Service That Takes 10 Minutes to Load
Anyone see a service that could cause a server to take a good 10 minutes to startup? I have a Microsoft Windows Server 2003 Enterprise with SP2 [Version 5.2.3790] that has this problem for a while now. Please look at the input from the usrenv.log
after a restart. The bolded lines will highlight where I believe the delay in startup is occuring.
USERENV(7bc.90c) 01:48:54:125 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe
USERENV(7bc.90c) 01:48:54:125 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe
USERENV(ecc.ed0) 01:48:54:515 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(72c.8d4) 01:49:25:484 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\CALSrv.exe
USERENV(72c.8d4) 01:49:25:484 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\CALSrv.exe
USERENV(1d4.aa4) 01:58:19:406 UnloadUserProfile: Entering, hProfile = <0x5e4>
USERENV(1d4.aa4) 01:58:19:406 UnloadUserProfile: no thread token found, impersonating self.
USERENV(1d4.aa4) 01:58:19:406 GetInterface: Returning rpc binding handle
USERENV(1a4.bb0) 01:58:19:406 IProfileSecurityCallBack: client authenticated.
USERENV(1a4.bb0) 01:58:19:406 DropClientContext: Got client token 000006CC, sid = S-1-5-18
July 25th, 2011 3:40am
You might try disabling to see if the issue is corrected.
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Free Windows Admin Tool Kit Click here and download it now
July 25th, 2011 10:38am
Hi,
What is CALSrv.exe? Do you know it?
According to my search, this can be a malicious file related to spyware. For more information, please refer to the following link:
CALSrv.EXE Info
http://www.spydig.com/file-diagnosis/CALSrv-EXE.html
Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Based on the current situation, I would like to suggest you update the antivirus program definition and scan the system.
If the issue persists, please
download HijackThis from the following link:
http://www.techspot.com/download317.html
HijackThis is a tool to collect some system settings information which is useful for further troubleshooting.
Note: The third-party products discussed here are manufactured by vendors independent of Microsoft. We make no warranty, implied or otherwise, regarding
these products' performance or reliability.
1. Unzip the hijcakthis.zip file to obtain the hijackthis.exe file.
2. Right click the “hijackthis.exe” file and choose "Run as administrator". Provide administrator password or click “Allow” if
you are prompted to do so.
3. Click the "Do a system scan and save a logfile" Button.
After that, please upload the log file to following link for analyzing and disable the harmful items.
HijackThis.de Security
http://www.hijackthis.de/
Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Regards,
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com .
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
July 26th, 2011 3:02am
That's a great idea, Dave. I disabled that service this morning and restarted the server. It still took 10 minutes to restart. However, it didn't hang on that CALSrv.exe as the service that starts it was disabled, of course, but
I see the same behavior so it looks like UnloadUserProfile is what's taking a while if I'm reading this right. I'm thinking that should be what I start troubleshooting. What do you think? Any ideas?
USERENV(e0.2b8) 05:32:26:218 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\keyck.exe
USERENV(79c.8c4) 05:32:28:968 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe
USERENV(79c.8c4) 05:32:28:984 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe
USERENV(1674.1678) 05:32:29:500 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(16c0.16c4) 05:32:30:234 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\autofire.exe
USERENV(16a8.16ac) 05:32:30:250 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\ops.exe
USERENV(710.72c) 05:36:47:734 LibMain: Process Name: C:\WINDOWS\system32\mfevtps.exe
USERENV(1d4.ae0) 05:41:54:625 UnloadUserProfile: Entering, hProfile = <0x5ec>
USERENV(1d4.ae0) 05:41:54:625 UnloadUserProfile: no thread token found, impersonating self.
USERENV(1d4.ae0) 05:41:54:625 GetInterface: Returning rpc binding handle
USERENV(1a4.1c0) 05:41:54:625 IProfileSecurityCallBack: client authenticated.
USERENV(1a4.1c0) 05:41:54:625 DropClientContext: Got client token 000006CC, sid = S-1-5-18
USERENV(1a4.1c0) 05:41:54:625 MIDL_user_allocate enter
USERENV(1a4.1c0) 05:41:54:625 DropClientContext: load profile object successfully made
USERENV(1a4.1c0) 05:41:54:625 DropClientContext: Returning 0
USERENV(1d4.ae0) 05:41:54:625 UnLoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(1a4.1604) 05:41:54:625 IProfileSecurityCallBack: client authenticated.
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2011 7:12am
Arthur, as this is a Micros 9700 server, this "CALSrv.exe" is a legit and needed service. Thanks for taking the time to reply.
