Link to home
Start Free TrialLog in
Avatar of Marcheblanc
MarcheblancFlag for Canada

asked on

Error 2141 The server is not configured for transactions

Hi,

i have an urgent problem. On a small network (computers sharing only) in win2k, i cannot access on a computer; i receive always this message: Error 2141 The server is not configured for transactions.

I tried everything even the solution done on the site expert-exchange (google search).

Help please,
Avatar of oBdA
oBdA

Make sure the administrative shares are enabled:
Overview of problems that may occur when administrative shares are missing
http://support.microsoft.com/?kbid=842715
How is your network configured on this computer?  That can also happen if the network is not completely configured.  Right-click "My Network Places," left-click "Properties."  See what protocols, clients, and services you have running.
Avatar of Marcheblanc

ASKER

hI,

Comment for ABdA:  I tried what microsoft suggest but no such key appear in the registry...they suggest that a malware modified the registry. In french it says:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
c.  Si les valeurs (value) AutoShareServer et AutoShareWks DWORD dans la sous-clé (key) LanmanServer\Parameters sont configurées avec des données de valeur sur 0, modifiez cette valeur à 1.

But those keys (AutoShareServer and AutoShareWks) do not exist in the registry. I checked on another computer (with no problem) and the keys doe'nt appear either.

So, do you have another suggestion

Comment for donandann: I'm a consultant (french Quebec) in computer and i have worked on that problem about 3 hours. So if i ask en expert, it is because, everythig normal and more was done to solve the problem. So, be sure that it is not a question of "Properties."  See what protocols, clients, and services you have running.

From that station, note that I see the other computer, so the network is workink The question is that i have this message when i want to access this computer from another computer. The problem is really for an expert.

SO I INCREASE THE POINT VALUE TO 500. I do not want to reinstall Win2k... too much trouble on that computer...I cannot imagine that  nobody  within Experts-Exchange can help me.

I a question of honor.

Marcheblanc

 
When you open a command prompt on that machine and enter
net share
do you see at least IPC$, Admin$, and C$ listed?
---------------------------------------------------
C:\>net helpmsg 2141

The server is not configured for transactions.


EXPLANATION

The specified server is not configured to accept the command you typed.

ACTION

Ask your network administrator if the server is configured properly. The adminis
trator may choose to share the server's IPC$ resource to correct this problem.
---------------------------------------------------

Scan for malware with an uptodate virus scanner, AdAware (http://www.lavasoft.nu) and maybe others.

Hi, ObDA and others

I have checked with the command "net share" and  IPC$, Admin$, and C$ are not listed.

Ok now. How do I share IPC$ and so on again.

I'm sure that there is no known virus on that computer.

So i suppose that if a share IPC$ again everything will be well.

Help again please

Marcheblanc




































Is the Server service started on the machine in question?
Can you create a share manually and access it?
Look at this MS KB article http://support.microsoft.com/default.aspx?scid=kb;en-us;842715:

RESOLUTION
Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To verify whether a computer is affected by this issue, follow these steps:
1.      Examine the AutoShareServer and AutoShareWks registry values to make sure that they are not set to 0:
a.       Click Start, click Run, type regedit, and then press ENTER.
b.       Locate and then click the following registry sub-key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
c.       If the AutoShareServer and AutoShareWks DWORD values in the LanmanServer\Parameters sub-key are configured with a value data of 0, change that value to 1.

Note If these values do not exist, you do not have to create them because the default behavior is to automatically create the administrative shares.
d.       Quit Registry Editor.
2.      Restart the computer. Typically, computers that are running Windows Server 2003, Windows XP, Windows 2000, or Windows NT 4.0 automatically create the administrative shares during startup.
3.      After the computer restarts, verify that the administrative shares are active. To examine the shares, use the net share command. To do this, follow these steps:
a.       Click Start, click Run, type cmd, and then press ENTER.
b.       At the command prompt, type net share, and then press ENTER.
c.       Look for the Admin$, C$, and IPC$ administrative shares in the list of shares.

Hope it helps

Michael
Hi,
For ObDa:
You say:  Is the Server service started on the machine in question? Can you create a share manually and access it?

Note that is not a Real Server: It is only a shared computer...

I know now what is the problem: Ipc$ do not appear when I the at the command prompt "net share".

If i do "NET SHARE IPC$"  or NET SHARE ADMIN$ the command works but I don't see it when I try again "NET SHARE"...

sO THE QUESTION IS: HOW TO USE THE COMMAND "NET SHARE" PROPERLY....

And For Michael:  Look for the Admin$, C$, and IPC$ administrative shares in the list of shares.

That is the problme: Admin$, c$ and ipc$ are not there so HOW TO HAVE IT AGAIN....

hELP, PLEASE....



mARCHEBLANC




Even if the machine is a workstation, the server service must be started in order to navigate the network and share files.  I believe that if you check the workstations that are working the server service is started.
Open a command prompt and enter
net start
This should return a list of running services; it should include one named "Server". The Server service is (has to be) running on *any* machine that shares folders, it's the service that creates the shares.

mpfister,
that was the exact same article I already posted, and Marcheblanc already said that the values to disable the shares weren't in the registry.
Hi donandann,

The server service is started on the computer in question.

I repeat the question: That is the probleme: Admin$, c$ and ipc$ are not there so HOW TO HAVE IT AGAIN....

Help... again...I'm working on that problem for many hours cause I don't want to reinstall win2k... to much progs on that computer...

