<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle29
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle30
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:black;}
span.EmailStyle31
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle32
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:black;}
span.EmailStyle34
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='word-wrap: break-word;
-webkit-nbsp-mode: space;-webkit-line-break: after-white-space'>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Bill,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The SVCHost is a host process, it hosts threads of services for
execution. This process can have MANY services associated to itself and a lot of
them are not Microsoft generated. Think of it as a container for other stuff to
run.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What you need to do is to download Process Explorer and identify
the PID (Process ID) for that SVCHost. Go to the properties of that PID and
then select the tab Services. It’s one of those services that is making
the call. I would then proceed to do normal trial/error troubleshooting. Shut
one down and then check the IIS logs to see if it stopped.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>With a call to /ENTuse on the server Bill, I’m pretty sure
this is not a Microsoft service.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";
color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:
"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:
16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span
style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>information technology coordinator | <a
href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset
presbyterian church</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a>
| <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>My Blog</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>"We listen to worship music, while the rest of the world
listens to hip hop and pop. We talk about history, while the rest of the world
talks about reality. We use bulletins, while the rest of the world is on
Facebook."</span><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> -<b>Tony Morgan</b></span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org
[mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>Phillips, Paul<br>
<b>Sent:</b> Friday, July 10, 2009 7:13 AM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>That’s just the friendly name of the executable
“SVCHost”. Go to the “Services” tab for that
process and you can see what DLL’s are being loaded as applications
within the process.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=131 height=63 id="_x0000_i1032"
src="cid:image001.jpg@01CA013C.FCFE24E0" alt=Sig><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>Paul Phillips<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>IT Manager<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=225 height=27 id="_x0000_i1031"
src="cid:image002.jpg@01CA013C.FCFE24E0" alt=WtbLogo><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>(770) 458-9300 x305<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><a href="mailto:pphillips@walkthru.org">pphillips@walkthru.org</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Friday, July 10, 2009 9:44 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoPlainText><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I did, based on Jason’s suggestion, and found that it is </span>"Host
process for Windows Services".<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>What do I do with that? Too generic….<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1025"
src="cid:image003.jpg@01CA013C.FCFE24E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Phillips, Paul<br>
<b>Sent:</b> Friday, July 10, 2009 9:40 AM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>Download Process Explorer from Sysinternals<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><a
href="http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx">http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx</a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>You can look at the individual svchost processes and see what each
process is running internally.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=131 height=63 id="Picture_x0020_1"
src="cid:image001.jpg@01CA013C.FCFE24E0" alt=Sig><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>Paul Phillips<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>IT Manager<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=225 height=27 id="Picture_x0020_2"
src="cid:image002.jpg@01CA013C.FCFE24E0" alt=WtbLogo><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>(770) 458-9300 x305<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><a href="mailto:pphillips@walkthru.org">pphillips@walkthru.org</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org
[mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Friday, July 10, 2009 8:59 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>You are going to love this…<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The process that is causing this problem is
“svchost.exe”. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Just love when Microsoft upgrades OSs…<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Any thoughts on how to proceed?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1028"
src="cid:image003.jpg@01CA013C.FCFE24E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Michael Sainz<br>
<b>Sent:</b> Thursday, July 09, 2009 2:31 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What is ENTuse? Something on that computer is making a web call to
that subsite. What you can do is look at the connections on that PC, and find
the process that is making a connection to that server via port 80. Think its
netstat –o. After you have the PID, cross reference it with taskman or
process explorer and you’ll have the process that is making the call.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";
color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:
"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:
16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span
style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>information technology coordinator | <a
href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset
presbyterian church</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a>
| <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>My Blog</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>"We listen to worship music, while the rest of the world
listens to hip hop and pop. We talk about history, while the rest of the world
talks about reality. We use bulletins, while the rest of the world is on
Facebook."</span><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> -<b>Tony Morgan</b></span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Thursday, July 09, 2009 11:23 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I know what machine it is coming from and the user isn’t
doing anything specific that should cause this. I think it is happening
