATI to auto and > check to see if it hibernates. > "William B. Lurie" <billurie(a)nospam.net> wrote in message That makes sense, UNk. At the same time, I'm thinking just a bit ahead. I have another clone system (and can recreate them at will from the off-line drive images I've accumulated). I was thinking of firing up Clone #2 and changing only one item, the ATI removal tool that John gave us. But I'm going to do yours first. The question is, which of the two ATI services to change? I think I'll try both services in all 3 possible states (manual, auto, and disabled). Notice that it takes a two+ hour wait to find out whether it hibernates or not. |