[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1318
  • Last Modified:

SBS 2003 is running very, very slowly

Hi experts,

After doing an ASR backup, the computer rebooted to a BSOD. Upon rebooting again, which took quite a long time, it ran very slowly. The client computers connected to it run fine although there is a bit of a performance hit on them as well.

I checked the RAID5 with four disk drives, and it states that all four hard drives are functioning properly. I am not sure how to check if the Raid card is working OK or if it is an all or nothing thing.

Things like opening up Server Mangement would take around one to two minutes. Just trying to get to programs on the Start button could take over thirty seconds. Programs would freeze. I couldn't get Trend Micro to even scan. The following critical alerts were reported:

>>Auto-started Services Not Running

Service Name
ATI Smart
Intel Alert Handler
Intel Alert Originator
Intel File Transfer
Intel PDS
Microsoft Search
SPBBCSvc
 
In normal conditions, these services should be running. For details, it is recommended that you review errors in the Event log related to the service. <<

I am not really show why any of the services shouldn't be running if they are on automatic. When I try to start some, they try to start, but I am told they only run when they are need.

Critical Alerts

>>Issue Last Occurrence Total Occurrences
Disk Activity (0 C: D: E:) 2/4/2008 9:57 AM 1
The following disk has low idle time, which may cause slow response time when reading or writing files to the disk.

Disk: 0 C: D: E:

Review the Disk Transfers/sec and % Idle Time counters for the PhysicalDisk performance object. If the Disk Transfers/sec counter is consistently below 150 while the % Idle Time counter remains very low (close to 0), there may be a problem with the disk driver or hardware.

If the review shows that the disk is functioning properly, use Task Manager to determine which processes are causing the majority of the disk activity. You can attempt to correct the problem by stopping and then restarting those processes.<<

I am not sure how to find what these are: Disk Transfers/sec and % Idle Time counters for the PhysicalDisk performance object. When I go through Task Manager, there isn't much RAM which is being used.

>>Issue Last Occurrence Total Occurrences
Microsoft Exchange Information Store 2/4/2008 8:56 AM 1
MSExchangeIS service is Stopped.<<

I have since turned this on, and things seem to be working OK.

>>Allocated Memory 2/4/2008 7:45 AM 2
A large amount of memory is committed to applications and processes. Consistently high memory usage can cause performance problems.<<

I get this error a lot. It usually means nothing or I reboot to "free up" RAM from SQL Server.

>>To determine which processes and applications are using the most memory, use Task Manager. Monitor the activity of these resources over a few days. If they continue to use a high level of memory and are less critical processes or services, try stopping and then restarting them.<<
0
Bert2005
Asked:
Bert2005
  • 9
  • 8
1 Solution
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
What version of Symantec Antivirus are you running on your SBS?

Have you excluded all the appropriate things from AV scanning?  (see http://sbsurl.com/av)

"I get this error a lot. It usually means nothing or I reboot to "free up" RAM from SQL Server."

It really does mean something, and you shouldn't have to reboot.  Instead you need to tune your SQL Server's memory use to be more inline with your hardware configuration.
See:  http://msmvps.com/blogs/bradley/archive/2005/02/04/34984.aspx

Jeff
TechSoEasy
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Also... I'd set the following services to "manual" instead.  They don't need to be started automatically:

ATI Smart
Intel Alert Handler
Intel Alert Originator
Intel File Transfer
Intel PDS

Jeff
TechSoEasy
0
 
Bert2005Author Commented:
I will do that. I didn't think about coming on the site directly to check for answers. I was waiting on email, which isn't coming due to some problem with exchange server.

I went with your suggestion of Trend Micro. I can check the exclusions, but it has been working fairly well for awhile.

Thanks.
0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
If you are using Trend Micro for your AV, then why is the SPBBCSvc running at all?  Additionally why are the Intel services running?  (Normally I would only see those when Symantec AV is installed).

Jeff
TechSoEasy
0
 
Bert2005Author Commented:
I am actually running CSM. The only exclusions would be those in default. Here are my replies when I try to start the following services:

ATI Smart -- tries to start, then doesn't and it says, "only starts when needed."
Intel Alert Handler -- Error 1068
Intel Alert Originator -- 1068
Intel File Transfer -- 1068
Intel PDS -- Error 1053

On the 2nd of February (I think before all this), I get an error message which states, "DNS unable to open Active Directory." Since then, it does says DNS is running.

Microsoft Exchange Information Store service, which is set to Automatic says it is in the process of stopping which it has been in for over 12 hours. My guess is a reboot would fix that. It should be noted that Exchange is not working at all. Outlook on the computers are stating they cannot connect to Exchange.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Outlook wouldn't be able to connect if Exchange Information Store isn't running.  

Since the Exchange Information Store service is stuck on stopping, then see if you can kill the service.  To do this follow these steps:

1. Open a CMD prompt and enter TASKLIST.  
2. Locate store.exe in the list and note it's PID number.
3. Run the following command:  TASKKILL /F /PID XXXX  (where XXXX is the PID of store.exe).

If that works, you should then be able to restart the Information Store Service in services.msc.  If it doesn't, then rebooting will certainly do the trick.

You should sort the services list by "Start type" so that you can then ensure that all Automatic Services are running.

FYI, Error 1068 means that the dependent service isn't started, so you need to see what that is.  But really, I do wonder why you even have those services installed.  As I said, I generally only see them with Symantec products.  

