ronaldvanderlinden
asked on
Server starts generating event 1053 on random time and stops responding to login after a while. Hard power reboot only solutions.
I have a Windows 2003 server. This server starts to generate, at random time in the evening or night, 1053 events.
The server is in dutch. i hope this is not a big problem. I'll try to translate is.
Source: Userenv
Catogory: none
Event: 1053
Kan de gebruikers- of computernaam niet vaststellen. Onvoldoende opslagruimte beschikbaar om deze bewerking te voltooien. . Het verwerken van het groepsbeleid wordt afgebroken.
Cannot determine user- or computername. Not enough storage space available to compleet the action. The processing of the grouppolicy will be terminated.
After the first error the server creates every 5 minutes the same error.
When we reset the server it'll work all day without any error. And every evening or night it will start creating errors.
Sometime it start with 2 or 3 error with event ID:
Source: Userenv
Catogory: none
Event: 1030
Kan niet zoeken naar de lijst met groepsbeleidsobjecten. Controleer het gebeurtenislogboek op berichten die eerder door de beleidsengine zijn geregistreerd en die mogelijk de oorzaak hiervoor bevatten.
cannot search for the list with grouppolicyobjects. Check the applicationlogbook for messages that were generated before by the policyengine en that may revaile the cause of this.
But there are no errors before these.
after which it gives the 1053 until reboot.
The server is up to date (sp1). He is only used for file and print services. No Exchange or something like that.
Ik hope somebody solved this problem and can help me.
The server is in dutch. i hope this is not a big problem. I'll try to translate is.
Source: Userenv
Catogory: none
Event: 1053
Kan de gebruikers- of computernaam niet vaststellen. Onvoldoende opslagruimte beschikbaar om deze bewerking te voltooien. . Het verwerken van het groepsbeleid wordt afgebroken.
Cannot determine user- or computername. Not enough storage space available to compleet the action. The processing of the grouppolicy will be terminated.
After the first error the server creates every 5 minutes the same error.
When we reset the server it'll work all day without any error. And every evening or night it will start creating errors.
Sometime it start with 2 or 3 error with event ID:
Source: Userenv
Catogory: none
Event: 1030
Kan niet zoeken naar de lijst met groepsbeleidsobjecten. Controleer het gebeurtenislogboek op berichten die eerder door de beleidsengine zijn geregistreerd en die mogelijk de oorzaak hiervoor bevatten.
cannot search for the list with grouppolicyobjects. Check the applicationlogbook for messages that were generated before by the policyengine en that may revaile the cause of this.
But there are no errors before these.
after which it gives the 1053 until reboot.
The server is up to date (sp1). He is only used for file and print services. No Exchange or something like that.
Ik hope somebody solved this problem and can help me.
ASKER
I've checked link.
The regisstry setting is not set on my server.
I've did check the security log and found another thing that has very likely to do with the problem.
In the securitylog there is constantly the following event genration
540: login Server-2$ ok
576: special rights ok for user Server-2$
than right after i get several times
538: logoff user Server-2$
This happens constantly. The same sequense happens serveral time in every minute.
Sometimes there are other users that log on in the same manner.
Hopes the helps.
Thanks for the fast responce.
The regisstry setting is not set on my server.
I've did check the security log and found another thing that has very likely to do with the problem.
In the securitylog there is constantly the following event genration
540: login Server-2$ ok
576: special rights ok for user Server-2$
than right after i get several times
538: logoff user Server-2$
This happens constantly. The same sequense happens serveral time in every minute.
Sometimes there are other users that log on in the same manner.
Hopes the helps.
Thanks for the fast responce.
576 seems to be an audit event log. Normally indicates that a privilege that is not auditable on an individual-use basis has been assigned to a user's security context at logon". See MSW2KDB for additional information about this event.
> Thanks for the fast responce.
Nor problem
> Thanks for the fast responce.
Nor problem
ASKER
I've reinstalled the server. Problem solved
ASKER
I don't know how to close this call.
Please advise.
Thanx
Please advise.
Thanx
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
http://www.eventid.net/display.asp?eventid=1053&eventno=1584&source=Userenv&phase=1