Fascinating Windows problem
Is been long time since i last post...i have a terrible working time for the last 2 week....
Basically, i only have half day off at Sunday last week and i was in office for 10 straight day...
Day and night shift shuffle...
now i feel the terrible effect of human body clock...I need Yoko-Yoko muscle relaxer ....
Just find excuse for not updating the blog 175; ......O
Anyway, those who close to me might know i having a small car accident last month after GACC and i left almost all my stuff in my friend house back there. And, ya, that include my daily workstation and my File-Server 1.
I only manage to bring back my essential stuff and my 2 notebook since i came back by bus. One of the notebook is already full of battle-scar and the HDD have been severely damage All thx to 4 year of 24 7 abusing as portable workstation HP server and it kinda too slow for my daily use - It is one of the first Centrino Notebook that time and this the cheapest 12 model i can find in the market :
So, i have no other choice but to use my company notebook instead - One solid build of DELL Latitude D610 with 1GB RAM.
Although is not Core 2 Duo Damn those newcomer with D620 but with Huge screen 14 160;1400x1050 , 160;the 160;D610 160;is 160;quite 160;a 160;tough 160;notebook. hey, 160;it 160;survive 160;a 160;car 160;accident!
he notebook is working nicely, it is aWindow 160;XP 160;Pro 160;on Pentium-M 2GHz with 1GB Ram but i notice something wasn t quite right when i use it at home.
he notebook boot up and running quite fast in Office but sometime it half-frozen 160; Only 160;half 160;of 160;the 160;window 160;work for like 5-10min when i boot it up at home. Due to my lazy-ness, i didn t bother it and just think it was just a random case. oo bad, it wasn t, it come back every few time i reboot the computer. Unlike some people who immediate start accusing Bill Gate for their crappy product, 160;i 160;am 160;a 160;E-forensic 160;guy 160;and i going to fix it now. ruth: it started to annoy me XD
Analysis:
Symantec Antivirus
I did reinstall SAV a few time due to testing purpose but SAV alone shouldn t cause the mysterious freeze Although it was a pain in the ass to make it work nicely . 160;A 160;check 160;on 160;task 160;manager 160;during 160;the 160;freeze 160;show 160;RVSCAN.EXE 160;take 160;no 160;CPU-cycle. 160;SAV 160;wasn t 160;the 160;culprit.
Malicious Program
Virus worm spyware rootkit? Nah, i don t go to porn site nor download weird pirated game anyway. Plus my window is probably patch up and i pretty sure my com is clean and fast.
Hmm...then, this must be some kind of window bug.... Wait !! Did i notice there is a pattern about the freeze? Let me recall, it doesn t freeze when i in the office !!!
Office --> Wire-connection --> Domain environment --> GPO is Domain
Home --> Wire Wireless-connection --> Local environment 160;--> 160;GPO 160;is 160;Local
Ah!! Maybe is the domain issue !! But then, in this case, the problem should be reproduce everytime i not in office...but i only encounter 160;it a few time only...maybe is GPO?
Action is better than just talk, launch up my event viewer and take a look what really happen during the freeze time Sidenote: Vista Event Viewer pawned XP, is so detail
he computer boot up at 9.00pm and it was freeze for like 5min before all my startup application start running....what this EAPOL thing doing during that time? his is suspicious.
Check wiki and MSDN, found out EAPOL EAP Over LAN. Extensible Authentication Protocol EAP defines a standard message exchange that allows a server to authenticate a client based on an authentication protocol agreed upon by both parties and it commonly used as part of the 802.1X authentication.
Aha!!! 802.1X !! Wireless !! And i now remember everytime i have this problem, i must be on wireless connection !!
A quick check on MSDN show this might be the reason when my notebook acting up. From the event log, it show the services suddenly started and stopped immediately. his is a typical case for a faulty driver lock out.
Now i found the problem...how do i solve it?
Simple. Just disable 802.1X authentication on your network adapter XD. 160;Control 160;Panel 160;-> 160;Network 160;Option 160;-> 160;Wireless 160;Adapter 160;-> 160;Properties 160;-> 160;Authentication. Unchecked the 802.1X thing.
he hell? Why i can t find the option in my network adapter? Argh, i forgot about GPO
GPO Group Policy Object simply say, is the windows setting that enforce to the computer by the 160;Domain Administrator. 160;For 160;my 160;company, 160;the 160;local 160;GPO 160;is 160;set to a high security way that it hide the Authentication tab It force firewall on too . I know how to overide the setting but everytime i connected back in Office domain network, it will reset back again.
hink....i can t disable this thing, perhap there another way? Some hidden registry key or something? Before i start google the internet, i notice one thing. I am using Intel ProSet rather than window build-in Wireless manager. My Wireless network is manage by the Intel driver....can i just disable window build-in wireless manager?
A 160;check 160;in 160;google 160;show 160;that 160;the 160;Wireless Zero Configuration service did manage the EAPOL too. Yippie Services.exe -> Wireless Zero Configuration -> Disabled.
Restarted computer a few time to test it out. I no longer have the problem !!! Yup, case closed.
After thought:
I having the freeze problem due to EAPOL. It suppose to be the better security measure for wireless connection and my cheap access point at home is not supporting it. he freeze problem occured if my window build-in wireless manager started before Intel ProSet software and start making connection to the wireless access point. Since my AP 160;don t 160;support 160;the 160;feature, 160;window 160;is 160;not 160;getting 160;any 160;response 160;and 160;it 160;lock 160;out 160;for 160;few 160;minute.
he problem is not appear if Intel ProSet managed to start first it disable the window one
Why i don t face this error when i in office? I have docking station which is connected to network via Wire and the wireless network is all running on Cisco hardware.
Computer ain t that hard, you just need to understand it.
PS: It took me just 10min to diagnosis the root cause and fix the problem but an hour for me to write this article. >3
Basically, i only have half day off at Sunday last week and i was in office for 10 straight day...
Day and night shift shuffle...
now i feel the terrible effect of human body clock...I need Yoko-Yoko muscle relaxer ....
Just find excuse for not updating the blog 175; ......O
Anyway, those who close to me might know i having a small car accident last month after GACC and i left almost all my stuff in my friend house back there. And, ya, that include my daily workstation and my File-Server 1.
I only manage to bring back my essential stuff and my 2 notebook since i came back by bus. One of the notebook is already full of battle-scar and the HDD have been severely damage All thx to 4 year of 24 7 abusing as portable workstation HP server and it kinda too slow for my daily use - It is one of the first Centrino Notebook that time and this the cheapest 12 model i can find in the market :
So, i have no other choice but to use my company notebook instead - One solid build of DELL Latitude D610 with 1GB RAM.
Although is not Core 2 Duo Damn those newcomer with D620 but with Huge screen 14 160;1400x1050 , 160;the 160;D610 160;is 160;quite 160;a 160;tough 160;notebook. hey, 160;it 160;survive 160;a 160;car 160;accident!
he notebook is working nicely, it is aWindow 160;XP 160;Pro 160;on Pentium-M 2GHz with 1GB Ram but i notice something wasn t quite right when i use it at home.
he notebook boot up and running quite fast in Office but sometime it half-frozen 160; Only 160;half 160;of 160;the 160;window 160;work for like 5-10min when i boot it up at home. Due to my lazy-ness, i didn t bother it and just think it was just a random case. oo bad, it wasn t, it come back every few time i reboot the computer. Unlike some people who immediate start accusing Bill Gate for their crappy product, 160;i 160;am 160;a 160;E-forensic 160;guy 160;and i going to fix it now. ruth: it started to annoy me XD
Analysis:
Symantec Antivirus
I did reinstall SAV a few time due to testing purpose but SAV alone shouldn t cause the mysterious freeze Although it was a pain in the ass to make it work nicely . 160;A 160;check 160;on 160;task 160;manager 160;during 160;the 160;freeze 160;show 160;RVSCAN.EXE 160;take 160;no 160;CPU-cycle. 160;SAV 160;wasn t 160;the 160;culprit.
Malicious Program
Virus worm spyware rootkit? Nah, i don t go to porn site nor download weird pirated game anyway. Plus my window is probably patch up and i pretty sure my com is clean and fast.
Hmm...then, this must be some kind of window bug.... Wait !! Did i notice there is a pattern about the freeze? Let me recall, it doesn t freeze when i in the office !!!
Office --> Wire-connection --> Domain environment --> GPO is Domain
Home --> Wire Wireless-connection --> Local environment 160;--> 160;GPO 160;is 160;Local
Ah!! Maybe is the domain issue !! But then, in this case, the problem should be reproduce everytime i not in office...but i only encounter 160;it a few time only...maybe is GPO?
Action is better than just talk, launch up my event viewer and take a look what really happen during the freeze time Sidenote: Vista Event Viewer pawned XP, is so detail
he computer boot up at 9.00pm and it was freeze for like 5min before all my startup application start running....what this EAPOL thing doing during that time? his is suspicious.
Check wiki and MSDN, found out EAPOL EAP Over LAN. Extensible Authentication Protocol EAP defines a standard message exchange that allows a server to authenticate a client based on an authentication protocol agreed upon by both parties and it commonly used as part of the 802.1X authentication.
Aha!!! 802.1X !! Wireless !! And i now remember everytime i have this problem, i must be on wireless connection !!
A quick check on MSDN show this might be the reason when my notebook acting up. From the event log, it show the services suddenly started and stopped immediately. his is a typical case for a faulty driver lock out.
Now i found the problem...how do i solve it?
Simple. Just disable 802.1X authentication on your network adapter XD. 160;Control 160;Panel 160;-> 160;Network 160;Option 160;-> 160;Wireless 160;Adapter 160;-> 160;Properties 160;-> 160;Authentication. Unchecked the 802.1X thing.
he hell? Why i can t find the option in my network adapter? Argh, i forgot about GPO
GPO Group Policy Object simply say, is the windows setting that enforce to the computer by the 160;Domain Administrator. 160;For 160;my 160;company, 160;the 160;local 160;GPO 160;is 160;set to a high security way that it hide the Authentication tab It force firewall on too . I know how to overide the setting but everytime i connected back in Office domain network, it will reset back again.
hink....i can t disable this thing, perhap there another way? Some hidden registry key or something? Before i start google the internet, i notice one thing. I am using Intel ProSet rather than window build-in Wireless manager. My Wireless network is manage by the Intel driver....can i just disable window build-in wireless manager?
A 160;check 160;in 160;google 160;show 160;that 160;the 160;Wireless Zero Configuration service did manage the EAPOL too. Yippie Services.exe -> Wireless Zero Configuration -> Disabled.
Restarted computer a few time to test it out. I no longer have the problem !!! Yup, case closed.
After thought:
I having the freeze problem due to EAPOL. It suppose to be the better security measure for wireless connection and my cheap access point at home is not supporting it. he freeze problem occured if my window build-in wireless manager started before Intel ProSet software and start making connection to the wireless access point. Since my AP 160;don t 160;support 160;the 160;feature, 160;window 160;is 160;not 160;getting 160;any 160;response 160;and 160;it 160;lock 160;out 160;for 160;few 160;minute.
he problem is not appear if Intel ProSet managed to start first it disable the window one
Why i don t face this error when i in office? I have docking station which is connected to network via Wire and the wireless network is all running on Cisco hardware.
Computer ain t that hard, you just need to understand it.
PS: It took me just 10min to diagnosis the root cause and fix the problem but an hour for me to write this article. >3