lanmanserver service 1

[tatum]

Hey guys,

I had a buddy call me about his server because it taking 45 minutes to an hour to boot. It is a dell server running windows 2000 server, arcserve backup and norton antivirus server. When I looked at it, the reason it was taking so long was the lanmanserver service was disabled. This of course caused all the dependent services to fail and that was the reason for the long boot time.

What I havent been able to figure is why that service was disabled. Every time we set the service to automatic start, it still got reset to disabled. I tried putting a registry monitor on the computer to see what was changing the registry key that held the information about that service. The log showed services.exe was setting the value of that registry key so the service was set to disabled instead of automatic. This doesnt stop the service from running while the computer is on and the service is already running, but when this service doesnt start at boot up the machine takes forever to boot and this is the problem. There does not seem to be any specific time this happens either. It happens at random times throughout the day.

I cant figure out why this is happending. Has anyone seen anything like this before?

Thanks

Earl

 

[svsawkar]

Any group policies configured to hit this machine? Sounds like a gp as it can refresh itself periodically at set, but psuedo-random intervals.

/Siddahrth

 

[tatum]

There wouldnt be any group policies coming from another machine since this is the only server. I am not sure if someone has configured the group policy on this machine or not. Any idea what group policy could cause something like this?

 

[tatum]

I finally got a chance to check the machine out and the domain security policy was had that service set to disabled. Not really sure how it hapenned since it was the only security policy configured on the machine. Thanks alot though, that was a great call.