recent windows updates suspend my win server 2003 when starting

yesterday I installed latest updates for my Win Server 2003 (Standard
Edition), they are:

KB896727: MS05-038: Cumulative security update for Internet Explorer
KB896423: MS05-043: Vulnerability in Print Spooler service could allow
remote code execution
KB893756: MS05-040: Vulnerability in Telephony service could allow
remote code execution
KB899587: MS05-042: Vulnerabilities in Kerberos could allow denial of
service, information disclosure, and spoofing
KB899588: MS05-039: Vulnerability in Plug and Play could allow remote
code execution and elevation of privilege
KB899591: MS05-041: Vulnerability in Remote Desktop Protocol could
allow denial of service

When I restart it, the server looks suspending, there is no response
for around 40 mins before the login box appears, and when it started
finally, I found the Citrix Persentation Server on it doesn't work
normally.
I thought the updates are about remote desktop and Citrix might use the
service. I uninstall the updates, and stop all services about Citrix
and remote desktop, even stop other services: SQL Server, MDaemon,
MailMarshall, WebMarshall, Symentec AntiVirus ..., but failed to make
the problem dissapear.

anybody has idea about this?

Hi,

You haven't by any chance PowerChute 6.x UPS software (APC) installed
on the computer?

If so, upgrade it to v7 or uninstall it and see if that helps.


PowerChute 6.x cases a lot of issues, much more than what is described
here:

CRITICAL UPDATE REQUIRED PowerChute Business Edition - Customers Using
6.x Must Upgrade to 7.x due to Java Runtime Environment expiration
http://nam-en.apc.com/cgi-bin/nam_en...p?p_faqid=7202

Microsoft have published a knowledge base article for this issue as well:

System with APC Powerchute 6.x UPS Software gives strange symptoms
http://support.microsoft.com/kb/555386/


This is how you can disable the PowerChute service if you are unable to
uninstall it:

Start Regedit.exe

Locate the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\APCPBESERVER
Set the "Start" value to 4 (means disabled)

Locate the key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\APCPBEAGENT
Set the "Start" value to 4 (means disabled)

Reboot the computer.

Regards,
Torgeir


evan wrote:

> yesterday I installed latest updates for my Win Server 2003 (Standard
> Edition), they are:
>
> KB896727: MS05-038: Cumulative security update for Internet Explorer
> KB896423: MS05-043: Vulnerability in Print Spooler service could allow
> remote code execution
> KB893756: MS05-040: Vulnerability in Telephony service could allow
> remote code execution
> KB899587: MS05-042: Vulnerabilities in Kerberos could allow denial of
> service, information disclosure, and spoofing
> KB899588: MS05-039: Vulnerability in Plug and Play could allow remote
> code execution and elevation of privilege
> KB899591: MS05-041: Vulnerability in Remote Desktop Protocol could
> allow denial of service
>
> When I restart it, the server looks suspending, there is no response
> for around 40 mins before the login box appears, and when it started
> finally, I found the Citrix Persentation Server on it doesn't work
> normally.
> I thought the updates are about remote desktop and Citrix might use the
> service. I uninstall the updates, and stop all services about Citrix
> and remote desktop, even stop other services: SQL Server, MDaemon,
> MailMarshall, WebMarshall, Symentec AntiVirus ..., but failed to make
> the problem dissapear.
>
> anybody has idea about this?
>


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

Yes, we have PowerChute installed, I believe that's the reason because
the last time I restarted the server is around 15 July.

I will check it this weekend, thanks a lot.


Torgeir Bakken (MVP) wrote:
> Hi,
>
> You haven't by any chance PowerChute 6.x UPS software (APC) installed
> on the computer?
>
> If so, upgrade it to v7 or uninstall it and see if that helps.
>
>
> PowerChute 6.x cases a lot of issues, much more than what is described
> here:
>
> CRITICAL UPDATE REQUIRED PowerChute Business Edition - Customers Using
> 6.x Must Upgrade to 7.x due to Java Runtime Environment expiration
> http://nam-en.apc.com/cgi-bin/nam_en...p?p_faqid=7202
>
> Microsoft have published a knowledge base article for this issue as well:
>
> System with APC Powerchute 6.x UPS Software gives strange symptoms
> http://support.microsoft.com/kb/555386/
>
>
> This is how you can disable the PowerChute service if you are unable to
> uninstall it:
>
> Start Regedit.exe
>
> Locate the key
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\APCPBESERVER
> Set the "Start" value to 4 (means disabled)
>
> Locate the key
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\APCPBEAGENT
> Set the "Start" value to 4 (means disabled)
>
> Reboot the computer.
>
> Regards,
> Torgeir
>
>
> evan wrote:
>
> > yesterday I installed latest updates for my Win Server 2003 (Standard
> > Edition), they are:
> >
> > KB896727: MS05-038: Cumulative security update for Internet Explorer
> > KB896423: MS05-043: Vulnerability in Print Spooler service could allow
> > remote code execution
> > KB893756: MS05-040: Vulnerability in Telephony service could allow
> > remote code execution
> > KB899587: MS05-042: Vulnerabilities in Kerberos could allow denial of
> > service, information disclosure, and spoofing
> > KB899588: MS05-039: Vulnerability in Plug and Play could allow remote
> > code execution and elevation of privilege
> > KB899591: MS05-041: Vulnerability in Remote Desktop Protocol could
> > allow denial of service
> >
> > When I restart it, the server looks suspending, there is no response
> > for around 40 mins before the login box appears, and when it started
> > finally, I found the Citrix Persentation Server on it doesn't work
> > normally.
> > I thought the updates are about remote desktop and Citrix might use the
> > service. I uninstall the updates, and stop all services about Citrix
> > and remote desktop, even stop other services: SQL Server, MDaemon,
> > MailMarshall, WebMarshall, Symentec AntiVirus ..., but failed to make
> > the problem dissapear.
> >
> > anybody has idea about this?
> >
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx