<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Trebuchet MS";
panose-1:2 11 6 3 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle24
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle25
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle26
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle27
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle28
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle29
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle30
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:black;}
span.EmailStyle31
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle32
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:black;}
span.EmailStyle33
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle34
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle36
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='word-wrap: break-word;
-webkit-nbsp-mode: space;-webkit-line-break: after-white-space'>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Bill,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>You identify which SVCHost it is by the PID. Use Netstat to
identify the PID opening a connection and then cross reference the PID in
Process Explorer. It’s that process that is making the call. You can then use
the Services tab in PE and also the Threads tab in PE to narrow down what
service it is.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";
color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:
"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:
16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span
style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>information technology coordinator | <a
href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset
presbyterian church</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a>
| <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>My Blog</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>"We listen to worship music, while the rest of the world
listens to hip hop and pop. We talk about history, while the rest of the world talks
about reality. We use bulletins, while the rest of the world is on
Facebook."</span><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> -<b>Tony Morgan</b></span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org
[mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Friday, July 10, 2009 11:17 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>When I point to that particular version of SVCHost, it shows me
several services, all of which look to be standard windows services. I tried
stopping a few of them to see if that stopped the problem, but to no
avail. Other thoughts on tracking this down? Is there another way
to use Process Explorer?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1033"
src="cid:image003.jpg@01CA0154.6C0618E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Michael Sainz<br>
<b>Sent:</b> Friday, July 10, 2009 12:02 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Bill,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The SVCHost is a host process, it hosts threads of services for
execution. This process can have MANY services associated to itself and a lot
of them are not Microsoft generated. Think of it as a container for other stuff
to run.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What you need to do is to download Process Explorer and identify
the PID (Process ID) for that SVCHost. Go to the properties of that PID and
then select the tab Services. It’s one of those services that is making the
call. I would then proceed to do normal trial/error troubleshooting. Shut one
down and then check the IIS logs to see if it stopped.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>With a call to /ENTuse on the server Bill, I’m pretty sure this
is not a Microsoft service.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";
color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:
"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:
16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span
style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>information technology coordinator | <a
href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset
presbyterian church</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a>
| <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>My Blog</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>"We listen to worship music, while the rest of the world
listens to hip hop and pop. We talk about history, while the rest of the world
talks about reality. We use bulletins, while the rest of the world is on
Facebook."</span><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> -<b>Tony Morgan</b></span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org
[mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>Phillips, Paul<br>
<b>Sent:</b> Friday, July 10, 2009 7:13 AM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>That’s just the friendly name of the executable “SVCHost”.
Go to the “Services” tab for that process and you can see what DLL’s are being
loaded as applications within the process.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=131 height=63 id="_x0000_i1032"
src="cid:image004.jpg@01CA0154.6C0618E0" alt=Sig><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>Paul Phillips<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>IT Manager<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=225 height=27 id="_x0000_i1031"
src="cid:image005.jpg@01CA0154.6C0618E0" alt=WtbLogo><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>(770) 458-9300 x305<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><a href="mailto:pphillips@walkthru.org">pphillips@walkthru.org</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org
[mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Friday, July 10, 2009 9:44 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoPlainText><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I did, based on Jason’s suggestion, and found that it is </span>"Host
process for Windows Services".<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>What do I do with that? Too generic….<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1025"
src="cid:image003.jpg@01CA0154.6C0618E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org
[mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>Phillips, Paul<br>
<b>Sent:</b> Friday, July 10, 2009 9:40 AM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>Download Process Explorer from Sysinternals<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><a
href="http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx">http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx</a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>You can look at the individual svchost processes and see what each
process is running internally.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=131 height=63 id="Picture_x0020_1"
src="cid:image004.jpg@01CA0154.6C0618E0" alt=Sig><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>Paul Phillips<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>IT Manager<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><img border=0 width=225 height=27 id="Picture_x0020_2"
src="cid:image005.jpg@01CA0154.6C0618E0" alt=WtbLogo><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'>(770) 458-9300 x305<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:black'><a href="mailto:pphillips@walkthru.org">pphillips@walkthru.org</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Friday, July 10, 2009 8:59 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>You are going to love this…<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The process that is causing this problem is “svchost.exe”.
<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Just love when Microsoft upgrades OSs…<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Any thoughts on how to proceed?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1028"
src="cid:image003.jpg@01CA0154.6C0618E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain
confidential and proprietary information. If you are not the intended
recipient, you are requested to delete this entire communication immediately.
