When reinstalling Exchange 2010 I get fatal error during setup the setup log follows have checked permissions, GP, web.config, and anything else I can think of.
[11/17/2011 19:10:25.0731] [0] **********************************************
[11/17/2011 19:10:25.0731] [0] Starting Microsoft Exchange Server 2010 Setup
[11/17/2011 19:10:25.0731] [0] **********************************************
[11/17/2011 19:10:25.0731] [0] Local Time Zone: (UTC-06:00) Central Time (US & Canada).
[11/17/2011 19:10:25.0731] [0] Operating System version: Microsoft Windows NT 6.1.7601 Service Pack 1.
[11/17/2011 19:10:25.0731] [0] Setup version: 14.1.339.1.
[11/17/2011 19:10:25.0731] [0] Logged on user: MR238\ddennis.
[11/17/2011 19:10:26.0246] [0] Command Line Parameter Name='mode', Value='Install'.
[11/17/2011 19:10:26.0246] [0] Command Line Parameter Name='sourcedir', Value='D:\'.
[11/17/2011 19:10:26.0246] [0] Command Line Parameter Name='fromsetup', Value=''.
[11/17/2011 19:10:26.0246] [0] ExSetupUI was started with the following command: '-mode:install -sourcedir:D:" /FromSetup'.
[11/17/2011 19:10:26.0495] [0] Setup is choosing the domain controller to use
[11/17/2011 19:10:26.0527] [0] The MSExchangeADTopology has a persisted domain controller: HS.mr238.org
[11/17/2011 19:10:27.0104] [0] PrepareAD has been run, and has replicated to this domain controller; so setup will use HS.mr238.org
[11/17/2011 19:10:27.0104] [0] Setup is choosing a global catalog...
[11/17/2011 19:10:27.0119] [0] Setup has chosen the global catalog server HS.mr238.org.
[11/17/2011 19:10:27.0119] [0] Setup will use the domain controller 'HS.mr238.org'.
[11/17/2011 19:10:27.0119] [0] Setup will use the global catalog 'HS.mr238.org'.
[11/17/2011 19:10:27.0135] [0] Exchange configuration container for the organization is 'CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mr238,DC=org'.
[11/17/2011 19:10:27.0135] [0] Exchange organization container for the organization is 'CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mr238,DC=org'.
[11/17/2011 19:10:27.0182] [0] Setup will search for an Exchange Server object for the local machine with name 'EXCHANGE'.
[11/17/2011 19:10:27.0213] [0] Exchange Server object found : 'CN=EXCHANGE,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mr238,DC=org'.
[11/17/2011 19:10:27.0260] [0] The following roles have been unpacked: BridgeheadRole MailboxRole AdminToolsRole
[11/17/2011 19:10:27.0260] [0] The following datacenter roles are unpacked:
[11/17/2011 19:10:27.0260] [0] The following roles are installed: BridgeheadRole MailboxRole AdminToolsRole
[11/17/2011 19:10:27.0260] [0] The local server has some Exchange files installed.
[11/17/2011 19:10:27.0416] [0] Setup will use the path 'D:\' for installing Exchange.
[11/17/2011 19:10:27.0416] [0] Setup will discover the installed roles from server object 'CN=EXCHANGE,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mr238,DC=org'.
[11/17/2011 19:10:27.0416] [0] 'BridgeheadRole' is installed on the server object.
[11/17/2011 19:10:27.0416] [0] 'MailboxRole' is installed on the server object.
[11/17/2011 19:10:27.0416] [0] The installation mode is set to: 'Install'.
[11/17/2011 19:11:17.0399] [0] An Exchange organization with name 'First Organization' was found in this forest.
[11/17/2011 19:11:17.0399] [0] Active Directory Initialization status : 'True'.
[11/17/2011 19:11:17.0415] [0] Schema Update Required Status : 'False'.
[11/17/2011 19:11:17.0415] [0] Organization Configuration Update Required Status : 'False'.
[11/17/2011 19:11:17.0415] [0] Domain Configuration Update Required Status : 'False'.
[11/17/2011 19:11:17.0415] [0] The locally installed version is 14.1.218.15.
[11/17/2011 19:11:17.0415] [0] Exchange Installation Directory : 'F:\Program Files\Microsoft\Exchange Server\V14'.
[11/17/2011 19:11:17.0446] [0] Applying default role selection state
[11/17/2011 19:11:17.0477] [0] Setup is determining what organization-level operations to perform.
[11/17/2011 19:11:17.0477] [0] Because the value was specified, setup is setting the argument OrganizationName to the value First Organization.
[11/17/2011 19:11:17.0477] [0] Setup will run from path 'F:\Program Files\Microsoft\Exchange Server\V14\'.
[11/17/2011 19:11:17.0493] [0] InstallModeDataHandler has 0 DataHandlers
[11/17/2011 19:11:17.0493] [0] RootDataHandler has 1 DataHandlers
[11/17/2011 19:11:17.0914] [0] Setup encountered an exception when trying to access the setup state file: Could not find file 'C:\ExchangeSetupLogs\exchangeInstallState.xml'.
[11/17/2011 19:11:40.0020] [0] Setup is determining what organization-level operations to perform.
[11/17/2011 19:11:40.0020] [0] Because the value was specified, setup is setting the argument OrganizationName to the value First Organization.
[11/17/2011 19:11:40.0020] [0] Setup will run from path 'F:\Program Files\Microsoft\Exchange Server\V14\'.
[11/17/2011 19:11:40.0036] [0] InstallModeDataHandler has 6 DataHandlers
[11/17/2011 19:12:11.0876] [0] Validating options for the 0 requested roles
[11/17/2011 19:12:40.0924] [0] Validating options for the 0 requested roles
[11/17/2011 19:14:12.0389] [0] Validating options for the 0 requested roles
[11/17/2011 19:14:13.0294] [0] **************
[11/17/2011 19:14:13.0294] [0] Setup will run the task 'Start-PreConfiguration'
[11/17/2011 19:14:13.0294] [1] Setup launched task 'Start-PreConfiguration -Mode 'Install' -Roles 'ClientAccessRole''
[11/17/2011 19:14:13.0653] [1] Active Directory session settings for 'Start-PreConfiguration' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:13.0668] [1] Beginning processing Start-PreConfiguration -Mode:'Install' -Roles:'ClientAccessRole'
[11/17/2011 19:14:13.0699] [1] Loaded component 'Prereq Configuration' with 3 task information blocks from 'res://AllServerRolesPreConfig.xml'
[11/17/2011 19:14:13.0699] [1] Loaded component 'Prereq Configuration' with 1 task information blocks from 'res://AllADRolesPreConfig.xml'
[11/17/2011 19:14:13.0699] [1] Loaded component 'Prereq Configuration' with 5 task information blocks from 'res://ClientAccessPreConfig.xml'
[11/17/2011 19:14:14.0386] [1] Loaded 7 parameters from the configuration file "F:\Program Files\Microsoft\Exchange Server\V14\bin\EnterpriseServiceEndpointsConfig.xml".
[11/17/2011 19:14:14.0386] [1] Writing informational script to 'C:\ExchangeSetupLogs\Start-PreConfiguration-20111117-13141306991562273802.ps1'
[11/17/2011 19:14:14.0386] [1] Executing: $RoleADToolsNeeded = $False
[11/17/2011 19:14:14.0386] [1] Executing: $RoleBinPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Bin'
[11/17/2011 19:14:14.0401] [1] Executing: $RoleDatacenterPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Datacenter'
[11/17/2011 19:14:14.0401] [1] Executing: $RoleDatacenterServiceEndpointABCHContactService = '<ServiceEndpoint><Url>http://pvt-contacts.msn.com/abservice/abservice.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:14:14.0401] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:14:14.0401] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation2 = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation2.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:14:14.0401] [1] Executing: $RoleDatacenterServiceEndpointLiveFederationMetadata = '<ServiceEndpoint><Url>https://nexus.passport.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/17/2011 19:14:14.0401] [1] Executing: $RoleDatacenterServiceEndpointLiveGetUserRealm = '<ServiceEndpoint><Url>https://login.live.com/GetUserRealm.srf</Url></ServiceEndpoint>'
[11/17/2011 19:14:14.0401] [1] Executing: $RoleDatacenterServiceEndpointLiveServiceLogin2 = '<ServiceEndpoint><Url>https://login.live.com/RST2.srf</Url></ServiceEndpoint>'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleDatacenterServiceEndpointMsoFederationMetadata = '<ServiceEndpoint><Url>https://nexus.microsoftonline-p.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleInstallationMode = 'Install'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleInstallPath = 'F:\Program Files\Microsoft\Exchange Server\V14\'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleInstallWindowsComponents = $False
[11/17/2011 19:14:14.0417] [1] Executing: $RoleInvocationID = '20111117-13141306991562273802'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleIsDatacenter = $False
[11/17/2011 19:14:14.0417] [1] Executing: $RoleIsPartnerHosted = $False
[11/17/2011 19:14:14.0417] [1] Executing: $RoleIsServerSbs = $False
[11/17/2011 19:14:14.0417] [1] Executing: $RoleLoggingPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Logging'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleProductPlatform = 'amd64'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleRoles = 'ClientAccessRole'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleSetupLoggingPath = 'C:\ExchangeSetupLogs'
[11/17/2011 19:14:14.0417] [1] Executing: $RoleTargetVersion = '14.01.0339.001'
[11/17/2011 19:14:14.0417] [1] 9 tasks were found to execute.
[11/17/2011 19:14:14.0417] [1] Processing component 'Prereq Configuration' (Configuring the server.).
[11/17/2011 19:14:14.0417] [1] Executing:
if (Get-Service RemoteRegistry* | ?{$_.Name -eq 'RemoteRegistry'})
{
Set-Service RemoteRegistry -StartupType Automatic
Start-SetupService -ServiceName RemoteRegistry
}
[11/17/2011 19:14:14.0448] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:14.0448] [2] Beginning processing Start-SetupService -ServiceName:'RemoteRegistry'
[11/17/2011 19:14:14.0448] [2] Ending processing Start-SetupService
[11/17/2011 19:14:14.0448] [1] Executing:
if (Get-Service WinMgmt* | ?{$_.Name -eq 'WinMgmt'})
{
Set-Service WinMgmt -StartupType Automatic
Start-SetupService -ServiceName WinMgmt
}
[11/17/2011 19:14:14.0448] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:14.0448] [2] Beginning processing Start-SetupService -ServiceName:'WinMgmt'
[11/17/2011 19:14:14.0448] [2] Ending processing Start-SetupService
[11/17/2011 19:14:14.0464] [1] Executing:
$windowsVersion = [Environment]::OSVersion.Version
if ($windowsVersion.Major -eq 6 -and $windowsVersion.Minor -eq 0)
{
if (Get-Service MpsSvc* | ?{$_.Name -eq 'MpsSvc'})
{
Set-Service MpsSvc -StartupType Automatic
Start-SetupService -ServiceName MpsSvc
}
}
[11/17/2011 19:14:14.0464] [1] Processing component 'Prereq Configuration' (Configuring the server.).
