Startup slow, RPCSS takes 2 minutes

I recently got a new hard drive so I have a clean installation of XP Pro and
mostly just my productivity software. Windows is starting very slowly, and I
turned on verbose messaging so that I can see what it's doing. When it gets
past the splash screen and shows "RPCSS is starting", it sits with that
message for 2 minutes before going on to the logon. I've run utilities to
clean up the registry, clear up any spyware, and optimize the system, and
I've pared down services and startup to what I believe is bare minimum. I'm
not sure what else to do, or if Windows is attempting to load something out
of order (and how to fix that). Ideas?

Performance after logon is great, I just don't know why it's taking so long
to get from the splash screen to logon.

thanks,
Luann

This is a bit tricky as you can render your box non bootable if done
incorrectly. Take backup of the registry key do the following
1 Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\RpcSs

2 Take a backup of this key and On the right side of the viewing pane,
right-click ObjectName, click Modify, type
LocalSystem in the Value data box, and then click OK.

3 Reboot the machine

If issue still happens run the secedit command given in KB 313222 to reset
permissions to default settings

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
/verbose

Reboot the machine and check.

--
Regards
Gurpreet Singh


"LuannV" wrote:

I recently got a new hard drive so I have a clean installation of XP Pro and
mostly just my productivity software. Windows is starting very slowly, and I
turned on verbose messaging so that I can see what it's doing. When it gets
past the splash screen and shows "RPCSS is starting", it sits with that
message for 2 minutes before going on to the logon. I've run utilities to
clean up the registry, clear up any spyware, and optimize the system, and
I've pared down services and startup to what I believe is bare minimum. I'm
not sure what else to do, or if Windows is attempting to load something out
of order (and how to fix that). Ideas?

Performance after logon is great, I just don't know why it's taking so long
to get from the splash screen to logon.

thanks,
Luann

This is a bit tricky as you can render your box non bootable if done
incorrectly. Take backup of the registry key do the following
1 Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\RpcSs

2 Take a backup of this key and On the right side of the viewing pane,
right-click ObjectName, click Modify, type
LocalSystem in the Value data box, and then click OK.

3 Reboot the machine

If issue still happens run the secedit command given in KB 313222 to reset
permissions to default settings

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
/verbose

Reboot the machine and check.

--
Regards
Gurpreet Singh


"LuannV" wrote:

I recently got a new hard drive so I have a clean installation of XP Pro and
mostly just my productivity software. Windows is starting very slowly, and I
turned on verbose messaging so that I can see what it's doing. When it gets
past the splash screen and shows "RPCSS is starting", it sits with that
message for 2 minutes before going on to the logon. I've run utilities to
clean up the registry, clear up any spyware, and optimize the system, and
I've pared down services and startup to what I believe is bare minimum. I'm
not sure what else to do, or if Windows is attempting to load something out
of order (and how to fix that). Ideas?

Performance after logon is great, I just don't know why it's taking so long
to get from the splash screen to logon.

thanks,
Luann

Thanks, Gurpreet. Unfortunately, I did both of these things, rebooting
in-between, and neither had any effect. The machine is still taking ~3
minute tso get from the splash screen to logon, with 2 of those minutes
sitting at "RPCSS is starting".

Luann

------------------------------
"Gurpreet Singh" wrote:

This is a bit tricky as you can render your box non bootable if done
incorrectly. Take backup of the registry key do the following
1 Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\RpcSs

2 Take a backup of this key and On the right side of the viewing pane,
right-click ObjectName, click Modify, type
LocalSystem in the Value data box, and then click OK.

3 Reboot the machine

If issue still happens run the secedit command given in KB 313222 to reset
permissions to default settings

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
/verbose

Reboot the machine and check.

