Wanted to drop everyone a line about the following issue we recently experienced:
Windows 2003 Standard 32-bit SP2 guest VM running some IIS apps and another incident ticketing app. The server was patched with KB958644 and the following day experienced the following errors (similar to this thread: File Server problems after P2V):
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 3/12/2008
Time: 12:51:09 PM
User: N/A
Computer: scrubxxx
Description:
This computer was not able to set up a secure session with a domain controller in domain SCRUBDomain due to the following:
Not enough storage is available to process this command.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 3/12/2008
Time: 12:45:03 PM
User: NT AUTHORITY\SYSTEM
Computer: scrubxxx
Description:
Windows cannot determine the user or computer name. (Not enough storage is available to complete this operation. ). Group Policy processing aborted.-----
Attempting to RDP to the server would get these error messages:
"The system cannot log you on due to the following error: The RPC server is unavailable."
"The system cannot log you on due to the following error: Access is denied."
After investigation, it was determined that all 5000 ports available to the OS were in a CLOSE_WAIT state and no further ports could be created. The faulting application was the ticketing system and disabing the services for the application restored the server. It is theorized that the ticketing app's code (possibly in relation to netapi.dll) was broken or otherwise disturbed by KB958644.
I would appreciat it if anyone else would post their experiences with KB958644 in guest VMs. Thank you.