Service That Takes 10 Minutes to Load
Anyone see a service that could cause a server to take a good 10 minutes to startup? I have a Microsoft Windows Server 2003 Enterprise with SP2 [Version 5.2.3790] that has this problem for a while now. Please look at the input from the usrenv.log after a restart. The bolded lines will highlight where I believe the delay in startup is occuring. USERENV(7bc.90c) 01:48:54:125 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe USERENV(7bc.90c) 01:48:54:125 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe USERENV(ecc.ed0) 01:48:54:515 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe USERENV(72c.8d4) 01:49:25:484 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\CALSrv.exe USERENV(72c.8d4) 01:49:25:484 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\CALSrv.exe USERENV(1d4.aa4) 01:58:19:406 UnloadUserProfile: Entering, hProfile = <0x5e4> USERENV(1d4.aa4) 01:58:19:406 UnloadUserProfile: no thread token found, impersonating self. USERENV(1d4.aa4) 01:58:19:406 GetInterface: Returning rpc binding handle USERENV(1a4.bb0) 01:58:19:406 IProfileSecurityCallBack: client authenticated. USERENV(1a4.bb0) 01:58:19:406 DropClientContext: Got client token 000006CC, sid = S-1-5-18
July 25th, 2011 3:40am

You might try disabling to see if the issue is corrected. Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]
Free Windows Admin Tool Kit Click here and download it now
July 25th, 2011 10:38am

Hi, What is CALSrv.exe? Do you know it? According to my search, this can be a malicious file related to spyware. For more information, please refer to the following link: CALSrv.EXE Info http://www.spydig.com/file-diagnosis/CALSrv-EXE.html Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Based on the current situation, I would like to suggest you update the antivirus program definition and scan the system. If the issue persists, please download HijackThis from the following link: http://www.techspot.com/download317.html HijackThis is a tool to collect some system settings information which is useful for further troubleshooting. Note: The third-party products discussed here are manufactured by vendors independent of Microsoft. We make no warranty, implied or otherwise, regarding these products' performance or reliability. 1. Unzip the hijcakthis.zip file to obtain the hijackthis.exe file. 2. Right click the “hijackthis.exe” file and choose "Run as administrator". Provide administrator password or click “Allow” if you are prompted to do so. 3. Click the "Do a system scan and save a logfile" Button. After that, please upload the log file to following link for analyzing and disable the harmful items. HijackThis.de Security http://www.hijackthis.de/ Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Regards, Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com . Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
July 26th, 2011 3:02am

That's a great idea, Dave. I disabled that service this morning and restarted the server. It still took 10 minutes to restart. However, it didn't hang on that CALSrv.exe as the service that starts it was disabled, of course, but I see the same behavior so it looks like UnloadUserProfile is what's taking a while if I'm reading this right. I'm thinking that should be what I start troubleshooting. What do you think? Any ideas? USERENV(e0.2b8) 05:32:26:218 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\keyck.exe USERENV(79c.8c4) 05:32:28:968 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe USERENV(79c.8c4) 05:32:28:984 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe USERENV(1674.1678) 05:32:29:500 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe USERENV(16c0.16c4) 05:32:30:234 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\autofire.exe USERENV(16a8.16ac) 05:32:30:250 LibMain: Process Name: D:\MICROS\LES\POS\9700\bin\ops.exe USERENV(710.72c) 05:36:47:734 LibMain: Process Name: C:\WINDOWS\system32\mfevtps.exe USERENV(1d4.ae0) 05:41:54:625 UnloadUserProfile: Entering, hProfile = <0x5ec> USERENV(1d4.ae0) 05:41:54:625 UnloadUserProfile: no thread token found, impersonating self. USERENV(1d4.ae0) 05:41:54:625 GetInterface: Returning rpc binding handle USERENV(1a4.1c0) 05:41:54:625 IProfileSecurityCallBack: client authenticated. USERENV(1a4.1c0) 05:41:54:625 DropClientContext: Got client token 000006CC, sid = S-1-5-18 USERENV(1a4.1c0) 05:41:54:625 MIDL_user_allocate enter USERENV(1a4.1c0) 05:41:54:625 DropClientContext: load profile object successfully made USERENV(1a4.1c0) 05:41:54:625 DropClientContext: Returning 0 USERENV(1d4.ae0) 05:41:54:625 UnLoadUserProfile: Calling DropClientToken (as self) succeeded USERENV(1a4.1604) 05:41:54:625 IProfileSecurityCallBack: client authenticated.
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2011 7:12am

Arthur, as this is a Micros 9700 server, this "CALSrv.exe" is a legit and needed service. Thanks for taking the time to reply.
July 26th, 2011 7:19am

