Services Stopping Unexpectedly - again, and again, and again

I'm perplexed. I have a small network running Windows 2003 standard edition
server.

For about a week now I have serveral services that are normally started
automatically are stopping intermitently. When these services stop (IE
Workstation) all my users lose access to everything outside of their local
machine (printers, network drives, etc. - basically everything the
workstation is there to support). I've reviewed the event logs and the
primary event that is logged when users lose their network connections is the
following:
Source: Service Control Manager
Event ID: 7032
Description: The Service Control Manager tried to take a corrective action
(Restart the service) after the unexpected termination of the Windows
Management Instrumentation service, but this action failed with the following
error:
An instance of the service is already running.

-end

This message is recorded in the event viewer, but I also notice other
services have stopped that isn't always recorded in the event viewer. These
services include the following (not limited to): Routing and REmote Access,
Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
Help and Support.

Again, this happens intermittently. In addition, each service I mentioned
is set to Startup Automatically. Rebooting the server does not resolve the
issue. Each time this happens, I must restart the workstation service
(primarily to get folder redirection back for users accessing 'My documents.'

Thank you in advance for your help.

This is very weird.

Modci,

we have just started haveing the smae problems on 2 servers, have you
found a solution to this issue?

this is very disruptive.

Any ideas

Thanks Stuart


Modci wrote:
> I'm perplexed. I have a small network running Windows 2003 standard edition
> server.
>
> For about a week now I have serveral services that are normally started
> automatically are stopping intermitently. When these services stop (IE
> Workstation) all my users lose access to everything outside of their local
> machine (printers, network drives, etc. - basically everything the
> workstation is there to support). I've reviewed the event logs and the
> primary event that is logged when users lose their network connections is the
> following:
> Source: Service Control Manager
> Event ID: 7032
> Description: The Service Control Manager tried to take a corrective action
> (Restart the service) after the unexpected termination of the Windows
> Management Instrumentation service, but this action failed with the following
> error:
> An instance of the service is already running.
>
> -end
>
> This message is recorded in the event viewer, but I also notice other
> services have stopped that isn't always recorded in the event viewer. These
> services include the following (not limited to): Routing and REmote Access,
> Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> Help and Support.
>
> Again, this happens intermittently. In addition, each service I mentioned
> is set to Startup Automatically. Rebooting the server does not resolve the
> issue. Each time this happens, I must restart the workstation service
> (primarily to get folder redirection back for users accessing 'My documents.'
>
> Thank you in advance for your help.
>
> This is very weird.

No, but I appreciate your situation. I will certainly post the resolution
when I find it. This effects 2 of our servers as well (the only 2 we have,
both DCs).

Another oddidity is I keep seeing seeing is svchost.exe process errors.

"Savage" wrote:

> Modci,
>
> we have just started haveing the smae problems on 2 servers, have you
> found a solution to this issue?
>
> this is very disruptive.
>
> Any ideas
>
> Thanks Stuart
>
>
> Modci wrote:
> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > server.
> >
> > For about a week now I have serveral services that are normally started
> > automatically are stopping intermitently. When these services stop (IE
> > Workstation) all my users lose access to everything outside of their local
> > machine (printers, network drives, etc. - basically everything the
> > workstation is there to support). I've reviewed the event logs and the
> > primary event that is logged when users lose their network connections is the
> > following:
> > Source: Service Control Manager
> > Event ID: 7032
> > Description: The Service Control Manager tried to take a corrective action
> > (Restart the service) after the unexpected termination of the Windows
> > Management Instrumentation service, but this action failed with the following
> > error:
> > An instance of the service is already running.
> >
> > -end
> >
> > This message is recorded in the event viewer, but I also notice other
> > services have stopped that isn't always recorded in the event viewer. These
> > services include the following (not limited to): Routing and REmote Access,
> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > Help and Support.
> >
> > Again, this happens intermittently. In addition, each service I mentioned
> > is set to Startup Automatically. Rebooting the server does not resolve the
> > issue. Each time this happens, I must restart the workstation service
> > (primarily to get folder redirection back for users accessing 'My documents.'
> >
> > Thank you in advance for your help.
> >
> > This is very weird.
>
>

On Wed, 18 Oct 2006 19:24:02 -0700, Modci
<Modci@discussions.microsoft.com> wrote:

You are not alone. We traced our problem back to Automatic Updates.
IF we turn off the automatic updates (to our own WSUS server), then
the other services don't stop. This is happening on 3 of our servers.
All of them were built by ADS, and an additional 5 of them from the
exact same image (total 8 new servers) and only 3 are having this
problem. We have seen it with both Standard and Enterprise edition.

Mike

>No, but I appreciate your situation. I will certainly post the resolution
>when I find it. This effects 2 of our servers as well (the only 2 we have,
>both DCs).
>
>Another oddidity is I keep seeing seeing is svchost.exe process errors.
>
>"Savage" wrote:
>
>> Modci,
>>
>> we have just started haveing the smae problems on 2 servers, have you
>> found a solution to this issue?
>>
>> this is very disruptive.
>>
>> Any ideas
>>
>> Thanks Stuart
>>
>>
>> Modci wrote:
>> > I'm perplexed. I have a small network running Windows 2003 standard edition
>> > server.
>> >
>> > For about a week now I have serveral services that are normally started
>> > automatically are stopping intermitently. When these services stop (IE
>> > Workstation) all my users lose access to everything outside of their local
>> > machine (printers, network drives, etc. - basically everything the
>> > workstation is there to support). I've reviewed the event logs and the
>> > primary event that is logged when users lose their network connections is the
>> > following:
>> > Source: Service Control Manager
>> > Event ID: 7032
>> > Description: The Service Control Manager tried to take a corrective action
>> > (Restart the service) after the unexpected termination of the Windows
>> > Management Instrumentation service, but this action failed with the following
>> > error:
>> > An instance of the service is already running.
>> >
>> > -end
>> >
>> > This message is recorded in the event viewer, but I also notice other
>> > services have stopped that isn't always recorded in the event viewer. These
>> > services include the following (not limited to): Routing and REmote Access,
>> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
>> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
>> > Help and Support.
>> >
>> > Again, this happens intermittently. In addition, each service I mentioned
>> > is set to Startup Automatically. Rebooting the server does not resolve the
>> > issue. Each time this happens, I must restart the workstation service
>> > (primarily to get folder redirection back for users accessing 'My documents.'
>> >
>> > Thank you in advance for your help.
>> >
>> > This is very weird.
>>
>>

"Special Access" wrote:

> On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> <Modci@discussions.microsoft.com> wrote:
>
> You are not alone. We traced our problem back to Automatic Updates.
> IF we turn off the automatic updates (to our own WSUS server), then
> the other services don't stop. This is happening on 3 of our servers.
> All of them were built by ADS, and an additional 5 of them from the
> exact same image (total 8 new servers) and only 3 are having this
> problem. We have seen it with both Standard and Enterprise edition.
>
> Mike>

I have the problem on a fairly representative percentage of my XP population
as well so It's not just Servers with the problem.

