[THIN] Re: UPH Clean on Windows 2003 / Citrix 3.0
- From: Jeremy Saunders <jeremy.saunders@xxxxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Tue, 14 Sep 2004 22:30:48 +0800
Not trustworthy with Windows 2003. We deploy it for all Customers. However,
we found on one site that the servers become unstable to a point of being
unresponsive and requiring a hard power off. Unfortunatley it tries to
close off the lsass.exe process, which is dangerous. I have reported this
to Microsoft and the developer of UPHClean, but they have not responded. It
works fine on all other sites, so must be related to a particular
application, which I've been unable to track down. So we set UPHClean to
report mode ONLY, and it provides the following information in the Event
log. Funny thing is that version 1.2 worked fine. It's only since the
public release of version 1.5 that this problem started to occur.
The following handles opened in user profile hive XXX\jo.bloggs
(S-1-5-21-1327221150-4287665778-928074941-2333) are preventing the profile
from unloading:
lsass.exe (920)
HKCU\Software\Policies\Microsoft\SystemCertificates (0x310)
0x77dfc200 ADVAPI32!CredFree+0xc40
0x77da1949 ADVAPI32!RegOpenKeyExW+0xd4
0x761bac8c CRYPT32!RegOpenHKCUKeyExU+0x5c
0x761cbcfc CRYPT32!CertCreateSelfSignCertificate+0xd8c
0x761d025a CRYPT32!CertEnumPhysicalStore+0x109a
0x761d03a8 CRYPT32!CertEnumPhysicalStore+0x11e8
0x761d2308 CRYPT32!CertEnumPhysicalStore+0x3148
0x761d27dd CRYPT32!CertEnumPhysicalStore+0x361d
0x761d2906 CRYPT32!CertEnumPhysicalStore+0x3746
0x761d29ce CRYPT32!CertEnumPhysicalStore+0x380e
0x761c0d4a CRYPT32!CertControlStore+0x4a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761bd372 CRYPT32!CertCloseStore+0x902
0x761c0d11 CRYPT32!CertControlStore+0x11
0x76225f48 CRYPT32!I_CryptCreateLruCache+0x6af8
0x7621e6bd CRYPT32!CertDuplicateCertificateChain+0x3cd
0x7621e71f CRYPT32!CertCreateCertificateChainEngine+0xf
0x7622795c CRYPT32!I_CryptCreateLruCache+0x850c
0x76227a72 CRYPT32!I_CryptCreateLruCache+0x8622
0x7676682f schannel!SslCrackCertificate+0x8d31
0x7675ebee schannel!SslCrackCertificate+0x10f0
0x76755c3a schannel!SpLsaModeInitialize+0x1654
0x76751bca schannel!<no symbol>
0x76751b34 schannel!<no symbol>
0x742d00d5 LSASRV!LsaIAuditAccountLogonEx+0x1305
0x742d01ec LSASRV!LsaIAuditAccountLogonEx+0x141c
0x742ce29f LSASRV!LsaIFilterSids+0xbcf
HKCU\Software\Microsoft\SystemCertificates\Root (0x9ec)
0x77dfc200 ADVAPI32!CredFree+0xc40
0x77da1949 ADVAPI32!RegOpenKeyExW+0xd4
0x761bac8c CRYPT32!RegOpenHKCUKeyExU+0x5c
0x761cbcfc CRYPT32!CertCreateSelfSignCertificate+0xd8c
0x761d2735 CRYPT32!CertEnumPhysicalStore+0x3575
0x761d2c5f CRYPT32!CertEnumPhysicalStore+0x3a9f
0x761c6bf3 CRYPT32!CertOpenStore+0x103
0x761cf44d CRYPT32!CertEnumPhysicalStore+0x28d
0x761cf128 CRYPT32!CertEnumSystemStore+0xd08
0x761cf65c CRYPT32!CertEnumPhysicalStore+0x49c
0x761c6bf3 CRYPT32!CertOpenStore+0x103
0x76225eff CRYPT32!I_CryptCreateLruCache+0x6aaf
0x7621e6bd CRYPT32!CertDuplicateCertificateChain+0x3cd
0x7621e71f CRYPT32!CertCreateCertificateChainEngine+0xf
0x7622795c CRYPT32!I_CryptCreateLruCache+0x850c
0x76227a72 CRYPT32!I_CryptCreateLruCache+0x8622
0x7676682f schannel!SslCrackCertificate+0x8d31
0x7675ebee schannel!SslCrackCertificate+0x10f0
0x76755c3a schannel!SpLsaModeInitialize+0x1654
0x76751bca schannel!<no symbol>
0x76751b34 schannel!<no symbol>
0x742d00d5 LSASRV!LsaIAuditAccountLogonEx+0x1305
0x742d01ec LSASRV!LsaIAuditAccountLogonEx+0x141c
0x742ce29f LSASRV!LsaIFilterSids+0xbcf
HKCU\Software\Policies\Microsoft\SystemCertificates (0xa44)
0x77dfc200 ADVAPI32!CredFree+0xc40
0x77da1949 ADVAPI32!RegOpenKeyExW+0xd4
0x761bac8c CRYPT32!RegOpenHKCUKeyExU+0x5c
0x761cbcfc CRYPT32!CertCreateSelfSignCertificate+0xd8c
0x761d025a CRYPT32!CertEnumPhysicalStore+0x109a
0x761d03a8 CRYPT32!CertEnumPhysicalStore+0x11e8
0x761d2308 CRYPT32!CertEnumPhysicalStore+0x3148
0x761d27dd CRYPT32!CertEnumPhysicalStore+0x361d
0x761d2906 CRYPT32!CertEnumPhysicalStore+0x3746
0x761d29ce CRYPT32!CertEnumPhysicalStore+0x380e
0x761c0d4a CRYPT32!CertControlStore+0x4a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x76221d7d CRYPT32!I_CryptCreateLruCache+0x292d
0x76226061 CRYPT32!I_CryptCreateLruCache+0x6c11
0x7621e6bd CRYPT32!CertDuplicateCertificateChain+0x3cd
