11 Replies Latest reply on Jan 20, 2008 2:37 AM by L0NGSHANK

    Windows 2000 Devices Spontaneously Rebooting

    Rookie

      We are experiencing an issue in our environment that involves Windows 2000 SP4 devices spontaneously rebooting. The basic facts gathered about the events are:

       

      1- A large number of the devices reboot without known cause during the daily time period that vulnerability scans occur. We have no vulnerabilities set to 'Autofix'. The reboot events occur with seconds or minutes of vulnerability scans being initiated. The scans do not terminate normally. Patch repair tasks pushed to the same devices do not stimulate a similar unintended reboot.

       

       

      2- The reboot condition on the same devices can also be initiated by running 'uninstallwinclient.exe', 'wscfg32.exe' or a self contained agent installation file.

       

       

      3- Novell Client for Windows vs. 4.90 SP2 is installed on all of the devices. Debugging of crash dumps from the affected devices reveals a probable relationship with a Client32 file, 'nwfs.sys'.

       

       

      4-Uninstalling Client32, reinstalling the LD agent (8.7 SP2) and reinstalling Client32 appears to remediate the condition in most of the affected devices.

       

       

      5- Our LDMS core is at 8.7 SP2 with most of our devices at 8.7 SP1.

       

       

      Has anyone seen a similar set of conditions and/or developed a resolution?

       

       

      Thanks.

       

       

      Allen

        • 1. Re: Windows 2000 Devices Spontaneously Rebooting
          leffrt SupportEmployee

          I seem to remember an issue with the Novell client a while back.  You really need to upgrade to the latest Service Pack, SP4.  This will fix many issues and probably the issues you are mentioning now.

          • 2. Re: Windows 2000 Devices Spontaneously Rebooting
            ecoidan Specialist

             

            If you really look at Novell service pack documentation that comes with the client Service Packs on the 4.91 client, you wont see 2000 listed on any service packs after 4.91 SP2.  Not saying that Novell doesn't support 2000 but they no longer list 2000 in the list.  I have left all my 2000 systems at SP2 and moved all XP systems to SP4 for the Novell Client, didn't want to take that chance assuming Novell supported it.

             

             

             

             

             

             

             

             

            • 3. Re: Windows 2000 Devices Spontaneously Rebooting
              Employee

              What does the event log say regarding the reboot?  How do we know for sure that LANDesk is causing the reboot?

              • 4. Re: Windows 2000 Devices Spontaneously Rebooting
                Rookie

                 

                In reply to the three previous posts:

                 

                 

                1- We plan to upgrade the core to 8.7 SP4 next month. The client upgrade on these potentially affected WIN2K devices will be difficult. As I mentioned in my post, upgrading the agent via a scheduled task causes the affected computers to blue screen and reboot. This will make it difficult to predict if deploying to WIN2K devices will cause downtime or data loss. This condition is not a reported issue fixed by SP4, but as we all know LANDesk may have unreported fixes for issues included in a nSP.

                 

                 

                2- Novell Client for Windows vs. 4.90 SP2 is supported by Novell on Windows 2000

                 

                 

                3- The Event Viewer System log on affected devices shows a "Save Dump" event within 5-120 seconds of an entry in a vulscan.log on many of the devices. There are also the usual events surrounding the "Save Dump" for starting of the OS, Event log, etc. that indicate a restart.

                 

                 

                • 5. Re: Windows 2000 Devices Spontaneously Rebooting
                  leffrt SupportEmployee

                  So are you only getting the blue screen when pushing the Agent to a machine?  Have you tried manually running the install?  If it still blue screens you can try intsalling each LANDesk component starting with the standard agent first and see which causes the issue.  It could be an issue with a component you may be able to exclude, such as something like the Mirror Driver.  Worth a shot at least.

                  • 6. Re: Windows 2000 Devices Spontaneously Rebooting
                    Rookie

                    We have tried installing and uninstalling the agent manually. It does not even get to the first part of the install process before it crashes the computer. We received a version of 'uninstallwinclient.exe' from LD PS with special debugging include. The logging on the uninstall process does not even get to the first step of the process before the log entry ends with the Windows STOP condition.