I've applied the svchost fix for MSI.DLL that was suggested by MS
http://support.microsoft.com/kb/916089 but unfortunately it didn't fix this,
though I have a sneaking suspicion that SVCHost is somehow at the back of
this. As mentioned if the server/pc gets the updates then it's okay for
another month, it's whatever Auto Updates does when it polls out looking for
updates (BITS?) that kills svchost and all the services started by it.

Did you find a resolution outside of just disabling Automatic Updates? For
now, I have disabled the automatic updates on the two servers to see if there
is a positive effect. I will monitor. But obviously the solution should not
be limited to never perfoming auto updates anymore.

This is interesting, and thanks for your post.



"Special Access" wrote:

> On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> <Modci@discussions.microsoft.com> wrote:
>
> You are not alone. We traced our problem back to Automatic Updates.
> IF we turn off the automatic updates (to our own WSUS server), then
> the other services don't stop. This is happening on 3 of our servers.
> All of them were built by ADS, and an additional 5 of them from the
> exact same image (total 8 new servers) and only 3 are having this
> problem. We have seen it with both Standard and Enterprise edition.
>
> Mike
>
> >No, but I appreciate your situation. I will certainly post the resolution
> >when I find it. This effects 2 of our servers as well (the only 2 we have,
> >both DCs).
> >
> >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> >
> >"Savage" wrote:
> >
> >> Modci,
> >>
> >> we have just started haveing the smae problems on 2 servers, have you
> >> found a solution to this issue?
> >>
> >> this is very disruptive.
> >>
> >> Any ideas
> >>
> >> Thanks Stuart
> >>
> >>
> >> Modci wrote:
> >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> >> > server.
> >> >
> >> > For about a week now I have serveral services that are normally started
> >> > automatically are stopping intermitently. When these services stop (IE
> >> > Workstation) all my users lose access to everything outside of their local
> >> > machine (printers, network drives, etc. - basically everything the
> >> > workstation is there to support). I've reviewed the event logs and the
> >> > primary event that is logged when users lose their network connections is the
> >> > following:
> >> > Source: Service Control Manager
> >> > Event ID: 7032
> >> > Description: The Service Control Manager tried to take a corrective action
> >> > (Restart the service) after the unexpected termination of the Windows
> >> > Management Instrumentation service, but this action failed with the following
> >> > error:
> >> > An instance of the service is already running.
> >> >
> >> > -end
> >> >
> >> > This message is recorded in the event viewer, but I also notice other
> >> > services have stopped that isn't always recorded in the event viewer. These
> >> > services include the following (not limited to): Routing and REmote Access,
> >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> >> > Help and Support.
> >> >
> >> > Again, this happens intermittently. In addition, each service I mentioned
> >> > is set to Startup Automatically. Rebooting the server does not resolve the
> >> > issue. Each time this happens, I must restart the workstation service
> >> > (primarily to get folder redirection back for users accessing 'My documents.'
> >> >
> >> > Thank you in advance for your help.
> >> >
> >> > This is very weird.
> >>
> >>
>

On Thu, 19 Oct 2006 09:50:03 -0700, Modci
<Modci@discussions.microsoft.com> wrote:

>Did you find a resolution outside of just disabling Automatic Updates? For
>now, I have disabled the automatic updates on the two servers to see if there
>is a positive effect. I will monitor. But obviously the solution should not
>be limited to never perfoming auto updates anymore.
>
>This is interesting, and thanks for your post.
>
>
>
>"Special Access" wrote:
>
>> On Wed, 18 Oct 2006 19:24:02 -0700, Modci
>> <Modci@discussions.microsoft.com> wrote:
>>
>> You are not alone. We traced our problem back to Automatic Updates.
>> IF we turn off the automatic updates (to our own WSUS server), then
>> the other services don't stop. This is happening on 3 of our servers.
>> All of them were built by ADS, and an additional 5 of them from the
>> exact same image (total 8 new servers) and only 3 are having this
>> problem. We have seen it with both Standard and Enterprise edition.
>>
>> Mike
>>
<snip>

Actually no. Those servers had Automatic Updates disabled so they
would remain stable during testing of a software build. When that is
finished, we are recommending they re-ADS the servers.

They have no time for troubleshooting, and the event logs don't give
us any information to force their hand to let us troubleshoot. If I
can rebuild the box in about an hour, that is their solution. They
don't want to hear about the possibility of days of troubleshooting.

<sigh> and they wonder why they have such a high turnover of people
here heheh

Mike

You mentioned in your post that you would monitor the situation after turning
off Automatic Updated. Was wondering if it had the desired effect. I have
the exact symptoms as your post and a WSUS server that pushes out updates.
So, any new news on this one? I've been working with MS for days on this and
they haven't resolved yet.

