Event ID 7000 WINS failed to start The system cannot find the file
Kooch
The Windows Internet Name Service (WINS) service failed to start due to the
following error:
The system cannot find the file specified.
any help on finding the file or entering the correct path
Thanks
Kooch
Crina Li
Thank you for posting in SBS newsgroup.
Based on the information, this behavior can occur for any of the following
reasons:
- The password is changed on the account the service is configured to use
to log on.
- The password data in the registry is damaged.
- The right to log on as a service is revoked for the specified user
account.
To resolve the issue, you can configure the service to use the built-in
system account, change the password for the specified user account to match
the current password for that user, or restore the user's right to log on
as a service.
For the detailed information, please refer to the following article:
259733 How to Troubleshoot Service Startup Permissions
http://support.microsoft.com/?id=259733
If the issue still occurs, would you please help me collect the following
information for troubleshooting?
1. Can you start the Windows Internet Name Service (WINS) service manually?
If not, what's the error message?
2. Double click WINS services and then check if you have selected Local
System account on Log On tab.
3. On Dependencies tab, check if there are any Dependencies been configured.
4. When does the issue begin to occur?
5. Please post the detailed error message.
Thanks for your time and I look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Event ID 7000 WINS failed to start The system cannot find
the file
|| From: "=?Utf-8?B?S29vY2g=?=" <Ko...@discussions.microsoft.com>
| Subject: Event ID 7000 WINS failed to start The system cannot find the
file
| Date: Wed, 18 Jan 2006 16:42:03 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
Kooch
This problem is a result of a restore that I had to do. I am having several
errors that I am trying to deal with some I have fixed and some still working
on. To make things worse I am trying to fix this remotely and will not be
back for 3 weeks.
Answers to your question
I can NOT start WINS manully, all dependences are started , It is selected
to start on the local machine, error occurs on boot up
This particular error has the following text form event log.
"The Windows Internet Name Service (WINS) service failed to start due to the
following error:
The system cannot find the file specified."
I am getting another error in file replication service that might be related.
Source is NtFrs Event Id is 13559 with following text.
The File Replication Service has detected that the replica root path has
changed from "c:\windows\sysvol\domain" to "c:\windows\sysvol\domain". If
this is an intentional move then a file with the name
NTFRS_CMD_FILE_MOVE_ROOT needs to be created under the new root path.
This was detected for the following replica set:
"DOMAIN SYSTEM VOLUME (SYSVOL SHARE)"
Changing the replica root path is a two step process which is triggered by
the creation of the NTFRS_CMD_FILE_MOVE_ROOT file.
Hope this helps you out
Thanks
Kooch
Crina Li
Thanks for your update.
We can check service configuration file in the folder
%windowsroot%\system32\drivers\etc as following:
1. Open Notepad on the SBS server.
2. Open the file %windowsroot%\system32\drivers\etc\services.
3. Check whether the following items are listed. If not, please manually
add them:
nameserver 42/tcp name #Host Name Server
nameserver 42/udp name #Host Name Server
4. Save the change and reboot the server.
After that, please verify whether the issue has been resolved.
In case, the issue still persists after using steps above, I suggest
reinstall TCP/IP on the problematic server. For the detailed steps, you can
refer to the following Microsoft Knowledge Base article:
How to remove and reinstall TCP/IP on a Windows Server 2003 domain
controller
http://support.microsoft.com/default.aspx?scid=kb;en-us;325356
Regarding the NTFRS 13559 event, based on my research, this issue might be
related the movement of the Sysvol folder. Under one of the following
circumstance the issue will occur:
- Sysvol folder has been moved and then has been moved back to the original
location
- The Sysvol folder has been restored from a backup.
To resolve the issue, I would like to suggest the following:
1. Click Start, click Run, type explorer, and then click OK.
2. Locate the root folder of the CurrentLocation folder, where
CurrentLocation is the path that is specified in the Event Viewer
description.
3. Right-click a blank area in the root folder of the CurrentLocation
folder, point to New, and then click Text Document.
4. For the file name of the new text document, type the following, and then
press ENTER:
NTFRS_CMD_FILE_MOVE_ROOT
5. You may receive the following message:
If you change a filename extension, the file may become unusable. Are you
sure you want to change it?
If you do receive this message, click Yes to save the file without a file
name extension.
After that, please verify whether the issue has been resolved. For more
information, you can refer to the following Microsoft Knowledge Base
article:
Event ID 13559 may be logged in Event Viewer in Windows 2000
http://support.microsoft.com/?id=887440
Hope it helps and I look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Get Secure! - www.microsoft.com/security
=====================================================
| | From: "=?Utf-8?B?S29vY2g=?=" <Ko...@discussions.microsoft.com>
| Subject: RE: Event ID 7000 WINS failed to start The system cannot find the
| Date: Thu, 19 Jan 2006 22:06:02 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
Kooch
Thanks for the info your suggestion fixed the problem Regarding the NTFRS
13559 event.
The wins problem I checked the file that you suggested and it has what it
should, I then looked at the reinstall tcp/ip process, I am not having any of
the symptoms with ipconfig that it talked about and don't think that this is
the problem plus I am doing this all remotely and don't wnat to run the risk
of making things worse until I get there so am electing to not do this right
now.
I am getting another error that may or may not be related which is:
event id 40960 source LSASRV
1. The Security System detected an authentication error for the server
DNS/MBC1.MitchellBerean.local. The failure code from authentication protocol
Kerberos was "The attempted logon is invalid. This is either due to a bad
username or authentication information.
(0xc000006d)".
Followed by event id 40961 source LSASRV
2. The Security System could not establish a secured connection with the
server DNS/MBC1.MitchellBerean.local. No authentication protocol was
available.
Any suggestions
Crina Li
Thanks for your update.
For Windows Internet Name Service (WINS) service issue, please try to
reinstall Wins component to see if the problem still occurs:
1. Open Control Panel and then click Add or Remove Programs.
2. Click Add/Remove Windows Components.
3. Select Networking Services and then click Details.
4. Check the Windows Internet Name Services(WINS) and then click OK. [Note:
if the check box has been selected, please uncheck it to remove the
component and then reinstall it]
Regarding the event LSASRV 40960 and 40961appear on SBS, as I know, this
issue can occur when you restart the SBS 2003 server. A service, for
example, the Windows Time service (W32Time), tries to authenticate before
Directory Services has started. You can just safely ignore the event as it
will not cause any adverse effects to the server. For more information, see:
823712 Event IDs 40960 and 40961 in the System Event Log When You Restart
http://support.microsoft.com/?id=823712
824217 LSASRV Event IDs 40960 and 40961 When You Promote a Server to a
Domain
http://support.microsoft.com/?id=824217
I would suggest you reboot the server again and see if the event does not
appear. type the following commands:
1. Net Stop NETLOGON
2. IPCONFIG /FLUSHDNS
3. IPCONFIG /REGISTERDNS
4. Net Start Netlogon
The issue could also be a similar to the problem described in the following
KB article:
826819 The Server Stops Responding and an Access Violation Occurs in
Lsass.exe
http://support.microsoft.com/?id=826819
I am appreciated your time and look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Get Secure! - www.microsoft.com/security
=====================================================
| Date: Fri, 20 Jan 2006 20:25:02 -0800