We are putting process monitor on all servers to see who might be using it but we haven't found any so far.
Could a local security policy or gpo cause this kind of issue? From: Jonathan Link [mailto:[email protected]] Posted At: Thursday, March 31, 2011 10:09 AM Posted To: [email protected] Conversation: Find out what is doing this Subject: Re: Find out what is doing this Is there another task that runs setenv.bat at 11pm? If so, that'll cause your sharing violation, because they both fire at the same time, and the file can't be saved. On Thu, Mar 31, 2011 at 10:05 AM, Charlie Kaiser <[email protected]> wrote: Crank up auditing on the file and see who's accessing it. Also, with process monitor, see what other processes are involved... *********************** Charlie Kaiser [email protected] Kingman, AZ *********************** > -----Original Message----- > From: [email protected] [mailto:[email protected]] > Sent: Thursday, March 31, 2011 7:02 AM > To: NT System Admin Issues > Subject: RE: Find out what is doing this > > No backups at the time of error. > > -----Original Message----- > From: Charlie Kaiser [mailto:[email protected]] > Posted At: Thursday, March 31, 2011 9:58 AM > Posted To: [email protected] > Conversation: Find out what is doing this > Subject: RE: Find out what is doing this > > Is there a backup going on at that time? > > *********************** > Charlie Kaiser > [email protected] > Kingman, AZ > *********************** > > > > -----Original Message----- > > From: [email protected] [mailto:[email protected]] > > Sent: Thursday, March 31, 2011 6:55 AM > > To: NT System Admin Issues > > Subject: RE: Find out what is doing this > > > > Here is the process > > .bat creates setenv.bat in dir x > > About every 60 seconds all day long. > > At around 11:00pm each night this process fails with a sharing > violation > > of setenv.bat. > > Rerun the automated task and it runs. The problem is this file is > being > > Created all day long no issues just around 11:00pm. With process > > monitor we see the sharing violation but can't tell what was trying to > > share it or what was sharing it at the time?? > > Need more guidance with process monitor I guess? > > Can I turn on auditing for dir x ? > > Will Windows give me more of a feel for what failed? > > > > > > -----Original Message----- > > From: Ben Scott [mailto:[email protected]] > > Posted At: Thursday, March 31, 2011 9:34 AM > > Posted To: [email protected] > > Conversation: Find out what is doing this > > Subject: Re: Find out what is doing this > > > > On Thu, Mar 31, 2011 at 9:21 AM, [email protected] <[email protected]> > > wrote: > > > Have a third party that creates a file before it runs. > > > > You need to explain that using a lot more words. :) > > > > > We're also using a piece of software called Process Monitor and we > > were able > > > to pin it down last night to a 'Sharing Violation' . > > > > "Sharing Violation" nominally means a file was already open or > > locked when the program tried to access it. > > > > Of course, that's also one of the error codes that Microsoft > > sometimes uses for completely unrelated things, so there's a > > (relatively small) chance it's something else. > > > > -- Ben > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > > --- > > To manage subscriptions click here: > > http://lyris.sunbelt-software.com/read/my_forums/ > > or send an email to [email protected] > > with the body: unsubscribe ntsysadmin > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > > --- > > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > > or send an email to [email protected] > > with the body: unsubscribe ntsysadmin > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
