Tweaking.com Support Forums
Main Forum => General Computer Support => Topic started by: rudolph963 on November 05, 2015, 01:11:31 pm
-
Shane, I have a problem in that Windows 7 file and printer sharing will not turn on and stay on. I have tried tweaking.com windows repair. Any other ideas?
In the advanced sharing settings in the network and sharing center - Under file and printer sharing
the selection turn on file and printer sharing will check but when you click save changes, the selection is not saved.
-
Have you checked to see if it works with Windows Firewall or your AV program turned off ?
-
I tried with both turned off but no go.
-
Can you check if these services are all showing as Started and Auto, although if some weren't you wouldn't be able to get Internet connectivity.
Go Start - type services.msc and press enter.
Computer Browser
DHCP Client
DNS Client
Network Connections
Network Location Awareness
Remote Procedure Call (RPC)
Server
TCP/IP NetBIOS helper
Workstation
Also go into Device Manager/View/Show hidden devices and check for any yellow alerts - possibly in Non-Plug and Play Drivers.
There may also be something in Event Viewer with a corresponding date and time stamp.
BTW - which AV program are you using ?
-
computer browser and server will not start. AV program is mse
-
This could be an awkward one as Computer Browser is dependent upon Server being started and a Dependency of Server is Security Accounts Manager - which is dependent upon RPC being started.
You can check each service Dependencies by right clicking on them, select Properties and then the Dependencies tab.
Check to see if Security Accounts Manager which is just up from Server is showing as Started and Auto.
-
Security Accounts Manager is showing as Started and Auto. File and Printer sharing still dead.
-
When you try to start the Server service, do you get an error message with error code ?
When you double click on both Computer Browser and Server, under the Log On tab are they both showing as Local System and did you check Device Manager/View/Show hidden devices/Non-Plug and Play Drivers for any yellow alerts ?
Have you tried your restore points back to when File and Printer Sharing did work ?
-
Error 1068; both showing as local system; the only yellow alert is microsoft teredo tunneling adapter which has been there a long time; tried restore points and they did not help. Thanks Also Rapport EI64 has a yellow alert code 24 - This device is not present, is not working properly, or does not have all its drivers installed.
-
The only Rapport that I know of is Trusteer Rapport that some banks want you to install as a browser guard.
I found HitmanPro.Alert v3 disabled my Terodo Tunneling so I uninstalled it.
Error 1068 is a Dependencie error and the only one that hasn't been checked is Server SMB 1xxx Driver.
I had to Google for this one and found this article which gives steps for enabling it in the registry.
https://support.microsoft.com/en-us/kb/2696547
Scroll down to the Win 7 section.
I've gone into my registry and followed the path to \LanmanServer\Parameters and don't have any SMB listed, but I haven't set anything up for File and Printer Sharing and as you've had this set up, then perhaps the key was auto created for you - although my Server service is showing as Started and Auto with the Computer Browser just being set to Manual.
-
Did that and assuming I did it right still no go. Thanks
-
Did you use the cmd line or create/modify the key and then reboot and are you still getting the 1068 error when you try to start Server ?
-
still getting the 1068 error. Right clicked on Parameters and added a new DWORD Value and restarted the system.
-
There must still be something adrift - can you have a look in Event Viewer for a recent time stamped error for when you've just tried to start Server.
Clicking on the blue online help link may or not give some info - just hoping that it isn't a DCOM error.
-
If I could see a picture of what the registry is supposed to look like after the changes are made as in the article above then I could tell if I have done them right. Thanks
To enable or disable SMBv1 on the SMB server, configure the following registry key:
Registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
Registry entry: SMB1
REG_DWORD: 0 = Disabled
REG_DWORD: 1 = Enabled
Default: 1 = Enabled
To enable or disable SMBv2 on the SMB server, configure the following registry key:
Registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
Registry entry: SMB2
REG_DWORD: 0 = Disabled
REG_DWORD: 1 = Enabled
Default: 1 = Enabled
The snipping tool does not work so I can't take a picture of my work to show you.
-
What was listed for the recent time stamped Errors - were there any DCOM ones ?
When you get the window with Critical, Error etc. click on Error then on Show All Instances of This Event in the lower right pane to see them listed.
-
In Event Viewer is anything listed for svrnet ?
http://batcmd.com/windows/7/services/srvnet/
-
Error: The Server service depends on the Server SMB 1.xxx driver service which failed to start because the dependency service or group failed to start.
Also did everything in - In Event Viewer is anything listed for svrnet ?
http://batcmd.com/windows/7/services/srvnet/
Still no positive result.
You know, I believe I saw another thread on this problem where the problem was supposedly solved but there was no explanation as to how it was done; Shane I think.
-
I don't know which other Dependency it's looking for.
I created a restore point then tried that cmdlet but it queried -Force and then -Value when I left -Force off.
