Server slow down with Event IDs 2019 and 4211

Hi there,

We have a Windows 2003 server (SP1) that is acting as a print server.  We also have COMMVAULT installed on this server for our backups.

For about 3 days, the server runs fine without any issues.  It then starts to report multiple occurances of Event Id 4211 (WINS) with the error:

The description for Event ID ( 4211 ) in Source ( Wins ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: .

It then reports a whole load of Event ID 2019 (SRV) with the following error:

The server was unable to allocate from the system nonpaged pool because the pool was empty.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

If we restart the server, the problem goes away, albeit onlt for another three days or so.

When this occurs, the server is still "available" so to speak, but all printing services do not work (even though we stop and start the print spooler), but the CPU and Processor are all fine.  We can ping the server, and it can be logged on to from its own console (but not remotely).  The pagefile usage does appear to be very high when this occurs too.

Does anyone have any ideas as to what this might be?  Should I be running a Performance Monitor over the server to narrow this down and if so, what should I be capturing?

Thanks!
LVL 1
peterkennedyAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

ComputronCommented:
Sounds like a memory leak
Any change you are using Norton ?

http://support.microsoft.com/Default.aspx?id=272568
Rob WilliamsCommented:
Also have a look at the following. Symptoms sound very similar to yours. If it seems applicable Microsoft has a Hotfix, but one that you must phone for to access:
http://support.microsoft.com/default.aspx?scid=kb;en-us;833266
Rob WilliamsCommented:
Perhaps the WINS error is unrelated. Review your WINS configuration, especially if you have multiple WINS servers, specifically "Make sure the push partners, pull partners, and router are all running." as per:
http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows%20Operating%20System&ProdVer=5.2&EvtID=4211&EvtSrc=Wins&LCID=1033
Do you use WINS? if not try shutting down the service temporarily.
Zaheer IqbalTechnical Assurance & ImplementationCommented:
Some issues here http://www.eventid.net/display.asp?eventid=2019&eventno=661&source=Srv&phase=1

I would put my emphasis on this problem towards printing...
How much memory is on the server??
How much free disk space ????
Dushan De SilvaTechnology ArchitectCommented:

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.