[THIN] Re: Orphaned processes

Hi Eric,

When IE installs an activex component, it registers it in
%systemroot%\Downloaded Program Files. If you go there and right click on
the Shockwave Flash object, and select properties, you'll get the ClassID of
the flash activex component, eg. {D27CDB6E-AE6D-11CF-96B8-444553540000}.
These file links may be hidden or superhidden, but they do exist.

Now go to HKLM\Software\Microsoft\Internet Explorer\ActiveX Compatibility.
Here you will see a bunch od keys corresponding to every activeX component
that IE knows about. Of course we're only interested in the activex flash
plugin, {D27CDB6E-AE6D-11CF-96B8-444553540000}, so go to that key. If it
isn't there, you will have to make it.

Under the {D27CDB6E-AE6D-11CF-96B8-444553540000} key, create a reg_dword
value, Compatibility Flags.

The compatibility flags value determines how IE will manage that activeX
component. Microsoft Knowledgebase Technote 240797 describes what to do.

Basically, if you change the compatibility flags value to 00000400, that
activex component will be disabled. So Flash won't run. If you want to turn
it back on, change the compatibility flags value to 00040000

You can use the same approach for any activex component. Check Microsoft
Technote 161873 if you're interested in how this is done.

Regards,

Rick


Ulrich Mack
rmack@xxxxxxxxxxxxxx 
Volante Systems
18 Heussler Terrace, Milton 4064 
Queensland Australia. 
tel +61 7 3246 7704 



-----Original Message-----
From: Foote, Eric [mailto:EFoote@xxxxxxx] 
Sent: Thursday, 6 November 2003 7:12 AM
To: Mack, Rick
Subject: RE: [THIN] Re: Orphaned processes


That would be alright to disable flash.

It is logging the IEXPLORE to the stats reg key but IEXPLORE is still
consuming a full processor.

Thanks,

ERic

-----Original Message-----
From: Mack, Rick [mailto:RMack@xxxxxxxxxxxxxx] 
Sent: Wednesday, November 05, 2003 3:52 PM
To: Foote, Eric
Subject: RE: [THIN] Re: Orphaned processes

Hi Eric,

Threadmaster logs the applications it's had to restrict (in the registry
under \services\threadmaster\parameters (sorry, forgot key name, not near
server). Check to see that it's logging IE. It's worked reliably for me so
far.

But back to your problem. One of the only things that will make IE behave
like that is is the Flash 5 plug-in. If it's going to be causing you grief
we could disable the flash activex component. That will obviously restrict
some browsing, but ay least your servers will perform.

If you're happy about doing that I'll send you the instructions on how to
control activex.

Regards,

Rick

Ulrich Mack
rmack@xxxxxxxxxxxxxx 
Volante Systems
18 Heussler Terrace, Milton 4064 
Queensland Australia. 
tel +61 7 3246 7704 



-----Original Message-----
From: Foote, Eric [mailto:EFoote@xxxxxxx] 
Sent: Thursday, 6 November 2003 2:00 AM
To: rmack@xxxxxxxxxxxxxx
Subject: FW: [THIN] Re: Orphaned processes


Rick,
I tried it on one of the boxes and the stats on iexplore.exe are going up
but it is still running?

Should it actually kill the process?  it is still at 50% (on a dual box).

Thanks for the input - it looks promising - just vague documentation.

Eric

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
Behalf Of Mack, Rick
Sent: Wednesday, November 05, 2003 5:14 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Orphaned processes


Hi Eric,

When I've seen this sort of thing, it was generally due to the fact that the
app got into a closed i/o loop, and hung. The user, not knowing any better
just killed the session (disconnected) leaving the rogue application behind.
Once the session has disconnected, you've got no chance of killing the app.
The only option is a reboot. Typical rogue apps are excel, powerpoint,
outlook, IE at times and so on.

That's the bad news.