Looking at your post before last, I'm not now sure how you enabled SMB 1
Having failed with the cmdlet I went Start - typed regedit and pressed enter - accepted the UAC then expanded -
HKEY_LOCAL_MACHINE\SYSTEM\CurrenControlSet\services\LanmanServer\Parameters
I didn't have any SMB key listed so I created one by right clicking in the right pane and selected DWORD 32 bit
When the small box appeared with New Value #1 I cleared that and typed SMB 1 and pressed enter.
Right clicked again and selected Modify where I changed the default 0 to 1
Closed up the registry sections and rebooted.
I went into services.msc to see if anything had changed with Computer Browser and Server - Server was still showing as Started and Auto whereas Computer Browser had changed from its previous just Manual to Started and Manual.
This is what my registry looks like after creating that key -
-
Thanks, I will check to see if it matches what I did when I get back. Thanks
-
Noticed a mistake in my last post - I right clicked on SB 1 to select Modify.
-
I had SMB 1 showing under parameters in the left hand pane but not in the right hand pane. I will change and see what that does. No change.
-
No wonder that cmdlet didn't work - it should have been done in Power Shell and not from an admin cmd prompt - must clean my specs :)
I still don't have SMB 1 in the left pane after creating the key.
Reading the article, it says it's a subkey of Parameters so perhaps it should only be in the right pane.
Create a restore point then go into the registry - click on SMB 1 in the left pane - File - Export and call it SMB 1
This will save it to Documents as a Registry entry.
Go back to SMB 1 in the left pane, right click on SMB 1 and select Delete then do the steps that I did to create it, not forgetting to reboot to effect the changes.
However, on searching about SMB, it seems like it's a separate file sharing protocol but not having done any file or printer sharing - I haven't come across any problems.
Going back to that Rapport E164 in Device Manager - from the little I've found on that it seems to be some sort of security program.
Have you ever installed it ?
As it has a yellow alert next to it, it would seem to buggy, so create a restore point then right click on Rapport E164 and select Uninstall.
If it has a box to include software - leave that unchecked.
Either click on Action/Scan for hardware changes or reboot to see if it is reinstated, but either way, see if File and Printer sharing then remains on.
-
There's a lot of possibilities here and Boggin has tried most of my ideas. However there is a known issue often after an infection that grays out your predefined rules.
Are your predefined rules grayed out? http://superuser.com/questions/375100/what-happened-to-my-predefined-rules-in-windows-firewall-how-can-i-get-them-b
When you ran Windows Repair did you make sure you ran the Firewall Repair? If this was an issue it should have fixed it. You can also run this standalone without running all Windows Repair. Optionally uncheck all
http://www.majorgeeks.com/mg/getmirror/tweaking_com_repair_windows_firewall,2.html
Of course you can turn Windows Firewall off as well and achieve the same goal.
-
My first suggestion (so long ago :)) was to turn off any AV program or Windows Firewall which had no effect.
-
Tried windows firewall repair, will try turning off AV and windows firewall again. Rapport EI64 is refering to IBM Trusteer Rapport provided by our bank as security. It hasn't ever caused any problems that I am aware of. Tried and still get the same result. Tried all the above and the Server and Computer Browser still giving error 1068, file and printer sharing still will not activate.
-
I'd love to see a pic of the Errors in Event Viewer as well as your registry, but as your Snipping Tool isn't working....
I've looked around for a solution to that and came across that Trusteer Rapport can disable the Snipping Tool.
Did that reinstate after you uninstalled it in Device Manager and is it still listed in Programs and Features to uninstall ?
-
Shutdown Trusteer and snipping started working.
-
You are getting the PerfNet error because Server isn't started - so we're back to square on that one and the VSS error is normal according to MS.
https://technet.microsoft.com/en-us/library/dd364925(v=ws.10).aspx
I was hoping to find something else was stopping Server from starting, but still up against a brick wall until we can ID which other service it needs to be started when it isn't listed in any of the Dependencies.
I don't know if you can use File and Printer Sharing in Safe Mode with Networking, but can you check to see if it remains on in that mode ?
As an aside, after shutting down Rapport is the yellow alert still next to Teredo Tunneling in Device Manager ?
-
The yellow alert is still next to the Microsoft Teredo Tunneling Adapter. I will try file and printer sharing in safe mode and see if it works. Thanks.
Doesn't do anything.
-
hmmm okay so boggin went through a lot with you let's see have you ran tweaking repairs 2 times in safe mode (with networking) meaning open windows repair run the program after running all default repairs restart go back in safe mode(with networking) run the default repairs again? if so after that (in normal mode) open a cmd type in
wmic service list brief that will show us your services and say if its running or not. after you run that command take a screen shot of the services it pulls up (may take 2 screenshots) i wanna see which services are enabled/disabled as well as ok or not. but my main thinking is if BITS or BFE is messed up.
