also, check the system event logs ... do you have 4001 errors, or 4007 ? Erik Goldoff
IT Consultant Systems, Networks, & Security _____ From: Paul Everett [mailto:[email protected]] Sent: Thursday, March 26, 2009 11:45 AM To: NT System Admin Issues Subject: Services not starting. I restarted a couple Terminal Services (2003 Enterprise, SP2) this morning that are using Windows Load Balancing. (It's a weekly thing we do to release resources). Both of them were unable to log back into the Domain, with an error saying the net logon service hadn't started. I can log in as local Admin, but lots of Services are not started. I can see them (only thru the Standard tab), but not able to neither view the properties nor start them. It doesn't show any networking components, but ip config shows adapters and I can ping the network. IE just flashes quickly. Before rebooting one of the TS's had a Symantec warning that a Bloodhound.exploid was detected in one of the user profiles temp Internet folder. I scanned both TS's, one was clean, but the one with Bloodhound also had numerous UPS or Fedex Trojans. It said it cleaned them but no change in the Servers behavior. I was able to install Firefox from a flashdrive and can access the Internet. I tried to install Malwarebytes, but it fails trying to load a control. Event Viewer opens, but can't open individual entries for details. Application tab shows 1090 and 1053 errors (source is Userenv), System shows 40960 (Source- LsaSrv, Category- SPNEGO (negotiator)). Any ideas or direction I can go to fix what may be broken so I can get these Services started and my Users back to work? Thanks, Paul Everett IS Dept. Lee Mental Health Center 239-791-1551 "Lee Mental Health Center, Inc. providing services through Ruth Cooper Center for Behavioral Health Care and VISTA Behavioral Crisis Services. Visit our website at <blocked::http://www.leementalhealth.org/> www.leementalhealth.org to learn more." Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message, including attachments. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