--
Regards
Gurpreet Singh


"LuannV" wrote:

I recently got a new hard drive so I have a clean installation of XP Pro and
mostly just my productivity software. Windows is starting very slowly, and I
turned on verbose messaging so that I can see what it's doing. When it gets
past the splash screen and shows "RPCSS is starting", it sits with that
message for 2 minutes before going on to the logon. I've run utilities to
clean up the registry, clear up any spyware, and optimize the system, and
I've pared down services and startup to what I believe is bare minimum. I'm
not sure what else to do, or if Windows is attempting to load something out
of order (and how to fix that). Ideas?

Performance after logon is great, I just don't know why it's taking so long
to get from the splash screen to logon.

thanks,
Luann

Thanks, Gurpreet. Unfortunately, I did both of these things, rebooting
in-between, and neither had any effect. The machine is still taking ~3
minute tso get from the splash screen to logon, with 2 of those minutes
sitting at "RPCSS is starting".

Luann

------------------------------
"Gurpreet Singh" wrote:

This is a bit tricky as you can render your box non bootable if done
incorrectly. Take backup of the registry key do the following
1 Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\RpcSs

2 Take a backup of this key and On the right side of the viewing pane,
right-click ObjectName, click Modify, type
LocalSystem in the Value data box, and then click OK.

3 Reboot the machine

If issue still happens run the secedit command given in KB 313222 to reset
permissions to default settings

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
/verbose

Reboot the machine and check.

--
Regards
Gurpreet Singh


"LuannV" wrote:

I recently got a new hard drive so I have a clean installation of XP Pro and
mostly just my productivity software. Windows is starting very slowly, and I
turned on verbose messaging so that I can see what it's doing. When it gets
past the splash screen and shows "RPCSS is starting", it sits with that
message for 2 minutes before going on to the logon. I've run utilities to
clean up the registry, clear up any spyware, and optimize the system, and
I've pared down services and startup to what I believe is bare minimum. I'm
not sure what else to do, or if Windows is attempting to load something out
of order (and how to fix that). Ideas?

Performance after logon is great, I just don't know why it's taking so long
to get from the splash screen to logon.

thanks,
Luann

Luann

Select Start, Control Panel, Administrative Tools, Services and right click
on Remote Procedure Call (RPC) and select Properties. Is the
StartUp type set as Automatic?

Select Start, Control Panel, Administrative Tools, Services and right click
on Remote Procedure Call (RPC) Locator and select Properties. Is the
StartUp type set as Manual.?

Have a look in the System and Application logs in Event Viewer for Errors
and Warnings and post copies here. Don't post any more than 48 hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Right click on the Report in the
list and select Properties. In the window, which appears are three buttons
towards the top right of the window. The top one has an arrow up, underneath
is an arrow down and third is a button resembling two pages. Click the
button and close Event Viewer. It is not obvious but this action places a
copy of the report in your Clipboard. Now start your message (email) and do
a paste into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks, Gurpreet. Unfortunately, I did both of these things, rebooting
in-between, and neither had any effect. The machine is still taking
~3 minute tso get from the splash screen to logon, with 2 of those
minutes sitting at "RPCSS is starting".

Luann

------------------------------
"Gurpreet Singh" wrote:

This is a bit tricky as you can render your box non bootable if done
incorrectly. Take backup of the registry key do the following
1 Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\RpcSs

2 Take a backup of this key and On the right side of the viewing
pane, right-click ObjectName, click Modify, type
LocalSystem in the Value data box, and then click OK.

3 Reboot the machine

If issue still happens run the secedit command given in KB 313222 to
reset permissions to default settings

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
/verbose

Reboot the machine and check.

--
Regards
Gurpreet Singh


"LuannV" wrote:

I recently got a new hard drive so I have a clean installation of
XP Pro and mostly just my productivity software. Windows is
starting very slowly, and I turned on verbose messaging so that I
can see what it's doing. When it gets past the splash screen and
shows "RPCSS is starting", it sits with that message for 2 minutes
before going on to the logon. I've run utilities to clean up the
registry, clear up any spyware, and optimize the system, and I've
pared down services and startup to what I believe is bare minimum.
I'm not sure what else to do, or if Windows is attempting to load
something out of order (and how to fix that). Ideas?

