Bienvenido! - Willkommen! - Welcome!

Bitácora Técnica de Tux&Cía., Santa Cruz de la Sierra, BO
Bitácora Central: Tux&Cía.
Bitácora de Información Avanzada: Tux&Cía.-Información
May the source be with you!

Monday, February 25, 2013

event ID 8007 -Service status bit

The browser was unable to update the service status bits.  The data is the error.
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/0cac064b-75a1-4f6e-a87b-70f0aac9b038/
Are you running any 3rd party firewalls on the machine? These can cause that error. If so can you disable as a test?
--------------------
You should check in event viewer for more details:
http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.0&EvtID=8007&EvtSrc=Browser&LCID=1033
-----------------

Event ID 8007 – Browser
===================
Check firewalls and AV software on the machines (from a google search).
also:
Event Message:
The browser was unable to update the service status bits. The data is the error.
Source Event Log Event ID Event Type
Browser System 8007 Error
Explanation:
An error occurred in the Server service.
User Action:
Check the event log with Event Viewer for more details about the error.
http://msdn.microsoft.com/en-us/library/ms841535.aspx
=============== 
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/d609e51f-edd1-4224-89cf-f4587789a902/
You need to have the understanding of the microsoft browsing technology ( intermediate level ) to understand and troubleshoot the event id's related to computer browser service.
Computer browser service helps you to view your entire network in one single win32 UI or in shell , which means you would double click my network places -- entire network you would see the domain name and the related clients added to the domains.
How does these clients are being added ? , this is done with the help of computer browser service running on the clients.
The process of computer browser service is complex , It does browser elections and nominates the master browser , this master browser listens for all hosts announcements and caches them . So it depends how your network design is
Always a PDC is nominated as master browser , and if there is no PDC available , computer browser service would perform election and nominate additional DC's as one of the master browser.
So your network should comprise of WINS from which the PDC / Master browser would obtain the list of hosts using 1b record. So this PDC would contact all the master browsers across the network and merge the lists.

So for any network there will be
a) domain master browser
b) master browser
c) open appropriate UDP ports because they work on datagrams
===========================================
You need to be careful in designing your browser service , you need to enable computer browser service on DC's which you intend to make them as master browser server. and always PDC will be the domain master browser.
By saying this you need to now check if the list is getting populated , if not you need to troubleshoot further and one of the best utility to troubleshoot is browstat
http://technet.microsoft.com/en-us/library/cc739367(WS.10).aspx
 
===============
Cause:An error occurred in the server service.
Following information from a newsgroup post may help:
"Check following things.
1. Check for any virus infection to your system.
2. Check the permission for the folder "C:\WINNT" (system root)
3. Install updated driver for Ethernet card.
4. Try by reinstallation of the Service Packs installed."
----------------------------
"I removed and reinstalled "Browser" and "Workstation" services and reapplied the service packs and the problem has solved."
----------------------------
"We have faced the same problem. The problem was due to a memory error. We have used an Utility from MajorGeeks for memory test."
**Link given below. 
http://kb.prismmicrosys.com/evtpass/evtpages/EventId_8007_Browser_44470.asp
===============
http://www.computing.net/answers/windows-2003/the-browser-was-unable-to-update-the-service/10630.html
What Anti-Virus are you running?
What version of I.E. are you running?  
Maybe is a TCP/IP stack problem, as you told me, but I'm not quite sure if we will be able to do that in this production server. Do you know how to do it or when I can find some info about that?
----------
 Yes, if you only have one NIC you would have to do it after hours.
Here is where I got the info on the TCP/IP stack causing the problem...
http://www.techsupportforum.com/for...

afd.sys indicates a problem with tcp/ip stack.
reset tcp/ip stack
Use a manual method to reset TCP/IP for Windows XPNote This section is intended for advanced computer users.
The reset command is available in the IP context of the NetShell utility. Follow these steps to use the reset command to reset TCP/IP manually:
  1. To open a command prompt, click Start and then click Run. Copy and paste (or type) the following command in the Open box and then press ENTER:
    cmd
  2. At the command prompt, copy and paste (or type) the following command and then press ENTER:
    netsh int ip reset c:\resetlog.txt
    Note If you do not want to specify a directory path for the log file, use the following command:
    netsh int ip reset resetlog.txt
  3. Reboot the computer.
Use a manual method to reset TCP/IP for Windows Vista and Windows 7 
Note This section is intended for advanced computer users.
The reset command is available in the IP context of the NetShell utility. Follow these steps to use the reset command to reset TCP/IP manually:


