Event Viewer error

Hi Experts,

I have a newly installed win2k server on my domain. But when i try to open the event viewer it comes up with an error message saying "Disk is full". Also, if i try to open Active Directory it comes up with the same message.

The machine has a SP4 and all the updates.

Any help would be greately appreciated.

Thanks
boy10ukAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RWrigleyCommented:
ANd how much free space is there on the C drive?  If it's actually out of drive space, you can temporarily get some space back by reducing the size of the Page file (in system properties), or move the paging file to another drive (if one is available).
boy10ukAuthor Commented:
There is PLENTY of space available on the C drive, almost 750mb.  This problem has been resolved after a re-start but quite often comes back after a day.  it's not only event viewer that is unable to execute, but any program including the replication of data within AD.

Thanks
Nick E
RWrigleyCommented:
Hmm...how old is the server?  It could be fragmentation of the hard drive or of the page file.  You might try turning off (or moving) the page file, and then run a defrag.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
OWASP Proactive Controls

Learn the most important control and control categories that every architect and developer should include in their projects.

Lee W, MVPTechnology and Business Process AdvisorCommented:
I've seen some logging applications (mostly on clusters) run away with themselves and fill up the hard disk.  You should try to figure out what is using the space.  (750 MB is NOT plenty of space - I had this problem with log files filling up over a gig).  Also, check to see if you have the content indexing service running - I't supposed to speed up things and if you run web sites, help in searching, but I usually turn it off (when it runs, it does so periodically and creates files used as indexes that might be filling the machine up).
boy10ukAuthor Commented:
Ok granted, by todays standards 750mb is not that 'plentiful'.  However, i haven't seen a case where any logs are extraordinarily large especially the event viewer stuff.  The Server is a new build, couple of months max.  At the next opportunity i will check to see if the content indexing service is running.
Nirmal SharmaSolution ArchitectCommented:
>>>This problem has been resolved after a re-start but quite often comes back after a day

This behaviour is not by design actually because when free disk space reaches 200 megabytes (MB), you receive the following message for 10 seconds, once per session

You are running out of disk space on [drive]. To free space on this drive by deleting old or unnecessary files, click here.
When free disk space reaches 80 MB, you receive the following message for 30 seconds, every four hours, twice per session:

You are running very low on disk space on [drive]. To free space on this drive by deleting old or unnecessary files, click here.
When free disk reaches 50 MB, you receive the following message for 30 seconds, every five minutes, until free space is above 50 MB:

You are running very low on disk space on [drive]. To free space on this drive by deleting old or unnecessary files, click here.
Note There is a registry value you can set to disable this feature. To disable low disk space checks, follow these steps, log off, and then log on
again: Follow these steps, and then quit Registry Editor:

1. Click Start, click Run, type regedit, and then click OK.  
2. Locate and then click the following key in the registry:  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type NoLowDiskSpaceChecks, and then press ENTER.  
5. On the Edit menu, click Modify.  
6. Type 1, and then click OK.  

NOTE: - I just want to confirm that this error is not suppressed by NoLowDiskSpaceChecks value. If you disable and this error doesn't come again then that means value specified for 200 MB has become 1000 or 800 MB. So if this is the case then you don't need to worry and need to alter the value specified in registry for disk check.

Thanks
Nirmal SharmaSolution ArchitectCommented:
Why not trying a reverse search in your system and checking for files those are greater then 500, 800, and then 1000 MB so on. By checking in this way you will come to know which software or application is creating or filling up hard drive.

Does this make sense?
RWrigleyCommented:
Check this info...near the bottom, the author suggests a couple of possible causes for problems similar to yours.

http://www.petri.co.il/pagefile_optimization.htm
boy10ukAuthor Commented:
I will certainly check for those files.  However, i do not get an error message per few mins or hours etc or even a message suggesting i'm running low and how i can free up space.  when i click onto a program icon i get the message "Disk Is Full" and that is all, I then press OK and i am back where i started.
Nirmal SharmaSolution ArchitectCommented:
Could you please tell me where exaclty you are getting this error? or give some examples so i can know.

MrArubaCommented:
did you enable disk quota's for users on this server? Check that, maybe you limited yourself too much.
boy10ukAuthor Commented:
With regards to where i am getting the errors: it is anytime i try to access a program, the error message pops up, i then press ok and i am back to square one.  this happens when trying to access: AD, Event Viewer, DNS all but to mention a few.
In reply to MRAruba, no disk quota's are not configured on the server.
RWrigleyCommented:
Its interesting to note that all of the programs you mention are actually plug-ins for the MMC (Microsoft Management Console), so there may be an issue there.  Are you running MS-SQL by any chance?  I know it does stuff to the MMC when it's installed.

You didn't mention if the Virtual Memory article offered any hints?
Nirmal SharmaSolution ArchitectCommented:
>>>it is anytime i try to access a program, the error message pops up, i then press ok and i am back to square one

Hummm...could you please download a small utility called "HighJackThis" and run it on server and then post the log here: -
http://www.majorgeeks.com/download.php?det=3155
Nirmal SharmaSolution ArchitectCommented:
And also run sfc /scannow from run box in start menu. This should do a job for you for a corrupted module.

boy10ukAuthor Commented:
Hi All,

Sorry for the delay.
yes I am running MS SQL.  However, i redirected the PAGE File to another disk and now all seems ok. weird how there was never an indication that i was low in disk space....

Thanks Again.
RWrigleyCommented:
Its not a question of low disk space per sae, but the amount of contiguous free space.  Certain applications require that all their allocated space be in one continuous block on the hard drive, so if the drive is fragmented, they won't work.  Moving the page file has the side-effect of freeing up a huge block of drive space.

Also, there are weird things that happen in the system when free space on the system drive falls below 10% of  the total.

Glad this worked out for you.  Keep an eye on your system drive though (fragmentation and free space), because its possible that moving the page file was only a symptomatic fix.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.