Link to home
Start Free TrialLog in
Avatar of chrispkotsiopoulos
chrispkotsiopoulos

asked on

Server crash every 20 hours!

I have a Microsoft Small Business server 2000 (latest service pack) with an accounting client-server application installed. The RAM is 512 MB. My system progressively run out of resources (memory usage exceeds 950 MB) and eventually crashes approximately every 20 hours. I prevent this by restarting it every day. After restarting, the memory usage falls to normal level. I have also Exchange 2000 installed (SP1). Below I include the Event Log Errors. Any help or advice would be appreciated.


***********SYSTEM EVENT ERRORS***************

Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10000
Date:            20/12/2001
Time:            5:00:11 μμ
User:            NT AUTHORITY\SYSTEM
Computer:      FENIX02
Description:
Unable to start a DCOM Server: {0820D243-0B18-4B0A-88F0-D857F0C91E62}. The error:
"Insufficient system resources exist to complete the requested service. "
Happened while starting this command:
C:\WINNT\System32\DllHost.exe /Processid:{0820D243-0B18-4B0A-88F0-D857F0C91E62}



Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10001
Date:            21/01/2002
Time:            12:24:37 μμ
User:            S-1-5-21-1123561945-1580436667-682003330-500
Computer:      FENIX02
Description:
Unable to start a DCOM Server: {0C0A3666-30C9-11D0-8F20-00805F2CD064} as /. The error:
"Access is denied. "
Happened while starting this command:
C:\WINNT\System32\mdm.exe -Embedding


Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10005
Date:            28/12/2001
Time:            9:02:58 μμ
User:            NT AUTHORITY\SYSTEM
Computer:      FENIX02
Description:
DCOM got error "The service database is locked. " attempting to start the service WinMgmt with arguments "" in order to run the server:
{8BC3F05E-D86B-11D0-A075-00C04FB68820}


Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10006
Date:            19/12/2001
Time:            6:32:40 μμ
User:            S-1-5-21-1123561945-1580436667-682003330-500
Computer:      FENIX02
Description:
DCOM got error "Class not registered " from the computer LOG-BASILIS when attempting to activate the server:
{E205C653-0426-11D2-9A4D-0060081E9D26}


Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10010
Date:            03/02/2002
Time:            7:35:51 πμ
User:            NT AUTHORITY\SYSTEM
Computer:      FENIX02
Description:
The server {0820D243-0B18-4B0A-88F0-D857F0C91E62} did not register with DCOM within the required timeout.


Event Type:      Error
Event Source:      RemoteAccess
Event Category:      None
Event ID:      20013
Date:            26/01/2002
Time:            10:20:35 πμ
User:            N/A
Computer:      FENIX02
Description:
The communication device attached to port COM3 is not functioning.


Event Type:      Error
Event Source:      RemoteAccess
Event Category:      None
Event ID:      20050
Date:            14/12/2001
Time:            11:39:39 μμ
User:            N/A
Computer:      FENIX02
Description:
The user FENIX\Kostas connected to port COM3 has been disconnected because no network protocols were successfully negotiatated.


Event Type:      Error
Event Source:      RemoteAccess
Event Category:      None
Event ID:      20073
Date:            19/12/2001
Time:            8:12:00 μμ
User:            N/A
Computer:      FENIX02
Description:
The following error occurred in the Point to Point Protocol module on port: COM3, UserName: <Unauthenticated User>. The authentication server did not respond to authentication requests in a timely fashion.
Data:
0000: a2 03 00 00               ¢...    


Event Type:      Error
Event Source:      RemoteAccess
Event Category:      None
Event ID:      20153
Date:            17/12/2001
Time:            6:46:14 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The currently configured accounting provider failed to load and initialize successfully. The system cannot find the file specified.
 
Data:
0000: 02 00 00 00               ....    


Event Type:      Error
Event Source:      IPBOOTP
Event Category:      None
Event ID:      30022
Date:            22/02/2002
Time:            9:19:45 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 30022 ) in Source ( IPBOOTP ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: 10.0.0.201.
Data:
0000: 46 27 00 00               F'..    




Event Type:      Error
Event Source:      MSFTPSVC
Event Category:      None
Event ID:      8
Date:            26/01/2002
Time:            6:50:28 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
FTP Server could not create a client worker thread for user at host 10.0.0.2.  The connection to this user is terminated.  The data is the error.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Data:
0000: 36 27 00 00               6'..    



Event Type:      Error
Event Source:      TermDD
Event Category:      None
Event ID:      50
Date:            14/02/2002
Time:            11:52:08 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 50 ) in Source ( TermDD ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: \Device\Termdd; X.224.




Event Type:      Error
Event Source:      TermServDevices
Event Category:      None
Event ID:      1105
Date:            23/12/2001
Time:            9:46:33 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 1105 ) in Source ( TermServDevices ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: WinFax/COSTAS/Session 1.
Data:
0000: 09 07 00 00 27 0a 00 00   ....'...




