An Issue with CSA

[jameswestley]

We have a user in our domain with every USB device you could think of connect to his PC.

The CSA is creating this error message about 60 - 100 times a day

The intelligent agent denied this request due to a timeout. If this message happens frequently, then it should be reported to technical support. This is most likely to happen on very heavily loaded systems, or systems which are under attack.

The request was time=38761.1 (seconds since boot) type=FILE FileOp=OPEN FilePrivateOp=IRP_MJ_CREATE FileOpFlags=EXECUTE|NOISY|NEW_FILEID FileAccess=EXECUTE FileAccessToken=USER FileDriveType=FIXED ProcessId=2496 Credentials=os=win32,T=***\***,t=0105000000000005150000002F6F16179D57B9411C14DF4193050000

How can I stop these events being created..

[tsteger1]

What version? Some flavor of 4.0.3? We are getting this on a number of machines, most of them laptops with a wireless and wired NIC.

Thanks

[jameswestley]

Thanks for your email, its build 720

[tsteger1]

We have 40 out of 3200 doing it regularly. It usually happens at startup and can coincide with an unreachable MC message. I used to see "Rules failed to load within 30 seconds" messages in the Windows event log for these too.

I haven't moved some of the offending hosts to 4.5 or 5.0 yet but that may help.

Tom

[tsteger1]

Well, I moved my 2003 server to 5 and haven't had a timeout error yet. I've had some other errors but I believe those a hardware related.