Performance after logon is great, I just don't know why it's taking
so long to get from the splash screen to logon.

thanks,
Luann

Luann

Select Start, Control Panel, Administrative Tools, Services and right click
on Remote Procedure Call (RPC) and select Properties. Is the
StartUp type set as Automatic?

Select Start, Control Panel, Administrative Tools, Services and right click
on Remote Procedure Call (RPC) Locator and select Properties. Is the
StartUp type set as Manual.?

Have a look in the System and Application logs in Event Viewer for Errors
and Warnings and post copies here. Don't post any more than 48 hours ago.

You can access Event Viewer by selecting Start, Control Panel,
Administrative Tools, and Event Viewer. When researching the meaning
of the error, information regarding Event ID, Source and Description
are important.

A tip for posting copies of Error Reports! Right click on the Report in the
list and select Properties. In the window, which appears are three buttons
towards the top right of the window. The top one has an arrow up, underneath
is an arrow down and third is a button resembling two pages. Click the
button and close Event Viewer. It is not obvious but this action places a
copy of the report in your Clipboard. Now start your message (email) and do
a paste into the body of the message. Make sure this is the first paste
after exiting from Event Viewer.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks, Gurpreet. Unfortunately, I did both of these things, rebooting
in-between, and neither had any effect. The machine is still taking
~3 minute tso get from the splash screen to logon, with 2 of those
minutes sitting at "RPCSS is starting".

Luann

------------------------------
"Gurpreet Singh" wrote:

This is a bit tricky as you can render your box non bootable if done
incorrectly. Take backup of the registry key do the following
1 Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\RpcSs

2 Take a backup of this key and On the right side of the viewing
pane, right-click ObjectName, click Modify, type
LocalSystem in the Value data box, and then click OK.

3 Reboot the machine

If issue still happens run the secedit command given in KB 313222 to
reset permissions to default settings

secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb
/verbose

Reboot the machine and check.

--
Regards
Gurpreet Singh


"LuannV" wrote:

I recently got a new hard drive so I have a clean installation of
XP Pro and mostly just my productivity software. Windows is
starting very slowly, and I turned on verbose messaging so that I
can see what it's doing. When it gets past the splash screen and
shows "RPCSS is starting", it sits with that message for 2 minutes
before going on to the logon. I've run utilities to clean up the
registry, clear up any spyware, and optimize the system, and I've
pared down services and startup to what I believe is bare minimum.
I'm not sure what else to do, or if Windows is attempting to load
something out of order (and how to fix that). Ideas?

Performance after logon is great, I just don't know why it's taking
so long to get from the splash screen to logon.

thanks,
Luann

Thanks Gerry. Those services are set to Automatic/Started and Manual,
respectively.

Thanks for reminding me to check Event Viewer. I had gone in there yesterday
and got an error about it being corrupt, so I emptied it then never went back
to see what was going on. I just checked it, found a couple of things that
needed to be resolved and fixed those. A restart is showing no warnings or
errors in Event Viewer, but it's still taking the same amount of time to get
from splash screen to logon.

Shortly after the system is running, this error pops up in Event viewer:

The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security permission
can be modified using the Component Services administrative tool.

When I search for that key in the registry it is called "Quarantine Private
SHA Binding class." I've switched Network Access Protection back and forth
between automatic (which then gives me warnings about not getting a health
certificate) and manual and no setting on that seems to affect my startup
issue. (This is just a home desktop machine with a router, and I do a VPN
connection during the day to access a remote machine for my work, but I'm not
otherwise networked.)

thanks,
Luann

Thanks Gerry. Those services are set to Automatic/Started and Manual,
respectively.

Thanks for reminding me to check Event Viewer. I had gone in there yesterday
and got an error about it being corrupt, so I emptied it then never went back
to see what was going on. I just checked it, found a couple of things that
needed to be resolved and fixed those. A restart is showing no warnings or
errors in Event Viewer, but it's still taking the same amount of time to get
from splash screen to logon.

Shortly after the system is running, this error pops up in Event viewer:

The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security permission
can be modified using the Component Services administrative tool.

