PS In the result column also look for NAME NOT FOUND,
--
..
--
"DavidMCandy" wrote in message news:087c3ce2-e56d-4da5-94f7-f6a76a466fff...
> NTSD was part of XP. Seems it was removed from Vista. Would have been
> handy.
>
> I'll give directions on how to do it. We'll let the poster decide if they
> can do it.
>
> Download Process Monitor (procmon) from
> http://technet.microsoft.com/en-us/sysinternals/bb896645
>
> It doesn't require installation. It's in a zip file and will work anywhere
> you put it. You can even dbl click it in the zip file.
>
> Firstly start the Services application. Click Start - Control Panel -
> choose Classic View in left hand pane - choose Administrative Tools, then
> Services. Leave the program open.
>
> Double click Procmon. The program opens to the Filter dialog. To get back
> here click Filter menu - Filter...
>
> The filter dialog has four drop down comboboxes or listboxes along the top
> of the dialog. Enter the following critera into the drop down
> combo/listboxes and click the Add button after each line.
>
> Process Name Contains Services.exe Include
> Process Name Contains SLSvc.exe Include
> Event Class Is File System Include
> Result Is Not Sucess Include
>
>
> Click the Ok button. Go to the Filter menu and make sure Drop Filtered
> Events is ticked.
>
> Switch back to the Services application. Right click Software Licensing
> Service and choose Start. Wait for it to start and fail. Switch back to
> Procmon. Click File menu - and clear the tick next to Capture Events.
>
> In the Result column we are looking for File Not Found or Path Not Found.
> In testing on my system there is a file called
> C:\Windows\system32\ui\SwDRM.dll which isn't found which must be normal.
>
> If you have Excel you can sort the data there. In Procmon click in the
> Event list, press the Home key, then Shift + End. Then click the Edit menu
> then Copy. Switch or start Excel and choose Edit menu then Paste. Go to
> column G and choose Data menu then Sort. Scroll down to either File Not
> Found or Path Not Found.
>
> Don't post the whole output here. It's too big. Do select a line and
> choose Edit menu - Copy to copy the line with a File Not Found or Path Not
> Found result.
>
> If you need someone to peruse it for you. Save the events in a file. Click
> File menu then Save. Choose Comma Seperated Values (CSV). Upload to your
> Public folder on Skydrive.
>
> Skydrive is Microsoft's Windows Live file upload site.
> http://explore.live.com/skydrive
>
> If you have downloaded any of the Live applications or have a web based
> live
> mail account you already have access to your Skydrive.
>
> Put your event list in the public folder and copy the link from the
> address bar.
>
> --
>
> --
> "Noel D Paton" wrote in message
> news:665ad472-48d0-415a-b648-734550de0121...
>> "DavidMCandy" wrote in message
>> news:aff9e9af-b8bb-4117-b0a7-62e1f478d53e...
>> Noel
>>
>> Have you tried running ProcMon
>> (http://technet.microsoft.com/en-us/sysinternals/bb896645
>> to track it down before?
>>
>>
>>
>>
>> I think that ProcMon is probably beyond most posters here (heck,
>> it’s probably beyond me, in terms of talking someone through it)
>> – the problem is to know what the output should look like, and be
>> able to spot the differences, without all the side-chatter from
>> irrelevant procs.
>> Doing that by remote would be possible (maybe) but not in a forum
>> context, I don’t think.
>>
>> --------------------------------------------------------------------------------
>> Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed
>> Sloth