[11/17/2011 19:14:14.0464] [1] Executing:
if (Get-Service W3Svc* | ?{$_.Name -eq 'W3Svc'})
{
Set-Service W3Svc -StartupType Automatic
Start-SetupService -ServiceName W3Svc
}
[11/17/2011 19:14:14.0479] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:14.0479] [2] Beginning processing Start-SetupService -ServiceName:'W3Svc'
[11/17/2011 19:14:14.0479] [2] Ending processing Start-SetupService
[11/17/2011 19:14:14.0479] [1] Processing component 'Prereq Configuration' (Configuring the server.).
[11/17/2011 19:14:14.0479] [1] Executing:
if($RoleInstallWindowsComponents)
{
# Install any Windows Roles or Features required for the Client Access role
Install-WindowsComponent -ShortNameForRole "CAS" -ADToolsNeeded $RoleADToolsNeeded
}
[11/17/2011 19:14:14.0479] [1] Executing:
if (Get-Service IISAdmin* | ?{$_.Name -eq 'IISAdmin'})
{
Set-Service IISAdmin -StartupType Automatic
Start-SetupService -ServiceName IISAdmin
}
[11/17/2011 19:14:14.0479] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:14.0479] [2] Beginning processing Start-SetupService -ServiceName:'IISAdmin'
[11/17/2011 19:14:14.0495] [2] Ending processing Start-SetupService
[11/17/2011 19:14:14.0495] [1] Executing:
if (Get-Service NetTcpPortSharing* | ?{$_.Name -eq 'NetTcpPortSharing'})
{
Set-Service NetTcpPortSharing -StartupType Automatic
}
[11/17/2011 19:14:14.0495] [1] Executing:
if (Get-Service EventSystem* | ?{$_.Name -eq 'EventSystem'})
{
Set-Service EventSystem -StartupType Automatic
Start-SetupService -ServiceName EventSystem
}
[11/17/2011 19:14:14.0511] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:14.0511] [2] Beginning processing Start-SetupService -ServiceName:'EventSystem'
[11/17/2011 19:14:14.0511] [2] Ending processing Start-SetupService
[11/17/2011 19:14:14.0511] [1] Executing:
if (Get-Service MSDTC* | ?{$_.Name -eq 'MSDTC'})
{
Set-Service MSDTC -StartupType Automatic
Start-SetupService -ServiceName MSDTC
}
[11/17/2011 19:14:14.0511] [2] Active Directory session settings for 'start-SetupService' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:14.0511] [2] Beginning processing Start-SetupService -ServiceName:'MSDTC'
[11/17/2011 19:14:14.0511] [2] Ending processing Start-SetupService
[11/17/2011 19:14:14.0511] [1] Finished executing component tasks.
[11/17/2011 19:14:14.0557] [1] Ending processing Start-PreConfiguration
[11/17/2011 19:14:14.0604] [0] **************
[11/17/2011 19:14:14.0604] [0] Setup will run the task 'test-setuphealth'
[11/17/2011 19:14:14.0604] [1] Setup launched task 'test-setuphealth -DomainController 'HS.mr238.org' -DownloadConfigurationUpdates $true -ExchangeVersion '14.1.339.1' -Roles 'ClientAccess' -ScanType 'PrecheckInstall' -SetupRoles 'ClientAccess' -TargetDir 'F:\Program Files\Microsoft\Exchange Server\V14' -IISInstalled $true -CustomerFeedbackEnabled $false'
[11/17/2011 19:14:14.0620] [1] Active Directory session settings for 'test-SetupHealth' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:14.0620] [1] Beginning processing test-setuphealth -DomainController:'HS.mr238.org' -DownloadConfigurationUpdates:'True' -ExchangeVersion:'14.1.339.1' -Roles:'ClientAccess' -ScanType:'PrecheckInstall' -SetupRoles:'ClientAccess' -TargetDir:'F:\Program Files\Microsoft\Exchange Server\V14' -IISInstalled:'True' -CustomerFeedbackEnabled:'False'
[11/17/2011 19:14:22.0903] [1] Active Directory session settings for 'Get-OrganizationConfig' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:14:22.0903] [1] Beginning processing Get-OrganizationConfig
[11/17/2011 19:14:22.0903] [1] Searching objects of type "OrganizationConfig" with filter "$null", scope "SubTree" under the root "$null".
[11/17/2011 19:14:22.0935] [1] Previous operation run on domain controller 'HS.mr238.org'.
[11/17/2011 19:14:22.0935] [1] Preparing to output objects. The maximum size of the result set is "unlimited".
[11/17/2011 19:14:23.0184] [1] Ending processing Get-OrganizationConfig
[11/17/2011 19:14:47.0552] [1] Ending processing test-setuphealth
[11/17/2011 19:15:28.0160] [0] Setup is determining what organization-level operations to perform.
[11/17/2011 19:15:28.0160] [0] Because the value was specified, setup is setting the argument OrganizationName to the value First Organization.
[11/17/2011 19:15:28.0160] [0] Setup will run from path 'F:\Program Files\Microsoft\Exchange Server\V14\'.
[11/17/2011 19:15:28.0160] [0] InstallModeDataHandler has 6 DataHandlers
[11/17/2011 19:15:28.0160] [0] RootDataHandler has 1 DataHandlers
[11/17/2011 19:15:28.0503] [0] **************
[11/17/2011 19:15:28.0503] [0] Setup will run the task 'Start-PreSetup'
[11/17/2011 19:15:28.0503] [1] Setup launched task 'Start-PreSetup -Mode 'Install' -Roles 'ClientAccessRole''
[11/17/2011 19:15:28.0503] [1] Active Directory session settings for 'Start-PreSetup' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:15:28.0503] [1] Beginning processing Start-PreSetup -Mode:'Install' -Roles:'ClientAccessRole'
[11/17/2011 19:15:28.0534] [1] Loaded component 'All Roles Pre Setup' with 3 task information blocks from 'res://AllRolesPreSetupComponent.xml'
[11/17/2011 19:15:28.0534] [1] Loaded component 'Datacenter All Roles PreSetup' with 1 task information blocks from 'res://DatacenterAllRolesPreSetupComponent.xml'
[11/17/2011 19:15:28.0534] [1] Loaded component 'Client Access PreSetup' with 1 task information blocks from 'res://ClientAccessPreSetupComponent.xml'
[11/17/2011 19:15:28.0534] [1] Loaded component 'Datacenter Client Access PreSetup' with 1 task information blocks from 'res://DatacenterClientAccessPreSetupComponent.xml'
[11/17/2011 19:15:28.0550] [1] Loaded component 'All Roles Pre Setup Last' with 1 task information blocks from 'res://AllRolesPreSetupLastComponent.xml'
[11/17/2011 19:15:28.0550] [1] Loaded 7 parameters from the configuration file "F:\Program Files\Microsoft\Exchange Server\V14\bin\EnterpriseServiceEndpointsConfig.xml".
[11/17/2011 19:15:28.0550] [1] Writing informational script to 'C:\ExchangeSetupLogs\Start-PreSetup-20111117-13152805501269886028.ps1'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleBinPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Bin'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Datacenter'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterServiceEndpointABCHContactService = '<ServiceEndpoint><Url>http://pvt-contacts.msn.com/abservice/abservice.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation2 = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation2.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterServiceEndpointLiveFederationMetadata = '<ServiceEndpoint><Url>https://nexus.passport.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterServiceEndpointLiveGetUserRealm = '<ServiceEndpoint><Url>https://login.live.com/GetUserRealm.srf</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterServiceEndpointLiveServiceLogin2 = '<ServiceEndpoint><Url>https://login.live.com/RST2.srf</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleDatacenterServiceEndpointMsoFederationMetadata = '<ServiceEndpoint><Url>https://nexus.microsoftonline-p.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleInstallationMode = 'Install'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleInstallPath = 'F:\Program Files\Microsoft\Exchange Server\V14\'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleInvocationID = '20111117-13152805501269886028'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleIsDatacenter = $False
[11/17/2011 19:15:28.0550] [1] Executing: $RoleIsPartnerHosted = $False
[11/17/2011 19:15:28.0550] [1] Executing: $RoleIsServerSbs = $False
[11/17/2011 19:15:28.0550] [1] Executing: $RoleLoggingPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Logging'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleMsiInstallPath = 'F:\Program Files\Microsoft\Exchange Server\V14\'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleMsiInstallPathBin = 'F:\Program Files\Microsoft\Exchange Server\V14\Bin'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleProductPlatform = 'amd64'
[11/17/2011 19:15:28.0550] [1] Executing: $RoleRoles = 'ClientAccessRole'
[11/17/2011 19:15:28.0565] [1] Executing: $RoleSetupLoggingPath = 'C:\ExchangeSetupLogs'
[11/17/2011 19:15:28.0565] [1] Executing: $RoleTargetVersion = '14.01.0339.001'
[11/17/2011 19:15:28.0565] [1] 0 tasks were found to execute.
[11/17/2011 19:15:28.0565] [1] Processing component 'All Roles Pre Setup' (Preparing Setup for all Exchange server roles.).
[11/17/2011 19:15:28.0565] [1] Processing component 'Client Access PreSetup' (Preparing Setup for Client Access server role installation.).
[11/17/2011 19:15:28.0565] [1] Processing component 'All Roles Pre Setup Last' (Configuring the server.).
[11/17/2011 19:15:28.0565] [1] Finished executing component tasks.
[11/17/2011 19:15:28.0643] [1] Ending processing Start-PreSetup
[11/17/2011 19:15:28.0643] [0] **************
[11/17/2011 19:15:28.0643] [0] Setup will run the task 'Start-PreFileCopy'
[11/17/2011 19:15:28.0643] [1] Setup launched task 'Start-PreFileCopy -Mode 'Install' -Roles 'ClientAccessRole''
[11/17/2011 19:15:28.0659] [1] Active Directory session settings for 'Start-PreFileCopy' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:15:28.0659] [1] Beginning processing Start-PreFileCopy -Mode:'Install' -Roles:'ClientAccessRole'
[11/17/2011 19:15:28.0706] [1] Loaded component 'All Roles Pre File Copy' with 4 task information blocks from 'res://AllRolesPreFileCopyComponent.xml'
[11/17/2011 19:15:28.0706] [1] Loaded 7 parameters from the configuration file "F:\Program Files\Microsoft\Exchange Server\V14\bin\EnterpriseServiceEndpointsConfig.xml".
