SBS 2003 fails to boot (Gray screen after Windows splash screen)

Gray screen of death - part two

E-Bitz - SBS MVP the Official Blog of the SBS "Diva" — Sat, 02 Sep 2006 03:43:43 GMT

The Official SBS Blog : SBS 2003 fails to boot (Gray screen after Windows splash screen): http://blogs.technet.com/sbs/archive/2006/09/01/453504.aspx...

Gray Screen of death - part 2

E-Bitz - SBS MVP the Official Blog of the SBS "Diva" — Sat, 02 Sep 2006 03:54:42 GMT

The Official SBS Blog : SBS 2003 fails to boot (Gray screen after Windows splash screen): http://blogs.technet.com/sbs/archive/2006/09/01/453504.aspx...

ETrust definition build 30.3.3054 nuking Windows Server 2003

Spyware Sucks — Sat, 02 Sep 2006 04:00:43 GMT

ETrust is misdetecting lsass.exe as Win32/Lassrv.B, leaving servers unbootable.&nbsp;
Instructions on...

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Wayne — Sat, 02 Sep 2006 08:24:24 GMT

What would you recommend if the boot drives are on a CERC raid array and the recovery console does not recognize them?

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Thomas Barnhardt — Sun, 03 Sep 2006 07:36:13 GMT

Great Timing, Labor Day weekend. Thank you.

Some people will have surprises when they get back from the Holidays

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Martyn Bridgen — Mon, 04 Sep 2006 15:09:20 GMT

You saved my bacon, thanks - the person at CA who did this needs to hang up their boots - far out - your antivirus software kills your server! THANKS AGAIN

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Greatful — Mon, 04 Sep 2006 16:22:47 GMT

Thank you for this blog article. You have saved us alot of time!!!

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Owen — Mon, 04 Sep 2006 16:47:26 GMT

CA Antivirus had removed the lsass service and I cannot get into our server. I've been trying for several days now and following some notes posted on various sites including the CA website. The problem is that i cannot get into safe mode.

Can somebody help.
Thanks

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

markstan — Mon, 04 Sep 2006 18:18:20 GMT

Wayne,
You need to make sure you press F6 when you start the boot process with the Windows CD to able to get prompted to provide the third party drivers required by your controller. Check with your vendor if you do not have them in a floppy.

Regards
The SBS Blog team

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

markstan — Mon, 04 Sep 2006 18:19:12 GMT

Hi Owen,
Check the BLOG post, notice how we try not to go into Safe Mode but rather into ther Recovery Console to be able to get the missing file back.

Regards,
The SBS Blog team

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Owen — Tue, 05 Sep 2006 04:30:59 GMT

I have 3 servers with the Gray screen of death I managed to fix one but when using method one item F boot into safe mode the following message is displayed "windows setup cannot run under safe mode. Setup will restart now.

When I try the other method 1a the services cannnot be found.

1) Disable "realtimeservice"

2) Disable "jobservice"

3) Disable "Etrust Rpcservice"

The only services I can find related to CA Vet Etrust are:-

CAisafe, vet-filt, vet-rec, veteboot,vetefile,vetfddnt,vetmonnt,vetmsgnt

Oh one other thing I contacted CA support in Australia the support staff informed me that the product was not supported with server 2003. I sent them a copy of the technical note from the CA website and confirmed that someone from CA is supporting the issue you have a technote(Tech405236) on your web site. Support then provided another number the corporate support number. I called that number the support staff from corporate support informed me to call the general support number

I am going to start a parallel install, rebuild the server and install another anti virus product. I have been using Vet for over 15 years and the support since cybec sold the IP to CA has been terrible.

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

RichM — Tue, 05 Sep 2006 07:35:55 GMT

I followed Method one, sure enough files were missing.

Can now boot to Safe Mode ok.

Still can't boot in Normal , just getting gray screen with arrow.

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

R. Paul Warriner — Tue, 05 Sep 2006 15:24:08 GMT

Oh, I am I glad I found you on Sunday, as I feel for the folks that truly tried to enjoy a well deserved holiday with this one.

McAfee with the Coffee anyone?

Thanks SBS Blog.

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

markstan — Tue, 05 Sep 2006 21:44:21 GMT

Hi RichM,

By now most likely your LSASS.EXE is gone again, try going back into ther recovery console, getting the file back in there, and then making sure you are disabling the AV services or else the file will get removed upon reboot into normal mode.

Regards,
The SBS Blog team

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

DJ — Wed, 06 Sep 2006 01:31:35 GMT

Re: Owen

CA is correct in stating that they no longer support Vet antivirus on 2003 server. They support it only on workstations. They expect you to use eTrust Corporate edition which comes with both eTrust & Vet engines on 2003 & other servers. The instructions shown here assume you are using the corporate edition which is supported on both workstations & servers

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Henry Kaye — Wed, 06 Sep 2006 08:46:57 GMT

I wish I had seen this stream last week!. I was getting the screen of death but couldn't get around it. In the end, I reformatted my server's hard disk and re-installed everything. Thank goodness, I ditched eTrust this time, because I am VERY dissatisfied with it for a number of other reasons - this is just the straw that broke the camel's back!

And following up on Owen's post above - the only reason I switched from AVG to eTrust was because they specifically mention compatibility with 2003!