Thanks,
John

"Modci" wrote:

> Did you find a resolution outside of just disabling Automatic Updates? For
> now, I have disabled the automatic updates on the two servers to see if there
> is a positive effect. I will monitor. But obviously the solution should not
> be limited to never perfoming auto updates anymore.
>
> This is interesting, and thanks for your post.
>
>
>
> "Special Access" wrote:
>
> > On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> > <Modci@discussions.microsoft.com> wrote:
> >
> > You are not alone. We traced our problem back to Automatic Updates.
> > IF we turn off the automatic updates (to our own WSUS server), then
> > the other services don't stop. This is happening on 3 of our servers.
> > All of them were built by ADS, and an additional 5 of them from the
> > exact same image (total 8 new servers) and only 3 are having this
> > problem. We have seen it with both Standard and Enterprise edition.
> >
> > Mike
> >
> > >No, but I appreciate your situation. I will certainly post the resolution
> > >when I find it. This effects 2 of our servers as well (the only 2 we have,
> > >both DCs).
> > >
> > >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> > >
> > >"Savage" wrote:
> > >
> > >> Modci,
> > >>
> > >> we have just started haveing the smae problems on 2 servers, have you
> > >> found a solution to this issue?
> > >>
> > >> this is very disruptive.
> > >>
> > >> Any ideas
> > >>
> > >> Thanks Stuart
> > >>
> > >>
> > >> Modci wrote:
> > >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > >> > server.
> > >> >
> > >> > For about a week now I have serveral services that are normally started
> > >> > automatically are stopping intermitently. When these services stop (IE
> > >> > Workstation) all my users lose access to everything outside of their local
> > >> > machine (printers, network drives, etc. - basically everything the
> > >> > workstation is there to support). I've reviewed the event logs and the
> > >> > primary event that is logged when users lose their network connections is the
> > >> > following:
> > >> > Source: Service Control Manager
> > >> > Event ID: 7032
> > >> > Description: The Service Control Manager tried to take a corrective action
> > >> > (Restart the service) after the unexpected termination of the Windows
> > >> > Management Instrumentation service, but this action failed with the following
> > >> > error:
> > >> > An instance of the service is already running.
> > >> >
> > >> > -end
> > >> >
> > >> > This message is recorded in the event viewer, but I also notice other
> > >> > services have stopped that isn't always recorded in the event viewer. These
> > >> > services include the following (not limited to): Routing and REmote Access,
> > >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > >> > Help and Support.
> > >> >
> > >> > Again, this happens intermittently. In addition, each service I mentioned
> > >> > is set to Startup Automatically. Rebooting the server does not resolve the
> > >> > issue. Each time this happens, I must restart the workstation service
> > >> > (primarily to get folder redirection back for users accessing 'My documents.'
> > >> >
> > >> > Thank you in advance for your help.
> > >> >
> > >> > This is very weird.
> > >>
> > >>
> >

Hi Guys,

Any luck? I am having the same issue. At first we thought it was an
image we where deploying, but its random. Some of my clients get this
problem. Some do not. Reinstalling from scratch does solve it. Odd!!
John wrote:
> You mentioned in your post that you would monitor the situation after turning
> off Automatic Updated. Was wondering if it had the desired effect. I have
> the exact symptoms as your post and a WSUS server that pushes out updates.
> So, any new news on this one? I've been working with MS for days on this and
> they haven't resolved yet.
>
> Thanks,
> John
>
> "Modci" wrote:
>
> > Did you find a resolution outside of just disabling Automatic Updates? For
> > now, I have disabled the automatic updates on the two servers to see if there
> > is a positive effect. I will monitor. But obviously the solution should not
> > be limited to never perfoming auto updates anymore.
> >
> > This is interesting, and thanks for your post.
> >
> >
> >
> > "Special Access" wrote:
> >
> > > On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> > > <Modci@discussions.microsoft.com> wrote:
> > >
> > > You are not alone. We traced our problem back to Automatic Updates.
> > > IF we turn off the automatic updates (to our own WSUS server), then
> > > the other services don't stop. This is happening on 3 of our servers.
> > > All of them were built by ADS, and an additional 5 of them from the
> > > exact same image (total 8 new servers) and only 3 are having this
> > > problem. We have seen it with both Standard and Enterprise edition.
> > >
> > > Mike
> > >
> > > >No, but I appreciate your situation. I will certainly post the resolution
> > > >when I find it. This effects 2 of our servers as well (the only 2 we have,
> > > >both DCs).
> > > >
> > > >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> > > >
> > > >"Savage" wrote:
> > > >
> > > >> Modci,
> > > >>
> > > >> we have just started haveing the smae problems on 2 servers, have you
> > > >> found a solution to this issue?
> > > >>
> > > >> this is very disruptive.
> > > >>
> > > >> Any ideas
> > > >>
> > > >> Thanks Stuart
> > > >>
> > > >>
> > > >> Modci wrote:
> > > >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > > >> > server.
> > > >> >
> > > >> > For about a week now I have serveral services that are normally started
> > > >> > automatically are stopping intermitently. When these services stop (IE
> > > >> > Workstation) all my users lose access to everything outside of their local
> > > >> > machine (printers, network drives, etc. - basically everything the
> > > >> > workstation is there to support). I've reviewed the event logs and the
> > > >> > primary event that is logged when users lose their network connections is the
> > > >> > following:
> > > >> > Source: Service Control Manager
> > > >> > Event ID: 7032
> > > >> > Description: The Service Control Manager tried to take a corrective action
> > > >> > (Restart the service) after the unexpected termination of the Windows
> > > >> > Management Instrumentation service, but this action failed with the following
> > > >> > error:
> > > >> > An instance of the service is already running.
> > > >> >
> > > >> > -end
> > > >> >
> > > >> > This message is recorded in the event viewer, but I also notice other
> > > >> > services have stopped that isn't always recorded in the event viewer. These
> > > >> > services include the following (not limited to): Routing and REmote Access,
> > > >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > > >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > > >> > Help and Support.
> > > >> >
> > > >> > Again, this happens intermittently. In addition, each service I mentioned
> > > >> > is set to Startup Automatically. Rebooting the server does not resolve the
> > > >> > issue. Each time this happens, I must restart the workstation service
> > > >> > (primarily to get folder redirection back for users accessing 'My documents.'
> > > >> >
> > > >> > Thank you in advance for your help.
> > > >> >
> > > >> > This is very weird.
> > > >>
> > > >>
> > >

See my post in microsoft.public.windows.server.general with the subject
generic host process for win32 services encountered ...

Here is a shortened link: http://tinyurl.com/yyye3w

Hope it helps, I did resolve the issue in my case.


"tlamming@gmail.com" wrote:

> Hi Guys,
>
> Any luck? I am having the same issue. At first we thought it was an
> image we where deploying, but its random. Some of my clients get this
> problem. Some do not. Reinstalling from scratch does solve it. Odd!!
> John wrote:
> > You mentioned in your post that you would monitor the situation after turning
> > off Automatic Updated. Was wondering if it had the desired effect. I have
> > the exact symptoms as your post and a WSUS server that pushes out updates.
> > So, any new news on this one? I've been working with MS for days on this and
> > they haven't resolved yet.
> >
> > Thanks,
> > John
> >
> > "Modci" wrote:
> >
> > > Did you find a resolution outside of just disabling Automatic Updates? For
> > > now, I have disabled the automatic updates on the two servers to see if there
> > > is a positive effect. I will monitor. But obviously the solution should not
> > > be limited to never perfoming auto updates anymore.
> > >
> > > This is interesting, and thanks for your post.
> > >
> > >
> > >
> > > "Special Access" wrote:
> > >
> > > > On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> > > > <Modci@discussions.microsoft.com> wrote:
> > > >
> > > > You are not alone. We traced our problem back to Automatic Updates.
> > > > IF we turn off the automatic updates (to our own WSUS server), then
> > > > the other services don't stop. This is happening on 3 of our servers.
> > > > All of them were built by ADS, and an additional 5 of them from the
> > > > exact same image (total 8 new servers) and only 3 are having this
> > > > problem. We have seen it with both Standard and Enterprise edition.
> > > >
> > > > Mike
> > > >
> > > > >No, but I appreciate your situation. I will certainly post the resolution
> > > > >when I find it. This effects 2 of our servers as well (the only 2 we have,
> > > > >both DCs).
> > > > >
> > > > >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> > > > >
> > > > >"Savage" wrote:
> > > > >
> > > > >> Modci,
> > > > >>
> > > > >> we have just started haveing the smae problems on 2 servers, have you
> > > > >> found a solution to this issue?
> > > > >>
> > > > >> this is very disruptive.
> > > > >>
> > > > >> Any ideas
> > > > >>
> > > > >> Thanks Stuart
> > > > >>
> > > > >>
> > > > >> Modci wrote:
> > > > >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > > > >> > server.
> > > > >> >
> > > > >> > For about a week now I have serveral services that are normally started
> > > > >> > automatically are stopping intermitently. When these services stop (IE
> > > > >> > Workstation) all my users lose access to everything outside of their local
> > > > >> > machine (printers, network drives, etc. - basically everything the
> > > > >> > workstation is there to support). I've reviewed the event logs and the
> > > > >> > primary event that is logged when users lose their network connections is the
> > > > >> > following:
> > > > >> > Source: Service Control Manager
> > > > >> > Event ID: 7032
> > > > >> > Description: The Service Control Manager tried to take a corrective action
> > > > >> > (Restart the service) after the unexpected termination of the Windows
> > > > >> > Management Instrumentation service, but this action failed with the following
> > > > >> > error:
> > > > >> > An instance of the service is already running.
> > > > >> >
> > > > >> > -end
> > > > >> >
> > > > >> > This message is recorded in the event viewer, but I also notice other
> > > > >> > services have stopped that isn't always recorded in the event viewer. These
> > > > >> > services include the following (not limited to): Routing and REmote Access,
> > > > >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > > > >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > > > >> > Help and Support.
> > > > >> >
> > > > >> > Again, this happens intermittently. In addition, each service I mentioned
> > > > >> > is set to Startup Automatically. Rebooting the server does not resolve the
> > > > >> > issue. Each time this happens, I must restart the workstation service
> > > > >> > (primarily to get folder redirection back for users accessing 'My documents.'
> > > > >> >
> > > > >> > Thank you in advance for your help.
> > > > >> >
> > > > >> > This is very weird.
> > > > >>
> > > > >>
> > > >
>
>

I have exactly the same issue on a Win2k3 SBS system. (It had been running
fine until today!). When I stop the Automatic Updates service then the
problem stops (The Workstation & Server services remain running).

I have followed the suggested process of running automatic updates, but to
run it requires that you start the Automatic Updates & BITS services. When
they are started, and I execute Automatic Updates, the "Checking for Updates"
never completes.

I have also tried running the Microsoft Basleline Security Analyser
software, again it never completes the "Checking server" screen.

How can I reinstall the Automatic Updates software components? It has to be
some issue around it.


"John" wrote:

> See my post in microsoft.public.windows.server.general with the subject
> generic host process for win32 services encountered ...
>
> Here is a shortened link: http://tinyurl.com/yyye3w
>
> Hope it helps, I did resolve the issue in my case.
>
>
> "tlamming@gmail.com" wrote:
>
> > Hi Guys,
> >
> > Any luck? I am having the same issue. At first we thought it was an
> > image we where deploying, but its random. Some of my clients get this
> > problem. Some do not. Reinstalling from scratch does solve it. Odd!!
> > John wrote:
> > > You mentioned in your post that you would monitor the situation after turning
> > > off Automatic Updated. Was wondering if it had the desired effect. I have
> > > the exact symptoms as your post and a WSUS server that pushes out updates.
> > > So, any new news on this one? I've been working with MS for days on this and
> > > they haven't resolved yet.
> > >
> > > Thanks,
> > > John
> > >
> > > "Modci" wrote:
> > >
> > > > Did you find a resolution outside of just disabling Automatic Updates? For
> > > > now, I have disabled the automatic updates on the two servers to see if there
> > > > is a positive effect. I will monitor. But obviously the solution should not
> > > > be limited to never perfoming auto updates anymore.
> > > >
> > > > This is interesting, and thanks for your post.
> > > >
> > > >
> > > >
> > > > "Special Access" wrote:
> > > >
> > > > > On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> > > > > <Modci@discussions.microsoft.com> wrote:
> > > > >
> > > > > You are not alone. We traced our problem back to Automatic Updates.
> > > > > IF we turn off the automatic updates (to our own WSUS server), then
> > > > > the other services don't stop. This is happening on 3 of our servers.
> > > > > All of them were built by ADS, and an additional 5 of them from the
> > > > > exact same image (total 8 new servers) and only 3 are having this
> > > > > problem. We have seen it with both Standard and Enterprise edition.
> > > > >
> > > > > Mike
> > > > >
> > > > > >No, but I appreciate your situation. I will certainly post the resolution
> > > > > >when I find it. This effects 2 of our servers as well (the only 2 we have,
> > > > > >both DCs).
> > > > > >
> > > > > >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> > > > > >
> > > > > >"Savage" wrote:
> > > > > >
> > > > > >> Modci,
> > > > > >>
> > > > > >> we have just started haveing the smae problems on 2 servers, have you
> > > > > >> found a solution to this issue?
> > > > > >>
> > > > > >> this is very disruptive.
> > > > > >>
> > > > > >> Any ideas
> > > > > >>
> > > > > >> Thanks Stuart
> > > > > >>
> > > > > >>
> > > > > >> Modci wrote:
> > > > > >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > > > > >> > server.
> > > > > >> >
> > > > > >> > For about a week now I have serveral services that are normally started
> > > > > >> > automatically are stopping intermitently. When these services stop (IE
> > > > > >> > Workstation) all my users lose access to everything outside of their local
> > > > > >> > machine (printers, network drives, etc. - basically everything the
> > > > > >> > workstation is there to support). I've reviewed the event logs and the
> > > > > >> > primary event that is logged when users lose their network connections is the
> > > > > >> > following:
> > > > > >> > Source: Service Control Manager
> > > > > >> > Event ID: 7032
> > > > > >> > Description: The Service Control Manager tried to take a corrective action
> > > > > >> > (Restart the service) after the unexpected termination of the Windows
> > > > > >> > Management Instrumentation service, but this action failed with the following
> > > > > >> > error:
> > > > > >> > An instance of the service is already running.
> > > > > >> >
> > > > > >> > -end
> > > > > >> >
> > > > > >> > This message is recorded in the event viewer, but I also notice other
> > > > > >> > services have stopped that isn't always recorded in the event viewer. These
> > > > > >> > services include the following (not limited to): Routing and REmote Access,
> > > > > >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > > > > >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > > > > >> > Help and Support.
> > > > > >> >
> > > > > >> > Again, this happens intermittently. In addition, each service I mentioned
> > > > > >> > is set to Startup Automatically. Rebooting the server does not resolve the
> > > > > >> > issue. Each time this happens, I must restart the workstation service
> > > > > >> > (primarily to get folder redirection back for users accessing 'My documents.'
> > > > > >> >
> > > > > >> > Thank you in advance for your help.
> > > > > >> >
> > > > > >> > This is very weird.
> > > > > >>
> > > > > >>
> > > > >
> >
> >

Microsoft has an article on what may be causing your issue. Check out
KB894391 (which I have noticed is recently updated, and possibly KB893803 for
your installer issue. Hope that helps!

"Andrew Carra" wrote:

> I have exactly the same issue on a Win2k3 SBS system. (It had been running
> fine until today!). When I stop the Automatic Updates service then the
> problem stops (The Workstation & Server services remain running).
>
> I have followed the suggested process of running automatic updates, but to
> run it requires that you start the Automatic Updates & BITS services. When
> they are started, and I execute Automatic Updates, the "Checking for Updates"
> never completes.
>
> I have also tried running the Microsoft Basleline Security Analyser
> software, again it never completes the "Checking server" screen.
>
> How can I reinstall the Automatic Updates software components? It has to be
> some issue around it.
>
>
> "John" wrote:
>
> > See my post in microsoft.public.windows.server.general with the subject
> > generic host process for win32 services encountered ...
> >
> > Here is a shortened link: http://tinyurl.com/yyye3w
> >
> > Hope it helps, I did resolve the issue in my case.
> >
> >
> > "tlamming@gmail.com" wrote:
> >
> > > Hi Guys,
> > >
> > > Any luck? I am having the same issue. At first we thought it was an
> > > image we where deploying, but its random. Some of my clients get this
> > > problem. Some do not. Reinstalling from scratch does solve it. Odd!!
> > > John wrote:
> > > > You mentioned in your post that you would monitor the situation after turning
> > > > off Automatic Updated. Was wondering if it had the desired effect. I have
> > > > the exact symptoms as your post and a WSUS server that pushes out updates.
> > > > So, any new news on this one? I've been working with MS for days on this and
> > > > they haven't resolved yet.
> > > >
> > > > Thanks,
> > > > John
> > > >
> > > > "Modci" wrote:
> > > >
> > > > > Did you find a resolution outside of just disabling Automatic Updates? For
> > > > > now, I have disabled the automatic updates on the two servers to see if there
> > > > > is a positive effect. I will monitor. But obviously the solution should not
> > > > > be limited to never perfoming auto updates anymore.
> > > > >
> > > > > This is interesting, and thanks for your post.
> > > > >
> > > > >
> > > > >
> > > > > "Special Access" wrote:
> > > > >
> > > > > > On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> > > > > > <Modci@discussions.microsoft.com> wrote:
> > > > > >
> > > > > > You are not alone. We traced our problem back to Automatic Updates.
> > > > > > IF we turn off the automatic updates (to our own WSUS server), then
> > > > > > the other services don't stop. This is happening on 3 of our servers.
> > > > > > All of them were built by ADS, and an additional 5 of them from the
> > > > > > exact same image (total 8 new servers) and only 3 are having this
> > > > > > problem. We have seen it with both Standard and Enterprise edition.
> > > > > >
> > > > > > Mike
> > > > > >
> > > > > > >No, but I appreciate your situation. I will certainly post the resolution
> > > > > > >when I find it. This effects 2 of our servers as well (the only 2 we have,
> > > > > > >both DCs).
> > > > > > >
> > > > > > >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> > > > > > >
> > > > > > >"Savage" wrote:
> > > > > > >
> > > > > > >> Modci,
> > > > > > >>
> > > > > > >> we have just started haveing the smae problems on 2 servers, have you
> > > > > > >> found a solution to this issue?
> > > > > > >>
> > > > > > >> this is very disruptive.
> > > > > > >>
> > > > > > >> Any ideas
> > > > > > >>
> > > > > > >> Thanks Stuart
> > > > > > >>
> > > > > > >>
> > > > > > >> Modci wrote:
> > > > > > >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > > > > > >> > server.
> > > > > > >> >
> > > > > > >> > For about a week now I have serveral services that are normally started
> > > > > > >> > automatically are stopping intermitently. When these services stop (IE
> > > > > > >> > Workstation) all my users lose access to everything outside of their local
> > > > > > >> > machine (printers, network drives, etc. - basically everything the
> > > > > > >> > workstation is there to support). I've reviewed the event logs and the
> > > > > > >> > primary event that is logged when users lose their network connections is the
> > > > > > >> > following:
> > > > > > >> > Source: Service Control Manager
> > > > > > >> > Event ID: 7032
> > > > > > >> > Description: The Service Control Manager tried to take a corrective action
> > > > > > >> > (Restart the service) after the unexpected termination of the Windows
> > > > > > >> > Management Instrumentation service, but this action failed with the following
> > > > > > >> > error:
> > > > > > >> > An instance of the service is already running.
> > > > > > >> >
> > > > > > >> > -end
> > > > > > >> >
> > > > > > >> > This message is recorded in the event viewer, but I also notice other
> > > > > > >> > services have stopped that isn't always recorded in the event viewer. These
> > > > > > >> > services include the following (not limited to): Routing and REmote Access,
> > > > > > >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > > > > > >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > > > > > >> > Help and Support.
> > > > > > >> >
> > > > > > >> > Again, this happens intermittently. In addition, each service I mentioned
> > > > > > >> > is set to Startup Automatically. Rebooting the server does not resolve the
> > > > > > >> > issue. Each time this happens, I must restart the workstation service
> > > > > > >> > (primarily to get folder redirection back for users accessing 'My documents.'
> > > > > > >> >
> > > > > > >> > Thank you in advance for your help.
> > > > > > >> >
> > > > > > >> > This is very weird.
> > > > > > >>
> > > > > > >>
> > > > > >
> > >
> > >

John,
Thanks for the reply. However, the system is running SP1, so both of your
suggested fixes will not load.

However I found the solution....

I loaded the hotfix KB898715, and then both Auto Updates and MBSA started
working.

Problem solved

"John" wrote:

> Microsoft has an article on what may be causing your issue. Check out
> KB894391 (which I have noticed is recently updated, and possibly KB893803 for
> your installer issue. Hope that helps!
>
> "Andrew Carra" wrote:
>
> > I have exactly the same issue on a Win2k3 SBS system. (It had been running
> > fine until today!). When I stop the Automatic Updates service then the
> > problem stops (The Workstation & Server services remain running).
> >
> > I have followed the suggested process of running automatic updates, but to
> > run it requires that you start the Automatic Updates & BITS services. When
> > they are started, and I execute Automatic Updates, the "Checking for Updates"
> > never completes.
> >
> > I have also tried running the Microsoft Basleline Security Analyser
> > software, again it never completes the "Checking server" screen.
> >
> > How can I reinstall the Automatic Updates software components? It has to be
> > some issue around it.
> >
> >
> > "John" wrote:
> >
> > > See my post in microsoft.public.windows.server.general with the subject
> > > generic host process for win32 services encountered ...
> > >
> > > Here is a shortened link: http://tinyurl.com/yyye3w
> > >
> > > Hope it helps, I did resolve the issue in my case.
> > >
> > >
> > > "tlamming@gmail.com" wrote:
> > >
> > > > Hi Guys,
> > > >
> > > > Any luck? I am having the same issue. At first we thought it was an
> > > > image we where deploying, but its random. Some of my clients get this
> > > > problem. Some do not. Reinstalling from scratch does solve it. Odd!!
> > > > John wrote:
> > > > > You mentioned in your post that you would monitor the situation after turning
> > > > > off Automatic Updated. Was wondering if it had the desired effect. I have
> > > > > the exact symptoms as your post and a WSUS server that pushes out updates.
> > > > > So, any new news on this one? I've been working with MS for days on this and
> > > > > they haven't resolved yet.
> > > > >
> > > > > Thanks,
> > > > > John
> > > > >
> > > > > "Modci" wrote:
> > > > >
> > > > > > Did you find a resolution outside of just disabling Automatic Updates? For
> > > > > > now, I have disabled the automatic updates on the two servers to see if there
> > > > > > is a positive effect. I will monitor. But obviously the solution should not
> > > > > > be limited to never perfoming auto updates anymore.
> > > > > >
> > > > > > This is interesting, and thanks for your post.
> > > > > >
> > > > > >
> > > > > >
> > > > > > "Special Access" wrote:
> > > > > >
> > > > > > > On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> > > > > > > <Modci@discussions.microsoft.com> wrote:
> > > > > > >
> > > > > > > You are not alone. We traced our problem back to Automatic Updates.
> > > > > > > IF we turn off the automatic updates (to our own WSUS server), then
> > > > > > > the other services don't stop. This is happening on 3 of our servers.
> > > > > > > All of them were built by ADS, and an additional 5 of them from the
> > > > > > > exact same image (total 8 new servers) and only 3 are having this
> > > > > > > problem. We have seen it with both Standard and Enterprise edition.
> > > > > > >
> > > > > > > Mike
> > > > > > >
> > > > > > > >No, but I appreciate your situation. I will certainly post the resolution
> > > > > > > >when I find it. This effects 2 of our servers as well (the only 2 we have,
> > > > > > > >both DCs).
> > > > > > > >
> > > > > > > >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> > > > > > > >
> > > > > > > >"Savage" wrote:
> > > > > > > >
> > > > > > > >> Modci,
> > > > > > > >>
> > > > > > > >> we have just started haveing the smae problems on 2 servers, have you
> > > > > > > >> found a solution to this issue?
> > > > > > > >>
> > > > > > > >> this is very disruptive.
> > > > > > > >>
> > > > > > > >> Any ideas
> > > > > > > >>
> > > > > > > >> Thanks Stuart
> > > > > > > >>
> > > > > > > >>
> > > > > > > >> Modci wrote:
> > > > > > > >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > > > > > > >> > server.
> > > > > > > >> >
> > > > > > > >> > For about a week now I have serveral services that are normally started
> > > > > > > >> > automatically are stopping intermitently. When these services stop (IE
> > > > > > > >> > Workstation) all my users lose access to everything outside of their local
> > > > > > > >> > machine (printers, network drives, etc. - basically everything the
> > > > > > > >> > workstation is there to support). I've reviewed the event logs and the
> > > > > > > >> > primary event that is logged when users lose their network connections is the
> > > > > > > >> > following:
> > > > > > > >> > Source: Service Control Manager
> > > > > > > >> > Event ID: 7032
> > > > > > > >> > Description: The Service Control Manager tried to take a corrective action
> > > > > > > >> > (Restart the service) after the unexpected termination of the Windows
> > > > > > > >> > Management Instrumentation service, but this action failed with the following
> > > > > > > >> > error:
> > > > > > > >> > An instance of the service is already running.
> > > > > > > >> >
> > > > > > > >> > -end
> > > > > > > >> >
> > > > > > > >> > This message is recorded in the event viewer, but I also notice other
> > > > > > > >> > services have stopped that isn't always recorded in the event viewer. These
> > > > > > > >> > services include the following (not limited to): Routing and REmote Access,
> > > > > > > >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > > > > > > >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > > > > > > >> > Help and Support.
> > > > > > > >> >
> > > > > > > >> > Again, this happens intermittently. In addition, each service I mentioned
> > > > > > > >> > is set to Startup Automatically. Rebooting the server does not resolve the
> > > > > > > >> > issue. Each time this happens, I must restart the workstation service
> > > > > > > >> > (primarily to get folder redirection back for users accessing 'My documents.'
> > > > > > > >> >
> > > > > > > >> > Thank you in advance for your help.
> > > > > > > >> >
> > > > > > > >> > This is very weird.
> > > > > > > >>
> > > > > > > >>
> > > > > > >
> > > >
> > > >

Hiya,

I get this happening and I've got the latest updates installed!

Any more ideas?

Rob

"Andrew Carra" wrote:

> John,
> Thanks for the reply. However, the system is running SP1, so both of your
> suggested fixes will not load.
>
> However I found the solution....
>
> I loaded the hotfix KB898715, and then both Auto Updates and MBSA started
> working.
>
> Problem solved
>
> "John" wrote:
>
> > Microsoft has an article on what may be causing your issue. Check out
> > KB894391 (which I have noticed is recently updated, and possibly KB893803 for
> > your installer issue. Hope that helps!
> >
> > "Andrew Carra" wrote:
> >
> > > I have exactly the same issue on a Win2k3 SBS system. (It had been running
> > > fine until today!). When I stop the Automatic Updates service then the
> > > problem stops (The Workstation & Server services remain running).
> > >
> > > I have followed the suggested process of running automatic updates, but to
> > > run it requires that you start the Automatic Updates & BITS services. When
> > > they are started, and I execute Automatic Updates, the "Checking for Updates"
> > > never completes.
> > >
> > > I have also tried running the Microsoft Basleline Security Analyser
> > > software, again it never completes the "Checking server" screen.
> > >
> > > How can I reinstall the Automatic Updates software components? It has to be
> > > some issue around it.
> > >
> > >
> > > "John" wrote:
> > >
> > > > See my post in microsoft.public.windows.server.general with the subject
> > > > generic host process for win32 services encountered ...
> > > >
> > > > Here is a shortened link: http://tinyurl.com/yyye3w
> > > >
> > > > Hope it helps, I did resolve the issue in my case.
> > > >
> > > >
> > > > "tlamming@gmail.com" wrote:
> > > >
> > > > > Hi Guys,
> > > > >
> > > > > Any luck? I am having the same issue. At first we thought it was an
> > > > > image we where deploying, but its random. Some of my clients get this
> > > > > problem. Some do not. Reinstalling from scratch does solve it. Odd!!
> > > > > John wrote:
> > > > > > You mentioned in your post that you would monitor the situation after turning
> > > > > > off Automatic Updated. Was wondering if it had the desired effect. I have
> > > > > > the exact symptoms as your post and a WSUS server that pushes out updates.
> > > > > > So, any new news on this one? I've been working with MS for days on this and
> > > > > > they haven't resolved yet.
> > > > > >
> > > > > > Thanks,
> > > > > > John
> > > > > >
> > > > > > "Modci" wrote:
> > > > > >
> > > > > > > Did you find a resolution outside of just disabling Automatic Updates? For
> > > > > > > now, I have disabled the automatic updates on the two servers to see if there
> > > > > > > is a positive effect. I will monitor. But obviously the solution should not
> > > > > > > be limited to never perfoming auto updates anymore.
> > > > > > >
> > > > > > > This is interesting, and thanks for your post.
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > "Special Access" wrote:
> > > > > > >
> > > > > > > > On Wed, 18 Oct 2006 19:24:02 -0700, Modci
> > > > > > > > <Modci@discussions.microsoft.com> wrote:
> > > > > > > >
> > > > > > > > You are not alone. We traced our problem back to Automatic Updates.
> > > > > > > > IF we turn off the automatic updates (to our own WSUS server), then
> > > > > > > > the other services don't stop. This is happening on 3 of our servers.
> > > > > > > > All of them were built by ADS, and an additional 5 of them from the
> > > > > > > > exact same image (total 8 new servers) and only 3 are having this
> > > > > > > > problem. We have seen it with both Standard and Enterprise edition.
> > > > > > > >
> > > > > > > > Mike
> > > > > > > >
> > > > > > > > >No, but I appreciate your situation. I will certainly post the resolution
> > > > > > > > >when I find it. This effects 2 of our servers as well (the only 2 we have,
> > > > > > > > >both DCs).
> > > > > > > > >
> > > > > > > > >Another oddidity is I keep seeing seeing is svchost.exe process errors.
> > > > > > > > >
> > > > > > > > >"Savage" wrote:
> > > > > > > > >
> > > > > > > > >> Modci,
> > > > > > > > >>
> > > > > > > > >> we have just started haveing the smae problems on 2 servers, have you
> > > > > > > > >> found a solution to this issue?
> > > > > > > > >>
> > > > > > > > >> this is very disruptive.
> > > > > > > > >>
> > > > > > > > >> Any ideas
> > > > > > > > >>
> > > > > > > > >> Thanks Stuart
> > > > > > > > >>
> > > > > > > > >>
> > > > > > > > >> Modci wrote:
> > > > > > > > >> > I'm perplexed. I have a small network running Windows 2003 standard edition
> > > > > > > > >> > server.
> > > > > > > > >> >
> > > > > > > > >> > For about a week now I have serveral services that are normally started
> > > > > > > > >> > automatically are stopping intermitently. When these services stop (IE
> > > > > > > > >> > Workstation) all my users lose access to everything outside of their local
> > > > > > > > >> > machine (printers, network drives, etc. - basically everything the
> > > > > > > > >> > workstation is there to support). I've reviewed the event logs and the
> > > > > > > > >> > primary event that is logged when users lose their network connections is the
> > > > > > > > >> > following:
> > > > > > > > >> > Source: Service Control Manager
> > > > > > > > >> > Event ID: 7032
> > > > > > > > >> > Description: The Service Control Manager tried to take a corrective action
> > > > > > > > >> > (Restart the service) after the unexpected termination of the Windows
> > > > > > > > >> > Management Instrumentation service, but this action failed with the following
> > > > > > > > >> > error:
> > > > > > > > >> > An instance of the service is already running.
> > > > > > > > >> >
> > > > > > > > >> > -end
> > > > > > > > >> >
> > > > > > > > >> > This message is recorded in the event viewer, but I also notice other
> > > > > > > > >> > services have stopped that isn't always recorded in the event viewer. These
> > > > > > > > >> > services include the following (not limited to): Routing and REmote Access,
> > > > > > > > >> > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > > > > > > > >> > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > > > > > > > >> > Help and Support.
> > > > > > > > >> >
> > > > > > > > >> > Again, this happens intermittently. In addition, each service I mentioned
> > > > > > > > >> > is set to Startup Automatically. Rebooting the server does not resolve the
> > > > > > > > >> > issue. Each time this happens, I must restart the workstation service
> > > > > > > > >> > (primarily to get folder redirection back for users accessing 'My documents.'
> > > > > > > > >> >
> > > > > > > > >> > Thank you in advance for your help.
> > > > > > > > >> >
> > > > > > > > >> > This is very weird.
> > > > > > > > >>
> > > > > > > > >>
> > > > > > > >
> > > > >
> > > > >

svchost.exe is responsible for handling many windows services, and a problem
with one can cause problems with the others, which appears to be happening in
this case. One of the major bundles of services handled by svchost.exe is the
"netsvcs" bundle, which by default includes things like Automatic Updates
(wuauserv), Workstation (LanmanWorkstation), Windows Management
Instrumentation (WMI), and many others, including all of the ones listed by
Modci in his initial post.

Fortunately, it is possible to isolate services from the svchost bundles.
Naturally, this is done by editing the registry. As always, modifying the
registry can be dangerous, you take responsibility for any registry
modification you perform, etc. etc.

In order to isolate Automatic Updates from the other services, you need to
create a new svchost bundle to hold Automatic Updates, remove Automatic
Updates from the "netsvcs" bundle, and change the parameter svchost uses to
invoke Automatic Updates.

More on this topic is available at "My Green Paste" :
http://mygreenpaste.blogspot.com/200...sues-with.html

In case that page isn't around for long, here's the relevant excerpt:

<i>The SVCHOST services are controlled by registry settings in
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost].
(Standard warnings about editing the registry apply.) Each REG_MULTI_SZ in
this key represents a SVCHOST group containing a list of one or more services
to run in an instance of SVCHOST.EXE. So if one wishes to isolate the
Automatic Updates service, one needs to find which group it is in. The "name"
of the Automatic Updates service is "wuauserv" - Windows Update Automatic
Updates service. This service resides in the "netsvcs" group. So, since the
desire is to create a new SVCHOST instance to run the service in, remove
wuauserv from the list in the netsvcs value. Then, create a new REG_MULTI_SZ
value and give it an appropriate name, such as AutomaticUpdates. Add wuauserv
to this value.

Next, navigate to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet
\Services\wuauserv] and change the ImagePath (which specifies the program and
arguments the Service Control Manager is to use to invoke the service) from:
%systemroot%\system32\svchost.exe -k netsvcs
to:
%systemroot%\system32\svchost.exe -k AutomaticUpdates

That's it. Stop and restart the Automatic Updates service (net stop wuauserv
/ net start wuauserv) and you should see a new instance of SVCHOST.EXE that
contains only the Automatic Updates service. Now you can monitor the
performance of this process, drop its priority (Task Manager or Process
Explorer), etc.</i>


Though this isn't a true solution, this may help you with managing the
symptoms.

"Modci" wrote:

> No, but I appreciate your situation. I will certainly post the resolution
> when I find it. This effects 2 of our servers as well (the only 2 we have,
> both DCs).
>
> Another oddidity is I keep seeing seeing is svchost.exe process errors.
>
> "Savage" wrote:
>
> > Modci,
> >
> > we have just started haveing the smae problems on 2 servers, have you
> > found a solution to this issue?
> >
> > this is very disruptive.
> >
> > Any ideas
> >
> > Thanks Stuart
> >
> >
> > Modci wrote:
> > > I'm perplexed. I have a small network running Windows 2003 standard edition
> > > server.
> > >
> > > For about a week now I have serveral services that are normally started
> > > automatically are stopping intermitently. When these services stop (IE
> > > Workstation) all my users lose access to everything outside of their local
> > > machine (printers, network drives, etc. - basically everything the
> > > workstation is there to support). I've reviewed the event logs and the
> > > primary event that is logged when users lose their network connections is the
> > > following:
> > > Source: Service Control Manager
> > > Event ID: 7032
> > > Description: The Service Control Manager tried to take a corrective action
> > > (Restart the service) after the unexpected termination of the Windows
> > > Management Instrumentation service, but this action failed with the following
> > > error:
> > > An instance of the service is already running.
> > >
> > > -end
> > >
> > > This message is recorded in the event viewer, but I also notice other
> > > services have stopped that isn't always recorded in the event viewer. These
> > > services include the following (not limited to): Routing and REmote Access,
> > > Secondary Logon, Task Scheduler, Windows Audio, Wireless Configuration,
> > > Workstation, Automatic Updates, Cryptographic Services, Computer Browser,
> > > Help and Support.
> > >
> > > Again, this happens intermittently. In addition, each service I mentioned
> > > is set to Startup Automatically. Rebooting the server does not resolve the
> > > issue. Each time this happens, I must restart the workstation service
> > > (primarily to get folder redirection back for users accessing 'My documents.'
> > >
> > > Thank you in advance for your help.
> > >
> > > This is very weird.
> >
> >