Jeff
TechSoEasy


0
 
Bert2005Author Commented:
Well, as you know...many times I have no clue. About two months ago when my subscription ran out, I uninstalled SAV from my computer and installed Trend Micro at your suggestion. I do like it much more. As you probably also know, Symantec is not a fun thing to uninstall, another reason not to use it in the first place. Since these services don't need to be running, should I just keep them stopped or can I delete them?

Exchange is working on reboot. Things seem to be smoother with the antivirus turned off TEMPORARILY just to see if it helps. Then excluding those in the article will probably help. I don't quite understand if that is the case, why the problem would only surface now.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
I'm not sure either... although you started out your question by stating you did an ASR Backup, which isn't really necessary on an SBS if you're using the SBS Backup wizard since that backs up everything ASR would and more.

Then, you booted into a BSOD which you haven't elaborated on... there very well could have been some sort of file corruption which caused the problems.

Regarding the Symantec uninstall... its obvious that it didn't really uninstall completely.  Most all of Symantec's programs have uninstall utilities that are available from them... do a search for the specific version + "uninstaller".

Deleting services are fine if you know how to do it.  ;-)

Jeff
TechSoEasy
0
 
Bert2005Author Commented:
OK. Thanks. I was very careful when uninstalling Symantec. I am rather sure I used their product. But, it went fairly awry, I know that.

I am not sure if it worth trying to uninstall the other remnants. I even went through Symantec's step by step, registry entry by registry entry uninstall. Although, as you know, sometimes once an uninstall doesn't get done right, doing it the correct way doesn't work either without reinstalling the whole program.

I do use the SBS Backup Wizard. You will probably not recommend this, but I use BackupAssist to help with scheduling, and it allows more functionality. I have used it for years, and it basically works with the ntBackup engine.

As to the BSOD, I probably should have written it down. I am rather certain it didn't have a very well-detailed error message, although it must have said something. Most of it was warning me that if it did it again that all hell would break loose, which it didn't.

I am  not sure why it is running so much better without Trend Micro on. I guess I should exclude all of those files and folders. But, again, why not. I mean, sure, if it is better to run it that way; but I hate not knowing. Maybe the backup caused an issue with the AV and Exchange, etc.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
"I am not sure if it worth trying to uninstall the other remnants. I even went through Symantec's step by step, registry entry by registry entry uninstall."

Yes its worth trying to uninstall them... redo the step-by-step because the registry entries you want to remove are those that are running the services.

"I do use the SBS Backup Wizard. You will probably not recommend this, but I use BackupAssist to help with scheduling, and it allows more functionality. I have used it for years, and it basically works with the ntBackup engine. "

Its not that I wouldn't recommend it, I just wonder what additional functionality you are needing?  Since one of the main design objectives of SBS is K.I.S.S. and adding BackupAssist on top of what's already there just seems to me as though it's just one more thing to keep track of.  But just to clarify things, how can you say you use the SBS Backup Wizard, yet you are using a separate backup program?

"I am rather certain it didn't have a very well-detailed error message, although it must have said something"

All BSOD's are pretty much the same... they look a lot like the image below.  The important things to record from them are the line such as DRIVER_IRQL_NOT_LESS_THAN_EQUAL and the wxyz.sys line.  But if the error doesn't reoccur when you reboot again, you're probably fine.

"I guess I should exclude all of those files and folders. But, again, why not. I mean, sure, if it is better to run it that way; but I hate not knowing."

What are you saying?  You'd rather have your server BSOD again and take the chance of major file corruption?

Jeff
TechSoEasy
BSOD-2.gif
0
 
Bert2005Author Commented:
I guess I should exclude all of those files and folders. But, again, why not. I mean, sure, if it is better to run it that way; but I hate not knowing."

What are you saying?  You'd rather have your server BSOD again and take the chance of major file corruption?
=====================
I can see where my comment would be difficult to interpret. The statement "why not," should be just been why. What I was trying to say was I would obviously exclude the files and folders, but I hate doing it just to do it. In order for it not to happen again, I need to know why it happened. I don't think I can make it make sense. Just suffice it to say, I will do as the article says.

I will get back on the increased functionality of BackupAssist when I get a chance.  Thanks.
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
You're not excluding those files "just to do it".  You don't ever want those files scanned by your AV, it's a terrible drain on performance and is totally unnecessary.

Jeff
TechSoEasy
0
 
Bert2005Author Commented:
I realize that. I just wasn't saying it correctly. I excluded them and wanted to exclude them. And, I deleted about five to six entries of Symantec. The SPBBCsvr is still in the service window, but it can't run as it says its registry entry is missing, which would make sense.
0
 
Bert2005Author Commented:
I think it would be helpful if there were a reference as to what services should be running at least by default. Why are some automatic -- start up at reboot, while some are manual?
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
There is...

http://support.microsoft.com/kb/829623

But the ones you listed shouldn't be there at all because the program that installed them has since been uninstalled.

Jeff
TechSoEasy
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
Oh, and the difference between automatic and manual?  Automatic services don't have a specific program which triggers them to start.

Jeff
TechSoEasy
0
 
Bert2005Author Commented:
I will get back to you on BackupAssist at some point
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 9
  • 8
Tackle projects and never again get stuck behind a technical roadblock.
Join Now