"Sukant Kumar" <Sukant
> wrote in message
news:9B594EC0-278B-4237-AA71-
....
> Hi
> I have been trying to install the patch 911564 & it had failed everytime.
> Have gone through a lot of solutions for the same, have tried to disable
> Antivirus service, checked for OpenSSH server, first rebooted & then tried to
> install but still nothing is working. I use Windows 2000 Server SP4. Could
> anyone please help me getting this sorted out???
> Below is the log for the same :
....
> 3.328: FileInUse:: Added to Filelist: c:\winnt\kb911564.cat
> 3.328: FileInUse:: Added to Filelist: c:\program files\windows media
> player\npdsplay.dll
Evidently some files are in use. What are they in use by?
E.g. use tasklist /fi "Modules eq npdsplay.dll"
or use Process Explorer and its Handles view.
or just try shutting down as much unnecessary stuff as possible
before starting the update. E.g. perhaps do it during a safe boot.
Etc.
If that doesn't help I would try to see if that update has a /verbose
switch, which might clarify what else is going on (or not going on <w>).
If you have access to two machines one which can install the update
and one which can not you could also try comparing their two /verbose
logs to see where the bad one diverges. The main benefit of that
technique is that you don't have to know as much about what the log
entries mean to get some insight about the differences they exhibit.
For an even more comprehensive diagnostic you can use FileMon
and RegMon filtering on enough of the activities of the update
to capture both the writes to the logs and interleaving with them any
events which may be related to them. With the new Process Monitor
tool such interleaving of the two traces may be easier. You would still
need to correlate the log entries by their message lengths however.
Tip: use Notepad's Status bar with Word Wrap off to find out how
long log message entries that you are interested in are. The lengths
reported by FileMon will just be one byte bigger to account for the record
separator. Typically the timestamps on the log records are much too
coarse to be of much use but if they are there they can be used to at
least ensure the trace entries you are looking at have some possible
relation, within the same second, for example.
Good luck
Robert Aldwinckle
---
> 51.687: Message displayed to the user: Are you sure you want to cancel?
> 51.687: User Input: YES