Svchost, DCOM, WMI Issues after Updates

Hello group,

I am tracking an issue on several Windows 2003 servers. The timeframe
roughly correlates with this month's patch cycle. I have not nailed it
down to one particular update, however. Is anyone seeing a similar
problem?

The symptoms include:

1) Svchost.exe has an exception and stops. All of the services running
under it close. The services affected include:

Automatic Updates
Cryptographic Services
Distributed Link Tracking Client
Help and Support
Secondary Logon
Server
Task Scheduler
Windows Audio
Windows Firewall/Internet Connection Sharing (ICS)
Wireless Configuration
Workstation

None of the services fail and are restarted. They stop and remain
stopped until I bring them back online. The services do come back
online, so this is not related to KB910666.

2) WMI stops and is restarted around the same time. The Service
Control Manager (Event ID 7032) logs:

The Service Control Manager tried to take a corrective action (Restart
the service) after the unexpected termination of the Windows
Management Instrumentation service, but this action failed with the
following error: An instance of the service is already running.

3) There are three DCOM errors (Event ID 10010) also being logged.
These are:

The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register
with DCOM within the required timeout.
The server {1BE1F766-5536-11D1-B726-00C04FB926AF} did not register
with DCOM within the required timeout.
The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register
with DCOM within the required timeout.

Windows Management {8BC3F05E-D86B-11D0-A075-00C04FB68820}
EventSystem, EventSystemTier2 {1BE1F766-5536-11D1-B726-00C04FB926AF}
Network Connection Manager Class {BA126AD1-2166-11D1-
B1D0-00805FC1270E}

Anyone else seeing this?

J Wolfgang Goerlich

I am experiencing the same thing, were you able to figure it out?

"jwgoerlich@gmail.com" wrote:

> Hello group,
>
> I am tracking an issue on several Windows 2003 servers. The timeframe
> roughly correlates with this month's patch cycle. I have not nailed it
> down to one particular update, however. Is anyone seeing a similar
> problem?
>
> The symptoms include:
>
> 1) Svchost.exe has an exception and stops. All of the services running
> under it close. The services affected include:
>
> Automatic Updates
> Cryptographic Services
> Distributed Link Tracking Client
> Help and Support
> Secondary Logon
> Server
> Task Scheduler
> Windows Audio
> Windows Firewall/Internet Connection Sharing (ICS)
> Wireless Configuration
> Workstation
>
> None of the services fail and are restarted. They stop and remain
> stopped until I bring them back online. The services do come back
> online, so this is not related to KB910666.
>
> 2) WMI stops and is restarted around the same time. The Service
> Control Manager (Event ID 7032) logs:
>
> The Service Control Manager tried to take a corrective action (Restart
> the service) after the unexpected termination of the Windows
> Management Instrumentation service, but this action failed with the
> following error: An instance of the service is already running.
>
> 3) There are three DCOM errors (Event ID 10010) also being logged.
> These are:
>
> The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register
> with DCOM within the required timeout.
> The server {1BE1F766-5536-11D1-B726-00C04FB926AF} did not register
> with DCOM within the required timeout.
> The server {BA126AD1-2166-11D1-B1D0-00805FC1270E} did not register
> with DCOM within the required timeout.
>
> Windows Management {8BC3F05E-D86B-11D0-A075-00C04FB68820}
> EventSystem, EventSystemTier2 {1BE1F766-5536-11D1-B726-00C04FB926AF}
> Network Connection Manager Class {BA126AD1-2166-11D1-
> B1D0-00805FC1270E}
>
> Anyone else seeing this?
>
> J Wolfgang Goerlich
>
>

On May 1, 3:14 pm, Terry Prindle <tprindle> wrote:
> I am experiencing the same thing, were you able to figure it out?

I have not found a satisfactory answer on the cause. I do have a fix,
however. I downloaded the latest Windows Update Agent.

http://download.windowsupdate.com/v7...gent30-x86.exe

I then removed and cleared the existing installation. Then I
reinstalled.

Net Stop "Automatic Updates"
regsvr32 /u wuaueng.dll
%systemdrive%
CD %systemroot%
RD /Q /S SoftwareDistributio~
Ren SoftwareDistribution SoftwareDistributio~
WindowsUpdateAgent30-x86.exe /wuforce /quiet /norestart

After a reboot, the symptom cleared and the services stayed running.

Hope that helps,

J Wolfgang Goerlich

[mmilesg]

Is there anyway you can put this into terms to someone who doesn't know where you type in Net Stop "Automatic Updates"? I can follow directions if the directions were clear. I have this problem on my home computer that has Windows Vista 64 Ultimate. I can't seem to fix the problem and it is very discouraging at the moment.

I found in my events viewer 87 errors for just today. I rebooted and got the one error "" The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout. "" without doing anything else. This seems to be the main problem if I haven't gotten any other errors since rebooting. Once I start using my computer like normal is when I start getting other errors. I understand that getting more errors is probably because of this one error, but can't find a fix for this error anywhere on the Internet.

Downloading and installing the Windows Update Agent from the link you gave into my machine gave me an installation error stating that I was running a version of Windows that does not support this product. I assume this Agent is for Windows 7. I'm needing help in correcting this for my Windows Vista 64 Ultimate.

[Level8]

Does the trouble just take place, later than you apply the SBS 2003 SP1? Do you came across any trouble while logon the SBS server using that user accounts? Could you ensure to make certain that the user xxxxx\prolwaagent have the permission to retrieve to SBS server? Do you know which folder necessitate to be written by this third party software, it might be caused by the user account did not have the authorization to logon to that folder.