  1. To open a command prompt, click Start and then type CMD in the Search programs and files.
  2. Right-click CMD.exe icon in Programs and choose Run as administrator.
  3. When the User Account Control box pop up, click Yes.
  4. At the command prompt, copy and paste (or type) the following command and then press ENTER:
    netsh int ip reset c:\resetlog.txt
    Note If you do not want to specify a directory path for the log file, use the following command:
    netsh int ip reset resetlog.txt
  5. Reboot the computer.
When you run the reset command, it rewrites two registry keys that are used by TCP/IP. This has the same result as removing and reinstalling the protocol. The reset command rewrites the following two registry keys:
SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ 
SYSTEM\CurrentControlSet\Services\DHCP\Parameters\ 
To run the manual command successfully, you must specify a file name for the log, in which the actions that netsh takes will be recorded. When you run the manual command, TCP/IP is reset and the actions that were taken are recorded in the log file, known as resetlog.txt in this article.
The first example, c:\resetlog.txt, creates a path where the log will reside. The second example, resetlog.txt, creates the log file in the current directory. In either case, if the specified log file already exists, the new log will be appended to the end of the existing file.
===========================
The story continues I'm afraid. Since resetting the tcp/ip stack I've not had a stop error while browsing, however, I just tried to put my system on standby and a different stop error screen appeared, counted to 100 then restarted the pc. The stop error read:
IRQL not less or equal
STOP: 0x0000000A (0x00000016, 0x00000002, 0x00000000, 0x080500390)
------------
Im the event viewer, under Application:
There are repeated Application errors and Application hangs to Spybot's TeaTimer, event ID 1000. They are followed by Application errors described as 'Fault bucket 199747174.
I disabled Teatimer but got the stop error screen when attempting system standby.
Under Security:
There are a handful of 'Failure Audits', event ID 615, category 'Policy change', described as IPSec Services failed to get the complete list of network interfaces on the machine. Please run IPSec monitor snap-in to further diagnose the problem.
Under System:
It seems that the most recent error was to do with the browser, event ID 8007. 'The browser was unable to update the service status bits. The data is the error'.
However there are multiple entries for 3 sources:
System error, category 102, event ID 1003, which is described as the parameters quoted in my previous post.
The other two are multiple and always occur at the same time (according to the event viewer).
Source:W32Time
Event ID: 17
Description: Time provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
Source: W32Time
Event ID: 29
Description: The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. NtpClient has no source of accurate time.
I hope this sheds some light on things for you because I'm totally in the dark!
-----------------------
just had another afd.sys stop error:
STOP 0x000000D1 (0x00000000, 0x00000002, 0x00000000, 0xEE85E7FC)
Afd.sys -
I guess this means that the resetting of tcp/ip stack didn't work :(
-------------
The event viewer errors wouldn't cause a crash
http://support.microsoft.com/kb/830092/ check to see if your file dates are the same as in this kb to see if you need the hotfix
Do a memory test
============================
http://www.petri.co.il/forums/showthread.php?t=50805
I'm using Windows server 2003 Standard Edition R2, and i get my windows server freezed every morning. I still can move my mouse, but the Start menu and taskbar don't work, and Ctrl + Alt+ Del doesn't do anything.
Then, i checked the event viewer, and i got this error:

Quote:
EventID: 8007
The browser was unable to update the service status bits. The data is the error.
The browser error message occurs with 2 hours interval. Every time i hard restart the server, it's normal again, but it will get freeze again in the next morning.
I've been using Process Explorer software to find any process related to that error. And i found process svchost.exe which the service computer browser is in, contained 0x77e617ec process which keep occurring and i have no idea when it'll finish. I think my windows get freeze because that never ending process and eating my memory process.
I couldn't print-screen when i'm getting the 0x77e617ec, because i couldn't open any software. And i couldn't post image either here. May i'll add some pictures later.
When my windows server get freeze, 0x77e617ec process keep occurring under Start Address in the Process Explorer all the time.
-----------------------------------
Read this, http://www.bleepingcomputer.com/tuto...torial129.html and determine what process 0x77e617 is then we can debug from there.

No comments: