DCOM Error 10005

Hello,

Ten Computers with XP (all installations are done by an image and sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of them
after I admit username and password the pc makes a reboot. The event viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

I there any idea?

Thanks
Andrea

Hi:

I have seems some references to this error on windows XP. Becasuse we do not
have the exact Description of the error, I am not sure if this could help
you:

You cannot manually start the Automatic Updates service and you receive an
"Error 1058" error message on a computer that is running Windows XP or
Windows XP Tablet PC Edition 2005
http://support.microsoft.com/kb/896224/en-us

The security update that is documented in Microsoft Security Bulletin
MS04-015 does not install correctly if the Help and Support service is
disabled
http://support.microsoft.com/kb/841996


Let us know if it works

--
Un saludo
Juan Perez


"Andrea" wrote in message
...
Hello,

Ten Computers with XP (all installations are done by an image and sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of them
after I admit username and password the pc makes a reboot. The event
viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

I there any idea?

Thanks
Andrea

Hi Juan Perez,


Description: DCOM got error "The system cannot find the path specified. "
attempting to start the service EventSystem with arguments "" in order to
run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

Thanks
Andrea

"Juan Perez" wrote:

Hi:

I have seems some references to this error on windows XP. Becasuse we do not
have the exact Description of the error, I am not sure if this could help
you:

You cannot manually start the Automatic Updates service and you receive an
"Error 1058" error message on a computer that is running Windows XP or
Windows XP Tablet PC Edition 2005
http://support.microsoft.com/kb/896224/en-us

The security update that is documented in Microsoft Security Bulletin
MS04-015 does not install correctly if the Help and Support service is
disabled
http://support.microsoft.com/kb/841996


Let us know if it works

--
Un saludo
Juan Perez


"Andrea" wrote in message
...
Hello,

Ten Computers with XP (all installations are done by an image and sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of them
after I admit username and password the pc makes a reboot. The event
viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

I there any idea?

Thanks
Andrea

What is the value data at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit

Is the userinit.exe file in the System32 folder?

John

Andrea wrote:

Hello,

Ten Computers with XP (all installations are done by an image and sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of them
after I admit username and password the pc makes a reboot. The event viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

I there any idea?

Thanks
Andrea

Hi John,
Value in the registry
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit

C:\WINDOWS\system32\userinit.exe,

The userinit.exe exists in the right folder.

Andrea



"John John" wrote:

What is the value data at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit

Is the userinit.exe file in the System32 folder?

John

Andrea wrote:

Hello,

Ten Computers with XP (all installations are done by an image and sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of them
after I admit username and password the pc makes a reboot. The event viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

I there any idea?

Thanks
Andrea

Hi Andrea:

I tried to look for information regarding your event and the description,
but I could not found it yet. Let me sometime to do some research.

--
Un saludo
Juan Perez


"Andrea" wrote in message
...
Hi Juan Perez,


Description: DCOM got error "The system cannot find the path specified. "
attempting to start the service EventSystem with arguments "" in order to
run the server:
{1BE1F766-5536-11D1-B726-00C04FB926AF}

Thanks
Andrea

"Juan Perez" wrote:

Hi:

I have seems some references to this error on windows XP. Becasuse we do
not
have the exact Description of the error, I am not sure if this could help
you:

You cannot manually start the Automatic Updates service and you receive
an
"Error 1058" error message on a computer that is running Windows XP or
Windows XP Tablet PC Edition 2005
http://support.microsoft.com/kb/896224/en-us

The security update that is documented in Microsoft Security Bulletin
MS04-015 does not install correctly if the Help and Support service is
disabled
http://support.microsoft.com/kb/841996


Let us know if it works

--
Un saludo
Juan Perez


"Andrea" wrote in message
...
Hello,

Ten Computers with XP (all installations are done by an image and
sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of
them
after I admit username and password the pc makes a reboot. The event
viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

I there any idea?

Thanks
Andrea

Andrea wrote:

Ten Computers with XP (all installations are done by an image and sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of them
after I admit username and password the pc makes a reboot. The event viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

Is there any idea?

John wrote:

What is the value data at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit

Is the userinit.exe file in the System32 folder?

Andrea wrote:

Hi John,
Value in the registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit


C:\WINDOWS\system32\userinit.exe,

The userinit.exe exists in the right folder.

Andrea

I could be wrong but I think that the DCOM error is a red herring. If
you think that the DCOM error is causing this then please post the full
content of the error message, there are a million and one DCOM errors!
Are there any other errors logged when users try to logon?

So this reboot is happening when you try to logon to the domain? Can
you logon to the machines locally? I think this may be a permissions
issue on the root folder or on the %systemroot% folder and its
subfolders. Make sure that "Everybody" has permissions on these.

John

"John John" wrote:

Andrea wrote:

Ten Computers with XP (all installations are done by an image and sysprep)
running in a domain.
The Hardware on all computers is the same. When I log on, by three of them
after I admit username and password the pc makes a reboot. The event viewer
shows a DCOM Error.
Event Type: Error
Event Source: DCOM
Event ID: 10005

Is there any idea?

John wrote:

What is the value data at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit

Is the userinit.exe file in the System32 folder?

Andrea wrote:

Hi John,
Value in the registry

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\Userinit


C:\WINDOWS\system32\userinit.exe,

The userinit.exe exists in the right folder.

Andrea

I could be wrong but I think that the DCOM error is a red herring. If
you think that the DCOM error is causing this then please post the full
content of the error message, there are a million and one DCOM errors!
Are there any other errors logged when users try to logon?

So this reboot is happening when you try to logon to the domain? Can
you logon to the machines locally? I think this may be a permissions
issue on the root folder or on the %systemroot% folder and its
subfolders. Make sure that "Everybody" has permissions on these.

John


Adding to Juan & john advice, this can happen for two or may be more reasons:
=== An infection with viral or non-viral malware, so you need to scan your
system.

Go through these Cleaning steps:
1... First, try to clean up your caches, Internet files and delete cookies
by doing this:
Click Start Control Panel Double click Network and Internet
Connections Double click Internet Options.
On the IE properties windows you will see these Tabs:
General | Security | Privacy | Content | Connections | Programs |
Advanced
Under General Tab clear your History, Internet Files and Cookies.
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Then click on Programs Tab and click Manage Add-Ons and Disable all non
Verified Add-Ons (You should Renable them later one-by-one and see the
culprit and update it or remove it.
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Scan for malware from he
SuperAntispyware - Free
http://www.superantispyware.com/supe...freevspro.html
RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
http://www.microsoft.com/technet/sys...tRevealer.mspx


Run a scan from here on-line:
http://security.symantec.com/sscv6/d...d=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from he
http://www.avast.com/eng/avast-virus-cleaner.html

Lots of tools to download and disinfect your machine (offline scanner):
http://www.bitdefender.co.uk/site/Do...eeRemovalTool/

After the scan run disk cleanup on your drive.


=== A service (s) not started in a timely fashion ( for an application or a
system service) causing this error!.

Please could you state any extra third-party Application installed recently
before the occurance of this error?.

Open a run command and type in:
services.msc click [OK] and make sure these services started Auto:

RPC
DCOM Server Process Launcher
System Event Notification



And these services start Manual:

COM+ Event System
COM+ System Application
Index Service

Reboot the machine and access some applications for a while then Note the
time of the error and the time of the accessed application which hopefully
will indicate some info about any causer if any after the steps above.
HTH.
nass
---
http://www.nasstec.co.uk