[11/17/2011 19:15:28.0706] [1] Writing informational script to 'C:\ExchangeSetupLogs\Start-PreFileCopy-20111117-13152807061586562721.ps1'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleBinPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Bin'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Datacenter'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterServiceEndpointABCHContactService = '<ServiceEndpoint><Url>http://pvt-contacts.msn.com/abservice/abservice.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterServiceEndpointDomainPartnerManageDelegation2 = '<ServiceEndpoint><Url>https://domains.live.com/service/managedelegation2.asmx</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterServiceEndpointLiveFederationMetadata = '<ServiceEndpoint><Url>https://nexus.passport.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterServiceEndpointLiveGetUserRealm = '<ServiceEndpoint><Url>https://login.live.com/GetUserRealm.srf</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterServiceEndpointLiveServiceLogin2 = '<ServiceEndpoint><Url>https://login.live.com/RST2.srf</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleDatacenterServiceEndpointMsoFederationMetadata = '<ServiceEndpoint><Url>https://nexus.microsoftonline-p.com/FederationMetadata/2006-12/FederationMetadata.xml</Url></ServiceEndpoint>'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleInstallationMode = 'Install'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleInstallPath = 'F:\Program Files\Microsoft\Exchange Server\V14\'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleInvocationID = '20111117-13152807061586562721'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleIsDatacenter = $False
[11/17/2011 19:15:28.0706] [1] Executing: $RoleIsPartnerHosted = $False
[11/17/2011 19:15:28.0706] [1] Executing: $RoleIsServerSbs = $False
[11/17/2011 19:15:28.0706] [1] Executing: $RoleLoggingPath = 'F:\Program Files\Microsoft\Exchange Server\V14\Logging'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleProductPlatform = 'amd64'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleRoles = 'ClientAccessRole'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleSetupLoggingPath = 'C:\ExchangeSetupLogs'
[11/17/2011 19:15:28.0706] [1] Executing: $RoleTargetVersion = '14.01.0339.001'
[11/17/2011 19:15:28.0706] [1] 2 tasks were found to execute.
[11/17/2011 19:15:28.0706] [1] Processing component 'All Roles Pre File Copy' (Configuring the server.).
[11/17/2011 19:15:28.0721] [1] Executing:
$roleList = $RoleRoles.Replace('Role','').Split(',');
if($roleList -contains 'LanguagePacks')
{
& $RoleBinPath\ServiceControl.ps1 Save
& $RoleBinPath\ServiceControl.ps1 DisableServices $roleList;
& $RoleBinPath\ServiceControl.ps1 Stop $roleList;
};
[11/17/2011 19:15:28.0721] [1] Executing (non-critical):
Write-ExchangeSetupLog -Info "Listing all processes and the files held open by each process after known services has been stopped.";
$sb = new-object system.text.stringbuilder;
get-process |
sort Id |
%{ $o = @{}; $p = $_; $p.Modules | %{ $m = $_; if($m.FileName -like '*') {$o.Id = $p.Id; $o.Process = $p.Name; $o.Module = $m.FileName }; $o } } |
%{ $null = $sb.AppendFormat("{0}, {1}, {2}",$_.Id,$_.Process,$_.Module); $sb.AppendLine(); };
Write-ExchangeSetupLog -Info $sb.ToString();
[11/17/2011 19:15:28.0721] [2] Listing all processes and the files held open by each process after known services has been stopped.
[11/17/2011 19:15:29.0392] [2] 0, Idle,
4, System,
284, smss,
308, svchost,
452, csrss,
492, csrss,
500, wininit,
552, winlogon,
576, services,
600, lsass,
608, lsm,
652, svchost,
700, svchost,
788, svchost,
864, LogonUI,
872, svchost,
920, svchost,
968, svchost,
1020, svchost,
1132, spoolsv,
1208, svchost,
1236, svchost,
1264, inetinfo,
1340, MSExchangeADTopologyService,
1484, msftesql,
1532, svchost,
1552, SMSvcHost,
1576, Setup, D:\Setup.EXE
1576, Setup, C:\Windows\SYSTEM32\ntdll.dll
1576, Setup, C:\Windows\system32\kernel32.dll
1576, Setup, C:\Windows\system32\KERNELBASE.dll
1576, Setup, C:\Windows\system32\ADVAPI32.dll
1576, Setup, C:\Windows\system32\msvcrt.dll
1576, Setup, C:\Windows\SYSTEM32\sechost.dll
1576, Setup, C:\Windows\system32\RPCRT4.dll
1576, Setup, C:\Windows\system32\GDI32.dll
1576, Setup, C:\Windows\system32\USER32.dll
1576, Setup, C:\Windows\system32\LPK.dll
1576, Setup, C:\Windows\system32\USP10.dll
1576, Setup, C:\Windows\system32\SHELL32.dll
1576, Setup, C:\Windows\system32\SHLWAPI.dll
1576, Setup, C:\Windows\system32\ole32.dll
1576, Setup, C:\Windows\system32\OLEAUT32.dll
1576, Setup, C:\Windows\system32\dbghelp.dll
1576, Setup, C:\Windows\system32\wer.dll
1576, Setup, C:\Windows\system32\PSAPI.DLL
1576, Setup, C:\Windows\system32\VERSION.dll
1576, Setup, C:\Windows\system32\msi.dll
1576, Setup, C:\Windows\system32\CRYPT32.dll
1576, Setup, C:\Windows\system32\MSASN1.dll
1576, Setup, C:\Windows\system32\WINTRUST.dll
1576, Setup, C:\Windows\system32\IMM32.DLL
1576, Setup, C:\Windows\system32\MSCTF.dll
1576, Setup, C:\Windows\system32\CRYPTBASE.dll
1576, Setup, C:\Windows\system32\CLBCatQ.DLL
1576, Setup, C:\Windows\System32\ieframe.dll
1576, Setup, C:\Windows\System32\OLEACC.dll
1576, Setup, C:\Windows\system32\iertutil.dll
1576, Setup, C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll
1576, Setup, C:\Windows\system32\urlmon.dll
1576, Setup, C:\Windows\system32\WININET.dll
1576, Setup, C:\Windows\system32\Normaliz.dll
1576, Setup, C:\Windows\system32\PROPSYS.dll
1576, Setup, C:\Windows\system32\ntmarta.dll
1576, Setup, C:\Windows\system32\WLDAP32.dll
1576, Setup, C:\Windows\system32\apphelp.dll
1576, Setup, C:\Windows\system32\Secur32.dll
1576, Setup, C:\Windows\system32\SSPICLI.DLL
1576, Setup, C:\Windows\system32\SETUPAPI.dll
1576, Setup, C:\Windows\system32\CFGMGR32.dll
1576, Setup, C:\Windows\system32\DEVOBJ.dll
1576, Setup, C:\Windows\System32\mshtml.dll
1576, Setup, C:\Windows\system32\SXS.DLL
1576, Setup, C:\Windows\system32\profapi.dll
1576, Setup, C:\Windows\system32\WS2_32.dll
1576, Setup, C:\Windows\system32\NSI.dll
1576, Setup, C:\Windows\system32\dnsapi.DLL
1576, Setup, C:\Windows\system32\iphlpapi.DLL
1576, Setup, C:\Windows\system32\WINNSI.DLL
1576, Setup, C:\Windows\system32\RASAPI32.dll
1576, Setup, C:\Windows\system32\rasman.dll
1576, Setup, C:\Windows\system32\rtutils.dll
1576, Setup, C:\Windows\system32\msimtf.dll
1576, Setup, C:\Windows\System32\jscript9.dll
1576, Setup, C:\Windows\system32\sensapi.dll
1576, Setup, C:\Windows\system32\MLANG.dll
1576, Setup, C:\Windows\system32\d2d1.dll
1576, Setup, C:\Windows\system32\DWrite.dll
1576, Setup, C:\Windows\system32\dxgi.dll
1576, Setup, C:\Windows\system32\dwmapi.dll
1576, Setup, C:\Windows\system32\d3d10_1.dll
1576, Setup, C:\Windows\system32\d3d10_1core.dll
1576, Setup, C:\Windows\system32\D3D10Warp.dll
1576, Setup, C:\Windows\system32\UxTheme.dll
1576, Setup, C:\Windows\system32\msls31.dll
1576, Setup, C:\Windows\system32\windowscodecs.dll
1576, Setup, C:\Windows\system32\windowscodecsext.dll
1576, Setup, C:\Windows\System32\msxml6.dll
1576, Setup, C:\Windows\System32\Dxtrans.dll
1576, Setup, C:\Windows\System32\ATL.DLL
1576, Setup, C:\Windows\system32\ddrawex.dll
1576, Setup, C:\Windows\system32\DDRAW.dll
1576, Setup, C:\Windows\system32\DCIMAN32.dll
1576, Setup, C:\Windows\System32\Dxtmsft.dll
1576, Setup, C:\Windows\system32\d3d10.dll
1576, Setup, C:\Windows\system32\d3d10core.dll
1576, Setup, C:\Windows\system32\WINMM.dll
1576, Setup, C:\Windows\system32\MMDevAPI.DLL
1636, svchost,
1656, svchost,
1680, snmp,
1732, svchost,
1752, svchost,
1772, Microsoft.Exchange.EdgeSyncSvc,
1780, svchost,
1828, Microsoft.Exchange.AntispamUpdateSvc,
2076, MSExchangeMailboxAssistants,
2136, MSExchangeMailSubmission,
2212, Microsoft.Exchange.ProtectedServiceHost,
2292, msexchangerepl,
2380, w3wp,
2416, Microsoft.Exchange.RpcClientAccess.Service,
2496, Microsoft.Exchange.Search.ExSearch,
2568, Microsoft.Exchange.ServiceHost,
2680, MSExchangeThrottling,
2792, MSExchangeTransport,
2980, MSExchangeTransportLogSearch,
3244, EdgeTransport,
3260, conhost,
3732, store,
3880, mad,
4152, w3wp, c:\windows\system32\inetsrv\w3wp.exe
4152, w3wp, C:\Windows\SYSTEM32\ntdll.dll
4152, w3wp, C:\Windows\system32\kernel32.dll
4152, w3wp, C:\Windows\system32\KERNELBASE.dll
4152, w3wp, C:\Windows\system32\ADVAPI32.dll
4152, w3wp, C:\Windows\system32\msvcrt.dll
4152, w3wp, C:\Windows\SYSTEM32\sechost.dll
4152, w3wp, C:\Windows\system32\RPCRT4.dll
4152, w3wp, C:\Windows\system32\pcwum.DLL
4152, w3wp, C:\Windows\system32\USER32.dll
4152, w3wp, C:\Windows\system32\GDI32.dll
4152, w3wp, C:\Windows\system32\LPK.dll
4152, w3wp, C:\Windows\system32\USP10.dll
4152, w3wp, C:\Windows\system32\ole32.dll
4152, w3wp, c:\windows\system32\inetsrv\IISUTIL.dll
4152, w3wp, C:\Windows\system32\IMM32.DLL
4152, w3wp, C:\Windows\system32\MSCTF.dll
4152, w3wp, C:\Windows\system32\CRYPTBASE.dll
4152, w3wp, C:\Windows\system32\ntmarta.dll
4152, w3wp, C:\Windows\system32\WLDAP32.dll
4152, w3wp, c:\windows\system32\inetsrv\w3wphost.dll
4152, w3wp, C:\Windows\system32\OLEAUT32.dll
4152, w3wp, c:\windows\system32\inetsrv\nativerd.dll
4152, w3wp, C:\Windows\system32\CRYPT32.dll
4152, w3wp, C:\Windows\system32\MSASN1.dll
4152, w3wp, C:\Windows\system32\XmlLite.dll
4152, w3wp, C:\Windows\system32\ktmw32.dll
4152, w3wp, c:\windows\system32\inetsrv\IISRES.DLL
4152, w3wp, C:\Windows\system32\CRYPTSP.dll
4152, w3wp, C:\Windows\system32\rsaenh.dll
4152, w3wp, C:\Windows\system32\mscoree.dll