Marcheblanc


Create a folder "Sharetest" in your C:\ root directory.
In a command prompt, enter
net share Sharetest=C:\Sharetest
Then enter
net share
Does the share "Sharetest" show up in the list?
Hi oBdA

I did what you suggest:  
Create a folder "Sharetest" in your C:\ root directory.
In a command prompt, enter
net share Sharetest=C:\Sharetest
Then enter
net share

YES Sharetest appear in the list?

I'm still working on that! Thank you for your effort....

Marcheblanc
Try a
net stop server
followed by a
net start server
and then again
net share
hi, oBdA

I did it... net stop server
followed by a
net start server
and then again
net share
 
The commands are working properly but  Net Share show the same thing then before...

and so...
Marcheblanc
HI,

Something strange.... i have botted this computer in Safe Mode with network and i can access this computer from the other station.

And if i Reboot in normal mode, niet..... same problem...

I tried to reinstall the drivers of the netword adapter,,, same prob..

Do you suggest that i change the adapter card....


Marcheblanc
ASKER CERTIFIED SOLUTION
Avatar of oBdA
oBdA

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi oBda,

You're right, because in safe mode with Net Share, i see c$, admin$ and ipc$ shared. So it is probably a malware. I have already scanned with Adaware but i will try Spybot, SpyWeeper and other... and i give you some news...

I'ts terrible to work so hard to find a problem when it's come from a "terrorist computer act"..... as in London today

Regards

Marcheblanc
HI AGAIN,

I think that I will be obliged to Reinstall W2k. I have worked on that question until 3 O'clock in the morning and ask for help all over the word. Microsoft OS's  are disgusting.  I tried scanning with 4-5 AntiSpyware ou AntiVirus and everything is clear.

I have installed DameWare Utilities and there is a tool to reinstall all the Administration Sharing by default. It install Admin$, c$, D$ and everything except that stupid IPC$.

What I don't understand is why in SAFE MODE, Net Share see IPC$ but NOT in NORMAL MODE. Where is the problem! I canNOT imagine that there is no solution. This computer is very long to reinstall from the beginnig because of particuliar devices attached on IT  and sofware.

Is there a genius somewhere in the World to help again.

Marcheblanc
One other thing you could try before reinstalling is to create the AutoShareWks and AutoShareServer and set them to 1.
And (far fetched, but still easier than a reinstall) have you tried logging on with a different user? Try as well creating a new user (no admin permissions at first), and log on with this one to get a fresh profile; check if the shares are present then.
Hi oBdA,

1 I have already try to create the AutoShareWks and AutoShareServer and set them to 1 but it do nothing.  But i'm not sure that i have done well:
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\lanmanserver\parameters

I added a new key (type RG_SZ) with a valut 1. But is RG_SZ the good type. I wrote somewhere to add a DWORD key. How do i do it.

2) I tried to log on with administrteur (in french) but not with a fresh new profile. I will try it later. I'm not working on that computer now.

What is shocking is the time loosed. I'm working as a computer consultant since 20 years yet and i have never seen such a thing. Others have seen it and i have consulted many solutions on the internet and nothing are working.

Now I ask to God to help me. Why not! It's a desparate cause and only the sky is not the limit.

But you at Experts-Exchange... and espacially the so patient oBdA, stay there please.... If we found a solution, It will be a must for other folks swimming in the same horreur. (in french, it's my maternal language).

Marcheblanc
That should be REG_DWORD, not REG_SZ. Delete the AutoShareWks and AutoShareServer values and re-create them as REG_DWORD.
Hi oBdA

Something new. I have installed Wintask Pro 5.0 and in the proccesses actives i see Win32.exe and it says that it is a something like RATAGA VIRUS.

If i try to stop the process it do not work. How come Norton Antivirue 2005 do not see it and do you know how eradite it...

Home again,

Marcheblanc
hi,

On the site of wintasks Pro 5.0 they claim that they can stop the process  win32.exe and it is not true.

how do i stop this process please

Marcheblanc
hi,
Another thing: do you know if the process NTLOGONWRK.EXE is normal.

Marcheblanc
HI oBdA
 

Hurry! I found the solution believe it or not. I was so glad that i have stepped 2 feet hight.

And I accept your solution (oBdA when you say:

Well, the "net share admin$" and "net share ipc$" commands should have done the job, especially if you can share other directories.
I'm currently running out of ideas, other than indeed some malware preventing the shares. Since you have the shares in safe mode, you might consider this again after all.

You're where right: If the workstation is accessible in SAFE MODE, it means that a process running in NORMAL MODE, IS NOT RUNNING IN SAFE MODE.

And this process is: NETLOGONWRK.EXE which is a Malware or a Virus. I have analysed every process running et 2 process where weird. Win32.exe and NetLogonWrk.exe.

And absolutely no Antivirus ou No Spyware have seen it.

And Wintasks Pro 5.0 claiming on their Internet Site that they can stop this process are lying. No way.

YOU MUST DELETE THOSE PROCESS IN SAFE MODE.
OK.
Thank you for you patience and i will accept your answer for 500 points when  i will receive your comment telling me that you have read this and that you agree with this solution..

Regards
Marcheblanc
You were correct, neither of those two are legitimate processes. If you have a backup of those programs, you might consider sending them to Norton (assuming your virus definition files are up to date), to let them know that they're missing something; most antivirus companies have some address were you can inform them about new viruses.
Since the new ones are often concentrating on key logging, you should probably change any password you might have entered on this machine.