SBS2003 Random Lockups.

Client server locks up randomly - there is no pattern to this and it could happen once or 4 times in one day, sometimes it doesn't happen at all.

NEW hardware (quad core processor/4gb memory/R5 array), Windows Small Business Server 2003, fully patched.  I hope I'm not answering my own question here but I have the newest release from Symantec, SEPP11.0.  I'm not crazy about it and have followed the proper instructions to get it up and running.  I've reviewed its logs and nothing is reported there.

When server locks up, there are no helpful solutions in the windows event log except the following:
 - 1030 / Group Policy
 - 1058 / userenv
 - 1074 / user32 (nothing listed)

I'm going bananas trying to diagnose this. I've researched for a while and modified the network card from Automatic to 100mb/FD.  I'm not sure if that helped, but others had success with it.

This is kind of random - but your thoughts/ideas are appreciated.

TIA - Steve
Who is Participating?
johnb6767Connect With a Mentor Commented:
Sounds like a massive drain on CPU resources....

Process Explorer for Windows v10.21

Double click the offending file. If it is a svchost.exe, then Select the Services Tab. Please list what services are in that svchost.exe.

Then Select the Threads tab, and see what .exe or .dll is using the CPU, and then select it by double clicking it....and copying/pasting the call stack here.....

Let it sit and look to the graph on the right for some clues....

What I would also be curious to see is the Interupts, and the DPC's in Process Explorer. If thats what is using the CPU (not seeen in the Task manager), then you have either a HW problem, or a Driver problem. Since the Live CD worked ok, I would say the HW is probably ok.
When it locks up, are the CAPS ad NUM locks responding?

Have you run a test on the RAM?

How do you recover from it, full power down, or does it eventually come back?
sdeblockAuthor Commented:
When it locks up it does the following:
 - Num/Cap locks ok
 - It takes 5 minutes to login to the server locally w/ admin account
 - Network users can not access the server

No test on the memory.  To reboot it, I go through the standard windows reboot procedures, no power button or plugs pulled.
WEBINAR: GDPR Implemented - Tips & Lessons Learned

Join the WatchGuard team on Thursday, March 29th as we recount some valuable lessons learned in weighing the needs of a business against the new regulatory environment, look ahead at the two months left before implementation, and help you understand the steps you can take today!

what do u mean by "lock ups"?
what do u do to resolve the lock ups, reboot the machine or does it unfreeze automatially on its own?
did u notice anything in the task manager? any process spiking the cpu or consuming lot of ram?
dreamyguyConnect With a Mentor Commented:
id also suggest enabling userenv logging as per MS KB 221833 and then uploading the logs to
sdeblockAuthor Commented:
Another note:
 - 2.0ghz, intel Quad Core Processor.
 - 29% of it is constantly in use with the new rockstar version of SEPP 11.0

Per other questions:
 - When the server (from a user side) appears to lockup, all network resources are un-available.  It takes approximately 5-7 minutes to locally log onto the server.  There are no process or memory problems outside of what is listed above.

 - I'm going to check out the userenv logging per the note above.
 - I'm also going to yank SEPP11.0 and replace it with SAVCE10.x which I have never had any trouble with.
sdeblockAuthor Commented:
It looks as though the problem was Symantec End Point Protection 11.0.  I pulled it off, cleaned out any remaining files and installed SAVCE 10.x.  That seems to have stabalized the situation.  This is exactly why a majority of my clients are running Panda Security now, symantec is absolutely killing me!

Thanks for all your notes on this problem - you're all winners!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.