4152, w3wp, C:\Windows\system32\CLBCatQ.DLL
4152, w3wp, C:\Windows\system32\mlang.dll
4152, w3wp, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
4152, w3wp, C:\Windows\system32\SHLWAPI.dll
4152, w3wp, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
4152, w3wp, C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\MSVCR80.dll
4152, w3wp, C:\Windows\system32\inetsrv\iiscore.dll
4152, w3wp, c:\windows\system32\inetsrv\W3TP.dll
4152, w3wp, c:\windows\system32\inetsrv\w3dt.dll
4152, w3wp, C:\Windows\system32\HTTPAPI.dll
4152, w3wp, C:\Windows\system32\slc.dll
4152, w3wp, C:\Windows\system32\WS2_32.dll
4152, w3wp, C:\Windows\system32\NSI.dll
4152, w3wp, C:\Windows\system32\Normaliz.dll
4152, w3wp, C:\Windows\system32\faultrep.dll
4152, w3wp, C:\Windows\system32\Secur32.dll
4152, w3wp, C:\Windows\system32\SSPICLI.DLL
4152, w3wp, C:\Windows\system32\NLAapi.dll
4152, w3wp, C:\Windows\system32\napinsp.dll
4152, w3wp, C:\Windows\System32\mswsock.dll
4152, w3wp, C:\Windows\system32\DNSAPI.dll
4152, w3wp, C:\Windows\System32\winrnr.dll
4152, w3wp, C:\Windows\System32\wshtcpip.dll
4152, w3wp, C:\Windows\System32\wship6.dll
4152, w3wp, C:\Windows\system32\IPHLPAPI.DLL
4152, w3wp, C:\Windows\system32\WINNSI.DLL
4152, w3wp, C:\Windows\system32\rasadhlp.dll
4152, w3wp, C:\Windows\System32\fwpuclnt.dll
4152, w3wp, C:\Windows\System32\inetsrv\cachuri.dll
4152, w3wp, C:\Windows\System32\inetsrv\cachfile.dll
4152, w3wp, C:\Windows\System32\inetsrv\cachtokn.dll
4152, w3wp, C:\Windows\System32\inetsrv\cachhttp.dll
4152, w3wp, C:\Windows\System32\inetsrv\compstat.dll
4152, w3wp, C:\Windows\System32\inetsrv\defdoc.dll
4152, w3wp, C:\Windows\System32\inetsrv\dirlist.dll
4152, w3wp, C:\Windows\System32\inetsrv\protsup.dll
4152, w3wp, C:\Windows\System32\inetsrv\static.dll
4152, w3wp, C:\Windows\System32\inetsrv\authanon.dll
4152, w3wp, C:\Windows\System32\inetsrv\modrqflt.dll
4152, w3wp, C:\Windows\System32\inetsrv\custerr.dll
4152, w3wp, C:\Windows\System32\inetsrv\loghttp.dll
4152, w3wp, C:\Windows\System32\inetsrv\iisreqs.dll
4152, w3wp, C:\Windows\system32\WSOCK32.dll
4152, w3wp, F:\Program Files\Microsoft\Exchange Server\V14\Bin\kerbauth.dll
4152, w3wp, C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\MSVCR90.dll
4152, w3wp, C:\Windows\system32\wsmsvc.dll
4152, w3wp, C:\Windows\System32\inetsrv\isapi.dll
4152, w3wp, C:\Windows\System32\inetsrv\filter.dll
4152, w3wp, C:\Windows\System32\inetsrv\validcfg.dll
4152, w3wp, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\webengine.dll
4152, w3wp, C:\Windows\system32\USERENV.dll
4152, w3wp, C:\Windows\system32\profapi.dll
4152, w3wp, C:\Windows\system32\PSAPI.DLL
4152, w3wp, C:\Windows\System32\inetsrv\compdyn.dll
4152, w3wp, C:\Windows\System32\inetsrv\redirect.dll
4152, w3wp, C:\Windows\System32\inetsrv\authcert.dll
4152, w3wp, C:\Windows\System32\inetsrv\authbas.dll
4152, w3wp, C:\Windows\System32\inetsrv\authsspi.dll
4152, w3wp, C:\Windows\system32\NETAPI32.dll
4152, w3wp, C:\Windows\system32\netutils.dll
4152, w3wp, C:\Windows\system32\srvcli.dll
4152, w3wp, C:\Windows\system32\wkscli.dll
4152, w3wp, C:\Windows\System32\inetsrv\authmd5.dll
4152, w3wp, C:\Windows\System32\inetsrv\iisetw.dll
4152, w3wp, C:\Windows\System32\inetsrv\iisfreb.dll
4152, w3wp, C:\Windows\System32\inetsrv\iis_ssi.dll
4152, w3wp, C:\Windows\System32\inetsrv\urlauthz.dll
4152, w3wp, C:\Windows\System32\inetsrv\authmap.dll
4152, w3wp, C:\Windows\System32\inetsrv\cgi.dll
4152, w3wp, C:\Windows\System32\inetsrv\iisfcgi.dll
4152, w3wp, C:\Windows\system32\rpcproxy\rpcproxy.dll
4152, w3wp, C:\Windows\system32\ACTIVEDS.dll
4152, w3wp, C:\Windows\system32\adsldpc.dll
4152, w3wp, C:\Windows\system32\ATL.DLL
4152, w3wp, C:\Windows\system32\inetsrv\gzip.dll
4152, w3wp, C:\Windows\system32\mpr.dll
4152, w3wp, C:\Windows\system32\inetsrv\wbhst_pm.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\1d2d3e57724bcacaea5e41063dc565c1\mscorlib.ni.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\System\8c862eb9bcba031e1479974a7d62aa0b\System.ni.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\93cc78cbd13e319ffaba642c2f7a513a\System.Web.ni.dll
4152, w3wp, C:\Windows\system32\sxs.dll
4152, w3wp, C:\Windows\system32\RpcRtRemote.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\fe860189c078d45125ca6366495fd414\System.Configuration.ni.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\372dfe1a5b9ed9217b0f491ba07745d2\System.Xml.ni.dll
4152, w3wp, C:\Windows\system32\version.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.JScript\b733f33cc6a07e4cd5bed494cf536af1\Microsoft.JScript.ni.dll
4152, w3wp, C:\Windows\system32\shell32.dll
4152, w3wp, C:\Windows\system32\urlmon.dll
4152, w3wp, C:\Windows\system32\iertutil.dll
4152, w3wp, C:\Windows\system32\WININET.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\VJSharpCodeProvider\3464d6063e90830045e2eff602663e91\VJSharpCodeProvider.ni.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceModel\4ae2cc43ea27f162942af679bf0eaaf8\System.ServiceModel.ni.dll
4152, w3wp, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
4152, w3wp, C:\Windows\assembly\NativeImages_v2.0.50727_64\SMDiagnostics\d912b15f4aaac2455b690f6e477a67b1\SMDiagnostics.ni.dll
4596, conhost, C:\Windows\system32\conhost.exe
4596, conhost, C:\Windows\SYSTEM32\ntdll.dll
4596, conhost, C:\Windows\system32\kernel32.dll
4596, conhost, C:\Windows\system32\KERNELBASE.dll
4596, conhost, C:\Windows\system32\GDI32.dll
4596, conhost, C:\Windows\system32\USER32.dll
4596, conhost, C:\Windows\system32\LPK.dll
4596, conhost, C:\Windows\system32\USP10.dll
4596, conhost, C:\Windows\system32\msvcrt.dll
4596, conhost, C:\Windows\system32\IMM32.dll
4596, conhost, C:\Windows\system32\MSCTF.dll
4596, conhost, C:\Windows\system32\ole32.dll
4596, conhost, C:\Windows\system32\RPCRT4.dll
4596, conhost, C:\Windows\system32\OLEAUT32.dll
4596, conhost, C:\Windows\system32\CRYPTBASE.dll
4596, conhost, C:\Windows\system32\ADVAPI32.dll
4596, conhost, C:\Windows\SYSTEM32\sechost.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\ExSetupUI.exe
4604, ExSetupUI, C:\Windows\SYSTEM32\ntdll.dll
4604, ExSetupUI, C:\Windows\SYSTEM32\MSCOREE.DLL
4604, ExSetupUI, C:\Windows\system32\KERNEL32.dll
4604, ExSetupUI, C:\Windows\system32\KERNELBASE.dll
4604, ExSetupUI, C:\Windows\system32\ADVAPI32.dll
4604, ExSetupUI, C:\Windows\system32\msvcrt.dll
4604, ExSetupUI, C:\Windows\SYSTEM32\sechost.dll
4604, ExSetupUI, C:\Windows\system32\RPCRT4.dll
4604, ExSetupUI, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
4604, ExSetupUI, C:\Windows\system32\SHLWAPI.dll
4604, ExSetupUI, C:\Windows\system32\GDI32.dll
4604, ExSetupUI, C:\Windows\system32\USER32.dll
4604, ExSetupUI, C:\Windows\system32\LPK.dll
4604, ExSetupUI, C:\Windows\system32\USP10.dll
4604, ExSetupUI, C:\Windows\system32\IMM32.DLL
4604, ExSetupUI, C:\Windows\system32\MSCTF.dll
4604, ExSetupUI, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
4604, ExSetupUI, C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\MSVCR80.dll
4604, ExSetupUI, C:\Windows\system32\shell32.dll
4604, ExSetupUI, C:\Windows\system32\ole32.dll
4604, ExSetupUI, C:\Windows\system32\profapi.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\1d2d3e57724bcacaea5e41063dc565c1\mscorlib.ni.dll
4604, ExSetupUI, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll
4604, ExSetupUI, C:\Windows\system32\WINTRUST.dll
4604, ExSetupUI, C:\Windows\system32\CRYPT32.dll
4604, ExSetupUI, C:\Windows\system32\MSASN1.dll
4604, ExSetupUI, C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\COMCTL32.dll
4604, ExSetupUI, C:\Windows\system32\CRYPTSP.dll
4604, ExSetupUI, C:\Windows\system32\rsaenh.dll
4604, ExSetupUI, C:\Windows\system32\CRYPTBASE.dll
4604, ExSetupUI, C:\Windows\system32\imagehlp.dll
4604, ExSetupUI, C:\Windows\system32\ncrypt.dll
4604, ExSetupUI, C:\Windows\system32\bcrypt.dll
4604, ExSetupUI, C:\Windows\system32\bcryptprimitives.dll
4604, ExSetupUI, C:\Windows\system32\USERENV.dll
4604, ExSetupUI, C:\Windows\system32\GPAPI.dll
4604, ExSetupUI, C:\Windows\system32\cryptnet.dll
4604, ExSetupUI, C:\Windows\system32\WLDAP32.dll
4604, ExSetupUI, C:\Windows\system32\SensApi.dll
4604, ExSetupUI, C:\Windows\system32\Cabinet.dll
4604, ExSetupUI, C:\Windows\system32\DEVRTL.dll
4604, ExSetupUI, C:\Windows\system32\RpcRtRemote.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Setup.Common.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System\8c862eb9bcba031e1479974a7d62aa0b\System.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\eed0dd8cdc46206a76e8c23872fc0787\System.Core.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\785d31ed01dc98499e6930870b7cea19\Microsoft.Exchange.Diagnostics.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\bad876bf0c3e3d01e60c965bea9d0045\Microsoft.Exchange.Data.Common.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\4c407436c5f7649ece3a6ab4340c8c45\Microsoft.Exchange.Configuration.ObjectModel.ni.dll
4604, ExSetupUI, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\7913f5c6b6fc7a75b2b8f558bb7b5568\System.Drawing.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\bc4df91390f1b827ecb62a2edd0d1894\System.Windows.Forms.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Managemen#\9e8cda55468d75e80ba265871cb27dad\Microsoft.ManagementGUI.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\ExSetupUI.resources.dll