When I search for that key in the registry it is called "Quarantine Private
SHA Binding class." I've switched Network Access Protection back and forth
between automatic (which then gives me warnings about not getting a health
certificate) and manual and no setting on that seems to affect my startup
issue. (This is just a home desktop machine with a router, and I do a VPN
connection during the day to access a remote machine for my work, but I'm not
otherwise networked.)

thanks,
Luann

Luann

Is your version of Windows XP =Windows XP Professional x64 Edition?

Event 10016 may be logged in the System log on a computer that is running
Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899965

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks Gerry. Those services are set to Automatic/Started and Manual,
respectively.

Thanks for reminding me to check Event Viewer. I had gone in there
yesterday and got an error about it being corrupt, so I emptied it
then never went back to see what was going on. I just checked it,
found a couple of things that needed to be resolved and fixed those.
A restart is showing no warnings or errors in Event Viewer, but it's
still taking the same amount of time to get from splash screen to
logon.

Shortly after the system is running, this error pops up in Event
viewer:

The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security
permission can be modified using the Component Services
administrative tool.

When I search for that key in the registry it is called "Quarantine
Private SHA Binding class." I've switched Network Access Protection
back and forth between automatic (which then gives me warnings about
not getting a health certificate) and manual and no setting on that
seems to affect my startup issue. (This is just a home desktop
machine with a router, and I do a VPN connection during the day to
access a remote machine for my work, but I'm not otherwise networked.)

thanks,
Luann

Luann

Is your version of Windows XP =Windows XP Professional x64 Edition?

Event 10016 may be logged in the System log on a computer that is running
Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899965

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks Gerry. Those services are set to Automatic/Started and Manual,
respectively.

Thanks for reminding me to check Event Viewer. I had gone in there
yesterday and got an error about it being corrupt, so I emptied it
then never went back to see what was going on. I just checked it,
found a couple of things that needed to be resolved and fixed those.
A restart is showing no warnings or errors in Event Viewer, but it's
still taking the same amount of time to get from splash screen to
logon.

Shortly after the system is running, this error pops up in Event
viewer:

The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security
permission can be modified using the Component Services
administrative tool.

When I search for that key in the registry it is called "Quarantine
Private SHA Binding class." I've switched Network Access Protection
back and forth between automatic (which then gives me warnings about
not getting a health certificate) and manual and no setting on that
seems to affect my startup issue. (This is just a home desktop
machine with a router, and I do a VPN connection during the day to
access a remote machine for my work, but I'm not otherwise networked.)

thanks,
Luann

No, it's XP Pro 32-bit, with SP3.

"Gerry" wrote:

Luann

Is your version of Windows XP =Windows XP Professional x64 Edition?

Event 10016 may be logged in the System log on a computer that is running
Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899965

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks Gerry. Those services are set to Automatic/Started and Manual,
respectively.

Thanks for reminding me to check Event Viewer. I had gone in there
yesterday and got an error about it being corrupt, so I emptied it
then never went back to see what was going on. I just checked it,
found a couple of things that needed to be resolved and fixed those.
A restart is showing no warnings or errors in Event Viewer, but it's
still taking the same amount of time to get from splash screen to
logon.

Shortly after the system is running, this error pops up in Event
viewer:

The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security
permission can be modified using the Component Services
administrative tool.

When I search for that key in the registry it is called "Quarantine
Private SHA Binding class." I've switched Network Access Protection
back and forth between automatic (which then gives me warnings about
not getting a health certificate) and manual and no setting on that
seems to affect my startup issue. (This is just a home desktop
machine with a router, and I do a VPN connection during the day to
access a remote machine for my work, but I'm not otherwise networked.)

thanks,
Luann

No, it's XP Pro 32-bit, with SP3.

"Gerry" wrote:

Luann

Is your version of Windows XP =Windows XP Professional x64 Edition?

Event 10016 may be logged in the System log on a computer that is running
Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899965

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks Gerry. Those services are set to Automatic/Started and Manual,
respectively.

