Hello forum I have just installed a brand new domain controller windows 2008 R2, after a lot of updates and software installations; upon a shutdown and reboot, when I logon as administrator; I got a pop up "You must restart your computer to apply these changes" this baffled me for days as what caused it; I used process explorer to check, it seemed generated by the following rundll32.exe C:\Windows\system32\newdev.dll,pDiDeviceInstallNotification \\.\pipe\PNP_Device_Install_Pipe_1.{f4eedfbd-213e-43a6-b862-cbef0c82ed03} "(null)" How do I get rid of this message without doing any damage to this production server ? Many thanks in advance ! Michael

Hi Michael, Have a look: http://social.technet.microsoft.com/Forums/en/w7itproinstall/thread/06201138-a77a-4446-9cdb-ccb4a6f71882Regards, Rafic If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY suggestion in a test environment before implementing!

Hi there thanks for pointing me to the link I looked at it; it seemed to suggest rundll32.exe or newdev.dll is corrupt. I will check those files on my w2008R2 server, and post back here I can still update device drivers even if I got this problem. is there an easy way to tell what is {f4eedfbd-213e-43a6-b862-cbef0c82ed03} ? Regards Michael

hi again I checked the sizes of newdev.dll and rundll32.exe; the newdev.dll sizes are the same in different directories. however; there are differen sizes of rundll32.exe in different locations; here are the dir list Directory of C:\Windows\System32 14/07/2009 02:41 p.m. 313,856 newdev.dll 1 File(s) 313,856 bytes Directory of C:\Windows\SysWOW64 14/07/2009 02:16 p.m. 313,856 newdev.dll 1 File(s) 313,856 bytes Directory of C:\Windows\winsxs\amd64_microsoft-windows-newdev_31bf3856ad364e35_6.1.7600.16385_none_6d6b3cfb6a5a1e5a 14/07/2009 02:41 p.m. 313,856 newdev.dll 1 File(s) 313,856 bytes Directory of C:\Windows\winsxs\x86_microsoft-windows-newdev_31bf3856ad364e35_6.1.7600.16385_none_114ca177b1fcad24 14/07/2009 02:16 p.m. 313,856 newdev.dll 1 File(s) 313,856 bytes Directory of C:\Windows\System32 14/07/2009 02:39 p.m. 45,568 rundll32.exe 1 File(s) 45,568 bytes Directory of C:\Windows\SysWOW64 14/07/2009 02:14 p.m. 44,544 rundll32.exe 1 File(s) 44,544 bytes Directory of C:\Windows\winsxs\amd64_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7600.16385_none_33fa4336c49b998b 14/07/2009 02:39 p.m. 45,568 rundll32.exe 1 File(s) 45,568 bytes Directory of C:\Windows\winsxs\x86_microsoft-windows-rundll32_31bf3856ad364e35_6.1.7600.16385_none_d7dba7b30c3e2855 14/07/2009 02:14 p.m. 44,544 rundll32.exe 1 File(s) 44,544 bytes ----------------- should those rundll32.exe be the same size and timestamp? I am starting a SFC /viewonly and post back Thx Michael

ah...well; sfc doesn't report any problem C:\>sfc /verifyonly Beginning system scan. This process will take some time. Beginning verification phase of system scan. Verification 100% complete. Windows Resource Protection did not find any integrity violations.

I run sfc for newdev.dll and rundll32.exe, sfc reports no error the parameters are changing for the rundll32.exe rundll32.exe C:\Windows\system32\newdev.dll,pDiDeviceInstallNotification \\.\pipe\PNP_Device_Install_Pipe_1.{e7ab80ac-3d13-403f-b23f-1f2e250c39fe} "(null)" edit: the rundll32 is started by svhost.exe DcomLaunch yet to figure out what make it to happen, any comment welcome Thanks Michael

answer my own question here, the restarting prompt issue surfaced during another server install. this time I noticed the Eaton UPS is the last change I made to the system. following Eaton UPS software update pop-out, I applied an update from Eaton. the restarting-from-nowhere issue gone. what a world. Michael