Emails cannot be guaranteed to be secure or free of errors or viruses. The
sender does not accept any liability or responsibility for any problems that
may result from emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Michael Sainz<br>
<b>Sent:</b> Thursday, July 09, 2009 2:31 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What is ENTuse? Something on that computer is making a web call
to that subsite. What you can do is look at the connections on that PC, and
find the process that is making a connection to that server via port 80. Think
its netstat –o. After you have the PID, cross reference it with taskman or
process explorer and you’ll have the process that is making the call.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";
color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:
"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:
16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span
style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>information technology coordinator | <a
href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset
presbyterian church</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a>
| <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>My Blog</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>"We listen to worship music, while the rest of the world
listens to hip hop and pop. We talk about history, while the rest of the world
talks about reality. We use bulletins, while the rest of the world is on
Facebook."</span><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> -<b>Tony Morgan</b></span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Thursday, July 09, 2009 11:23 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I know what machine it is coming from and the user isn’t doing
anything specific that should cause this. I think it is happening because
Vista is automatically making the calls. But what on that machine is
making the calls I can’t quite figure out.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1029"
src="cid:image003.jpg@01CA0154.6C0618E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain confidential
and proprietary information. If you are not the intended recipient, you are
requested to delete this entire communication immediately. Emails cannot be
guaranteed to be secure or free of errors or viruses. The sender does not
accept any liability or responsibility for any problems that may result from
emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Michael Sainz<br>
<b>Sent:</b> Thursday, July 09, 2009 1:47 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Sorry, didn’t see the updated thread here.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>So this basically is telling us that a process/thread on the
Vista machine is making a call to <server>/ENTuse. Find out who is making
that call and you’ll find the culprit.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><b><span style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";
color:#31849B'>michael</span></b><b><span style='font-size:16.0pt;font-family:
"Trebuchet MS","sans-serif";color:black'>|</span></b><b><span style='font-size:
16.0pt;font-family:"Trebuchet MS","sans-serif";color:#76923C'>sainz</span></b><b><span
style='font-size:16.0pt;font-family:"Trebuchet MS","sans-serif";color:#1F497D'><o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>information technology coordinator | <a
href="http://www.sunsetpres.org/"><span style='color:#1F497D'>sunset
presbyterian church</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'><a href="mailto:michaelsainz@sunsetpres.org">michaelsainz@sunsetpres.org</a>
| <a href="http://twitter.com/michaelsainz"><span style='color:#1F497D'>twitter.com/michaelsainz</span></a>
| <a href="http://www.iamdigerati.com/"><span style='color:#1F497D'>My Blog</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:8.0pt;font-family:"Trebuchet MS","sans-serif";
color:#1F497D'>"We listen to worship music, while the rest of the world
listens to hip hop and pop. We talk about history, while the rest of the world
talks about reality. We use bulletins, while the rest of the world is on
Facebook."</span><span style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> -<b>Tony Morgan</b></span><span style='font-size:11.0pt;
font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>blloyd@buskercom.com<br>
<b>Sent:</b> Thursday, July 09, 2009 10:09 AM<br>
<b>To:</b> discuss@itdiscuss.org<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I tried disabling the logging but to no avail. Further
research revealed a problem with WebDAV and Vista that produces this kind of
result. Here is an interesting link:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><a
href="http://www.mediasmartserver.net/forums/viewtopic.php?f=5&t=3900&start=0">http://www.mediasmartserver.net/forums/viewtopic.php?f=5&t=3900&start=0</a><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>As for adding it as a safe site, the log doesn’t appear to be
logging this access as an error, just logging the access. Here is a line
or two from the file:<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2009-07-09 16:09:47 W3SVC1 10.0.3.27 PROPFIND /ENTuse - 80 -
10.0.2.52 Microsoft-WebDAV-MiniRedir/6.0.6001 501 0 0<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2009-07-09 16:09:47 W3SVC1 10.0.3.27 PROPFIND /ENTuse - 80 -
10.0.2.52 Microsoft-WebDAV-MiniRedir/6.0.6001 501 0 0<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>2009-07-09 16:09:47 W3SVC1 10.0.3.27 PROPFIND /ENTuse - 80 -
10.0.2.52 Microsoft-WebDAV-MiniRedir/6.0.6001 501 0 0<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Do you know anyone who develops applications with WebDAV?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thanks,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<p style='margin-bottom:12.0pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span style='color:navy'> </span><span style='font-size:11.0pt;
