Archive for Windows – Page 7

SVCHOST.exe spiking CPU

I see this from time to time, on both workstations and servers. Your system seems to be extremely sluggish or unresponsive. So you open up task manager and you see that a svchost.exe process using 50% or more of CPU. To complicate the matter, there are more than one svchost.exe processes running.

What is one to do???

In many cases, a recent Windows update may be the cause. But it’s hard to track down which update might be the culprit.

Meanwhile, here is what I will often do to at least quickly address and resolve the issue:

  1. Identify the PID of the spiking svchost
  2. Identify a list of services associated with that svchost occurrence
  3. Stop each service until you find the offender

Here’s the blow-by-blow:

Identify PID of svchost.exe that is spiking

  • Open up Task Manager
  • Click on View –> Select Columns… –> then click to check PID (Process identified)
    image    
    image
  • Click on the Image Name column to sort by name
  • Scroll down and find the PID number associated with the spiking svchost.exe service. In my case, it was PID 844.
    image

Identify list of services associated with that svchost.exe process

  • Leave Task Manager window open
  • Open up a command prompt window, and type TASKLIST /SVC and press enter
  • This will give you a list of specific services associated with each svchost.exe
  • Locate your PID and note all the actual services running under that instance.
    image

Identify specific service causing the spike

  • Open up Services console (Start –> Run –> services.msc)
  • Position the Services and Task Manager windows side by side
  • Now, one by one, from the Services window, locate each service listed for the associated PID, and stop or pause the service.
  • Then see if from the Task Manager window, if the svchost.exe suddenly drops back to normal. If so, you found your problem service!
  • In my case, I often find that Automatic Updates (wuauserv) Windows Management Instrumentation (winmgmt) to be the culprit. In this particular case, it was wuauserv causing the spike
    image

 

* These screenshots were taken from a Windows 2003 server, but the process is that same for other Windows platform. The only big difference is that the Task Manager window has a new format with Windows 8/2012, and they display the PID# automatically, saving you one step!

Watch out for the date changing on Surface 2!

I had a nice (?) surprise today when I tried to go to the Windows Store on my Surface 2. It told me that there was an issue in connecting and to try again later. Well, I knew my wireless connection was good, because I had just been browsing the web.

I decided to totally shutdown and restart my S2. That’s when I discovered that the date and time were incorrect. And not by just a few minutes or a few days, but 111 years into the future – June 15, 2125 to be exact!

image

Easy enough, I thought – just click  on the Change button and fix the date and time. Wrong. Not only could I not change it, the drop downs for month, day and year were totally blank!

So, I switched over to the Desktop interface, and opened up the Date & Time Settings option. That’s when I noticed that two different dates were showing. The big calendar section showed the date as Dec 31, 2099, but down below that, it showed the current date as June 15, 2125.

image

It took some doing, but I finally got the date and time set correctly. I first had to change the date to something prior to 12/31/2099. Then, I flipped over to the Windows Tile and from the Time and Language option, I could use the drop down to change the date. But I could not just scroll from 2099 back to 2014. It looks like it gave me about 30 years at a time in the drop down box. So, I first changed the date to 2069 and saved it, then to 2039, and then finally to 2014.

Now, what caused the date to change?

Who knows. I’ve heard reports that it may be related to a recent Windows Update. If I find out, I will let you know.

Upcoming Rate Change to Microsoft’s Action Pack Subscription

For small I.T. owners and developers who are Microsoft Partners, the Microsoft Action Pack subscription has been a huge blessing financially. For one low annual cost, Microsoft provides us access to almost all iof their current product offerings, from Windows 8 to Windows Server 2012, from Office 2013 to Visual Studio.

Microsoft recently announced changes to the Action Pack subscription model, effective February 24, 2014.

image

The change that many will focus on is the price increase, going from $329US to $475US, which is a 30% increase. I agree that that’s a big hike. But before you decide to just walk away from this, here are my thoughts:

  1. The $475 fee is still an inexpensive and easy way to have access to Microsoft’s full line of products – all for the comparable cost of a single Windows Server license. That’s less than $40 a month!
  2. If you are new to the Action Pack program, you may not be aware, but this is only the second price adjustment that Microsoft has made since I first signed up for an Action Pack subscription 12 years ago. The Action Pack subscription fee remained flat at $299 for the years 2003-2010. For years 2011-2013, the price went up to $329.

If you sign up or renew your subscription before February 24th, you can do so at the current $329, thus giving you savings for your first year.

Error 0x8024402c When Installing Windows Store Apps

I truthfully don’t use many apps, whether it’s with my Windows 8.1 desktop, Surface 2, or my Windows 8 Phone or Surface2. But I did want to download an app today to my desktop, and I immediately encountered error 0x8024402c.

The first recommendations I found when doing a Bing search was to open Internet Explorer and make sure that the ‘Use a proxy server for your LAN” was unchecked. Which it was in my case.

Then I found this suggestion to reset Store Cache, which worked immediately, and with no rebooting of my desktop computer:

  1. Press Windows Flag key + R to open the Run box
  2. Type: wsreset.exe and press OK
  3. Wait until it’s finished, then try downloading your app!

Windows Movie Maker issue with opening .MOV files

You just gotta love the Internet. Just a few quick clicks using your favorite web search engine, and voila, you have your answer!

Case in point: customer calls up to say that they are trying to open up a .MOV video file using Windows Movie Maker. They encounter an error saying that the workstation does not meet minimum requirements.

STEP 1

So, I remote into the Windows 7 workstation, and I see that they have Windows Live Movie Maker on the computer. I do a quick search for “windows movie maker does not meet minimum requirements” and right there on the first page is a YouTube tutorial addressing the issue.

image

The solution is to install Windows Movie Maker 6.0 (from the Vista era) – but they will run on Windows 7/8 platform. Make note that there are separate 32-bit and 64-bit versions of the program:

Movie Maker 6.0 (64 bit)     Movie Maker 6.0 (32-bit)

STEP 2

After installing the software, I start it up and try to open the .MOV file, only to be told that I am missing a proper CODEC file. Another quick search, and I find another YouTube tutorial addressing this issue:

image

The solution is to download and install the free K-Lite Codec Pack:

http://www.filehippo.com/download_klite_codec_pack/

After that, the user is able to successfully open and edit MOV files from Windows Movie Maker!

SkyDrive to be renamed OneDrive

image

It’s official … on January 27, 2014 Microsoft announced an upcoming name change to their cloud storage service. SkyDrive and SkyDrive Pro will soon be known as OneDrive and OneDrive for Business, respectively.

The rebranding of SkyDrive is a result of a trademark case filed last year by British Sky Broadcasting.

Apple iTunes crashing with latest update

Yes, you heard me right, Microsoft is not the only company that is prone to releasing updates that can cause your computer to crash!

In this case, I received a call from a client today who reported that iTunes suddenly was not working, and would immediately crash when started. He tried to reinstall iTunes, but it went from bad to worse.

It didn’t take long to find that a slew of people (slew = more than I can count) were reporting similar crashes, and it appears to be caused by version 11.1.4 that Apple rolled out at the end of last week (around 22-Jan-2014).

Fortunately, the work involved to fix this was pretty straightforward, but with some minor bumps in the process.

First, a quick summary of the steps required:

  1. Uninstall iTunes and its related components and reboot
  2. Delete associated Apple program files and reboot
  3. Download and reinstall iTunes

Now for the details!

Step 1 – Uninstall iTunes and related components

Apple recommends to remove the following programs in this specific order:

  • iTunes – note: when uninstalling iTunes, be sure to leave your user profile & settings
  • Apple Software Update
  • Apple Mobile Device Support
  • Bonjour
  • Apple Application Support

Then reboot your computer

Step 2 – Delete associated Apple program files
You need to confirm that the following folders have been removed. If any are left behind, remove them now:

  • C:\Program Files\Bonjour
  • C:\Program Files\Common Files\Apple\
  • C:\Program Files\iTunes\
  • C:\Program Files\iPod\

If you have a 64-bit version of Windows, these are the folders you need to confirm are removed:

  • C:\Program Files (x86)\Bonjour
  • C:\Program Files (x86)\Common Files\Apple\
  • C:\Program Files (x86)\iTunes\
  • C:\Program Files (x86)\iPod\

NOTE: some files may not delete:

It is possible that you may run into some files or folders that will not delete, because these are programs currently running that are using these files. If that happens to you, here are the steps I used to delete those files:

  • Open up an elevated command prompt
  • Type: start taskmgr — and the Task Manager window will display

For the following steps, leave both windows (Command prompt and Task Manager) open!