-
Yes, Tweaking repairs at least once in safe mode after running Tweaking firewall repair. Screenshots attached.
-
Is that all it gave you - what's happened to the As and Bs etc.
-
Don't know, but they aren't there. I had to run wmic service list brief from the command prompt. If you try to run otherwise it runs but the closes immediately.
-
Just go into services and check Background Intelligent Transfer Services and Base Filtering Engine.
The former is just showing as Manual and BFE is showing as Started and Auto in mine.
If there'd been any problems with BFE then I would have expected you to get an error message that Windows Firewall was stopped.
-
Both flagged as started
-
Well, they say no two Win 7 machines are the same :)
Just to confirm they are running, can you go Start - type msconfig and press enter, then check their status as running under the Services tab.
While you are in there, can you scroll a bit further down and check that the box for Server is checked.
-
They are running. Box next to Server is checked but the process is stopped
-
I've just been checking mine and my Lanman Server is showing as Started and Auto to yours which is showing as Stopped and Auto, although I've deleted the SMB 1 key, so don't know if that would have any effect.
There's no listing for it in services.msc so not sure if it would require a net start command.
Julian may have a comment on that.
There was one item I noticed that you have in the registry snip that I don't and that is for AutoShareWks with a value of 0.
I don't know what that is for or whether it's relevant.
An easy way to post the output of a cmd window is to right click in the text area and then click on Select all and press enter.
You then just right click in the reply box and select Paste, but the way you have done it may reduced its overall size.
EDIT - Forget about AutoShareWks - it's to do with enabling Administrative shares and the default value appears to be 0.
-
I can't think of anything else to suggest for this.
The idea of checking in Safe Mode with Networking was to eliminate the possibility of a 3rd party agent preventing Server from starting.
If anything else was failing to start, that would have been repetitive in Event Viewer as was PerNet and I doubt if scrolling further down the list of Errors in Event Viewer would show anything different.
While you are waiting for Julian to get back, see if these cmds will resolve the yellow alert next to Teredo Tunneling -
1. As an administrator from the Cmd Prompt, type then press Enter after each of these commands :-
2. netsh
3. int teredo
4. set state disabled
5. Open Device Manager/View/Show hidden devices > right click on Teredo Tunneling Pseudo-Interface and select Uninstall
6. Open the Cmd Prompt as an administrator again and type then Enter these cmds :-
7. netsh
8. int ipv6
9. set teredo client
10. Open Device Manager/Action/Scan for new hardware.
11. Then select Show hidden devices from the View menu.
It should now display without the yellow alert.
An alternative is to create a restore point then after uninstalling Teredo, click on Action/Add legacy hardware then click Next until you see the left pane populate and select Network adapters - Next - Microsoft then scroll down the right pane to see the Microsoft one - click on that and Next and when done, check to see that it is reinstated without any yellow alerts.
As I said earlier, it was HitmanPro.Alert v3.0 which is a browser guard which put a yellow alert next to mine, which is why I asked you to check if yours was still there after turning off Rapport.
-
I did the above and there is no yellow alert except for rapport ei64. There also is no listing for microsoft teredo tunneling adapter, so no yellow alert for it.
-
Yes, Tweaking repairs at least once in safe mode after running Tweaking firewall repair.
did you just run repair number 6 repair Windows firewall? Try running all the default repairs. There is a button under the repairs above the system monitor click that button to select all the default repairs.
-
I did the above and there is no yellow alert except for rapport ei64. There also is no listing for microsoft teredo tunneling adapter, so no yellow alert for it.
Use the alternative method via Action/Add legacy hardware to reinstate it.
I've been looking up Lanman Server as yours is showing as stopped and that may be the key.
From this article http://computerstepbystep.com/server_service.html run a cmd prompt as an admininstrator and enter this cmd to see what it returns.
net start LanmanServer
shutdown /r /t 00 (to reboot if successful)
BTW - Who has locked this thread ?
-
okay, I ran Tweaking in safe mode and did the two things you asked above and enclose screenshots.
-
Okay have you done a chkdsk at all or an sfc /scannow ??
-
sfc /scannow was to be my next suggestion after running a scan with the free version of MBAM.
https://www.malwarebytes.org/mwb-download/
Uncheck the box for the trial Premium version during install and before running the scan, click on Settings/Detection and Protection and use the dropdown if necessary to Treat PuPs and PuMs as Malware.
This program inserts itself into the Startup/Services menu of msconfig and can be set to Disabled in services.msc as well as being unchecked in msconfig.
Run the sfc /scannow after the MBAM scan but let us know if it finds any malware.
If the sfc /scannow reports that it is unable to repair some files, then enter the following cmd which will put an icon onto the Desktop.
