Dr.Watson Error on my Win2003 DC

Do you see this error only while rebooting the system or you get it while loggin off from the system too?

Hey Samrtsid,

Thanks for your prompt response. To be frank, we do not generally log off our servers since there are VMware virtual servers and limited admins have access to VMs, we just login and leave them like that.

I have actually done some security patches yesterday and rebooted, and when I logged in after reboot, there was this error.  Don't have an answer to your question right now.  I cannot try this right now, because Thu-Fri is weekend in Oman, I will get you answer for this only on Saturday.

Have converted this machine from physical to virtual?
try to see what process are running on background apart from AD process.

@smartsid : Yes, I checked this out today, the error pops every time I login to the server.

@csotoc: Yes, this machine was P2Ved.  Attaching screenshots of running processes for your reference.
Background-Processes--1.JPG
Background-Processes--2.JPG

Please help experts... i'm increasing the value... c'mom... !!!

Try running drwtsn32.exe and check the settings.
Log path and crash dump locations should be valid directories it can write to.

Hi Mpfister,
Thanks for your inputs, the directories are very much present in their locations, and the .exe is writing to them.  I find no issues with that.

Are dumps  correspondig to the above error stored in the directories?
Hm, the error sounded more Dr. Watson is not able to initialize...

Thanks again guys, but I get this error when I login not during logout, as it says something to do with DLL initialization.  How can this be fixed?

"window station is shutting down" happens when you log off your session aka window station

Nothing happens when I logoff, no errors no popups... but when I login again, I strangely get this popup again.

Spyware or DEP killing watson?
You can try ollydbg in place of watson to get more detail.

Hi Gheist,

Sorry for delay in responding back, was too busy in a new project.  Actually I have downloaded the OllyDBG debugger tool, however, not sure how to use it as never used it before.  Is it safe to use on a live DC ???  Any steps on how to run this ???

olly is a debugger
it can replace drwatsn as jit debugger and give more insight on process which crashes anyway.
it does only activate at the moment drwatsn activates in its place, probably should not be exposed to techie users on live dc, otherwise no harm.
you can test it is you have some program crashing on your workstation.....

it is not a kernel debugger which would activate on blue-screen like conditions.
it handles only crashed process (unless you use it to kill lsass.exe)

Hey Gheist,
Thanks a lot, I'm going to give Olly a try tomorrow on one of my servers.  And will let you know what happens.