As for item #1, I think there are a couple things to think about. I think subsystems/extensions, should be handled differently from deployments. I think if sub-system fails to activate based on some kind of exception thrown during activation (not a service start), I think the server should basically stop progressing, and basically log the information related to the problem. I just to don't think it makes sense for the server to continue if a subsystem failed. Deployments are a different story. I think the server should log the problem info, but continue to boot with other deployments. This is basically what is happening now. What is still needed is some ability to rollback any deployment specific services that may have been added to the batch prior to the failure occurring. The deployment already use MSC sub-batches, but the API does not have any options to rollback.