• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 522
  • Last Modified:

SBS2003 Random Lockups.

Client server locks up randomly - there is no pattern to this and it could happen once or 4 times in one day, sometimes it doesn't happen at all.

NEW hardware (quad core processor/4gb memory/R5 array), Windows Small Business Server 2003, fully patched.  I hope I'm not answering my own question here but I have the newest release from Symantec, SEPP11.0.  I'm not crazy about it and have followed the proper instructions to get it up and running.  I've reviewed its logs and nothing is reported there.

When server locks up, there are no helpful solutions in the windows event log except the following:
 - 1030 / Group Policy
 - 1058 / userenv
 - 1074 / user32 (nothing listed)

I'm going bananas trying to diagnose this. I've researched for a while and modified the network card from Automatic to 100mb/FD.  I'm not sure if that helped, but others had success with it.

This is kind of random - but your thoughts/ideas are appreciated.

TIA - Steve
0
sdeblock
Asked:
sdeblock
  • 3
  • 2
  • 2
2 Solutions
 
johnb6767Commented:
When it locks up, are the CAPS ad NUM locks responding?

Have you run a test on the RAM?

How do you recover from it, full power down, or does it eventually come back?
0
 
sdeblockAuthor Commented:
When it locks up it does the following:
 - Num/Cap locks ok
 - It takes 5 minutes to login to the server locally w/ admin account
 - Network users can not access the server

No test on the memory.  To reboot it, I go through the standard windows reboot procedures, no power button or plugs pulled.
0
 
dreamyguyCommented:
what do u mean by "lock ups"?
what do u do to resolve the lock ups, reboot the machine or does it unfreeze automatially on its own?
did u notice anything in the task manager? any process spiking the cpu or consuming lot of ram?
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
johnb6767Commented:
Sounds like a massive drain on CPU resources....

Process Explorer for Windows v10.21
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Double click the offending file. If it is a svchost.exe, then Select the Services Tab. Please list what services are in that svchost.exe.

Then Select the Threads tab, and see what .exe or .dll is using the CPU, and then select it by double clicking it....and copying/pasting the call stack here.....

Let it sit and look to the graph on the right for some clues....

What I would also be curious to see is the Interupts, and the DPC's in Process Explorer. If thats what is using the CPU (not seeen in the Task manager), then you have either a HW problem, or a Driver problem. Since the Live CD worked ok, I would say the HW is probably ok.
0
 
dreamyguyCommented:
id also suggest enabling userenv logging as per MS KB 221833 and then uploading the logs to www.ee-stuff.com
0
 
sdeblockAuthor Commented:
Another note:
 - 2.0ghz, intel Quad Core Processor.
 - 29% of it is constantly in use with the new rockstar version of SEPP 11.0

Per other questions:
 - When the server (from a user side) appears to lockup, all network resources are un-available.  It takes approximately 5-7 minutes to locally log onto the server.  There are no process or memory problems outside of what is listed above.

 - I'm going to check out the userenv logging per the note above.
 - I'm also going to yank SEPP11.0 and replace it with SAVCE10.x which I have never had any trouble with.
0
 
sdeblockAuthor Commented:
It looks as though the problem was Symantec End Point Protection 11.0.  I pulled it off, cleaned out any remaining files and installed SAVCE 10.x.  That seems to have stabalized the situation.  This is exactly why a majority of my clients are running Panda Security now, symantec is absolutely killing me!

Thanks for all your notes on this problem - you're all winners!

Steve
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 3
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now