windows server 2008 restarts when I logoff
Hi, I've a server 2008 EE (not R2) with SP2 that reboots when I'm working on it through terminal server and I log off. Th server reboots and shows the following blue screen: INVALID_PROCESS_ATTACH_ATTEMPT STOP: 0x00000005 (0x962932c0,0xc1a21020,0x00000001,0x00000000) In the event viewer there is nothing related to this rebooting, perhaps this warning event: The WinRM service failed to create the following SPNs: WSMAN/itaca-sproteo.itaca-sa.com; WSMAN/itaca-sproteo. Additional Data The error received was 8344: %%8344. User Action The SPNs can be created by an administrator using setspn.exe utility. Source: Windows Remote Managem Event ID: 10154 I so far have no found anything that can help to discover this problem. Can anybody give a hint which helps me? Thanks in advance. Regards.
December 17th, 2010 9:49am

STOP: 0x00000005 (0x962932c0,0xc1a21020,0x00000001,0x00000000) The INVALID_PROCESS_ATTACH_ATTEMPT bug check has a value of 0x00000005. This generally indicates that the thread was attached to a process in a situation where that is not allowed. For example, this bug check could occur if KeAttachProcess was called when the thread was already attached to a process (which is illegal), or if the thread returned from certain function calls in an attached state (which is invalid), This bug check appears very infrequently. Refer to this Microsoft article. For the event ID 10154, refer to this Microsoft article. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
December 17th, 2010 10:43am

Thanks for your answer. Is there any way to get more information about the error? I remember there was a dump log for the server but I don't know where to find and how to manage it. Regards.
December 17th, 2010 11:46am

To get more information about the error, please refer to this Microsoft article named "How to read the small memory dump files that Windows creates for debugging". If will let you now how to debug dump files. To find your dump files, search *.dmp files on your system partition and you will find them. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Free Windows Admin Tool Kit Click here and download it now
December 17th, 2010 12:01pm

Hi, I've a server 2008 EE (not R2) with SP2 that reboots when I'm working on it through terminal server and I log off. Th server reboots and shows the following blue screen: INVALID_PROCESS_ATTACH_ATTEMPT STOP: 0x00000005 (0x962932c0,0xc1a21020,0x00000001,0x00000000) In the event viewer there is nothing related to this rebooting, perhaps this warning event: The WinRM service failed to create the following SPNs: WSMAN/itaca-sproteo.itaca-sa.com; WSMAN/itaca-sproteo. Additional Data The error received was 8344: %%8344. User Action The SPNs can be created by an administrator using setspn.exe utility. Source: Windows Remote Managem Event ID: 10154 I so far have no found anything that can help to discover this problem. Can anybody give a hint which helps me? Thanks in advance. Regards.
December 17th, 2010 5:34pm

Follow the below steps Click Start, and then click Control Panel. Click System. On the Advanced system Setting tab, click Settings under Startup and Recovery. Select small memory dump and restart . then login and log off. Please Start Windows in Clean Boot mode 1) Click Start. 2) Copy and paste "msconfig" (without the quotation marks) in the Start Search box, and click Enter. 3) Switch to Services tab and then Check Hide All Microsoft Services. 4) Click Disable All. 5) Switch to the Startup tab and then Click Disable all. 6) Click OK. 7) Click Restart to restart the computer and test the issue.
Free Windows Admin Tool Kit Click here and download it now
December 19th, 2010 11:31pm

Thank you Mr X. I've solved the problem debugging the memory.dmp file with with the windbg. Regards.
December 20th, 2010 7:30am

Thank you Vinay for your help. I've been able to solve the problem with the windbg. Regards.
Free Windows Admin Tool Kit Click here and download it now
December 20th, 2010 7:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics