stewartje
asked on
IPC$ problem
We have a problem with the IPC$ share on our Server 2000 dissapearing. We are running Server 2000 SP4 with 2 XP Pro clients.
If I run "net share IPC$" it creates the share and all is well. After 5 munites it is gone.
I have changed the registry entrys to keep it but that does not hold after reboot.
I have checked for viruses. None.
I have checked for Spyware. None.
I have checked for a rootkit problem. None.
I have run defrag, checkdisk, and SpinRite. Did not help.
OS updates have eben installed.
What are we missing and why can'y we get the IPC$ to stay?
Jon
If I run "net share IPC$" it creates the share and all is well. After 5 munites it is gone.
I have changed the registry entrys to keep it but that does not hold after reboot.
I have checked for viruses. None.
I have checked for Spyware. None.
I have checked for a rootkit problem. None.
I have run defrag, checkdisk, and SpinRite. Did not help.
OS updates have eben installed.
What are we missing and why can'y we get the IPC$ to stay?
Jon
Zaheer Iqbal
Check the event viewer for any related errors..
hi there
pls refer to this ms kb article
http://support.microsoft.com/default.aspx?scid=kb;en-us;842715
this should help
bhanu
pls refer to this ms kb article
http://support.microsoft.com/default.aspx?scid=kb;en-us;842715
this should help
bhanu
ASKER
in the event viewer under app log I get:
Event ID 1000 USERENV
"Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine."
bhanu,
Thanks for the article. In repsonse to it:
We have no unknown items in the startup folder
Please see my initial POST to answer the rest.
I have done what the article suggets but it does not fix the problem. I can get the IPC$ back ny running "net share IPC$" but it goes away after 5 -10 minutes.
help?
Event ID 1000 USERENV
"Windows cannot query for the list of Group Policy objects . A message that describes the reason for this was previously logged by this policy engine."
bhanu,
Thanks for the article. In repsonse to it:
We have no unknown items in the startup folder
Please see my initial POST to answer the rest.
I have done what the article suggets but it does not fix the problem. I can get the IPC$ back ny running "net share IPC$" but it goes away after 5 -10 minutes.
help?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
hi stewartje
also refer to this article as refered in the said resolution
http://support.microsoft.com/?kbid=318755
bhanu
also refer to this article as refered in the said resolution
http://support.microsoft.com/?kbid=318755
bhanu
ASKER
bhanu,
i have read the article and the thread from experts. I am taking another look at hidden spyware and am using Hijack this. right now crss.exe may be the culprit.
jon
i have read the article and the thread from experts. I am taking another look at hidden spyware and am using Hijack this. right now crss.exe may be the culprit.
jon
ASKER
Problem found. It was csrss.exe and a hidden BHO. Ugh I hate spyware and was sure thsi was not the problem. Thanks for sticking with me and helping to fix it!
jon
jon
hi there
you are most welcome, i would always be there for help
bhanu
you are most welcome, i would always be there for help
bhanu