Windows Server 2003 svchost.exe error

I am running into a login/service issue with my Windows Server 2003/Exchange box. This morning I tried to log in at startup using my normal process (ctrl - alt - delete) and never got a username and password page. I was able to get in to safe mode, but had little success there. After uninstalling Novell Client for Windows, I was able to get to the windows login and access the machine successfully. At that time I ran a Symantec scan, used Hijack this, and one other spyware tool. No luck finding anything wrong. Exchange services started up and ran fine, so email was working, but nobody could access their data in the D: drive from our network and as administrator I couldn't make any changes, open exe files. Initial error I got this morning was a winlogon error, but that has since been replaced by a svchost.exe error. Then a Windows reporting box pops up with "Generic Host Process for Win32 Services" report to send to microsoft.
The server is back up and running now - we have email, but no access to any shared drives.
Event viewer errors don't seem to show any consistent pattern.
I can troubleshoot, but need some direction - the data on this server is important to my folks, so accessing it is a must!
ridgeangAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Netman66Commented:
Did you install SP2?

There is a known issue with Receive Side Scaling.  Simply disable it on each NIC on the server.

Or

Uninstall SP2.

0
ridgeangAuthor Commented:
Netman66

This is a Windows Server 2003 box, no SP2 installed.
0
ridgeangAuthor Commented:
An interesting development. As I mentioned before, I can log in to the machine, but if I do it directly into the machine right after the ctl-alt-del screen the svchost.exe error comes up and from then on I may as well restart. But, this weekend I found that if I remote in and work with the server that way It will function relatively normally with no svchost.exe errors. I still cannot use .exe files - gives me a permissions error even with the admin account. Seems that we are limping along here - HELP!!!
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

ridgeangAuthor Commented:
Here is an error message that has come up just in the past 3 days - since the problems have started:

Event Type:      Warning
Event Source:      MSDTC
Event Category:      SVC
Event ID:      53258
Date:            3/30/2007
Time:            6:38:57 AM
User:            N/A
Computer:      ESMAIL
Description:
MS DTC could not correctly process a DC Promotion/Demotion event. MS DTC will continue to function and will use the existing security settings. Error Specifics: %1

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Am I right in reading this that a DC (domain Controller) event occured. Is there a way to tell what exactly happened to get this message?
0
ridgeangAuthor Commented:
OK, I traced the event viewer post a little further, and found that this error started 3/1. Here is an initial event viewer incident:

Event Type:      Error
Event Source:      MSDTC
Event Category:      Tracing Infrastructure
Event ID:      4404
Date:            3/1/2007
Time:            2:43:11 PM
User:            N/A
Computer:      ESMAIL
Description:
MS DTC Tracing infrastructure : the initialization of the tracing infrastructure failed. Internal Information : msdtc_trace : File: d:\nt\com\complus\dtc\dtc\trace\src\tracelib.cpp, Line: 1107, StartTrace Failed, hr=0x80070070

.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Any help?
0
Netman66Commented:
Here's how to fix that:

1. Open the Component Services console.
2. Click on Computers.
3. Right click on My Computer and select Properties.
4. Select the MSDTC tab and click on Tracing Options.
5. Click in sequence: Stop Session, New Session, Flush Data, OK, and OK.
6. Restart the DTC service".

Reference: http://www.eventid.net/display.asp?eventid=4404&eventno=2844&source=MSDTC&phase=1
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ridgeangAuthor Commented:
Netman66,

Ok, did the suggested steps and cleared out the error. Another problem has arisen which might lead to a new post? ASR won't kick the server into restart mode, and the trigger seems to be something to do with Backup Exec. I am trouble shooting with them, but the server freezes up nightly during the window of the backup. I have suspended backups for the time being to see if this impacts it.

Am I to the point that I need to do a repair/fresh install?
0
Netman66Commented:
It wouldn't surprise me to hear BEX is causing some grief.  It isn't the first I've heard of issues with this product.

0
Netman66Commented:
I wouldn't assume you need a fresh install - it may not solve this problem with BEX.

Keep working with their techs until you're satisfied.  You paid for this product and it should be working properly.

0
ridgeangAuthor Commented:
Worked with the techs at Symantec, looks like we need to go back to the Windows Server Side of things. This box has not been functioning for more than a day or two without freezing up. Then it won't go into ASR. I checked the settings and things are set to reboot, but it isn't. Another issue I have run into is when I log as administrator I can't run any .exe files that are not downloaded to the desktop. Tried to install some software from the D: drive and got a permissions error and was not able to. But the same software downloaded to the desktop works fine.
0
Netman66Commented:
Uninstall IE Enhanced Security from Add/Remove Programs>Windows Components

0
ridgeangAuthor Commented:
OK, got it cleared off.
0
ridgeangAuthor Commented:
Netman66,

thanks for your assistance and patience with my many posts on this issue. The original issue is resolved, but a new one now exists. The server keeps freezing and takes a manual restart to get running again. Look for a new post soon.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.