                    • 7. Re: Windows 2000 Devices Spontaneously Rebooting
                      leffrt SupportEmployee

                      When you try the manual install use the /L switch.  This will create a log for the installation process called wscfg32.xlg, I think.  This might help with where the blue screen is occuring.  I think this log file is in the temp folder of the user you are running it under.

                      • 8. Re: Windows 2000 Devices Spontaneously Rebooting
                        ecoidan Specialist

                         

                        What version of the MSI installer is on the system?

                         

                         

                        • 10. Re: Windows 2000 Devices Spontaneously Rebooting
                          Rookie

                          We have run logging several times and we don't get much back. Below is a representative log. It never really gets started copying files. The install process stopping at the .mrl file was not seen by Product Support as a signifcant clue.

                           

                          12/20/2007 15:07:21.109 1984 1544 xtrace.c 425 Start of log for process file://
                          corename\ldlogon\wscfg32.exe

                          12/20/2007 15:07:21.109 1984 1544 xtrace.c 426 process log file C:\DOCUME1\ADMINI1\LOCALS~1\Temp
                          wscfg32.xlg

                          12/20/2007 15:07:21.203 1984 1544 xtrace.c 451 process log done

                          12/20/2007 15:23:13.546 548 1708 ntstacfgdlg.cpp 1147 INFO: Command line is '/l'

                          12/20/2007 15:23:13.562 548 1708 xtrace.c 451 process log done

                          12/20/2007 15:24:55.468 1828 1840 ntstacfgdlg.cpp 1147 INFO: Command line is ''

                          12/20/2007 15:24:55.468 1828 1840 xtrace.c 451 process log done

                          12/20/2007 15:27:43.312 300 2028 ntstacfgdlg.cpp 1147 INFO: Command line is ''

                          12/20/2007 15:27:43.312 300 2028 xtrace.c 451 process log done

                          12/20/2007 15:27:59.359 1792 1620 ntstacfgdlg.cpp 1147 INFO: Command line is ''

                          12/20/2007 15:27:59.359 1792 1620 xtrace.c 451 process log done

                          12/20/2007 15:40:21.187 2056 200 ntstacfgdlg.cpp 1147 INFO: Command line is '/f /status /noreboot /c=" Windows Agent with Form87SP2.ini"'

                          12/20/2007 15:40:21.421 2056 200 tokens.cpp 422 SUCCEEDED: Copying file '\ENUNTCFG.MRL'

                          12/20/2007 15:56:50.640 308 624 ntstacfgdlg.cpp 1147 INFO: Command line is '/l /f /status /noreboot'

                          12/20/2007 15:56:50.703 308 624 tokens.cpp 422 SUCCEEDED: Copying file '\ENUNTCFG.MRL'

                          • 11. Re: Windows 2000 Devices Spontaneously Rebooting
                            Rookie

                            Hi Arenish;

                             

                            Were you ever able to get anywhere with this?.  I have the exact same issue W2K Novell 4.90 SP2.  Machines are spontaneously rebooting always right around scheduled scan times. 

                             

                            I was able to reduce them greatly by turning off the Real Time Spyware Scanner (Agent Config Settings).  However I would still like to get to the bottom of the source issue.  The Event logs in my cases are fairly empty.  I also noticed Softmon.exe occasionally threw errors on the phantom reboots, boot up, requiring another reboot, and then softmon.exe would be pinned in Task Mgr.

                             

                            Im getting ready to roll out LD AV to our whole company, replacing McAfee, If I can't get a grip on these phantom reboots, its not going to be pretty (My security team is against turning off the real time spyware scanner in favor of VulScans Spyware scan). 

                             

                            All my testers are super happy with its performance Vs McAfee but they sure sour when I reboot them without warning.  Any light anyone can shed on this would be greatly appretiated.  They are Dell Optiplexs ranging from 280s to 745s.

                             

                            Thanks in advance.

                             

                            L0NGSHANK