Link to home
Start Free TrialLog in
Avatar of gtsupport1
gtsupport1

asked on

XP BSOD when using CTRL ALT DEL

An HP workstation was updated from SP2 patch levels to SP3, along with most other intermediate KB updates.  About 40 updates in total.
Since the updates on 8/5, many times that the user presses CTRL-ALT-DEL to lock the machine, it immediately reboots.  Not 100% of the time, but its frequent.
Event log has the following error entries from each crash:

FIRST:
Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10016
Date:            8/7/2011
Time:            9:40:41 PM
User:            NT AUTHORITY\SYSTEM
Computer:      name
Description:
The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
 to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


SECOND:
Event Type:      Error
Event Source:      System Error
Event Category:      (102)
Event ID:      1003
Date:            8/7/2011
Time:            9:42:05 PM
User:            N/A
Computer:      name
Description:
Error code 1000008e, parameter1 c0000005, parameter2 bfa281bd, parameter3 bab1775c, parameter4 00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 53 79 73 74 65 6d 20 45   System E
0008: 72 72 6f 72 20 20 45 72   rror  Er
0010: 72 6f 72 20 63 6f 64 65   ror code
0018: 20 31 30 30 30 30 30 38    1000008
0020: 65 20 20 50 61 72 61 6d   e  Param
0028: 65 74 65 72 73 20 63 30   eters c0
0030: 30 30 30 30 30 35 2c 20   000005,
0038: 62 66 61 32 38 31 62 64   bfa281bd
0040: 2c 20 62 61 62 31 37 37   , bab177
0048: 35 63 2c 20 30 30 30 30   5c, 0000
0050: 30 30 30 30               0000    

Any advice appreciated!
Avatar of Randy Downs
Randy Downs
Flag of United States of America image

Try this
http://blog.paulgu.com/2009/02/10/permission-settings-do-not-grant-local-launch-permission-for-the-com-server-application-with-clsid/

To resolve this problem, use one of the following methods, depending on the cause of the problem.

Grant the user permissions to start the COM component

Grant the user permissions to start the COM component. To do this, follow these steps:

1.Click Start, click Run, type regedit in the Open box, and then click OK.
2.Locate and then click the following registry subkey:
HKEY_CLASSES_ROOT\CLSID\CLSID value

Note In this subkey, "CLSID value" is a placeholder for the CLSID information that appears in the message.

3.In the right pane, double-click AppID.
The Edit String dialog box appears. Leave this dialog box open and continue to the next step.
4.Click Start, click Run, type dcomcnfg in the Open box, and then click OK.
If a Windows Security Alert message prompts you to keep blocking the Microsoft Management Console program, click to unblock the program.
5.In Component Services, double-click Component Services, double-click Computers, double-click My Computer, and then click DCOM Config.
6.In the details pane, locate the program by using the friendly name.
If the AppGUID identifier is listed instead of the friendly name, locate the program by using this identifier.
7.Right-click the program, and then click Properties.
8.Click the Security tab.
9.In the Launch and Activation Permissions area, click Customize, and then click Edit.
10.Click Add, type the user’s account name, and then click OK.
11.While the user is selected, click to select the Allow check boxes for the following items:
¿Local Launch
¿Remote Launch
¿Local Activation
¿Remote Activation
12.Click OK two times.
13.Quit Registry Editor.
Grant the correct permissions to the Network Service account
To grant the correct permissions to the Network Service account, follow these steps:

1.Click Start, click Run, type dcomcnfg in the Open box, and then click OK.
2.In Component Services, double-click Component Services, and then double-click Computers.
3.Right-click My Computer, and then click Properties.
4.Click the COM Security tab.
5.In the Launch and Activation Permissions area, click Edit Default.
6.Click Add, type Network Service, and then click OK.
7.While Network Service is selected, click to select the Allow check boxes for the following items:
¿Local Launch
¿Remote Launch
¿Local Activation
¿Remote Activation
Click OK two times.
A couple of test to rule out.

Does it BSOD at any other time?

Complete a chkdsk

Complete a memory check, with memtest86
Avatar of phototropic
phototropic

There are a number of apps which will identify the root cause of a BSOD.  I use WhoCrashed:

 http://www.resplendence.com/downloads

(4th download in the list, under "Crash Analysis Tools")

D/load it, run it, then click on the "analyse" button at top left.

Please post the results here for review.
ASKER CERTIFIED SOLUTION
Avatar of gtsupport1
gtsupport1

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of gtsupport1

ASKER

The solutions suggested did not resolve issue.  The solution proved to be a more thorough review of patch install logs, which made it clear that some failed.