sjeffrey2004
asked on
Very slow OWA
For about 2 weeks now one of my clients has beeen experiencing several issues
with their Small Business Server 2003.
Essentially what happens is that the Macs arent able to access the exchange
through entourage, and the Outlook web access runs very slowly, sometimes
timing out. This even happens if i access it on the server. Rebooting the
server immediatly cures the problem but then within about 1 hour of time the
sertver is back to how it was.
Last night the server seems to have restarted on its own about 2am, which it
never done before, (windows updates are set not to install automatically).
Anyway im wondering if anyone has any ideas and how i can go about further
diagnosing this. We are wondering if it has been compromised. I've run
several tools to and from what i can tell there are no problems.
Spybot, cleaned a couple of minor things
autoruns (log - http://www.sjeffrey.co.uk/gbl/AutoRuns.arn)
rook kit revealer (log - http://www.sjeffrey.co.uk/gbl/RootkitReveal.txt)
process explorer (log - http://www.sjeffrey.co.uk/gbl/Procexp.txt)
Server details below.
SBS server 2003
HP ML 350 G4
2 GB RAM
Raid Arrays.
Exchange logs on seperate drive.
Running Backup Exec
Sophos AV (tried disabling services).
Any help greatly appreiated.
Stuart Jeffrey
with their Small Business Server 2003.
Essentially what happens is that the Macs arent able to access the exchange
through entourage, and the Outlook web access runs very slowly, sometimes
timing out. This even happens if i access it on the server. Rebooting the
server immediatly cures the problem but then within about 1 hour of time the
sertver is back to how it was.
Last night the server seems to have restarted on its own about 2am, which it
never done before, (windows updates are set not to install automatically).
Anyway im wondering if anyone has any ideas and how i can go about further
diagnosing this. We are wondering if it has been compromised. I've run
several tools to and from what i can tell there are no problems.
Spybot, cleaned a couple of minor things
autoruns (log - http://www.sjeffrey.co.uk/gbl/AutoRuns.arn)
rook kit revealer (log - http://www.sjeffrey.co.uk/gbl/RootkitReveal.txt)
process explorer (log - http://www.sjeffrey.co.uk/gbl/Procexp.txt)
Server details below.
SBS server 2003
HP ML 350 G4
2 GB RAM
Raid Arrays.
Exchange logs on seperate drive.
Running Backup Exec
Sophos AV (tried disabling services).
Any help greatly appreiated.
Stuart Jeffrey
ASKER
Nothing relevent in the log files at all.
The reboot was a start/shutdown/restart, i'm just about to perform a clean boot and will let you know of the results.
Task manager shows a cpu usage of 10-20% so not overstretched really. Doesnt look to be anything i cant identify either. Main process as usual is the store.
The reboot was a start/shutdown/restart, i'm just about to perform a clean boot and will let you know of the results.
Task manager shows a cpu usage of 10-20% so not overstretched really. Doesnt look to be anything i cant identify either. Main process as usual is the store.
Are you using SSL to connect to the server (https:// myserver /exchange)?
Are the clients on the local network, or internet? If internet: what router/proxy is used? If local: does the client have proxy settings?
Are the clients on the local network, or internet? If internet: what router/proxy is used? If local: does the client have proxy settings?
is OWA also slow when used on the SBS server itself ( http://localhost/exchange)?
ASKER
"This even happens if i access it on the server. "
Yes it is slow when opened on the server.
It doesnt matter if its internal or external
Found out the reboot was actually updates, which for some reason was turned on.
Also FYI if i configure an outlook client to connect with caching disabled the speed is fine.
No clients have proxy.
This is using https. I'll try the http in a bit, as i've just done a clean reboot so will see if i get the slow down.
Thanks
Yes it is slow when opened on the server.
It doesnt matter if its internal or external
Found out the reboot was actually updates, which for some reason was turned on.
Also FYI if i configure an outlook client to connect with caching disabled the speed is fine.
No clients have proxy.
This is using https. I'll try the http in a bit, as i've just done a clean reboot so will see if i get the slow down.
Thanks
ASKER
Ok even on clean boot seems slow too.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Ok, you should get this question deleted with points refunded.
Was the reboot a "hard" reboot or a clean restart?
Have you used Task Manager to see how much CPU/Memory load the server is under, and which processes use the most?