Weird problems with an XP PC.

I just had a weird experience with an XP domain member PC. The machine is a win2k workstation that had been upgraded to XP several months ago. It doesn't have many applications installed on it as it is used primarily as a proxy (WEB) on which an application named "WEBMarshal" is running. WEBMarshal receives requests from within our domain for web pages and determines through policies and member lists whether that request should be honored and that page displayed to the requestor . The problems started yesterday with pages not being displayed as requested. I looked at the PC and couldn't get any pages on the actual proxy PC itself I tried pinging other machines ao our network and was able to ping every one I tried. I tried pinging the proxy from the other workstations and was able to do that also. I made sure that all of the setting for the application and it's proxy configuration were correct, and they were.I made certain that our DNS & DHCP records all looked correct and they did.

The other weird thing going on was after a reboot, I got this message, "Your system has no paging file, or the paging file is too small. To fix this problem, go to system in the control panel, click the advanced tab, settings and advanced. Click custom size and set the pagefile to at least.............."  I did all that and the pagefile had been set to something like 245 MB and the PC has created a temporary pagefile of 265 MB to get around the issue. I clicked Custom and set it to a minimum of 1500 MB with a maximum of 2300 MB and clicked set. After clicking it, it remained at a size of 265 MB and said it needed a reboot. I rebooted and got the error again and reset the size again and rebooted again, several more times and it never changed.

I then got the bright idea to use system restore to fix whatever the problem was, so I started System restore and figured that if I returned the system to the 1st of November, that we'd be OK. I did and it went through the process and rebooted, after rebooting it said that it wasn't able to restore the sytem to that date. I tried another date with the same results and again it failed.

Looking in the event viewer I noticed the following Information Event, " NMS initialization during system startup failed" and couldn't remember having seen that one before. With no Internet I wasn't able to Google it so I decided to look through the services.msc and found several services disabled, they are/were. "Intel NMS", "Network DDE" and "Network DDE DSDM". I was able to start the Intel NMS and the Network DDE after reading the descriptions it sounded as if they were necessary for network connectivity so i changed their states from "disabled" to "Automatic" and started each one. Now, however the Network DDE is back to "disabled" somehow. Anyways, as soon as I started those, I was able to get a web page and shortly after that everyone else was able to as well. So now everybody is happy because they can get on the web and check out the scores on ESPN, or whatever, but I'm wondering what the heck happened to cause all of that. The machine in question is in a locked office (mine) and is never even looked at unless something goes wrong with the web access so I know that no one tampered with it.

Anyone have any ideas on why those services were disabled (they sound like they are necessary services) and are disabled again. And why everything worked after I started them? Or why I couldn't use sytem restore, or what happened with the pagefile?
Who is Participating?
PashaModConnect With a Mentor Commented:
Closed, 500 points refunded.
Community Support Moderator
Have you run comprehensive anit-virus and spyware scans on this system?
Is this computer directly connected to the internet, and if so are you running intrusion detection sofware and a good firewall?
Just because the computer is in a locked room does not mean it's secure. You can just about anything remotely to an xp machine as you can locally if your user account has access. So take a look at security on that machine, make sure no unecessary users/groups are in the Administrators group or even the Power Users etc.
Is this on a Domain or a local Workgroup?

As to why it wasn't working....I don't know anything about WEBMarshall, but if I had to guess I would assume it's using DDE to manage internet access. On most computers Network DDE can be disabled with no problems, but if WEBMarshall is using DDE, that would explain why this one didn't.

Now does Network DDE get disabled on every reboot?
dwielgoszAuthor Commented:
Thanks for the comment. The PC is in a domain and connects too the internet through a pix. The PC is also a client of Trend Micro's messaging for SMB server on our network(I think tha's the name). Whether the TrendMicro product is protecting it, I can not answer although I do have the firewall feature enabled on that software as well as the pix firewall. All of our email is scanned off-site by SOPHOS (proxied to and from). I must check the admin group though because that's a good suggestion.  The MB is an Intel D845PESV and may not have some current software running that was part of the board CD when we purchased it as this board is in it's second or third run in a system.
dwielgoszAuthor Commented:
For followup: I noticed that the hard drive on this machine was a little low on space, less than a gigabyte out of 40 gigs so I replaced the harddrive with one of those inexpensive monster drives (200 gig). After I got the machine back up and running with the new drive, all of the "problems" that had been occurring suddenly went away. So, I would have to assume that the drive running out of space was the cause. That would explain why I couldn't resize the page file and probably also why system restore wouldn't work. I would imagine that system restore uses ard drive space to move data around during that process. Thanks for the answers and I hope this helps someone else with a similiar problem.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.