  • From the Task Manager window, click on the Processes tab, locate explorer.exe, right click on it and click End process. This will close your Windows desktop, but don’t worry, we will restart it in a few moments.
  • Now, switch over to the Command prompt window
  • Using the CD (change directory) and DEL (delete) commands, go to the folder with the file that won’t delete, and then delete the file. In my case, as an example, the commands I entered were:
    cd \
    cd Program Files (X86)
    cd Common files
    cd Apple
    cd Internet Services
    del shellstreams64.dll
  • Repeat the above steps, if necessary, if there were other files you could not delete.

Now let’s restart the Windows desktop.

  • Switch back to the Task Manager window
  • Click File –> New Task (run) –> and then type: explorer.exe and the windows desktop should redisplay.
  • At this point, go back and delete those folders that did not previously delete.
  • I recommend rebooting the computer again, and then verifying that all the folders identified above are deleted

Step 3: Download and install iTunes

I think you can handle this part on your own!
But just in case, here’s the link to get you started:

http://www.apple.com/itunes/download/

SBS 2011 and Windows Update Error 800B0001

As we enter 2014, there are still plenty of new SBS 2011 servers being installed in offices. SBS 2011 is the last version of Microsoft’s Small Business Server (SBS) product line. SBS 2011 comes with Exchange, SharePoint and WSUS pre-installed.

If your site also has Windows 8/8.1 computers, you may discover that running Windows Update on those computers may generate an error 800B0001.

image

Now, if you do your due diligence and search for this error, you will find suggestions that a credential on your Windows 8 computer is corrupt, and that you should run a pair of DISM commands to attempt to repair the situation:

image

But, in most cases, running these commands will NOT resolve the issue. So what’s causing the error?

Simply put, you are missing a couple of required updates on your SBS 2011 server, updates that resolve the issue of Windows 8/8.1 communicating to the WSUS server:

KB 2720211 – Update for WSUS 3.0 SP2

KB 2734608 – Update for WSUS 3.0 SP2

Mounting USB drive within 2012 R2 Hyper-V Guest

Let’s say you have an external USB drive, and you need to transfer some files from it to a guest partition running on your Hyper-V 2012 R2 server. What do you do? Well, one solution is to make use of a feature in Windows 2012 Hyper-V called “Enhanced Session Mode Policy”.

So let’s get started!

Preliminary

  • Before proceeding, go ahead and connect your external USB drive to your physical server.

Enabling Enhanced Session Mode

  • Open up Hyper-V Manager from the host parent) server.
  • Right click on the host server, then click Hyper-V Settings
    image
  • Take a look at the Hyper-V Settings window. On the left frame are two sections labeled: Server and User
  • Under the Server section, locate and click on Enhanced Session Mode Policy
  • In the right frame, click (to check) Allow enhanced session mode
    image
  • Back in the left frame, under User, locate and click Enhanced Session Mode
  • In the right frame, verify that Use enhanced session mode is checked
    image
  • Click Apply and OK

Start guest VM and connect USB

  • Now, click to connect/start your VM session and login
  • After logging in, a new screen will display labeled: Display configuration
  • Click on Show Options from the lower left corner
    image
  • Then under Local devices and resources, click More…
    image
  • Then click to expand Drives
    image
  • Locate and click (to select/check) your USB drive
    image
  • Now, if you open up This PC, you should find your USB drive is now mounted as a mapped drive for you to access!
    image

Script to see if a KB update has been installed on a computer

Often, when I am working on a workstation or server, I need to see if a particular KB update has already been applied (installed). Case in point: KB 2862330 was released in October as part of a set of USB/Kernel updates. Immediately there were reports of BSODs with Windows 7 and Windows 2008R2 systems.

Early investigation of this issue found that the BSOD could be avoided in most cases if KB 2533552 was installed prior to installing 2862330.

So, I found myself looking for a simple, easy way to determine if a KB update has been installed on a particular workstation. Gandlaf50 from the Spiceworks’ community forum posted a VB script solution. The script will ask you which computer to check, meaning you could run this from your workstation, and check another computer in your network.

  1. Download the script file to your computer
    image
  2. Rename it from findkb.v_b_s to findkb.vbs
  3. Double click to run the script.
  4. Enter the KB number you wish to check (enter just the number)
    image
  5. Enter the name of the computer to be checked
    image
  6. A message box will display informing you if the KB is installed or not.
    image

Voila!