Re: Help...Workstation service (and dependents) will not start.

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 07/19/04


Date: Sun, 18 Jul 2004 22:16:53 -0400

Hi Curtis,

Highlight each of the keys referenced. Right click in a blank area of the right pane and select New, Expandable String Value. Name it ImagePath. You appear to be missing quite a bit, particularly a number of sub-keys in both of these keys, in addition to a number of missing values. I've created a Registry export from a relatively clean XP system. It can be found at:

http://www.dougknox.com/xp/lanmanwkssrv.reg

Download this file and save it to your hard disk. Next, create a System Restore Point (Start, Programs, Accessories, System Tools, System Restore). This gives you a way to back out, since I cannot guarantee that all of the settings, particularly relating to security will be the same on your system.

Next, either double click the REG file you downloaded to import it into the Registry, or use Registry, Import, from within Regedit. Reboot. Hopefully all will be well with these two services again.

-- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"Curtis" <Curtis@discussions.microsoft.com> wrote in message news:04BC29CA-C0EC-4E23-B99B-06A9202768F2@microsoft.com...
> Doug, Thank you for your speedy reply.  It seems that I have no image path assigned to either reg. folders. There are other services in the "services registry group with image paths identical to yours however. Following is a .txt cut and paste from lanmanserver and lanmanworkstation:
> 
> Key Name:          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation
> Class Name:        <NO CLASS>
> Last Write Time:   7/18/2004 - 2:25 PM
> Value 0
>  Name:            Start
>  Type:            REG_DWORD
>  Data:            0x2
> 
> Value 1
>  Name:            Description
>  Type:            REG_SZ
>  Data:            Creates and maintains client network connections to remote servers. If this service is stopped, these connections will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. BlackViper.com adds this: Used to connect local computer to remote computers. Examples may include local network connectivity and File and Print sharing. Many services depend on Workstation to be functioning. Leave it on automatic for safe configurations.
> 
> Value 2
>  Name:            Type
>  Type:            REG_DWORD
>  Data:            0x20
> 
> Value 3
>  Name:            ErrorControl
>  Type:            REG_DWORD
>  Data:            0x1
> 
> Value 4
>  Name:            DisplayName
>  Type:            REG_SZ
>  Data:            Workstation
> 
> Value 5
>  Name:            Group
>  Type:            REG_SZ
>  Data:            NetworkProvider
> 
> Value 6
>  Name:            ObjectName
>  Type:            REG_SZ
>  Data:            LocalSystem
> 
> 
> Key Name:          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\Enum
> Class Name:        <NO CLASS>
> Last Write Time:   7/18/2004 - 2:25 PM
> Value 0
>  Name:            0
>  Type:            REG_SZ
>  Data:            Root\LEGACY_LANMANWORKSTATION\0000
> 
> Value 1
>  Name:            Count
>  Type:            REG_DWORD
>  Data:            0x1
> 
> Value 2
>  Name:            NextInstance
>  Type:            REG_DWORD
>  Data:            0x1
> 
> ----------------------------------------------------------------------------------------------------------------
> 
> Key Name:          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver
> Class Name:        <NO CLASS>
> Last Write Time:   7/18/2004 - 2:25 PM
> Value 0
>  Name:            Start
>  Type:            REG_DWORD
>  Data:            0x4
> 
> Value 1
>  Name:            Description
>  Type:            REG_SZ
>  Data:            Supports file, print, and named-pipe sharing over the network for this computer. If this service is stopped, these functions will be unavailable. If this service is disabled, any services that explicitly depend on it will fail to start. BlackViper.com adds this: Used for file and print sharing from your computer or Message Queuing. For security purposes, you may disable this service if you do not require local printers and files shared across your network. Connectivity, however, still exists even on incoming shared network drives. Workstation needs to be running to connect to another computer that has the files you are looking for. Note: If you disable File and Print sharing, the Server Service may disappear from the Services listing. Just enable File and Print sharing again and the Server Service will return.
> 
> Value 2
>  Name:            Type
>  Type:            REG_DWORD
>  Data:            0x20
> 
> Value 3
>  Name:            ErrorControl
>  Type:            REG_DWORD
>  Data:            0x1
> 
> Value 4
>  Name:            DisplayName
>  Type:            REG_SZ
>  Data:            Server
> 
> Value 5
>  Name:            ObjectName
>  Type:            REG_SZ
>  Data:            LocalSystem
> 
> 
> Key Name:          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Parameters
> Class Name:        <NO CLASS>
> Last Write Time:   5/12/2004 - 4:59 PM
> Value 0
>  Name:            CachedOpenLimit
>  Type:            REG_DWORD
>  Data:            0x0
> 
> 
> Key Name:          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Enum
> Class Name:        <NO CLASS>
> Last Write Time:   7/18/2004 - 2:25 PM
> Value 0
>  Name:            0
>  Type:            REG_SZ
>  Data:            Root\LEGACY_LANMANSERVER\0000
> 
> Value 1
>  Name:            Count
>  Type:            REG_DWORD
>  Data:            0x1
> 
> Value 2
>  Name:            NextInstance
>  Type:            REG_DWORD
>  Data:            0x1
> 
> 
> What else is missing, and what are the steps to correctly enter the necessary path information ?  Your help is greatly appriciated. 
> 
> 
> 
> -- 
> Curtis J.
> Lincoln City, Oregon
> 
> 
> "Doug Knox MS-MVP" wrote:
> 
>> Curtis,
>> 
>> Click Start, Run and enter REGEDIT  Go to:
>> 
>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver
>> 
>> and
>> 
>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation
>> 
>> For each of these registry keys there is an "ImagePath" value.   On my system the ImagePath value is:
>> 
>> %SystemRoot%\system32\svchost.exe -k netsvcs
>> 
>> Please post back with the contents of this value on your system.
>> 
>> 
>> -- 
>> Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
>> Win 95/98/Me/XP Tweaks and Fixes
>> http://www.dougknox.com
>> --------------------------------
>> Per user Group Policy Restrictions for XP Home and XP Pro
>> http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>> --------------------------------
>> Please reply only to the newsgroup so all may benefit.
>> Unsolicited e-mail is not answered.
>>  
>> "Curtis" <Curtis@discussions.microsoft.com> wrote in message news:E65DD7DA-A69E-44C2-84F6-230349A323E1@microsoft.com...
>> > After trying several different alterations to the sevices start up settings, I discovered that the workstation service, and those services dependent on it to start, would not start /run.  I get an "error 3, path not found" message.  The "path box" is empty, and I am unable to manually input a path into it....I seem to be limping along O.K. without these services, however WIN XP PRO now seems somewhat buggy, for obvious reasons.
>> > -- 
>> > Curtis J.
>> > Lincoln City, Oregon
>>


Relevant Pages

  • Re: Help...Workstation service (and dependents) will not start.
    ... I am unable to access the web address where the registry export for me is located. ... > Hi Curtis, ... > Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display ... MS-MVP Windows Media Center\Windows Powered Smart Display ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Run, cmd not working
    ... what other trojans may be affecting my regedit / cmd prompts? ... the removal by editing the registry using ERD5.0 ... I get a command prompt window if I run "command"  (that is something new to ... What do you see when you run CMD? ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Run, cmd not working
    ... what other trojans may be affecting my regedit / cmd prompts? ... the removal by editing the registry using ERD5.0 ... I get a command prompt window if I run "command"  (that is something new to ... What do you see when you run CMD? ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Run, cmd not working
    ... what other trojans may be affecting my regedit / cmd prompts? ... the removal by editing the registry using ERD5.0 ... I get a command prompt window if I run "command"  (that is something new to ... What do you see when you run CMD? ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Run, cmd not working
    ... what other trojans may be affecting my regedit / cmd prompts? ... the removal by editing the registry using ERD5.0 ... I get a command prompt window if I run "command"  (that is something new to ... What do you see when you run CMD? ...
    (microsoft.public.windowsxp.help_and_support)

Quantcast