4604, ExSetupUI, C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\gdiplus.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\7ce2e1b567a963635cf043cf1cb16e8b\Microsoft.Exchange.ManagementGUI.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\6b0ae1918a20db43f5d623347df19953\Microsoft.Exchange.Net.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\1db1100e19daeeed1e7f2cc7b5241a07\Microsoft.Exchange.Data.Directory.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\7e2c646998592c276fc369746eb95c55\Microsoft.Exchange.PowerShell.Configuration.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\2cafbf62a43038d57239173614435a88\System.Management.Automation.ni.dll
4604, ExSetupUI, C:\Windows\system32\iphlpapi.dll
4604, ExSetupUI, C:\Windows\system32\NSI.dll
4604, ExSetupUI, C:\Windows\system32\WINNSI.DLL
4604, ExSetupUI, C:\Windows\system32\DNSAPI.dll
4604, ExSetupUI, C:\Windows\system32\WS2_32.dll
4604, ExSetupUI, C:\Windows\system32\dhcpcsvc.DLL
4604, ExSetupUI, C:\Windows\system32\dhcpcsvc6.DLL
4604, ExSetupUI, C:\Windows\system32\mswsock.dll
4604, ExSetupUI, C:\Windows\System32\wshtcpip.dll
4604, ExSetupUI, C:\Windows\System32\wship6.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\fe860189c078d45125ca6366495fd414\System.Configuration.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\372dfe1a5b9ed9217b0f491ba07745d2\System.Xml.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Web\93cc78cbd13e319ffaba642c2f7a513a\System.Web.ni.dll
4604, ExSetupUI, C:\Windows\system32\psapi.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\Microsoft.Exchange.Setup.Common.resources.dll
4604, ExSetupUI, C:\Windows\system32\shfolder.dll
4604, ExSetupUI, C:\Windows\system32\version.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\516a5c8d21fb02270bac14d97a7746de\Microsoft.Exchange.Data.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\dsaccessperf.dll
4604, ExSetupUI, C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\MSVCR90.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\EXCHMEM.dll
4604, ExSetupUI, C:\Windows\system32\dbghelp.dll
4604, ExSetupUI, C:\Windows\system32\wer.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\ExTrace.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\843e6df5043955149c99a00743449153\Microsoft.Exchange.Management.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\fb4911bced28a8478603cb6f96774559\Microsoft.Exchange.Transport.Logging.Search.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\66c94ba7989bc5940ce303f6965a976b\Microsoft.Exchange.MessageSecurity.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\3f58182f56f469a2121d7c258c08d492\Microsoft.Exchange.Data.Storage.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\01d06e6c029ed58ca7279febeb6f0b7c\Microsoft.Exchange.Data.Mapi.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\65ad6b58e33c6bd9c01108932cf1fcb1\Microsoft.Exchange.MailboxReplicationService.Common.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\f97191cf721a94b52bc4405b27581646\Microsoft.Exchange.UM.UMCommon.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\4dbad6196623230dbda08c35601d8376\Microsoft.Exchange.Transport.Sync.Common.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\971ee39ac7be13293f3efff7f0ce44e8\Microsoft.Exchange.Data.Providers.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\72e4655a7b8ee6c61c60fdd2b01cc8a6\Microsoft.Exchange.Common.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\49b3b0dc64ef0cc8365179faace21a0d\Microsoft.Exchange.Core.Strings.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\Microsoft.Exchange.Core.Strings.resources.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\Microsoft.Exchange.Data.resources.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data\4cfb4616eb3af7f91c1ea7113465860b\System.Data.ni.dll
4604, ExSetupUI, C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\e81569a2092b5254bf7a1d73f1635c92\Microsoft.Exchange.Management.SystemManager.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Setup.AcquireLanguagePack.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\9ff8f75da68de3c38ad531fc403abaa1\Microsoft.Exchange.CabUtility.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.CabUtility.dll
4604, ExSetupUI, C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\MSVCP90.dll
4604, ExSetupUI, C:\Windows\system32\OLEAUT32.dll
4604, ExSetupUI, C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcm90.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\a72a1bf08d9ba9624f4ccc25e52402c1\Microsoft.PowerShell.HostingTools.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3623e2ad193bcccf00ac1107d4f62236\System.DirectoryServices.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\c185de024583924467d700e6a0d003b5\Microsoft.Exchange.Rpc.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Rpc.dll
4604, ExSetupUI, C:\Windows\system32\AUTHZ.dll
4604, ExSetupUI, C:\Windows\system32\rasadhlp.dll
4604, ExSetupUI, C:\Windows\System32\fwpuclnt.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\ea326d1e49d4824358eb5826fe52921a\System.DirectoryServices.Protocols.ni.dll
4604, ExSetupUI, C:\Windows\system32\Netapi32.dll
4604, ExSetupUI, C:\Windows\system32\netutils.dll
4604, ExSetupUI, C:\Windows\system32\srvcli.dll
4604, ExSetupUI, C:\Windows\system32\wkscli.dll
4604, ExSetupUI, C:\Windows\system32\DSROLE.DLL
4604, ExSetupUI, C:\Windows\system32\ntdsapi.dll
4604, ExSetupUI, C:\Windows\system32\LOGONCLI.DLL
4604, ExSetupUI, C:\Windows\system32\CLBCatQ.DLL
4604, ExSetupUI, C:\Windows\system32\activeds.dll
4604, ExSetupUI, C:\Windows\system32\adsldpc.dll
4604, ExSetupUI, C:\Windows\system32\ATL.DLL
4604, ExSetupUI, C:\Windows\system32\SXS.DLL
4604, ExSetupUI, C:\Windows\system32\adsldp.dll
4604, ExSetupUI, C:\Windows\system32\SECUR32.DLL
4604, ExSetupUI, C:\Windows\system32\SSPICLI.DLL
4604, ExSetupUI, C:\Windows\system32\credssp.dll
4604, ExSetupUI, C:\Windows\system32\kerberos.DLL
4604, ExSetupUI, C:\Windows\system32\cryptdll.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\515d7b9b355392bfe6748d8d95f980e5\Microsoft.Exchange.Extensibility.Internal.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\Microsoft.Exchange.Management.resources.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8428a82fd82a1ef1d3dab07be67dd78f\System.ServiceProcess.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\0bcadf3a0451d27bfd351bc8f164083a\Microsoft.Exchange.Compliance.ni.dll
4604, ExSetupUI, C:\Windows\system32\ICMP.DLL
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\7939c704814232aa2c324ec98dd7b4f6\Microsoft.Exchange.HelpProvider.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\Microsoft.Exchange.ManagementGUI.resources.dll
4604, ExSetupUI, C:\Windows\system32\WindowsCodecs.dll
4604, ExSetupUI, C:\Windows\system32\wtsapi32.dll
4604, ExSetupUI, C:\Windows\system32\WINSTA.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing.Desi#\4026f724cc80f1beb4450d3286d93c0d\System.Drawing.Design.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Accessibility\d301e1d96d4f39f15482db09206f1fb1\Accessibility.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Setup.ExSetupUIHelper.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\Microsoft.Exchange.Setup.ExSetupUIHelper.resources.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Design\f52ae9aeb5bb355a66b3d8ffea6fdd32\System.Design.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\Microsoft.Exchange.Configuration.ObjectModel.resources.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\b792f47b4e68adb7e44d423c26802311\Microsoft.Exchange.Sqm.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\sqmapi.dll
4604, ExSetupUI, C:\Windows\system32\apphelp.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f616652a9327d4f41f9adc33aedd8feb\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\7d99138fb23b6c17aa205d49c6bfce9e\System.Configuration.Install.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\8f7d31b01ed5d655fd5c48117453f960\Microsoft.WSMan.Management.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\f15a8af412d84b1fd14fc735fb5834f5\System.Transactions.ni.dll
4604, ExSetupUI, C:\Windows\assembly\GAC_64\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3ee5d92f3782e7d9a59323caeb58e0ca\Microsoft.PowerShell.Commands.Utility.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\9e3b197d73893a55ec7bf4d4dda692e2\Microsoft.PowerShell.ConsoleHost.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6f0bbc912ec21fad139214ca4578a7ed\Microsoft.PowerShell.Commands.Management.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\7bba925a067b6efc53e6e4ea3c458dc0\Microsoft.PowerShell.Security.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\2fb0402632ad5e804276ac653a95ef80\System.Management.ni.dll
4604, ExSetupUI, C:\Windows\system32\powrprof.dll
4604, ExSetupUI, C:\Windows\system32\SETUPAPI.dll
4604, ExSetupUI, C:\Windows\system32\CFGMGR32.dll
4604, ExSetupUI, C:\Windows\system32\DEVOBJ.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\2268306ad220b058a7a4d36ae5efe9b0\Microsoft.Exchange.Configuration.RedirectionModule.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\BPA.UserInterface\22ff4902e74853c4f272f67476ae8fd9\BPA.UserInterface.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\BPA.Common\812b052cab7eff2c39f0231103fd2f53\BPA.Common.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\BPA.UserInterface.resources.dll
4604, ExSetupUI, C:\Windows\system32\rasapi32.dll
4604, ExSetupUI, C:\Windows\system32\rasman.dll
4604, ExSetupUI, C:\Windows\system32\rtutils.dll
4604, ExSetupUI, C:\Windows\system32\winhttp.dll
4604, ExSetupUI, C:\Windows\system32\webio.dll
4604, ExSetupUI, C:\Windows\system32\security.dll
4604, ExSetupUI, C:\Windows\system32\schannel.DLL
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Security\a3202e5eeb5c84ca6d5453b50c28e1af\System.Security.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\en\BPA.Common.resources.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\ExBPA.Shared.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\BPA.ConfigCollector.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data.SqlXml\32cf78868a7f90ad05525253a2540e1f\System.Data.SqlXml.ni.dll
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\ExBPA.ExchangeCollector.dll
4604, ExSetupUI, C:\Windows\system32\NLAapi.dll
4604, ExSetupUI, C:\Windows\system32\napinsp.dll
4604, ExSetupUI, C:\Windows\System32\winrnr.dll
4604, ExSetupUI, C:\Windows\system32\msv1_0.DLL
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.S#\9bc338adf28d6b0e613ac7d956875ee4\Microsoft.Windows.ServerManager.PowerShell.ni.dll
4604, ExSetupUI, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Windows.S#\fb7f9ff516b996772b3b416715e7358a\Microsoft.Windows.ServerManager.ni.dll
4604, ExSetupUI, C:\Windows\system32\ntmarta.dll
4604, ExSetupUI, C:\Windows\System32\netshell.dll
4604, ExSetupUI, C:\Windows\system32\svrmgrnc.dll
4604, ExSetupUI, C:\Windows\system32\osbaseln.dll
4604, ExSetupUI, C:\Windows\system32\FirewallAPI.dll
4604, ExSetupUI, C:\Windows\System32\QAgent.dll
4604, ExSetupUI, C:\Windows\System32\QUtil.dll
4604, ExSetupUI, C:\Windows\System32\wevtapi.dll
4604, ExSetupUI, C:\Windows\system32\wuapi.dll
4604, ExSetupUI, C:\Windows\system32\wups.dll
4604, ExSetupUI, C:\Windows\system32\slc.dll
4604, ExSetupUI, C:\Windows\system32\SPPC.DLL
4604, ExSetupUI, C:\Windows\servicing\CbsApi.dll
4604, ExSetupUI, C:\Windows\system32\cscapi.dll
4604, ExSetupUI, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\wminet_utils.dll
4604, ExSetupUI, C:\Windows\system32\wbem\wmiutils.dll
4604, ExSetupUI, C:\Windows\system32\wbemcomn.dll
4604, ExSetupUI, C:\Windows\system32\wbem\wbemprox.dll
4604, ExSetupUI, C:\Windows\system32\wbem\wbemsvc.dll
4604, ExSetupUI, C:\Windows\system32\wbem\fastprox.dll
4604, ExSetupUI, C:\Windows\system32\ADMWPROX.DLL
4604, ExSetupUI, F:\Program Files\Microsoft\Exchange Server\V14\Bin\BPA.NetworkCollector.dll
4656, svchost,
4800, svchost,
5012, msftefd,
5264, cipaauthclient, C:\Program Files (x86)\CIPAFilter\Authentication Helper\cipaauthclient.exe
5264, cipaauthclient, C:\Windows\SYSTEM32\ntdll.dll
5264, cipaauthclient, C:\Windows\SYSTEM32\wow64.dll
5264, cipaauthclient, C:\Windows\SYSTEM32\wow64win.dll
5264, cipaauthclient, C:\Windows\SYSTEM32\wow64cpu.dll
5352, VCDDaemon, C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
5352, VCDDaemon, C:\Windows\SYSTEM32\ntdll.dll
5352, VCDDaemon, C:\Windows\SYSTEM32\wow64.dll
5352, VCDDaemon, C:\Windows\SYSTEM32\wow64win.dll
5352, VCDDaemon, C:\Windows\SYSTEM32\wow64cpu.dll
5720, svchost,
5732, TrustedInstaller,
5760, msdtc,
6084, WmiPrvSE,
6296, taskhost, C:\Windows\system32\taskhost.exe
6296, taskhost, C:\Windows\SYSTEM32\ntdll.dll
6296, taskhost, C:\Windows\system32\kernel32.dll
6296, taskhost, C:\Windows\system32\KERNELBASE.dll
6296, taskhost, C:\Windows\system32\msvcrt.dll
6296, taskhost, C:\Windows\system32\ole32.dll
6296, taskhost, C:\Windows\system32\GDI32.dll
6296, taskhost, C:\Windows\system32\USER32.dll
6296, taskhost, C:\Windows\system32\LPK.dll
6296, taskhost, C:\Windows\system32\USP10.dll
6296, taskhost, C:\Windows\system32\RPCRT4.dll
6296, taskhost, C:\Windows\system32\OLEAUT32.dll
6296, taskhost, C:\Windows\system32\IMM32.DLL
6296, taskhost, C:\Windows\system32\MSCTF.dll
6296, taskhost, C:\Windows\system32\CRYPTBASE.dll
6296, taskhost, C:\Windows\SYSTEM32\sechost.dll
6296, taskhost, C:\Windows\system32\ADVAPI32.dll
6296, taskhost, C:\Windows\system32\CLBCatQ.DLL
6296, taskhost, C:\Windows\system32\MsCtfMonitor.dll
6296, taskhost, C:\Windows\system32\MSUTB.dll
6296, taskhost, C:\Windows\system32\WINSTA.dll
6296, taskhost, C:\Windows\system32\WTSAPI32.dll
6296, taskhost, C:\Windows\system32\dimsjob.dll
6296, taskhost, C:\Windows\system32\SHLWAPI.dll
6296, taskhost, C:\Windows\system32\taskschd.dll
6296, taskhost, C:\Windows\system32\SspiCli.dll
6296, taskhost, C:\Windows\System32\netprofm.dll
6296, taskhost, C:\Windows\system32\NSI.dll
6296, taskhost, C:\Windows\System32\nlaapi.dll
6296, taskhost, C:\Windows\system32\CRYPTSP.dll
6296, taskhost, C:\Windows\system32\rsaenh.dll
6296, taskhost, C:\Windows\system32\RpcRtRemote.dll
6296, taskhost, C:\Windows\System32\npmproxy.dll
6296, taskhost, C:\Windows\system32\CRYPT32.dll
6296, taskhost, C:\Windows\system32\MSASN1.dll
6296, taskhost, C:\Windows\system32\dsrole.dll
6340, powershell, C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
6340, powershell, C:\Windows\SYSTEM32\ntdll.dll
6340, powershell, C:\Windows\system32\kernel32.dll
6340, powershell, C:\Windows\system32\KERNELBASE.dll
6340, powershell, C:\Windows\system32\ADVAPI32.dll
6340, powershell, C:\Windows\system32\msvcrt.dll
6340, powershell, C:\Windows\SYSTEM32\sechost.dll
6340, powershell, C:\Windows\system32\RPCRT4.dll
6340, powershell, C:\Windows\system32\ATL.DLL
6340, powershell, C:\Windows\system32\USER32.dll
6340, powershell, C:\Windows\system32\GDI32.dll
6340, powershell, C:\Windows\system32\LPK.dll
6340, powershell, C:\Windows\system32\USP10.dll
6340, powershell, C:\Windows\system32\ole32.dll
6340, powershell, C:\Windows\system32\OLEAUT32.dll
6340, powershell, C:\Windows\system32\mscoree.dll
6340, powershell, C:\Windows\system32\SHLWAPI.dll
6340, powershell, C:\Windows\system32\IMM32.DLL
6340, powershell, C:\Windows\system32\MSCTF.dll
6340, powershell, C:\Windows\system32\CRYPTBASE.dll
6340, powershell, C:\Windows\system32\CLBCatQ.DLL
6340, powershell, C:\Windows\system32\shell32.dll
6340, powershell, C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll
6340, powershell, C:\Windows\system32\ntmarta.dll
6340, powershell, C:\Windows\system32\WLDAP32.dll
6340, powershell, C:\Windows\system32\SETUPAPI.dll
6340, powershell, C:\Windows\system32\CFGMGR32.dll
6340, powershell, C:\Windows\system32\DEVOBJ.dll
6340, powershell, C:\Windows\system32\propsys.dll
6340, powershell, C:\Windows\system32\LINKINFO.dll
6340, powershell, C:\Windows\system32\CRYPTSP.dll
6340, powershell, C:\Windows\system32\rsaenh.dll
6340, powershell, C:\Windows\system32\profapi.dll
6340, powershell, C:\Windows\system32\ntshrui.dll
6340, powershell, C:\Windows\system32\srvcli.dll
6340, powershell, C:\Windows\system32\cscapi.dll
6340, powershell, C:\Windows\system32\slc.dll
6340, powershell, C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
6340, powershell, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll
6340, powershell, C:\Windows\WinSxS\amd64_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_88df89932faf0bf6\MSVCR80.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\1d2d3e57724bcacaea5e41063dc565c1\mscorlib.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System\8c862eb9bcba031e1479974a7d62aa0b\System.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\9e3b197d73893a55ec7bf4d4dda692e2\Microsoft.PowerShell.ConsoleHost.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management.A#\2cafbf62a43038d57239173614435a88\System.Management.Automation.ni.dll
6340, powershell, C:\Windows\system32\version.dll
6340, powershell, C:\Windows\system32\psapi.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Core\eed0dd8cdc46206a76e8c23872fc0787\System.Core.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\f616652a9327d4f41f9adc33aedd8feb\Microsoft.PowerShell.Commands.Diagnostics.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuratio#\7d99138fb23b6c17aa205d49c6bfce9e\System.Configuration.Install.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.WSMan.Man#\8f7d31b01ed5d655fd5c48117453f960\Microsoft.WSMan.Management.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Transactions\f15a8af412d84b1fd14fc735fb5834f5\System.Transactions.ni.dll
6340, powershell, C:\Windows\assembly\GAC_64\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\3ee5d92f3782e7d9a59323caeb58e0ca\Microsoft.PowerShell.Commands.Utility.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\6f0bbc912ec21fad139214ca4578a7ed\Microsoft.PowerShell.Commands.Management.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.PowerShel#\7bba925a067b6efc53e6e4ea3c458dc0\Microsoft.PowerShell.Security.ni.dll
6340, powershell, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\372dfe1a5b9ed9217b0f491ba07745d2\System.Xml.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\2fb0402632ad5e804276ac653a95ef80\System.Management.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.DirectorySer#\3623e2ad193bcccf00ac1107d4f62236\System.DirectoryServices.ni.dll
6340, powershell, C:\Windows\system32\shfolder.dll
6340, powershell, C:\Windows\system32\secur32.dll
6340, powershell, C:\Windows\system32\SSPICLI.DLL
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Data\4cfb4616eb3af7f91c1ea7113465860b\System.Data.ni.dll
6340, powershell, C:\Windows\assembly\GAC_64\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
6340, powershell, C:\Windows\system32\WS2_32.dll
6340, powershell, C:\Windows\system32\NSI.dll
6340, powershell, C:\Windows\system32\CRYPT32.dll
6340, powershell, C:\Windows\system32\MSASN1.dll
6340, powershell, C:\Windows\system32\WINTRUST.dll
6340, powershell, C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\COMCTL32.dll
6340, powershell, C:\Windows\system32\ncrypt.dll
6340, powershell, C:\Windows\system32\bcrypt.dll
6340, powershell, C:\Windows\system32\bcryptprimitives.dll
6340, powershell, C:\Windows\system32\USERENV.dll
6340, powershell, C:\Windows\system32\GPAPI.dll
6340, powershell, C:\Windows\system32\cryptnet.dll
6340, powershell, C:\Windows\system32\SensApi.dll
6340, powershell, C:\Windows\system32\Cabinet.dll
6340, powershell, C:\Windows\system32\DEVRTL.dll
6340, powershell, C:\Windows\system32\urlmon.dll
6340, powershell, C:\Windows\system32\iertutil.dll
6340, powershell, C:\Windows\system32\WININET.dll
6340, powershell, C:\Windows\system32\Normaliz.dll
6340, powershell, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll
6340, powershell, C:\Windows\system32\imagehlp.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\bin\Microsoft.Exchange.Configuration.ObjectModel.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\bin\Microsoft.Exchange.Data.Directory.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\bin\Microsoft.Exchange.Diagnostics.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\bin\Microsoft.Exchange.Data.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\bad876bf0c3e3d01e60c965bea9d0045\Microsoft.Exchange.Data.Common.ni.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\bin\Microsoft.Exchange.Management.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Isam.Interop.dll
6340, powershell, C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\MSVCR90.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\ESE.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\eseback2.dll
6340, powershell, C:\Windows\system32\WSOCK32.dll
6340, powershell, C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\msvcm90.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\BPA.Common.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\BPA.UserInterface.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Interop.ActiveDS.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Interop.adsiis.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Interop.Migbase.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Dkm.Proxy.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.AirSync.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Approval.Applications.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.CabUtility.dll
6340, powershell, C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\MSVCP90.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Cluster.Replay.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Common.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Compliance.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Configuration.RedirectionModule.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.ApplicationLogic.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.Mapi.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.Providers.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Data.Storage.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\microsoft.exchange.edgesync.common.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.EdgeSync.DatacenterProviders.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Extensibility.Internal.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.HelpProvider.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.InfoWorker.Common.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Live.DomainServices.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.MailboxReplicationService.Common.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.MessageSecurity.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.MessagingPolicies.Rules.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Net.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Rpc.dll
6340, powershell, C:\Windows\system32\AUTHZ.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Search.Native.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Security.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.StoreProvider.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.Agent.AntiSpam.Common.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.Agent.SenderId.Core.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.Logging.Search.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.Sync.Common.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.Transport.Sync.Worker.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.UM.TroubleshootingTool.Shared.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.Exchange.UM.UMCommon.dll
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.PowerShell.HostingTools.dll
6340, powershell, C:\Windows\system32\WINHTTP.dll
6340, powershell, C:\Windows\system32\webio.dll
6340, powershell, C:\Windows\system32\credssp.dll
6340, powershell, C:\Windows\system32\mswsock.dll
6340, powershell, C:\Windows\System32\wshtcpip.dll
6340, powershell, C:\Windows\System32\wship6.dll
6340, powershell, C:\Windows\system32\IPHLPAPI.DLL
6340, powershell, C:\Windows\system32\WINNSI.DLL
6340, powershell, C:\Windows\system32\dhcpcsvc.DLL
6340, powershell, C:\Windows\system32\dhcpcsvc6.DLL
6340, powershell, F:\Program Files\Microsoft\Exchange Server\V14\Bin\Microsoft.RightsManagementServices.Core.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\Microsoft.Exchange.#\4b9c6b57c1a2513d3361d518b843fd96\Microsoft.Exchange.Data.Transport.ni.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\fe860189c078d45125ca6366495fd414\System.Configuration.ni.dll
6340, powershell, C:\Windows\system32\NLAapi.dll
6340, powershell, C:\Windows\system32\napinsp.dll
6340, powershell, C:\Windows\system32\DNSAPI.dll
6340, powershell, C:\Windows\System32\winrnr.dll
6340, powershell, C:\Windows\System32\fwpuclnt.dll
6340, powershell, C:\Windows\system32\rasadhlp.dll
6340, powershell, C:\Windows\assembly\NativeImages_v2.0.50727_64\System.ServiceProce#\8428a82fd82a1ef1d3dab07be67dd78f\System.ServiceProcess.ni.dll
6340, powershell, C:\Windows\System32\WindowsPowerShell\v1.0\pspluginwkr.dll
6340, powershell, C:\Windows\system32\WsmSvc.DLL
6340, powershell, C:\Windows\system32\WsmRes.dll
6340, powershell, C:\Windows\system32\wkscli.dll
6340, powershell, C:\Windows\system32\netutils.dll
6340, powershell, C:\Windows\system32\kerberos.DLL
6340, powershell, C:\Windows\system32\cryptdll.dll
6340, powershell, C:\Windows\system32\ntdsapi.dll
6340, powershell, C:\Windows\system32\Netapi32.dll
6340, powershell, C:\Windows\system32\LOGONCLI.DLL
6340, powershell, C:\Windows\system32\activeds.dll
6340, powershell, C:\Windows\system32\adsldpc.dll
6340, powershell, C:\Windows\system32\SXS.DLL
6340, powershell, C:\Windows\system32\adsldp.dll
6340, powershell, C:\Windows\system32\RpcRtRemote.dll
6340, powershell, C:\Windows\system32\DSROLE.DLL
6340, powershell, C:\Windows\Microsoft.NET\Framework64\v2.0.50727\diasymreader.dll
6340, powershell, C:\Windows\system32\apphelp.dll
6416, csrss,
6656, sppsvc,
6772, rdpclip, C:\Windows\System32\rdpclip.exe
6772, rdpclip, C:\Windows\SYSTEM32\ntdll.dll
6772, rdpclip, C:\Windows\system32\kernel32.dll
6772, rdpclip, C:\Windows\system32\KERNELBASE.dll
6772, rdpclip, C:\Windows\system32\ADVAPI32.dll
6772, rdpclip, C:\Windows\system32\msvcrt.dll
6772, rdpclip, C:\Windows\SYSTEM32\sechost.dll
6772, rdpclip, C:\Windows\system32\RPCRT4.dll
6772, rdpclip, C:\Windows\system32\USER32.dll
6772, rdpclip, C:\Windows\system32\GDI32.dll
6772, rdpclip, C:\Windows\system32\LPK.dll
6772, rdpclip, C:\Windows\system32\USP10.dll
6772, rdpclip, C:\Windows\system32\SHELL32.dll
6772, rdpclip, C:\Windows\system32\SHLWAPI.dll
6772, rdpclip, C:\Windows\System32\WINSTA.dll
6772, rdpclip, C:\Windows\System32\WTSAPI32.dll
6772, rdpclip, C:\Windows\System32\MPR.dll
6772, rdpclip, C:\Windows\System32\WINSPOOL.DRV
6772, rdpclip, C:\Windows\system32\ole32.dll
6772, rdpclip, C:\Windows\system32\IMM32.DLL
6772, rdpclip, C:\Windows\system32\MSCTF.dll
6772, rdpclip, C:\Windows\System32\RpcRtRemote.dll
6772, rdpclip, C:\Windows\System32\CRYPTBASE.dll
6772, rdpclip, C:\Windows\System32\CRYPTSP.dll
6772, rdpclip, C:\Windows\system32\rsaenh.dll
6772, rdpclip, C:\Windows\System32\printui.dll
6772, rdpclip, C:\Windows\system32\SETUPAPI.dll
6772, rdpclip, C:\Windows\system32\CFGMGR32.dll
6772, rdpclip, C:\Windows\system32\OLEAUT32.dll
6772, rdpclip, C:\Windows\system32\DEVOBJ.dll
6772, rdpclip, C:\Windows\System32\puiapi.dll
6772, rdpclip, C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\COMCTL32.dll
6772, rdpclip, C:\Windows\system32\CLBCatQ.DLL
6844, winlogon,
6920, explorer, C:\Windows\Explorer.EXE
6920, explorer, C:\Windows\SYSTEM32\ntdll.dll
6920, explorer, C:\Windows\system32\kernel32.dll
6920, explorer, C:\Windows\system32\KERNELBASE.dll
6920, explorer, C:\Windows\system32\ADVAPI32.dll
6920, explorer, C:\Windows\system32\msvcrt.dll
6920, explorer, C:\Windows\SYSTEM32\sechost.dll
6920, explorer, C:\Windows\system32\RPCRT4.dll
6920, explorer, C:\Windows\system32\GDI32.dll
6920, explorer, C:\Windows\system32\USER32.dll
6920, explorer, C:\Windows\system32\LPK.dll
6920, explorer, C:\Windows\system32\USP10.dll
6920, explorer, C:\Windows\system32\SHLWAPI.dll
6920, explorer, C:\Windows\system32\SHELL32.dll
6920, explorer, C:\Windows\system32\ole32.dll
6920, explorer, C:\Windows\system32\OLEAUT32.dll
6920, explorer, C:\Windows\system32\EXPLORERFRAME.dll
6920, explorer, C:\Windows\system32\DUser.dll
6920, explorer, C:\Windows\system32\DUI70.dll
6920, explorer, C:\Windows\system32\IMM32.dll
6920, explorer, C:\Windows\system32\MSCTF.dll
6920, explorer, C:\Windows\system32\UxTheme.dll
6920, explorer, C:\Windows\system32\POWRPROF.dll
6920, explorer, C:\Windows\system32\SETUPAPI.dll
6920, explorer, C:\Windows\system32\CFGMGR32.dll
6920, explorer, C:\Windows\system32\DEVOBJ.dll
6920, explorer, C:\Windows\system32\dwmapi.dll
6920, explorer, C:\Windows\system32\slc.dll
6920, explorer, C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\gdiplus.dll
6920, explorer, C:\Windows\system32\Secur32.dll
6920, explorer, C:\Windows\system32\SSPICLI.DLL
6920, explorer, C:\Windows\system32\PROPSYS.dll
6920, explorer, C:\Windows\system32\CRYPTBASE.dll
6920, explorer, C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll
6920, explorer, C:\Windows\system32\WindowsCodecs.dll
6920, explorer, C:\Windows\system32\profapi.dll
6920, explorer, C:\Windows\system32\apphelp.dll
6920, explorer, C:\Windows\system32\CLBCatQ.DLL
6920, explorer, C:\Windows\system32\EhStorShell.dll
6920, explorer, C:\Windows\System32\cscui.dll
6920, explorer, C:\Windows\System32\CSCDLL.dll
6920, explorer, C:\Windows\system32\CSCAPI.dll
6920, explorer, C:\Windows\system32\ntshrui.dll
6920, explorer, C:\Windows\system32\srvcli.dll
6920, explorer, C:\Windows\system32\IconCodecService.dll
6920, explorer, C:\Windows\system32\CRYPTSP.dll
6920, explorer, C:\Windows\system32\rsaenh.dll
6920, explorer, C:\Windows\system32\RpcRtRemote.dll
6920, explorer, C:\Windows\system32\actxprxy.dll
6920, explorer, C:\Windows\system32\ntmarta.dll
6920, explorer, C:\Windows\system32\WLDAP32.dll
6920, explorer, C:\Windows\system32\urlmon.dll
6920, explorer, C:\Windows\system32\iertutil.dll
6920, explorer, C:\Windows\system32\WININET.dll
6920, explorer, C:\Windows\system32\Normaliz.dll
6920, explorer, C:\Windows\system32\wkscli.dll
6920, explorer, C:\Windows\system32\netutils.dll
6920, explorer, C:\Windows\system32\SndVolSSO.DLL
6920, explorer, C:\Windows\system32\HID.DLL
6920, explorer, C:\Windows\System32\MMDevApi.dll
6920, explorer, C:\Windows\system32\timedate.cpl
6920, explorer, C:\Windows\system32\ATL.DLL
6920, explorer, C:\Windows\system32\WINBRAND.dll
6920, explorer, C:\Windows\System32\shdocvw.dll
6920, explorer, C:\Windows\system32\LINKINFO.dll
6920, explorer, C:\Windows\system32\MsftEdit.dll
6920, explorer, C:\Windows\system32\msls31.dll
6920, explorer, C:\Windows\system32\authui.dll
6920, explorer, C:\Windows\system32\CRYPTUI.dll
6920, explorer, C:\Windows\system32\CRYPT32.dll
6920, explorer, C:\Windows\system32\MSASN1.dll
6920, explorer, C:\Windows\system32\WINSTA.dll
6920, explorer, C:\Windows\system32\msiltcfg.dll
6920, explorer, C:\Windows\system32\VERSION.dll
6920, explorer, C:\Windows\system32\msi.dll
6920, explorer, C:\Windows\system32\WINMM.dll
6920, explorer, C:\Windows\system32\XmlLite.dll
6920, explorer, C:\Windows\system32\SXS.DLL
6920, explorer, C:\Windows\system32\stobject.dll
6920, explorer, C:\Windows\system32\BatMeter.dll
6920, explorer, C:\Windows\system32\WTSAPI32.dll
6920, explorer, C:\Windows\system32\es.dll
6920, explorer, C:\Windows\system32\prnfldr.dll
6920, explorer, C:\Windows\system32\WINSPOOL.DRV
6920, explorer, C:\Windows\system32\dxp.dll
6920, explorer, C:\Windows\system32\Syncreg.dll
6920, explorer, C:\Windows\System32\netshell.dll
6920, explorer, C:\Windows\System32\IPHLPAPI.DLL
6920, explorer, C:\Windows\system32\NSI.dll
6920, explorer, C:\Windows\System32\WINNSI.DLL
6920, explorer, C:\Windows\System32\nlaapi.dll
6920, explorer, C:\Windows\System32\AltTab.dll
6920, explorer, C:\Windows\system32\wpdshserviceobj.dll
6920, explorer, C:\Windows\system32\PortableDeviceTypes.dll
6920, explorer, C:\Windows\system32\PortableDeviceApi.dll
6920, explorer, C:\Windows\system32\WINTRUST.dll
6920, explorer, C:\Windows\System32\pnidui.dll
6920, explorer, C:\Windows\System32\QUtil.dll
6920, explorer, C:\Windows\System32\wevtapi.dll
6920, explorer, C:\Windows\system32\dhcpcsvc.DLL
6920, explorer, C:\Windows\system32\WS2_32.dll
6920, explorer, C:\Windows\system32\dhcpcsvc6.DLL
6920, explorer, C:\Windows\system32\credssp.dll
6920, explorer, C:\Windows\System32\npmproxy.dll
6920, explorer, C:\Windows\System32\QAgent.dll
6920, explorer, C:\Windows\System32\SyncCenter.dll
6920, explorer, C:\Windows\System32\Actioncenter.dll
6920, explorer, C:\Windows\system32\imapi2.dll
6920, explorer, C:\Windows\System32\hgcpl.dll
6920, explorer, C:\Program Files\Internet Explorer\ieproxy.dll
6920, explorer, C:\Windows\system32\MPR.dll
6920, explorer, C:\Windows\system32\thumbcache.dll
6920, explorer, C:\Windows\system32\PSAPI.DLL
6920, explorer, C:\Windows\system32\EhStorAPI.dll
6920, explorer, C:\Windows\system32\ieframe.DLL
6920, explorer, C:\Windows\system32\OLEACC.dll
6920, explorer, C:\Windows\system32\NetworkExplorer.dll
6920, explorer, C:\Windows\system32\dsrole.dll
6920, explorer, C:\Windows\System32\StructuredQuery.dll
6920, explorer, C:\Windows\system32\DEVRTL.dll
6920, explorer, C:\Windows\System32\werconcpl.dll
6920, explorer, C:\Windows\System32\wer.dll
6920, explorer, C:\Windows\System32\framedynos.dll
6920, explorer, C:\Windows\System32\wercplsupport.dll
6920, explorer, C:\Windows\System32\msxml6.dll
6920, explorer, C:\Windows\System32\hcproviders.dll
6920, explorer, C:\Windows\system32\MLANG.dll
6920, explorer, C:\Windows\system32\twext.dll
6920, explorer, C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll
6920, explorer, C:\Windows\system32\syncui.dll
6920, explorer, C:\Windows\system32\SYNCENG.dll
6920, explorer, C:\Windows\System32\drprov.dll
6920, explorer, C:\Windows\System32\ntlanman.dll
6920, explorer, C:\Windows\System32\davclnt.dll
6920, explorer, C:\Windows\System32\DAVHLPR.dll
7000, taskeng,
7096, dwm, C:\Windows\system32\Dwm.exe
7096, dwm, C:\Windows\SYSTEM32\ntdll.dll
7096, dwm, C:\Windows\system32\kernel32.dll
7096, dwm, C:\Windows\system32\KERNELBASE.dll
7096, dwm, C:\Windows\system32\GDI32.dll
7096, dwm, C:\Windows\system32\USER32.dll
7096, dwm, C:\Windows\system32\LPK.dll
7096, dwm, C:\Windows\system32\USP10.dll
7096, dwm, C:\Windows\system32\msvcrt.dll
7096, dwm, C:\Windows\system32\UxTheme.dll
7096, dwm, C:\Windows\system32\IMM32.dll
7096, dwm, C:\Windows\system32\MSCTF.dll
7096, dwm, C:\Windows\system32\dwmredir.dll
7096, dwm, C:\Windows\system32\dwmcore.dll
7096, dwm, C:\Windows\system32\ADVAPI32.dll
7096, dwm, C:\Windows\SYSTEM32\sechost.dll
7096, dwm, C:\Windows\system32\RPCRT4.dll
7096, dwm, C:\Windows\system32\WindowsCodecs.dll
7096, dwm, C:\Windows\system32\ole32.dll
7096, dwm, C:\Windows\system32\d3d10_1.dll
7096, dwm, C:\Windows\system32\d3d10_1core.dll
7096, dwm, C:\Windows\system32\dxgi.dll
7096, dwm, C:\Windows\system32\VERSION.dll
7096, dwm, C:\Windows\system32\dwmapi.dll
7096, dwm, C:\Windows\system32\PSAPI.DLL
7096, dwm, C:\Windows\system32\WINSTA.dll
[11/17/2011 19:15:29.0392] [1] Finished executing component tasks.
[11/17/2011 19:15:29.0423] [1] Ending processing Start-PreFileCopy
[11/17/2011 19:15:29.0439] [0] **************
[11/17/2011 19:15:29.0439] [0] Setup will run the task 'install-msipackage'
[11/17/2011 19:15:29.0439] [1] Setup launched task 'install-msipackage -logfile 'C:\ExchangeSetupLogs\ExchangeSetup.msilog' -targetdirectory 'F:\Program Files\Microsoft\Exchange Server\V14' -features 'ClientAccess' -packagepath 'D:\exchangeserver.msi' -updatesdir 'D:\Updates' -PropertyValues 'DISABLEERRORREPORTING=1 PRODUCTLANGUAGELCID=1033 DEFAULTLANGUAGENAME=ENU DEFAULTLANGUAGELCID=1033 INSTALLCOMMENT="Installed language for this product: English (United States)"''
[11/17/2011 19:15:29.0439] [1] Active Directory session settings for 'Install-MsiPackage' are: View Entire Forest: 'True', Configuration Domain Controller: 'HS.mr238.org', Preferred Global Catalog: 'HS.mr238.org', Preferred Domain Controllers: '{ HS.mr238.org }'
[11/17/2011 19:15:29.0439] [1] Beginning processing install-msipackage -LogFile:'C:\ExchangeSetupLogs\ExchangeSetup.msilog' -TargetDirectory:'F:\Program Files\Microsoft\Exchange Server\V14' -Features:'ClientAccess' -PackagePath:'D:\exchangeserver.msi' -UpdatesDir:'D:\Updates' -PropertyValues:'DISABLEERRORREPORTING=1 PRODUCTLANGUAGELCID=1033 DEFAULTLANGUAGENAME=ENU DEFAULTLANGUAGELCID=1033 INSTALLCOMMENT="Installed language for this product: English (United States)"'
[11/17/2011 19:15:32.0653] [1] ProductCode is '4934d1ea-be46-48b1-8847-f1af20e892c1'.
[11/17/2011 19:15:32.0653] [1] PackagePath was set to 'D:\exchangeserver.msi'; changing to full path 'D:\exchangeserver.msi'.
[11/17/2011 19:15:32.0684] [1] ProductCode is '4934d1ea-be46-48b1-8847-f1af20e892c1'.
[11/17/2011 19:15:32.0684] [1] Installing MSI package 'D:\exchangeserver.msi'.
[11/17/2011 19:15:32.0684] [1] Configuring an existing product. Product code: {4934D1EA-BE46-48B1-8847-F1AF20E892C1}. Property values: DISABLEERRORREPORTING=1 PRODUCTLANGUAGELCID=1033 DEFAULTLANGUAGENAME=ENU DEFAULTLANGUAGELCID=1033 INSTALLCOMMENT="Installed language for this product: English (United States)" REBOOT=ReallySuppress ADDLOCAL=ClientAccess
[11/17/2011 19:15:40.0703] [1] [WARNING] Unexpected Error
[11/17/2011 19:15:40.0703] [1] [WARNING] Installing product D:\exchangeserver.msi failed. Fatal error during installation. Error code is 1603. Last error reported by the MSI package is 'The installer encountered an unexpected error while installing this package. This may indicate a problem with this package. The error code is 2920. '.
[11/17/2011 19:15:40.0703] [1] [WARNING] Fatal error during installation
[11/17/2011 19:15:40.0734] [1] Ending processing install-msipackage