Hello and sorry for my english. I have got a windows 2008 R8, all updates installed. It is a domain controlleur, WSUS and antivirus sever. That 's all. Sometimes, explorer.exe is in error and i can 't do anything. I can 't click on "start". When i try to shudown the server, it is say: "waiting for System Event Notification Service" and the server don 't want shutdown ! In the serveur i tried lot of errors like this : ID 129, source : vhdmp The description for Event ID 129 from source vhdmp cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: \Device\RaidPort1 And after, i have : ID 3, source : filtermanager : Filter Manager failed to attach to volume '\Device\Harddisk1\DR5'. This volume will be unavailable for filtering until a reboot. The final status was 0xc03a001c i dont know what is the problem ? thanks for help

Its not recommended to Install any other applications on the domain controller as you have mentioned you have got AV server also installed on the DC. The error clearly indicated that there is problem with File Screen Filter Driver whicjh is nothing but AV driver. Do you ahve Symantec Installed on the server if yes then probably its the culprit. http://www.virmansec.com/blogs/skhairuddin

"Its not recommended to Install any other applications on the domain controller " yes, i know. "you have got AV server also installed on the DC" yes , i have symantec endpoint protection what i can do ?

Navigate to following reg key HKLM\SYSTEM\CurrentControlSet\Services\FileScreenFilter Change "START" key to a value of "4" to disable FileScreenFilter driverhttp://www.virmansec.com/blogs/skhairuddin

no risk ? what is the consequence to disable this option ?

Please post the thing on symantec and see if they help uhttp://www.virmansec.com/blogs/skhairuddin

Hi, For the “filtermanager” event error, you can check the following link: http://www.symantec.com/connect/forums/event-id-4-filtermanager Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Hope it will be helpful. For more information, you can ask Symantec for help as Syed mentioned. Also, I noticed you said that “explorer.exe is in error and i can 't do anything”, can you write down the exact error here for research. You can check whether this error occurs in Clean Boot mode and Safe Mode to help narrow down the root cause as well. Thanks. NinaThis posting is provided "AS IS" with no warranties, and confers no rights.

i found that the error : "waiting for System Event Notification Service" explorer.exe is in error and i can 't do anything it is because of process smc.exe so symantec

Thanks for the updates that means you werer pointed to the right direction.http://www.virmansec.com/blogs/skhairuddin

Hi aplcmul - where you able to resolve the ID 129, source:vhdmp error? I'm seeing the same error every 30 seconds on a Windows 2008 R2 server. If you were able to resolve it can you point me in the right direction? Thanks for your help.