The good news is that since we started using Threadmaster (freeware) we
don't see this type of rogue application anymore, so the problem is
essentially fixed. While products like Appsense' performance manager (and
armtech, tmulimit etc) are superior for much more granular cpu control on a
application or even user basis, if you can't afford these products at the
moment, Threadmaster will help a lot. 

Regards,

Rick

Ulrich Mack
rmack@xxxxxxxxxxxxxx 
Volante Systems
18 Heussler Terrace, Milton 4064 
Queensland Australia. 
tel +61 7 3246 7704 



-----Original Message-----
From: Foote, Eric [mailto:EFoote@xxxxxxx] 
Sent: Wednesday, 5 November 2003 7:21 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Orphaned processes


Neither of these work and the user session has logged off it just left these
processes behind.  

It is the wierdest thing I have seen in a while.

Eric

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
Behalf Of Paul DeHaan
Sent: Tuesday, November 04, 2003 10:53 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Orphaned processes


get procexp.exe or pskill.exe from sysinternals.com.  You can kill the
process using either tool.  Before doing this, are you sure the persons
session isn't still out there as disconnected?  If you logging off their
session should fix the problem.

Regards,


Paul DeHaan CCNA, CCA...
Network Administrator
J.M. Huber Corp.

------------>
"The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential, proprietary, and/or
privileged material.  Any review, retransmission, dissemination or other use
of, or taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited.  If you received
this in error, please contact the sender and delete the material from all
computers."

>>> EFoote@xxxxxxx 11/04/03 10:29AM >>>
Anyone having issues with orphaned proccesses?

We have Win2K SP4, MF XPe FR3 and we are seeing processes left behind after
users logoff, like an iexplore.exe running under a users context taking up
50% of the boxes CPU (dual proc system).  We cannot kill (kill -f, process
explorer, at /interactive)  all fail with access denied - our only solution
is to reboot the box.

Any suggestions would be apprecitiated.

Thanks,

Eric
********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment
http://www.pearlsw.com 
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm 
New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com 

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

********************************************************
This Weeks Sponsor Pearl Software
Internet Monitoring, Filtering, and Control Solutions
Enabling User & Group Level Oversight & Access Policies
Fully Functional in a Thick or Thin Client Environment
http://www.pearlsw.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers. http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
------------------------------------------------------------------------
----
----------------------------------------
The information contained in this e-mail is confidential and may be subject
to legal professional privilege.  It is intended solely for the addressee.
If you receive this e-mail by mistake please promptly inform us by reply
e-mail and then delete the e-mail and destroy any printed copy.  You must
not disclose  or use in any way the information in the e-mail. There is no
warranty that this email or any attachment or message is error or virus
free. It may be a private communication, and if so, does not represent the
views of Volante group Limited.

This message has been checked by SurfControl
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers. http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
------------------------------------------------------------------------
--------------------------------------------
The information contained in this e-mail is confidential and may be subject
to legal professional privilege.  It is intended solely for the addressee.
If you receive this e-mail by mistake please promptly inform us by reply
e-mail and then delete the e-mail and destroy any printed copy.  You must
not disclose  or use in any way the information in the e-mail. There is no
warranty that this email or any attachment or message is error or virus
free. It may be a private communication, and if so, does not represent the
views of Volante group Limited.

This message has been checked by SurfControl
--------------------------------------------------------------------------------------------------------------------
The information contained in this e-mail is confidential and may be subject
to legal professional privilege.  It is intended solely for the addressee.
If you receive this e-mail by mistake please promptly inform us by reply
e-mail and then delete the e-mail and destroy any printed copy.  You must
not disclose  or use in any way the information in the e-mail. There is no
warranty that this email or any attachment or message is error or virus free. 
It may be a private
communication, and if so, does not represent the views of Volante group Limited.

This message has been checked by SurfControl
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest
constraint to scaling up?! Get this free white paper to understand the
real constraints & how to overcome them. SAVE MONEY by scaling-up rather
than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: