On many of our PCs, when a user’s Notes client crashes, NSD runs. However, it never finishes. Instead, every time the user starts Notes, NSD runs again.
The only way we’ve found to get the user working again is to login with Admin rights to the PC and start Notes, which appears to clear the error condition. From that point on, the client works again.
The actual NSD log is full of ‘cannot attach to process’ and ‘Access Denied’ messages, but we’re at a dead end to resolving the problem.
Example:
ERROR (0): AdjustTokenPrivileges failed - (1300) Not all privileges referenced are assigned to the caller.
INFO (0): Using PSAPI DLL
search path: .;C:\WINNT
ERROR (4): can’t attach to process [ ?:0008] - (5) Access is denied.
ERROR (4): can’t attach to process [ SMSS:0090] - (5) Access is denied.
IBM suggested setting the users to Power Users but that is not an option in our environment. Does anyone have any other information on what ‘rights’ NSD needs to complete?
One of our desktop engineers attempted to use a file monitoring tool to look for possible read/write issues but did not find anything significant. Are we alone? Don’t other companies restrict the rights users have to mess up their PCs and install virii-laden software?
Any help or suggestions would be appreciated. We get calls from users every day because ‘NSD is running’ and they can’t start Notes.
You don’t have to give users unrestricted rights, just give them the “Debug Programs” privilege (Admin tools → Local Security Policy → User Rights Assignment → Debug Programs)
Subject: RE: NSD runs every time users start Notes
You might need to also give the “normal” users full file permissions to the IBM_TECHNICAL_SUPPORT directory. You can either do this with the CACLS tool or Explorer.
Subject: NSD runs every time users start Notes-Solution(s)
We discovered a few options for NSD woes:1. An IBMer noted that a variation of this was fixed in 6.0.3. So far 6.0.3 has helped people who frequently experience the NSD ‘lockout’.
For quick fixes, we’ve had our help desk delete the contents of the IBM TECHNICAL SUPPORT folder. This allows users to get back in.
Adding the Debug Priviledge to our Win2K users allows the proper NSD output to be displayed. I think this was a separate problem related to our rights.
You are not alone. Here is an snippet from one of my user’s NSD’s:ERROR (0): AdjustTokenPrivileges failed - (1300) Not all privileges referenced are assigned to the caller.
INFO (0): Using PSAPI DLL
search path: .;C:\WINNT
ERROR (4): can’t attach to process [ ?:0008] - (5) Access is denied.
ERROR (4): can’t attach to process [ smss:0084] - (5) Access is denied.
ERROR (4): can’t attach to process [ csrss:009c] - (5) Access is denied.
ERROR (4): can’t attach to process [winlogon:0098] - (5) Access is denied.
We are not in a position to elevate users rights either. We’ve opened up the users rights on files and folder so they can run the client. We are currently working with IBM because we have the NSD problem in an environment where all users have administrator rights on their PC’s.
We have also had this problem - did not know it was a windows rights issue. To fix the machine we were deleteing the contents of IBM_technical_support folder after copying it to another location. Lotus had no idea what was going on. PLease let me know if there is a reasonable fix. IS 6.03 / 6.5.0 any better about crashes?
Subject: RE: NSD runs every time users start Notes
We discovered something else for one of these ‘NSD’ users today. As another noted, deleting the IBM_TECHNICAL_SUPPORT folder might clear the condition, but also take a look at the fault_recovery.hst file. For our user, every line ended in 1 except the line for the most current crash, which said 0. We manually changed this to 1 and then she could start her client again… I shared this with IBM Support but am still looking for a solution.