color:navy'><br>
IT Manager</span><o:p></o:p></p>
<p class=MsoNormal><img border=0 width=149 height=46 id="_x0000_i1030"
src="cid:image003.jpg@01CA0154.6C0618E0"><o:p></o:p></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><o:p></o:p></p>
<p><em><span style='font-size:11.0pt;color:navy'>blloyd@buskercom.com</span></em><o:p></o:p></p>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain confidential
and proprietary information. If you are not the intended recipient, you are
requested to delete this entire communication immediately. Emails cannot be
guaranteed to be secure or free of errors or viruses. The sender does not
accept any liability or responsibility for any problems that may result from
emails you receive.</span><o:p></o:p></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On
Behalf Of </b>Jason Hand<br>
<b>Sent:</b> Thursday, July 09, 2009 12:57 PM<br>
<b>To:</b> IT Discussion Forum<br>
<b>Subject:</b> Re: [itdiscuss] Vista Problem<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal>It sounds like the DocuTeam app is using port 80 to the IIS
backend. Can you not disable the logging on the IIS side?<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>You could try making sure to add the share location as safe
site, ie..."\\server\share" in the security zone area and since this
is also represented in the intranet zone you could turn off "Protected
Mode" on the Intranet Zone and see if that changes the behavior.<o:p></o:p></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif";
color:black'>Your brother in Christ,<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif";
color:black'>Jason<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif";
color:black'><o:p> </o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<div>
<p class=MsoNormal>On Jul 9, 2009, at 12:45 PM, <<a
href="mailto:blloyd@buskercom.com">blloyd@buskercom.com</a>> wrote:<o:p></o:p></p>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>For all you Vista buffs out there, I have a problem that defies
being solved. We recently installed an application on our file/print
server that interacts with our new Sharp MX-3110n copier/printer. (It is
custom developed by DocuTeam.) The application uses IIS to provide for
special file sharing and advanced scanning capabilities. <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>This morning I discovered that our file server’s system drive was
filling up and almost completely out of space. It turns out that IIS has
been creating log files each day that are 500 to 700 mb in size. When you
look at the files you see that IIS is logging the connection from the Vista
machine. It is logging a record at least every minute or more. <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>Now my theory is that the Vista machine is taking advantage of a
new service on the network. When I look at the network traffic the Vista
machine is accessing file shares the normal way but it is also establishing a
port 80 connection, thereby causing IIS to create the log files. Since
this is only happening with the Vista machine I would like to find a way to
keep Vista from “taking advantage” of this new network service. Anyone
run into this kind of problem before?<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'>Thanks,<o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'> <o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='margin-bottom:13.5pt'><span style='font-size:13.5pt;
font-family:"Helvetica","sans-serif";color:black'><o:p> </o:p></span></p>
<p style='margin-bottom:13.5pt'><b><span style='font-size:14.0pt;color:navy'>Bill
Lloyd</span></b><span class=apple-converted-space><span style='font-size:13.5pt;
font-family:"Helvetica","sans-serif";color:navy'> </span></span><span
style='font-size:11.0pt;color:navy'><br>
IT Manager</span><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif";
color:black'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif";
color:black'><bcilogo25.jpg><o:p></o:p></span></p>
<p><span style='font-size:11.0pt;color:black'>2567 Athens Hwy.<br>
Gainesville, GA 30507<br>
Phone: 770-417-1604 Ext.: 250<br>
Fax: 770-417-1747<br>
Cell: 404-379-6963</span><span style='font-size:13.5pt;
font-family:"Helvetica","sans-serif";color:black'><o:p></o:p></span></p>
<p><em><span style='font-size:11.0pt;color:navy'><a
href="mailto:blloyd@buskercom.com">blloyd@buskercom.com</a></span></em><span
style='font-size:13.5pt;font-family:"Helvetica","sans-serif";color:black'><o:p></o:p></span></p>
<div>
<p class=MsoNormal><span style='font-size:7.0pt;font-family:"Arial","sans-serif";
color:navy'>This email and any accompanying attachments may contain confidential
and proprietary information. If you are not the intended recipient, you are
requested to delete this entire communication immediately. Emails cannot be
guaranteed to be secure or free of errors or viruses. The sender does not
accept any liability or responsibility for any problems that may result from
emails you receive.</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:black'><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif";
color:black'>_______________________________________________<br>
it discuss mailing list:<span class=apple-converted-space> </span><a
href="mailto:discuss@itdiscuss.org">discuss@itdiscuss.org</a><br>
Mailing List:<span class=apple-converted-space> </span><a
href="http://itdiscuss.org/discuss">http://itdiscuss.org/discuss</a><br>
Web Discussion Board:<span class=apple-converted-space> </span><a
href="http://itdiscuss.org/discuss-forum">http://itdiscuss.org/discuss-forum</a><br>
Wiki:<span class=apple-converted-space> </span><a
href="http://itdiscuss.org/wiki">http://itdiscuss.org/wiki</a><br>
Internet Relay Chat: irc://irc.freenode.net/citrt<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>