Thanks for reminding me to check Event Viewer. I had gone in there
yesterday and got an error about it being corrupt, so I emptied it
then never went back to see what was going on. I just checked it,
found a couple of things that needed to be resolved and fixed those.
A restart is showing no warnings or errors in Event Viewer, but it's
still taking the same amount of time to get from splash screen to
logon.

Shortly after the system is running, this error pops up in Event
viewer:

The application-specific permission settings do not grant Local Launch
permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security
permission can be modified using the Component Services
administrative tool.

When I search for that key in the registry it is called "Quarantine
Private SHA Binding class." I've switched Network Access Protection
back and forth between automatic (which then gives me warnings about
not getting a health certificate) and manual and no setting on that
seems to affect my startup issue. (This is just a home desktop
machine with a router, and I do a VPN connection during the day to
access a remote machine for my work, but I'm not otherwise networked.)

thanks,
Luann

Luann

This security permission can be modified using the Component Services
administrative tool.

See what you make of this link:
http://technet.microsoft.com/en-us/l.../bb727120.aspx

This security permission can be modified using the Component Services
administrative tool.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
No, it's XP Pro 32-bit, with SP3.

"Gerry" wrote:

Luann

Is your version of Windows XP =Windows XP Professional x64 Edition?

Event 10016 may be logged in the System log on a computer that is
running Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899965

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks Gerry. Those services are set to Automatic/Started and
Manual, respectively.

Thanks for reminding me to check Event Viewer. I had gone in there
yesterday and got an error about it being corrupt, so I emptied it
then never went back to see what was going on. I just checked it,
found a couple of things that needed to be resolved and fixed those.
A restart is showing no warnings or errors in Event Viewer, but it's
still taking the same amount of time to get from splash screen to
logon.

Shortly after the system is running, this error pops up in Event
viewer:

The application-specific permission settings do not grant Local
Launch permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security
permission can be modified using the Component Services
administrative tool.

When I search for that key in the registry it is called "Quarantine
Private SHA Binding class." I've switched Network Access Protection
back and forth between automatic (which then gives me warnings about
not getting a health certificate) and manual and no setting on that
seems to affect my startup issue. (This is just a home desktop
machine with a router, and I do a VPN connection during the day to
access a remote machine for my work, but I'm not otherwise
networked.)

thanks,
Luann

Luann

This security permission can be modified using the Component Services
administrative tool.

See what you make of this link:
http://technet.microsoft.com/en-us/l.../bb727120.aspx

This security permission can be modified using the Component Services
administrative tool.

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
No, it's XP Pro 32-bit, with SP3.

"Gerry" wrote:

Luann

Is your version of Windows XP =Windows XP Professional x64 Edition?

Event 10016 may be logged in the System log on a computer that is
running Windows XP Professional x64 Edition
http://support.microsoft.com/kb/899965

--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


LuannV wrote:
Thanks Gerry. Those services are set to Automatic/Started and
Manual, respectively.

Thanks for reminding me to check Event Viewer. I had gone in there
yesterday and got an error about it being corrupt, so I emptied it
then never went back to see what was going on. I just checked it,
found a couple of things that needed to be resolved and fixed those.
A restart is showing no warnings or errors in Event Viewer, but it's
still taking the same amount of time to get from splash screen to
logon.

Shortly after the system is running, this error pops up in Event
viewer:

The application-specific permission settings do not grant Local
Launch permission for the COM Server application with CLSID
{24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
to the user NT AUTHORITY\SYSTEM SID (S-1-5-18). This security
permission can be modified using the Component Services
administrative tool.

When I search for that key in the registry it is called "Quarantine
Private SHA Binding class." I've switched Network Access Protection
back and forth between automatic (which then gives me warnings about
not getting a health certificate) and manual and no setting on that
seems to affect my startup issue. (This is just a home desktop
machine with a router, and I do a VPN connection during the day to
access a remote machine for my work, but I'm not otherwise
networked.)

thanks,
Luann