Not sure how you're diagnosing this. That sounds like part of the user profile hive cleanup service. Going blind into this I would have said incorrect or missing DNS configuration. Is this server part of an AD domain? If so can you post unedited ipconfig /all from this server and local DNS server? Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2011 8:45pm

Hi, Based on the current situation, I would like to suggest you test the issue in Clean Boot to narrow down what software conflicts. For the detailed steps of how to perform a Clean Boot, please refer to the following Microsoft KB article: How to configure Windows XP to start in a "clean boot" state http://support.microsoft.com/kb/310353 What’s the result in Clean Boot? Regards, Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com . Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
August 1st, 2011 9:58pm

Hi, I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help. Regards, Arthur Li Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
August 7th, 2011 9:48pm

Hi, Based on the current situation, I would like to suggest you test the issue in Clean Boot to narrow down what software conflicts. For the detailed steps of how to perform a Clean Boot, please refer to the following Microsoft KB article: How to configure Windows XP to start in a "clean boot" state http://support.microsoft.com/kb/310353 What’s the result in Clean Boot? Regards, Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com . Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Ok, I did a restart of the server after configuring it to "clean boot" state. The restart took less than 2 minutes, which is a minute less than I'd expect this physical server to take. When I put the server back in a "normal startup" state, the restart took 10 minutes.
August 9th, 2011 3:57pm

Not sure how you're diagnosing this. That sounds like part of the user profile hive cleanup service. Going blind into this I would have said incorrect or missing DNS configuration. Is this server part of an AD domain? If so can you post unedited ipconfig /all from this server and local DNS server? Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows] Ok, this server is a domain atttached member server. We don't use AD DNS directly. Here's the "ipconfig /all" for the member server. I would have to talk to a domain administrator for the DC AD DNS settings, and our Telecom department for their DNS server settings. Windows IP Configuration Host Name . . . . . . . . . . . . : VPSACDSMICROS01 Primary Dns Suffix . . . . . . . : ad.ilstu.edu Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : ad.ilstu.edu ilstu.edu Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) Physical Address. . . . . . . . . : 00-1E-C9-47-CC-78 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 172.30.104.50 Subnet Mask . . . . . . . . . . . : 255.255.255.192 Default Gateway . . . . . . . . . : 172.30.104.62 DNS Servers . . . . . . . . . . . : 138.87.128.1 138.87.132.1 Primary WINS Server . . . . . . . : 172.30.103.9 Secondary WINS Server . . . . . . : 172.30.103.8 Ethernet adapter Local Area Connection 2: Media State . . . . . . . . . . . : Media disconnected Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #2 Physical Address. . . . . . . . . : 00-1E-C9-47-CC-7A
Free Windows Admin Tool Kit Click here and download it now
August 9th, 2011 4:00pm

Hi, I would like to confirm what is the current situation? If there is anything that I can do for you, please do not hesitate to let me know, and I will be happy to help. Regards, Arthur Li Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Ok, I'm back in the office after vacation, and really wanted to resolve this issue now. Thanks to all for all the suggestions. I've disabled some of the MICROS 9700 services that were running, but not needed, as long as the User Profile Service. With a clean boot, the server restarts in less than 2 minutes. However, I can't run a production server that way! This morning's restart took 10 minutes to complete. The results from the userenv.log are pasted below. Any ideas on where I go next? Any way for me to tell how long a given service took to load? USERENV(790.8a8) 06:10:46:167 LibMain: Process Name: d:\micros\les\pos\9700\nts\nvptransformationservice.exe USERENV(ad4.b4c) 06:10:46:246 LibMain: Process Name: C:\WINDOWS\system32\wbem\wmiprvse.exe USERENV(1d4.a58) 06:21:53:503 UnloadUserProfile: Entering, hProfile = <0x5cc> USERENV(1d4.a58) 06:21:53:503 UnloadUserProfile: no thread token found, impersonating self. USERENV(1d4.a58) 06:21:53:503 GetInterface: Returning rpc binding handle USERENV(1a4.1c0) 06:21:53:503 IProfileSecurityCallBack: client authenticated. USERENV(1a4.1c0) 06:21:53:503 DropClientContext: Got client token 000006CC, sid = S-1-5-18 USERENV(1a4.1c0) 06:21:53:503 MIDL_user_allocate enter USERENV(1a4.1c0) 06:21:53:503 DropClientContext: load profile object successfully made USERENV(1a4.1c0) 06:21:53:503 DropClientContext: Returning 0 USERENV(1d4.a58) 06:21:53:503 UnLoadUserProfile: Calling DropClientToken (as self) succeeded USERENV(1a4.12ac) 06:21:53:503 IProfileSecurityCallBack: client authenticated.
August 10th, 2011 7:54am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics