The lockup hasn't happened for a while, but I've learned that doesn't mean it's been fixed through a BIOS or other update, it's just waiting to pounce.
I went through all the Errors for the last week in the "Administrative Events" section of Event Viewer (Windows 7) and none of them sounds like some earth-shattering problem. Am I using this tool correctly? Is there some other way I should be using Event Viewer to troubleshoot this? There are some other errors further in the past but I thought this was long enough already. For each of the Errors in the last 7 days, I chose (right-click)|Help|Event Log Online Help on This Event. The results: [Access Connections errors] Event ID: 59; Event Source: SideBySide; No results were found for your query. [IP lease denied, don't know if this would cause a lockup, nor why it's happening] Event ID 1002 — DHCP Client Address Conflicts Updated: January 8, 2009 Applies To: Windows Server 2008 R2 Dynamic Host Configuration Protocol (DHCP) operates on a lease renewal basis. During the leasing process, IP address conflicts can occur as leases are renewed and expired. Client lease requests might be denied by the server for invalid (out of pool) or duplicate IP addresses. Multiple IP address conflict messages can indicate that your lease period, your scope, or both, need adjustment in your DHCP server configuration. [MSE errors] Event ID: 3; Event Source: Microsoft-Windows-Kernel-EventTracing; No results were found for your query. [Audit events errors] Event ID 1101 — Security Channel Publishing Updated: December 16, 2008 Applies To: Windows Server 2008 R2 As events are delivered to the Event Log service to be saved in the Security log, they pass through the operating system (OS) kernel. If the kernel does not have enough resources to deliver the events to the Event Log service (which can happen if the Event Log service has to handle a large number of events), then the events are lost. This can compromise the security of the system and ability of administrators, support personnel, and automated utilities to troubleshoot and diagnose problems. [Reboot without clean shutdown errors] Event ID: 41; Event Source: Microsoft-Windows-Kernel-Power; No results were found for your query. [Previous shutdown was unexpected] Event ID: 6008; Event Source: EventLog; No results were found for your query. [Reboot from bugcheck] Event ID: 1001; Event Source: Microsoft-Windows-WER-SystemErrorReporting; No results were found for your query. FWIW, here are the Errors for the last 7 days (there's no more message after this, so don't feel a obligation to scroll through them :). Activation context generation failed for "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or policy file "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax. Activation context generation failed for "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or policy file "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax. Activation context generation failed for "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or policy file "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax. Activation context generation failed for "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or policy file "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax. The IP address lease 192.168.2.10 for the Network Card with network address 0x00215C85A79D has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). Session "Microsoft Security Essentials OOBE" stopped due to the following error: 0xC000000D Audit events have been dropped by the transport. 0 Session "Microsoft Security Essentials OOBE" stopped due to the following error: 0xC000000D CRITICAL: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. The previous system shutdown at 3:25:01 AM on ?5/?22/?2010 was unexpected. [note that there's no event for 3:25AM =aw] Activation context generation failed for "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or policy file "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax. Audit events have been dropped by the transport. 0 Session "Microsoft Security Essentials OOBE" stopped due to the following error: 0xC000000D CRITICAL: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. The computer has rebooted from a bugcheck. The bugcheck was: 0x000000c2 (0x00000007, 0x00001097, 0x08230008, 0x89a467b8). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 052110-13946-01. The previous system shutdown at 5:00:38 PM on ?5/?21/?2010 was unexpected. Audit events have been dropped by the transport. 0 Session "Microsoft Security Essentials OOBE" stopped due to the following error: 0xC000000D CRITICAL: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. The previous system shutdown at 8:38:06 AM on ?5/?21/?2010 was unexpected. Audit events have been dropped by the transport. 0 Session "Microsoft Security Essentials OOBE" stopped due to the following error: 0xC000000D The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. The computer has rebooted from a bugcheck. The bugcheck was: 0x00000019 (0x00000022, 0x8c9b2000, 0x00000000, 0x00000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 052110-13618-01. The previous system shutdown at 2:22:11 AM on ?5/?21/?2010 was unexpected. Activation context generation failed for "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or policy file "C:\Program Files\Lenovo\Access Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax. Thanks! -- Andrew mailto:[email protected] Tuesday, April 20, 2010, 11:34:41 AM, you wrote: > Thanks Dale, > Windows 7 actually, though it seems to be the same setting. I've > changed it, though when I google "ae147db8" I get no useful results > (yesterday just a furniture code, today my original post also). > I noticed that tab says to do a kernel dump to > "%SystemRoot%\MEMORY.DMP". I can't find that file, though I suspect it > wouldn't be a lot of use to me. > Looking at the Event Viewer, "Administrative Events" looks like a > place with useful information. There are 1545 events since Oct/09. The > two most recent are: > "Activation context generation failed for "C:\Program > Files\Lenovo\Access Connections\AcCryptHlpr.dll".Error in manifest or > policy file "C:\Program Files\Lenovo\Access > Connections\AcCryptHlpr.dll" on line 0. Invalid Xml syntax." > and > "Session "Microsoft Security Essentials OOBE" stopped due to the > following error: 0xC000000D" > There are others, but what do I do with this information now that I've > found it? > Thanks! _______________________________________________ Thinkpad mailing list [email protected] http://stderr.org/cgi-bin/mailman/listinfo/thinkpad