because Vista is automatically making the calls. But what on that machine
is making the calls I can’t quite figure out.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1029"
src="cid:image003.jpg@01CA013C.FCFE24E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Michael Sainz<br>
<b>Sent:</b> Thursday, July 09, 2009 1:47 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Sorry, didn’t see the updated thread here.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>So this basically is telling us that a process/thread on the
Vista machine is making a call to <server>/ENTuse. Find out who is making
that call and you’ll find the culprit.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";
color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:
"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:
16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span
style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>information technology coordinator | <a
href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset
presbyterian church</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a>
| <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>My Blog</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>"We listen to worship music, while the rest of the world
listens to hip hop and pop. We talk about history, while the rest of the world
talks about reality. We use bulletins, while the rest of the world is on
Facebook."</span><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> -<b>Tony Morgan</b></span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Thursday, July 09, 2009 10:09 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I tried disabling the logging but to no avail. Further
research revealed a problem with WebDAV and Vista that produces this kind of
result. Here is an interesting link:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><a
href="http://www.mediasmartserver.net/forums/viewtopic.php?f=5&t=3900&start=0">http://www.mediasmartserver.net/forums/viewtopic.php?f=5&t=3900&start=0</a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>As for adding it as a safe site, the log doesn’t appear to
be logging this access as an error, just logging the access. Here is a
line or two from the file:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2009-07-09 16:09:47 W3SVC1 10.0.3.27 PROPFIND /ENTuse - 80 -
10.0.2.52 Microsoft-WebDAV-MiniRedir/6.0.6001 501 0 0<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2009-07-09 16:09:47 W3SVC1 10.0.3.27 PROPFIND /ENTuse - 80 -
10.0.2.52 Microsoft-WebDAV-MiniRedir/6.0.6001 501 0 0<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2009-07-09 16:09:47 W3SVC1 10.0.3.27 PROPFIND /ENTuse - 80 -
10.0.2.52 Microsoft-WebDAV-MiniRedir/6.0.6001 501 0 0<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Do you know anyone who develops applications with WebDAV?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thanks,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1030"
src="cid:image003.jpg@01CA013C.FCFE24E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Jason Hand<br>
<b>Sent:</b> Thursday, July 09, 2009 12:57 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal>It sounds like the DocuTeam app is using port 80 to the IIS
backend. Can you not disable the logging on the IIS side?<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>You could try making sure to add the share location as safe
site, ie..."\\server\share" in the security zone area and since this is
also represented in the intranet zone you could turn off "Protected
Mode" on the Intranet Zone and see if that changes the behavior.<o:p></o:p></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif";
color:black'>Your brother in Christ,<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif";
color:black'>Jason<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif";
color:black'><o:p> </o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<div>
<p class=MsoNormal>On Jul 9, 2009, at 12:45 PM, <<a
href="mailto:blloyd@buskercom.com">blloyd@buskercom.com</a>> wrote:<o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>For all you Vista buffs out there, I have a problem that defies
being solved. We recently installed an application on our file/print
server that interacts with our new Sharp MX-3110n copier/printer. (It is
custom developed by DocuTeam.) The application uses IIS to provide for
special file sharing and advanced scanning capabilities. <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>This morning I discovered that our file server’s system
drive was filling up and almost completely out of space. It turns out
that IIS has been creating log files each day that are 500 to 700 mb in
size. When you look at the files you see that IIS is logging the
connection from the Vista machine. It is logging a record at least every
minute or more. <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>Now my theory is that the Vista machine is taking advantage of a
new service on the network. When I look at the network traffic the Vista
machine is accessing file shares the normal way but it is also establishing a
port 80 connection, thereby causing IIS to create the log files. Since
this is only happening with the Vista machine I would like to find a way to
keep Vista from “taking advantage” of this new network
service. Anyone run into this kind of problem before?<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>Thanks,<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:13.5pt'><span style='font-size:13.5pt;
font-family:"Helvetica","sans-serif";color:black'><o:p> </o:p></span></p>
<p style='margin-bottom:13.5pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span class=apple-converted-space><span style='font-size:13.5pt;
font-family:"Helvetica","sans-serif";color:navy'> </span></span><span
style='font-size:11.0pt;color:navy'><br>
IT Manager</span><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif";
color:black'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif";
color:black'><bcilogo25.jpg><o:p></o:p></span></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><span style='font-size:13.5pt;
font-family:"Helvetica","sans-serif";color:black'><o:p></o:p></span></p>
<p><em><span style='font-size:11.0pt;color:navy'><a
href="mailto:blloyd@buskercom.com">blloyd@buskercom.com</a></span></em><span
style='font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black'><o:p></o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:black'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif";
color:black'>_______________________________________________<br>
it discuss mailing list:<span class=apple-converted-space> </span><a
href="mailto:discuss@itdiscuss.org">discuss@itdiscuss.org</a><br>
Mailing List:<span class=apple-converted-space> </span><a
href="http://itdiscuss.org/discuss">http://itdiscuss.org/discuss</a><br>
Web Discussion Board:<span class=apple-converted-space> </span><a
href="http://itdiscuss.org/discuss-forum">http://itdiscuss.org/discuss-forum</a><br>
Wiki:<span class=apple-converted-space> </span><a
href="http://itdiscuss.org/wiki">http://itdiscuss.org/wiki</a><br>
Internet Relay Chat: irc://irc.freenode.net/citrt<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>