This will open the CBS log in Notepad which you can then copy & paste into the reply box.
findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt
The forum may allow you to copy & paste the cmd to the cmd prompt to avoid typos, although it doesn't always for me.
-
Malwarebytes only found one thing, Dell System Detect, which I had previously told it to ignore.
-
Fixed - Downloaded Hotfix for srvnet.sys from Microsoft and it fixed the File and Printer Sharing. I have not checked the fax error mentioned in the sfc report.
https://support.microsoft.com/en-us/kb/2473205
-
When I was researching srvnet earlier I came across another Hotfix but it didn't apply to any errors you were getting and as you only apply a Hotfix for the published errors, ignored it - but glad you found the right Hotfix to sort it.
-
Guess I got lucky. Thanks for your help
-
There's still the problem with Teredo Tunneling and FXSAPI.dll.
I don't know if you want to open a new thread for these and while the former from what you've done so far could provide another challenge.
As for the latter which is related to Fax, in Devices and Printers do you have a Fax machine icon - I uninstalled mine as I don't have or use a Fax machine - not sure if that would lose that error or whether this Hotfix is applicable.
https://support.microsoft.com/en-us/kb/2535158
-
I tried to run the hotfix for the fax but it says that the update is already installed. I looked for the fax icon but can't find it. I looked under programs and features, turn windows features on or off but I don't see it there either. I have only used it within windows xp mode which doesn't fully work anymore. However it would be better to use fax under win 7.
-
There's a Windows Fax and Scan box checked in my Turn on or off features and is found by expanding Print and Document Services.
Not sure if this article would help http://blogs.technet.com/b/sbs/archive/2007/07/11/installing-fax-and-not-seeing-the-fax-printer-created-and-not-getting-an-error-either.aspx and wouldn't have a clue how to set up Windows Fax - you can see that by going Start - type windows fax and press enter.
-
Okay we have faxes now. I went to the turn on off features under print and document services uninstalled, restarted and installed and now it is running.
Is Teredo Tunneling something that I need? Lastly Windows XP mode is not fully functional but it is something that I may uninstall and reinstall at a later date if I need it.
-
You don't need Teredo Tunneling just yet as it's for when IPv6 starts to be used in earnest and then you'll probably need another router that has IPv6 capability, but it shouldn't have a yellow alert next to it.
Came across this article which as well as having the steps I'd posted which would normally resolve the yellow alert, also has a registry setting that will hopefully remove it - but what does it give as its status under the General tab when you right click on it and select Properties ?
http://www.dell.com/support/article/us/en/19/SLN295633/EN
Not sure if also right clicking on Teredo and selecting Update Driver would have any effect.
Is sfc /scannow still reporting that error since you've got the Fax back - although it would probably be quicker to run SFCFix.exe.
Off to roost now anyway as it's turned 01:30 here in the UK and I need my beauty sleep :)
-
I did what it said in the kb article and the yellow alert is gone and so is microsoft teredo tunneling adapter.
-
I hadn't intended for you to repeat the cmds you had done before where it disappeared but to change the DWORD value to 0 to see if that removed the yellow alert and then check the status of it in Properties.
You can reinstate it as you did before through Add legacy hardware and if it comes back with the yellow alert, then go into its Properties where it will have an error code which you can post and then see if changing the DWORD value resolves that.
I'm not sure if Shane or Julian can upload the FXSAPI.dll for you copy into your system as they do for the corrupted Package files, but I can ask.
If you go Start - type %temp% and press enter, you may see a FXSAPIDebugLogFile.
In mine it's usually 0 KB and empty, but yours may have some info in it which you can check by double clicking on it.
-
Teredo is there, no yellow alert. Will check on FXSAPIDebugLogFile, it is empty.
I searched for FXSAPI.dll and found files of different sizes. I am guessing this is not normal and could be causing the error?
-
Did Teredo come back clean when you reinstated it or did you need to change the DWORD value and can you right click on it and select Properties, to see if its status is This device is working properly ?
I've emailed Shane regarding your .dll and from a previous email, he said that he's hoping to get back onto the forum today.
That will probably be much later as it's only about 03:30 where he is.
-
It came back without having to change the DWORD value.
-
At least that's good news about Teredo and did you check its status in Properties ?
The 609KB ones are the 64 bit ones and the 222KB are for 32 bit, those details will give Shane something to go on, unless Julian gets in before Shane and he sees them.
-
Checked Teredo and it is working properly.
-
Just to let you know that Shane hasn't forgotten about you, it's just been the pressure of a rush of customers requiring help from his computer business.
-
I am wondering if the error message is showing because the modem is in constant use screening phone calls?
-
If that's what it's supposed to do then why should sfc snag it ?
Does Event Viewer have anything on anything failing ?
-
Yes, the fx error is still showing up. I don't see anything of significance in the event viewer.