We help IT Professionals succeed at work.

File print sharing / Firewall Issues on 2008 server

gws226
gws226 asked
on
Medium Priority
301 Views
Last Modified: 2012-08-14
Hi Experts,

I want to think this is a firewall issue with an 08 server.   Its roles on the network are DC/DNS/FPS.

Approxamatly once a day, users are no longer able to connect to thei fileshares on the server.  All other services remaining function DC replication/ DNS etc etc.   I can ping, and 3389 over to it.

Start/stopping the firewall does nothing...  if I reboot the server the problem goes away.   There are no errors any of the logs.

Any help appreciated.
Comment
Watch Question

Commented:
Hello,

What kind of Anti-Virus are you running.  Try disabling it temporarily and have the user try to connect to a share.  Also, make a test account and a test shared folder and give everyone full control.  see if you are able to browse to it, if you can, then you may have a permission issue with your other shares.  Also, have you tried restarting the Network File Sharing service?

http://www.techotopia.com/index.php/Configuring_Windows_Server_2008_File_Sharing

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
I can't even browse to the server... let alone get to the shares.   We are running Endpoint, and its disabled.  

Let me also had, we have 5 servers running in this enviroment (2 Windows 08s) and only the above mentioned server is experiencings this issue.
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011
Commented:

I have been monitoring this for your response, and can pretty much guarantee with 99% certainty that Symantec Endpoint is what will cause this issue. This is the typical symptom with Endpoint and Server 2008 - and it has become so bad that Microsoft have started refusing support to any customers while Endpoint is installed.

Disabling an AV product is not usually enough. You need to fully uninstall and reboot the server, and then test without the AV software installed.

You will more than likely find that once SEP is removed, the server will function as usual. It is very random as to what servers it does it to and what servers it doesn't, but avoid that product and you will save yourself a lot of issues with your Server 2008 machines.

-Matt

Commented:
I had the same exact problem with my 2008 Servers, and the issue was Kaspersky Enterprise Edition.  Even when I had it disabled, the server was extremely slow, and I could not browse to it.  I eventually had to uninstall the Kasperksy Anti-Virus and install a different one.

When you log onto your server is it so slow that it seems like it is frozen?  You may have a DNS issue too.  Try browsing by the IP address.

Author

Commented:
Im completely onboard with the symantec Endpoint theory. I'll spare you all my personal thoughts regarding that product.  

Its certainly worth a shot.  I'll wait until this puppy drops the shares again before I test the theory.  Be back shortly Im sure.
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011

Commented:
No problem. You may find that when it drops the shares again, you'll then have to take SEP off and reboot, and then wait again to see if it drops.

Let me know how you get on

-Matt

Author

Commented:
Endpoint.... again... sigh.  Thanks for the help
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.