July 26th, 2011 7:19am
Not sure how you're diagnosing this. That sounds like part of the user profile hive cleanup service. Going blind into this I would have said incorrect or missing DNS configuration. Is this server part of an AD domain? If so can you post unedited
ipconfig /all from this server and local DNS server?
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2011 8:45pm
Hi,
Based on the current situation, I would like to suggest you test the issue in Clean Boot to narrow down what software conflicts. For the detailed
steps of how to perform a Clean Boot, please refer to the following Microsoft KB article:
How to configure Windows XP to start in a "clean boot" state
http://support.microsoft.com/kb/310353
What’s the result in Clean Boot?
Regards,
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com .
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
August 1st, 2011 9:58pm
Hi,
I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know,
and I will be happy to help.
Regards,
Arthur Li
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
August 7th, 2011 9:48pm
Hi,
Based on the current situation, I would like to suggest you test the issue in Clean Boot to narrow down what software conflicts. For the detailed
steps of how to perform a Clean Boot, please refer to the following Microsoft KB article:
How to configure Windows XP to start in a "clean boot" state
http://support.microsoft.com/kb/310353
What’s the result in Clean Boot?
Regards,
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com .
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Ok, I did a restart of the server after configuring it to "clean boot" state. The restart took less than 2 minutes, which is a minute less than I'd expect this physical server to take. When I put the server back in a "normal startup" state, the
restart took 10 minutes.
August 9th, 2011 3:57pm
Not sure how you're diagnosing this. That sounds like part of the user profile hive cleanup service. Going blind into this I would have said incorrect or missing DNS configuration. Is this server part of an AD domain? If so can you post unedited
ipconfig /all from this server and local DNS server?
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Ok, this server is a domain atttached member server. We don't use AD DNS directly. Here's the "ipconfig /all" for the member server. I would have to talk to a domain administrator for the DC AD DNS settings, and our Telecom department for
their DNS server settings.
Windows IP Configuration
Host Name . . . . . . . . . . . . : VPSACDSMICROS01
Primary Dns Suffix . . . . . . . : ad.ilstu.edu
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ad.ilstu.edu
ilstu.edu
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client)
Physical Address. . . . . . . . . : 00-1E-C9-47-CC-78
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.30.104.50
Subnet Mask . . . . . . . . . . . : 255.255.255.192
Default Gateway . . . . . . . . . : 172.30.104.62
DNS Servers . . . . . . . . . . . : 138.87.128.1
138.87.132.1
Primary WINS Server . . . . . . . : 172.30.103.9
Secondary WINS Server . . . . . . : 172.30.103.8
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #2
Physical Address. . . . . . . . . : 00-1E-C9-47-CC-7A
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2011 4:00pm
Hi,
I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know,
and I will be happy to help.
Regards,
Arthur Li
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
tnmff@microsoft.com.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Ok, I'm back in the office after vacation, and really wanted to resolve this issue now. Thanks to all for all the suggestions. I've disabled some of the MICROS 9700 services that were running, but not needed, as long as the User Profile Service.
With a clean boot, the server restarts in less than 2 minutes. However, I can't run a production server that way! This morning's restart took 10 minutes to complete. The results from the userenv.log are pasted below. Any ideas on
where I go next? Any way for me to tell how long a given service took to load?
USERENV(790.8a8) 06:10:46:167 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe
USERENV(ad4.b4c) 06:10:46:246 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe
USERENV(1d4.a58) 06:21:53:503 UnloadUserProfile: Entering, hProfile = <0x5cc>
USERENV(1d4.a58) 06:21:53:503 UnloadUserProfile: no thread token found, impersonating self.
USERENV(1d4.a58) 06:21:53:503 GetInterface: Returning rpc binding handle
USERENV(1a4.1c0) 06:21:53:503 IProfileSecurityCallBack: client authenticated.
USERENV(1a4.1c0) 06:21:53:503 DropClientContext: Got client token 000006CC, sid = S-1-5-18
USERENV(1a4.1c0) 06:21:53:503 MIDL_user_allocate enter
USERENV(1a4.1c0) 06:21:53:503 DropClientContext: load profile object successfully made
USERENV(1a4.1c0) 06:21:53:503 DropClientContext: Returning 0
USERENV(1d4.a58) 06:21:53:503 UnLoadUserProfile: Calling DropClientToken (as self) succeeded
USERENV(1a4.12ac) 06:21:53:503 IProfileSecurityCallBack: client authenticated.
August 10th, 2011 7:54am