0x7621e71f CRYPT32!CertCreateCertificateChainEngine+0xf
0x7622795c CRYPT32!I_CryptCreateLruCache+0x850c
0x76227a72 CRYPT32!I_CryptCreateLruCache+0x8622
0x7676682f schannel!SslCrackCertificate+0x8d31
0x7675ebee schannel!SslCrackCertificate+0x10f0
0x76755c3a schannel!SpLsaModeInitialize+0x1654
0x76751bca schannel!<no symbol>
0x76751b34 schannel!<no symbol>
0x742d00d5 LSASRV!LsaIAuditAccountLogonEx+0x1305
0x742d01ec LSASRV!LsaIAuditAccountLogonEx+0x141c
0x742ce29f LSASRV!LsaIFilterSids+0xbcf
HKCU\Software\Policies\Microsoft\SystemCertificates (0xb98)
0x77dfc200 ADVAPI32!CredFree+0xc40
0x77da1949 ADVAPI32!RegOpenKeyExW+0xd4
0x761bac8c CRYPT32!RegOpenHKCUKeyExU+0x5c
0x761cbcfc CRYPT32!CertCreateSelfSignCertificate+0xd8c
0x761d025a CRYPT32!CertEnumPhysicalStore+0x109a
0x761d03a8 CRYPT32!CertEnumPhysicalStore+0x11e8
0x761d2308 CRYPT32!CertEnumPhysicalStore+0x3148
0x761d27dd CRYPT32!CertEnumPhysicalStore+0x361d
0x761d2906 CRYPT32!CertEnumPhysicalStore+0x3746
0x761d29ce CRYPT32!CertEnumPhysicalStore+0x380e
0x761c0d4a CRYPT32!CertControlStore+0x4a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x761c0c7d CRYPT32!CertEnumSubjectInSortedCTL+0x2cd
0x761c0d2a CRYPT32!CertControlStore+0x2a
0x76221d7d CRYPT32!I_CryptCreateLruCache+0x292d
0x76226061 CRYPT32!I_CryptCreateLruCache+0x6c11
0x7621e6bd CRYPT32!CertDuplicateCertificateChain+0x3cd
0x7621e71f CRYPT32!CertCreateCertificateChainEngine+0xf
0x7622795c CRYPT32!I_CryptCreateLruCache+0x850c
0x76227a72 CRYPT32!I_CryptCreateLruCache+0x8622
0x7676682f schannel!SslCrackCertificate+0x8d31
0x7675ebee schannel!SslCrackCertificate+0x10f0
0x76755c3a schannel!SpLsaModeInitialize+0x1654
0x76751bca schannel!<no symbol>
0x76751b34 schannel!<no symbol>
0x742d00d5 LSASRV!LsaIAuditAccountLogonEx+0x1305
0x742d01ec LSASRV!LsaIAuditAccountLogonEx+0x141c
0x742ce29f LSASRV!LsaIFilterSids+0xbcf
Proceed with caution.
Kind regards,
Jeremy
Jeremy Saunders
Senior Systems Engineer
”ITS - passionate about winning”
IBM Logicalis (Integrated
Technology Services)
Level 2, 1060 Hay Street
West Perth, WA 6005, AUSTRALIA
Visit us at
http://www.ibm.com/services/au/its
Phone: 132 426 Fax: ; 08 9261 8536
Mobile: TBA E-mail:
jeremy.saunders@xxxxxxxxxxx
"Jeff Pitsch"
<jpitsch@xxxxxxx>
Sent by: To
thin-bounce@freel <thin@xxxxxxxxxxxxx>
ists.org cc
Subject
14/09/2004 07:40 [THIN] Re: UPH Clean on Windows
AM 2003 / Citrix 3.0
Please respond to
thin
Using it in 2 production environments and no problems so far.
Jeff Pitsch
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Landin, Mark
Sent: Monday, September 13, 2004 5:41 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: UPH Clean on Windows 2003 / Citrix 3.0
I'm using it in a test environemnt right now. No issues yet.
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Rusty Yates
> Sent: Monday, September 13, 2004 4:35 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] UPH Clean on Windows 2003 / Citrix 3.0
>
> Is anyone using UPHClean in a Windows 2003 / Citrix 3.0
> environment? If so, have you have any issues? I read awhile
> back that there were issues with UPHClean and Windows 2003.
> Has Microsoft resolved these issues?
>
> ********************************************************
> This Weeks Sponsor triCerat:
> Have you had your fill of printing support calls,
> unauthorized apps running on unsecured Terminal Servers,
> profile headaches, and application performance problems? Join
> us and learn how you can have a less demanding on-demand enterprise!
> http://www.tricerat.com/?page=ents#register
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or
> Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps
running on unsecured Terminal Servers, profile headaches, and
application performance problems? Join us and learn how you can have a
less demanding on-demand enterprise!
http://www.tricerat.com/?page=events#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor triCerat:
Have you had your fill of printing support calls, unauthorized apps running
on unsecured Terminal Servers, profile headaches, and application
performance problems? Join us and learn how you can have a less demanding
on-demand enterprise!
http://www.tricerat.com/?page=events#register
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