Event Type:      Error
Event Source:      Srv
Event Category:      None
Event ID:      2019             (too many)
Date:            23/02/2002
Time:            6:52:27 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.
Data:
0000: 00 00 04 00 01 00 54 00   ......T.
0008: 00 00 00 00 e3 07 00 c0   ....ã..À
0010: 00 00 00 00 9a 00 00 c0   ....&#353;..À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 02 00 00 00               ....    


Event Type:      Error
Event Source:      Server
Event Category:      None
Event ID:      2510
Date:            15/02/2002
Time:            3:25:12 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The server service was unable to map error code 1727.


Event Type:      Error
Event Source:      LDMS
Event Category:      None
Event ID:      3007
Date:            26/01/2002
Time:            5:55:35 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
Failed to set service status to 4, Error=1726.






Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5722
Date:            12/02/2002
Time:            6:43:37 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The session setup from the computer LOG-LEONIDAS failed to authenticate. The name of the account referenced in the security database is LOG-LEONIDAS$.  The following error occurred:
Access is denied.  
Data:
0000: 22 00 00 c0               "..À    


Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5775
Date:            29/01/2002
Time:            9:04:21 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
Deregistration of the DNS record '_gc._tcp.FENIX.GR. 600 IN SRV 0 100 3268 fenix02.FENIX.GR.' failed with the following error:
DNS bad key.  
Data:
0000: 39 23 00 00               9#..    


Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            24/01/2002
Time:            9:48:38 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The previous system shutdown at 9:46:11 &#960;&#956; on 24/1/2002 was unexpected.
Data:
0000: d2 07 01 00 04 00 18 00   Ò.......
0008: 09 00 2e 00 0b 00 80 02   ......€.
0010: d2 07 01 00 04 00 18 00   Ò.......
0018: 07 00 2e 00 0b 00 80 02   ......€.


Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7023
Date:            20/02/2002
Time:            4:59:26 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The World Wide Web Publishing Service service terminated with the following error:
Not enough resources are available to complete this operation.  


Event Type:      Error
Event Source:      MRxSmb
Event Category:      None
Event ID:      8003
Date:            12/02/2002
Time:            10:20:37 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The master browser has received a server announcement from the computer RESV-FLORA that believes that it is the master browser for the domain on transport NetBT_Tcpip_{62A0970B-F6B5-47C. The master browser is stopping or an election is being forced.
Data:
0000: 00 00 00 00 03 00 4e 00   ......N.
0008: 00 00 00 00 43 1f 00 c0   ....C..À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........





**************APPLICATION EVENT ERRORS*************

Event Type:      Error
Event Source:      EventSystem
Event Category:      Event System
Event ID:      4097
Date:            25/02/2002
Time:            5:02:50 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The COM+ Event System detected a bad return code during its internal processing.  HRESULT was 80070006 from line 42 of .\eventsystemobj.cpp.  Please contact Microsoft Product Support Services to report this error.


Event Type:      Error
Event Source:      Microsoft Web Proxy
Event Category:      None
Event ID:      14176
Date:            27/02/2002
Time:            9:54:33 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 14176 ) in Source ( Microsoft Web Proxy ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: C:\urlcache\Dir1.cdat; Some errors were encountered when ISA Server restored specific data cache files. ISA Server will now attempt to recover these files. These errors may have occurred because there was not enough time to complete all necessary shutdown operations, when ISA Server was previously shut down. To avoid this in future, you can increase the value of the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WaitToKillServiceTimeout registry key. ; 503.6225.3.0.1200.50.
Data:
0000: 5c 06 00 00               \...    


Event Type:      Error (many times)
Event Source:      Microsoft ISA Server Control
Event Category:      None
Event ID:      11005
Date:            27/02/2002
Time:            9:50:54 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 11005 ) in Source ( Microsoft ISA Server Control ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: Microsoft ISA Server Control; The error description is: Insufficient system resources exist to complete the requested service.
; IasInitializeRouteCache; Handling Bandwidth Control Service change notification ; 202.1449.3.0.1200.50.
Data:
0000: aa 05 07 80               ª..€    


Event Type:      Error
Event Source:      MSExchangeDSAccess
Event Category:      None
Event ID:      2075
Date:            27/02/2002
Time:            9:50:52 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 2075 ) in Source ( MSExchangeDSAccess ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: EMSMTA.EXE"; 2796; FENIX.GR, hr=0x80070862, deltaT=0.


Event Type:      Error
Event Source:      MSExchangeSA
Event Category:      (1)
Event ID:      9154
Date:            27/02/2002
Time:            9:46:58 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 9154 ) in Source ( MSExchangeSA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: 0x8007000e.


Event Type:      Error
Event Source:      MSExchangeDSAccess
Event Category:      None
Event ID:      2064
Date:            27/02/2002
Time:            9:46:36 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 2064 ) in Source ( MSExchangeDSAccess ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: WINMGMT.EXE; 3612.


Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1000
Date:            27/02/2002
Time:            9:46:20 &#960;&#956;
User:            NT AUTHORITY\SYSTEM
Computer:      FENIX02
Description:
Windows cannot obtain the domain controller name for your computer network. Return value (59).

Event Type:      Error
Event Source:      MSExchangeIS Mailbox Store
Event Category:      (6)
Event ID:      7200
Date:            27/02/2002
Time:            9:45:00 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 7200 ) in Source ( MSExchangeIS Mailbox Store ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: FDoUpdateCatalog; 0x80004005; First Storage Group\Mailbox Store (FENIX02).

Event Type:      Error
Event Source:      MSExchangeDSAccess
Event Category:      None
Event ID:      2061
Date:            27/02/2002
Time:            9:45:00 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 2061 ) in Source ( MSExchangeDSAccess ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: STORE.EXE"; 2664; 80040952; <GUID=6F8B7E75-3120-4816-93B3-0763C4D73298>; (objectclass=*); 0.


Event Type:      Error
Event Source:      MSExchangeSA
Event Category:      (1)
Event ID:      9153
Date:            26/02/2002
Time:            1:49:44 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 9153 ) in Source ( MSExchangeSA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: 0x8007203a.


Event Type:      Error
Event Source:      Microsoft Web Proxy
Event Category:      None
Event ID:      14198
Date:            26/02/2002
Time:            1:39:53 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 14198 ) in Source ( Microsoft Web Proxy ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: .


Event Type:      Error
Event Source:      MSExchangeSA
Event Category:      (1)
Event ID:      9188
Date:            25/02/2002
Time:            5:00:33 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 9188 ) in Source ( MSExchangeSA ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: cn=Exchange Domain Servers,cn=Users,dc=FENIX,dc=GR; 8007203a.


Event Type:      Error
Event Source:      SceCli
Event Category:      None
Event ID:      1001
Date:            23/02/2002
Time:            5:05:03 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
Security policy cannot be propagated. Cannot access the template. Error code = 3.
      \\FENIX.GR\sysvol\FENIX.GR\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\Microsoft\Windows NT\SecEdit\GptTmpl.inf.


Event Type:      Error
Event Source:      Microsoft ISA Server Control
Event Category:      None
Event ID:      14065
Date:            25/02/2002
Time:            4:46:36 &#956;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 14065 ) in Source ( Microsoft ISA Server Control ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: Event log failure.


Event Type:      Error
Event Source:      Microsoft ISA Server Control
Event Category:      None
Event ID:      14079
Date:            24/02/2002
Time:            9:02:05 &#960;&#956;
User:            N/A
Computer:      FENIX02
Description:
The description for Event ID ( 14079 ) in Source ( Microsoft ISA Server Control ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: w3proxy; 6; 0:46.


Avatar of Banyan99
Banyan99

Does your accounting app have a memory leak. All of the above points to this.
After the system is running for 10 hours or so, try to shutdown and restart just the accounting application on the server.  See if the memory usage does back to normal.  This does sound like a slow memory leak.

I assume your server is up to the current Service Pack level. Yes?
For leaks, if accounting has homebrew, MS has some code available to help identify.
Mailserver should run standalone. You will be far better off moving it to its own box. It also requires some patches. Beware of getting patches out of sync, and beware of letting ANY web code (IIS) into services.

Similarly, ISA is immature, and as many others, should not have the references on your production box (accounting).

General rule on MS servers is to not run more than one application on any of them, as it leads to situations such as you've identified. Either move or get rid of the web stuff.
Avatar of mikecr
SunBow, who made up the rule about multiple applications running on an MS server? Can you provide me with some documentation on that?

Chrispkotsiopoulos,do you currently have your server performance set for background services or applications? Right click on the My Computer icon and go to Properties, then in the next windows choose the Advanced tab and then performance options. What is it set to?
ASKER CERTIFIED SOLUTION
Avatar of Kyle Schroeder
Kyle Schroeder
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
mikecr - it's actually depends on the applications themselves, but even Microsoft has suggested that certain applications have their own servers (ie:  don't mix a PDC/BDC in with a SQL or Exchange server).

But pretty much it's live and learn, if you can squeeze three or four small apps on a single server, cool (we do this on one box) but generally it's one server per large application (again, we do this too).

Besides, look what is happening to this one server running everything from a firewall to e-mail, when it goes down, EVERYTHING goes down.
I have exactly the same problem. The problem started after installing SP3. Access Database running MDE front end. If it is a memory leak,please post your exact repair procedure. I'd be greatly appreciated.
chrispkotsiopoulos,
I have gotten the exact same error on a new SBS2000 machine also running accounting applications. “The server {0820D243-0B18-4B0A-88F0-D857F0C91E62} did not register with DCOM within the required timeout.”
However it was a one-time deal (so far). How did you determine it was the accounting application causing the problem? What specific application (product name or manufacturer) are you referring to? Have you resolved it yet and if so what actions did you take to do so?