Avatar of gtsupport1
gtsupport1
 asked on

XP BSOD when using CTRL ALT DEL

An HP workstation was updated from SP2 patch levels to SP3, along with most other intermediate KB updates.  About 40 updates in total.
Since the updates on 8/5, many times that the user presses CTRL-ALT-DEL to lock the machine, it immediately reboots.  Not 100% of the time, but its frequent.
Event log has the following error entries from each crash:

FIRST:
Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10016
Date:            8/7/2011
Time:            9:40:41 PM
User:            NT AUTHORITY\SYSTEM
Computer:      name
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


SECOND:
Event Type:      Error
Event Source:      System Error
Event Category:      (102)
Event ID:      1003
Date:            8/7/2011
Time:            9:42:05 PM
User:            N/A
Computer:      name
Description:
Error code 1000008e, parameter1 c0000005, parameter2 bfa281bd, parameter3 bab1775c, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45   System E
0008: 72 72 6f 72 20 20 45 72   rror  Er
0010: 72 6f 72 20 63 6f 64 65   ror code
0018: 20 31 30 30 30 30 30 38    1000008
0020: 65 20 20 50 61 72 61 6d   e  Param
0028: 65 74 65 72 73 20 63 30   eters c0
0030: 30 30 30 30 30 35 2c 20   000005,
0038: 62 66 61 32 38 31 62 64   bfa281bd
0040: 2c 20 62 61 62 31 37 37   , bab177
0048: 35 63 2c 20 30 30 30 30   5c, 0000
0050: 30 30 30 30               0000    

Any advice appreciated!
Microsoft Legacy OSWindows XP

Avatar of undefined
Last Comment
gtsupport1

8/22/2022 - Mon
Randy Downs

Try this
http://blog.paulgu.com/2009/02/10/permission-settings-do-not-grant-local-launch-permission-for-the-com-server-application-with-clsid/

To resolve this problem, use one of the following methods, depending on the cause of the problem.

Grant the user permissions to start the COM component

Grant the user permissions to start the COM component. To do this, follow these steps:

1.Click Start, click Run, type regedit in the Open box, and then click OK.
2.Locate and then click the following registry subkey:
HKEY_CLASSES_ROOT\CLSID\CLSID value

Note In this subkey, "CLSID value" is a placeholder for the CLSID information that appears in the message.

3.In the right pane, double-click AppID.
The Edit String dialog box appears. Leave this dialog box open and continue to the next step.
4.Click Start, click Run, type dcomcnfg in the Open box, and then click OK.
If a Windows Security Alert message prompts you to keep blocking the Microsoft Management Console program, click to unblock the program.
5.In Component Services, double-click Component Services, double-click Computers, double-click My Computer, and then click DCOM Config.
6.In the details pane, locate the program by using the friendly name.
If the AppGUID identifier is listed instead of the friendly name, locate the program by using this identifier.
7.Right-click the program, and then click Properties.
8.Click the Security tab.
9.In the Launch and Activation Permissions area, click Customize, and then click Edit.
10.Click Add, type the user’s account name, and then click OK.
11.While the user is selected, click to select the Allow check boxes for the following items:
¿Local Launch
¿Remote Launch
¿Local Activation
¿Remote Activation
12.Click OK two times.
13.Quit Registry Editor.
Grant the correct permissions to the Network Service account
To grant the correct permissions to the Network Service account, follow these steps:

1.Click Start, click Run, type dcomcnfg in the Open box, and then click OK.
2.In Component Services, double-click Component Services, and then double-click Computers.
3.Right-click My Computer, and then click Properties.
4.Click the COM Security tab.
5.In the Launch and Activation Permissions area, click Edit Default.
6.Click Add, type Network Service, and then click OK.
7.While Network Service is selected, click to select the Allow check boxes for the following items:
¿Local Launch
¿Remote Launch
¿Local Activation
¿Remote Activation
Click OK two times.
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

A couple of test to rule out.

Does it BSOD at any other time?

Complete a chkdsk

Complete a memory check, with memtest86
phototropic

There are a number of apps which will identify the root cause of a BSOD.  I use WhoCrashed:

 http://www.resplendence.com/downloads

(4th download in the list, under "Crash Analysis Tools")

D/load it, run it, then click on the "analyse" button at top left.

Please post the results here for review.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
ASKER CERTIFIED SOLUTION
gtsupport1

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
gtsupport1

ASKER
The solutions suggested did not resolve issue.  The solution proved to be a more thorough review of patch install logs, which made it clear that some failed.