• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 663
  • Last Modified:

net logon and computer browser shutdown automatically

Hi,

I'm trying to figure out this problem with services shutting down by themselves several times every day.  The primary services that are doing it are net logon and computer browser.  We used to have Exchange 2000 server running, and several exchange services would shutdown and require us to manually restart them as well, but we uninstalled exchange for other reasons..  What are some logical troubleshooting steps?  

Thanks - Trevor
0
trevorhartman
Asked:
trevorhartman
3 Solutions
 
MazaraatCommented:
Post the event log errors please =)
****
Check for a replication/time issue.  Check the time vs another server, preferably a domain controller.
If the time is off sync your time with the DC that is configured to keep time updated (usually the first DC):
-----Start->Run->CMD.exe
-----net time \\domaincontroller /set /y
This can also be run from clients PC's to sync with the time server.
*****
Also verify your DNS information for the server:
Start->Run->CMD.exe
ipconfig /all
Verify the information against any DHCP reservations, and DNS information
****
If your not running the exchange on it anymore, maybe a corrupt computer account in AD?  Might have to pull it out of domain and restart, then re-add it back in.
****

Anywho, post some event logs so we can see what kind of errors its bleeting about =)
0
 
trevorhartmanAuthor Commented:
not sure what part of the error log you want to see, but here's an exported tab delimited list of the last few hours:

Type      Date      Time      Source      Category      Event      User      Computer
Error      10/12/2004      4:35:46 PM      Userenv      None      1000      SYSTEM      SERVER2
Error      10/12/2004      4:30:44 PM      Userenv      None      1000      SYSTEM      SERVER2
Error      10/12/2004      4:25:41 PM      Userenv      None      1000      SYSTEM      SERVER2
Error      10/12/2004      4:20:39 PM      Userenv      None      1000      SYSTEM      SERVER2
Error      10/12/2004      3:59:51 PM      Userenv      None      1000      SYSTEM      SERVER2
Error      10/12/2004      3:54:48 PM      Userenv      None      1000      SYSTEM      SERVER2
Information      10/12/2004      3:53:40 PM      Ci      CI Service       4103      N/A      SERVER2
Information      10/12/2004      3:53:24 PM      Ci      CI Service       4109      N/A      SERVER2
Error      10/12/2004      3:49:45 PM      Userenv      None      1000      SYSTEM      SERVER2
Information      10/12/2004      3:45:14 PM      Ci      CI Service       4103      N/A      SERVER2
Information      10/12/2004      3:44:53 PM      Ci      CI Service       4109      N/A      SERVER2
Error      10/12/2004      3:44:42 PM      Userenv      None      1000      SYSTEM      SERVER2
Information      10/12/2004      3:41:10 PM      Ci      CI Service       4103      N/A      SERVER2
Information      10/12/2004      3:41:05 PM      Ci      CI Service       4109      N/A      SERVER2
Error      10/12/2004      3:38:00 PM      Userenv      None      1000      SYSTEM      SERVER2
Information      10/12/2004      3:36:06 PM      Ci      CI Service       4103      N/A      SERVER2
Information      10/12/2004      3:35:57 PM      Ci      CI Service       4109      N/A      SERVER2
Error      10/12/2004      3:32:58 PM      Userenv      None      1000      SYSTEM      SERVER2
Information      10/12/2004      3:27:18 PM      Ci      CI Service       4103      N/A      SERVER2
Information      10/12/2004      3:27:06 PM      Ci      CI Service       4109      N/A      SERVER2
Error      10/12/2004      3:11:13 PM      Userenv      None      1000      SYSTEM      SERVER2
Information      10/12/2004      3:09:02 PM      DrWatson      None      4097      N/A      SERVER2
Information      10/12/2004      3:06:53 PM      Ci      CI Service       4103      N/A      SERVER2
Information      10/12/2004      3:06:20 PM      Ci      CI Service       4109      N/A      SERVER2
Error      10/12/2004      3:06:10 PM      Userenv      None      1000      SYSTEM      SERVER2
Error      10/12/2004      3:00:48 PM      Userenv      None      1000      SYSTEM      SERVER2
Information      10/12/2004      2:59:36 PM      Norton AntiVirus      None      2      N/A      SERVER2
Warning      10/12/2004      2:59:28 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:25 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:24 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:24 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:59:23 PM      Norton AntiVirus      None      6      N/A      SERVER2
Error      10/12/2004      2:55:46 PM      Userenv      None      1000      SYSTEM      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:14 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:12 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:12 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:48:07 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:44:15 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:41:35 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:40:13 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:39:55 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:39:41 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:39:41 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:39:40 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:38:52 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:38:50 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:36:00 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:36:00 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:36:00 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:36:00 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:36:00 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:35:59 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:35:59 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:35:59 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:35:59 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:35:59 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:33:48 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:33:48 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:33:47 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:33:47 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:27:46 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:26:42 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:26:40 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:24:34 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:22:41 PM      VxSvc_Perc2Pro      None      579      N/A      SERVER2
Warning      10/12/2004      2:20:53 PM      Norton AntiVirus      None      6      N/A      SERVER2
Warning      10/12/2004      2:20:38 PM      Norton AntiVirus      None      6      N/A      SERVER2
Information      10/12/2004      2:19:06 PM      Ci      CI Service       4135      N/A      SERVER2
Information      10/12/2004      2:19:06 PM      Ci      CI Service       4135      N/A      SERVER2
Information      10/12/2004      2:19:06 PM      Ci      CI Service       4135      N/A      SERVER2
Information      10/12/2004      2:19:05 PM      Ci      CI Service       4137      N/A      SERVER2
Information      10/12/2004      2:19:02 PM      Ci      CI Service       4137      N/A      SERVER2
0
 
trevorhartmanAuthor Commented:
DNS looks good... we've had these settings for about 10 months, and the problem with the services only came up about 2 months ago..   not exactly sure on the time thing.. the time on my workstation has always been incorrect.  it's about 15 minutes behind the server time.  my workstation doesn't even log into the domain though...  

do you need to see any other events?


thx - Trevor
0
What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

 
trevorhartmanAuthor Commented:
note: we've been clearing viruses off this server regularly the last few months...  finally killed exchange since that's how they were getting in.
0
 
guniteCommented:
I found that this particular problem was fixed in SP4 for Windows 2000 Server. Do you have the latest service pack installed?
0
 
trevorhartmanAuthor Commented:
No we don't, I'll have to try that tomorrow when I get in.  thanks for the suggestion

-Trevor
0
 
trevorhartmanAuthor Commented:
ok i checked and it looks like we already had sp4 installed... services are still shutting down.. any other suggestions?

thx - Trevor
0
 
MazaraatCommented:
Please open one of the errors for userenv 1000, and post =)


This error may enlighten us on what is causing your problems.

Also look through your system log like you did above, and then open any errors & copy and paste them(just a few not all =)
0
 
trevorhartmanAuthor Commented:
Here's one of the userenv errors:

Event Type:      Error
Event Source:      Userenv
Event Category:      None
Event ID:      1000
Date:            10/14/2004
Time:            5:31:31 PM
User:            NT AUTHORITY\SYSTEM
Computer:      SERVER2
Description:
Windows cannot access the registry information at \\CCMTEES\sysvol\CCMTEES\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\Machine\registry.pol with (53).


Here's an error from the system log (had about 8 of these in a row at the same time):

Event Type:      Error
Event Source:      TermServDevices
Event Category:      None
Event ID:      1106
Date:            10/14/2004
Time:            5:35:08 PM
User:            N/A
Computer:      SERVER2
Description:
The printer could not be installed.
Data:
0000: 05 07 00 00 32 04 00 00   ....2...

here's another system error that showed up several times:

Event Type:      Error
Event Source:      smtpsvc
Event Category:      None
Event ID:      6003
Date:            10/14/2004
Time:            1:18:55 PM
User:            N/A
Computer:      SERVER2
Description:
SMTP was unable to connect to an LDAP server. Unable to categorize because there are no GC servers available
 

For more information, click http://www.microsoft.com/contentredirect.asp.
Data:
0000: 5e 05 04 c0               ^..À    


thx - Trevor
0
 
trevorhartmanAuthor Commented:
found an error on Net logon:

Event Type:      Warning
Event Source:      NETLOGON
Event Category:      None
Event ID:      5781
Date:            10/14/2004
Time:            3:46:44 PM
User:            N/A
Computer:      SERVER2
Description:
Dynamic registration or deregistration of one or more DNS records failed because no DNS servers are available.
Data:
0000: 2a 23 00 00               *#..    


what does that mean?
0
 
MazaraatCommented:
ok, is this server a domain controller? It looks like your having active directory issues.  Check to see where your master roles are located, you may have to move them:
http://is-it-true.org/nt/nt2000/atips/atips56.shtml

Go to a command prompt and type this:
netdom query fsmo

it will return a list of the 5 roles and who they belong to. that would help in finding out why your having ldap and global catalog issues
*****

Error messages=

This below can be ignored, its just telling you that when you remote in it doesn't have the drivers to map your printers
Event Type:     Error
Event Source:     TermServDevices
Event Category:     None
Event ID:     1106
*****

below Netlogon errors:
Event Type:     Warning
Event Source:     NETLOGON
Event Category:     None
Event ID:     5781

http://support.microsoft.com/default.aspx?scid=kb;EN-US;259277
Excerpt:
NOTE: A common cause for these errors is that a domain controller references itself as a primary DNS server in its TCP/IP properties. When the domain controller starts in this configuration, the Netlogon service may start before the DNS service starts. Because the Netlogon service must register records in DNS and the DNS service is not yet available, errors may occur. In this situation, you can safely ignore the errors because the Netlogon service will again try to register the records in approximately five minutes, at which time it will be successful. However, there are two ways to avoid the errors in this scenario: • Make sure that domain controllers do not reference themselves as a primary DNS server in their TCP/IP properties.
• Configure the Netlogon service to depend on the DNS service. This will cause the Netlogon service to start after the DNS service starts. To do this, run REGEDT32, and go to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon
In the right pane, double-click the value DependOnService and add DNS to the next available blank line. Click OK and exit Registry Editor. For additional information, click the article number below to view the article in the Microsoft Knowledge Base:


Seems like a couple of different problems here, first thing first check out the DNS first, then check out your schema roles as the links show.
0
 
trevorhartmanAuthor Commented:
sorry I haven't had time to implement the solution these experts provided.  I will close the question myself

-Trevor
0
 
grbladesCommented:
Could you please close the question.
0
 
trevorhartmanAuthor Commented:
yes, sorry... i thought i already did, but it didn't take
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now