Solved

eventid 6008 unexpected shutdown

Posted on 2006-07-12
5
3,382 Views
Last Modified: 2012-06-27
Hello All,
It seems every other day, or the same day two of three W2K3 terminal servers I have in production reboot unexpectedly.  I recieve the eventid 6008 in my system event log.  

I'm running a Citrix 3.0 Presentation Server Environment.  When I lookup Citrix, Windows and eventid site I see alot of Windows nt4 fixes.  

I keep everything current W2k3 with SP1.  

I've read about some power supply or motherboard issues, but this error is affecting only two of my Supermicro Servers.  All three servers were purchased at the same time and are identical.  

Any ideas?  Thanks for your help.

Fred
0
Comment
Question by:Bulls-Eye
  • 4
5 Comments
 

Author Comment

by:Bulls-Eye
Comment Utility
I have changed the RPC and DCOM service properties to first restart the service.  The second instance will restart the server.    
I'm hoping the servers will last a little longer before reseting.

0
 

Author Comment

by:Bulls-Eye
Comment Utility
I didn't get an error for a while.  Then I got a user complaint that he couldn't print.  When I tried to print to his queue the printers and faxes window crashed and went away.  Then the server rebooted with the same error 6008.  I noticed that I also got a 1003 event ID in the system log, that has a source of "System Error".  At eventid web site it points to a driver failure.  

Here is more data for those that may be interested.
I was able to crash the server when I try to print from this guys login from a thin client that I have him on.  It will crash even with I just try to print a notepad text test file ( a notepad file with the word test in it).  If I have him login to another thin client he can print OK and doesn't crash the server.

So it is something with his account that thin client and the remote access terminal server running in a Citrix 3.0 environment.  

I believe it may be a printer driver corruption.  The other driver to notice is the intel pro 1000 MT drivers.  I have two intel gig ports that are embeded in the servers motherboard.  I noticed that Microsoft has a updated driver for them but I have not installed the driver.  I have the two ports working in a teaming group.  I have had problems before were I updated the intel drivers then they didn't work with the HP switch I had.  So I didn't want to update those drivers.  

I'm going to test the updated intel drivers on a test server and see if it helps.  Perhaps I may need to reinstall the printer driver.  The printer is a Kyocera 3820.  I have this driver installed on the server as well as the thin client (Neoware).

Anyways, I don't know if this brings any more thoughts to anyone but I thought to share where I was at in this ongoing problem.
0
 

Author Comment

by:Bulls-Eye
Comment Utility
Ok, I managed to fix the server resets.  It is a microsoft bug, here is the Article:
http://support.microsoft.com/?kbid=910362
I called microsoft and got the hotfix.  I was able to test it because I had a senario that would always crash the server.  A particular user ID and a specific thin client and then he went to print the printing would crash but that didn't reset the server.  It was when I logged him out that the server would reset.  

I applied the fix and now the server does not reset! Yea!  However, there is still something with his ID that still will crash printing for him.  However, if he goes to another thin client or PC in the building he can print just fine.  It has something to do with his ID and something with his station that cause the printing to crash.  I think some thing happens that corrupts his login at his station.  So that would be stage two of the saga, on what is in his ID that will cause him not to print.  

And like I said before, if I login as another user on his system it will print just fine.  But if I login as him the printing will crash.  

Fred
Fred
0
 

Author Comment

by:Bulls-Eye
Comment Utility
Well, I think I got it all figured out.

A hack program got installed, "tridaVNC" on the thin client; that is a remote access program that is tied to that user login on a XP embeded thin client.  So the Citrix/Terminal service could not link up all the way to the default printer because of the tridaVNC remote access hack.  So this caused the printing to crash on the remote access terminal servers which the service did not get cleared in memory that surfaced a new bug in Windows 2003 server running terminal service that caused the server to reboot.  

I had two users that had the same bad surfing habits that caused this problem.  The microsoft aritcle fixed the server from rebooting and now I know why the printing on terminal server would crash.

This problem can now be closed.
0
 

Accepted Solution

by:
EE_AutoDeleter earned 0 total points
Comment Utility
Bulls-Eye,
Because you have presented a solution to your own problem which may be helpful to future searches, this question is now PAQed and your points have been refunded.

EE_AutoDeleter
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now