Anyone want to join me in a class action against CA?
email me on henry.kaye@compued.com.au

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Steve — Wed, 06 Sep 2006 13:39:59 GMT

I wish I would have found this earlier than today. I would have had much less stress last weekend and I could have gone to the party on Monday. Our customer would be over $3000 richer too (Sixteen hours of troubleshooting can add up).
After doing a repair install (as a last resort before wipe and reload) the server booted and gave me a popup that lsass had crashed (oh no, not sasser). I finally had a lead. I couldn't figure out why lsass.exe kept getting deleted though. It didn't dawn on me that the antivirus software would take out this file. I used the recovery console to disable as many services as I could (AV included) copied lsass.exe back on and got the servers up. As soon as I reenabled the AV services, boom, down we went. Now I knew the culprit. Trend Micro, you will have a new customer by the end of the week.
Thanks for the fix regarding the HTTPFilter. I thought an IIS reinstall was going to be necessary.

DailyMicrosoftShot @vdpuetten.de » Blog Archiv » Panne bei CA-Antivirus legte Windows 2003 lahm

Wed, 06 Sep 2006 13:45:52 GMT

PingBack from http://www.vdpuetten.de/weblog/?p=575

ETrust definition build 30.3.3054 nuking Windows Server 2003

Spyware Sucks — Wed, 06 Sep 2006 13:51:27 GMT

ETrust is misdetecting lsass.exe as Win32/Lassrv.B, leaving servers unbootable. Instructions on how to

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

gh — Wed, 06 Sep 2006 18:00:55 GMT

Can you provide a quick rundown on extracting the file from the service pack. I have been unable to accomplish it.

Thanks

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

MCHammer — Thu, 07 Sep 2006 23:51:55 GMT

This thread also saved me a lot of time. I was lucky enough to not get the GSOD, but I do have some other issues. Remote Desktop Connection doesn't work, and IIS is also hosed. My lsass.exe is in its proper place. However, I don't have another server from which to import the registry key. My only other option appears to be to restore the entire registry from a backup (using CA backup software, LOL). Any suggestions?

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

TMAg — Fri, 08 Sep 2006 04:04:11 GMT

Having major problems still with with AD FRS, DC GPO and Exch03 services? CA has no clue - Does Anyone?

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Bill Jones — Mon, 11 Sep 2006 16:44:00 GMT

As far as the rdp issue caused by the ca 303.3.3054 update. Check out the microsoft article 329896. It worked for me on 4 different servers for different customers

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

RGS — Tue, 12 Sep 2006 01:19:07 GMT

Great information however I am experiencing a bit of a different problem. Windows Small Business Server 2003 SP1. Fresh install. After files are copied and set up reboots for the first time, the screen goes gray after initial splash screen.
Since this is a fresh install (all new hardware) the eTrust issue does not apply.

Any ideas? Thoughts? Thanks!

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

Linda J — Tue, 12 Sep 2006 19:25:33 GMT

This happened to 3 of our servers. I had to work the holiday weekend also. My agency is non-profit can not afford the cost of someone else's mistake. Who picks up the tab when we have to pay for outside support and overtime? Can we submit it to CA for reinbursement?

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

jcdiaz@trane.com — Tue, 12 Sep 2006 19:28:21 GMT

i have a windows 2003 server with eTrust 7.0, and i recover the server with your instruction but in this server i had Windows Services Update Services (WSUS) runing for our LAN computers. After recover this WSUS do not work.

Could you send me more information how recover the WSUS for windows 2003 server?

re: SBS 2003 fails to boot (Gray screen after Windows splash screen)

markstan — Tue, 12 Sep 2006 21:13:01 GMT

Hi,
In regards to WSUS, make sure you read the portion of the post that talks about the HTTPFilter missing as that will affect any hosted sites in your IIS, including WSUS.

Regards,
The SBS Blog team

Sysguy Blog » Blog Archives » SBS Grey Screen of Death

Sysguy Blog » Blog Archives » SBS Grey Screen of Death — Wed, 13 Sep 2006 20:54:25 GMT

PingBack from http://sysguy.com/wordpress/?p=25

lsass exe

lsass exe — Sat, 10 May 2008 23:48:07 GMT

PingBack from http://kingston.supermedianews.info/lsassexe.html

lsass

lsass — Wed, 14 May 2008 13:34:47 GMT

PingBack from http://faith.freeindiamusiconline.info/lsass.html

lsass exe

lsass exe — Tue, 02 Sep 2008 08:08:12 GMT

PingBack from http://jack.newsinfodirect.info/lsassexe.html

Server still functions, but cannot log in locally or remotely | keyongtech

Server still functions, but cannot log in locally or remotely | keyongtech — Sun, 18 Jan 2009 19:47:14 GMT

PingBack from http://www.keyongtech.com/2905618-server-still-functions-but-cannot

IIS auf SBS2003 defekt nach CA TEC405236 | hilpers

IIS auf SBS2003 defekt nach CA TEC405236 | hilpers — Tue, 20 Jan 2009 18:11:17 GMT

PingBack from http://www.hilpers.com/1044834-iis-auf-sbs2003-defekt-nach

Blank Login Screen, No Login Dialog Box - Remote Desktop and Local | keyongtech

Blank Login Screen, No Login Dialog Box - Remote Desktop and Local | keyongtech — Thu, 22 Jan 2009 04:46:43 GMT

PingBack from http://www.keyongtech.com/4193794-blank-login-screen-no-login

Plus de fenetre d'ouverture de session sur windows 2003 !!!! | hilpers

Plus de fenetre d'ouverture de session sur windows 2003 !!!! | hilpers — Thu, 22 Jan 2009 17:43:12 GMT

PingBack from http://www.hilpers.fr/456160-plus-de-fenetre-douverture-de

W3SVC-service is Stopped | hilpers

W3SVC-service is Stopped | hilpers — Fri, 23 Jan 2009 15:49:41 GMT

PingBack from http://www.hilpers.nl/447632-w3svc-service-is-stopped