Event IDs 8026 and 8031 in the event log Win 2003 SBS Locks

Posted on 2009-02-11
Last Modified: 2012-05-06
Hi All,

I have two customer sites where every 2-10 days the 2003SBS Server locks up and fills the application event log with "Unable to open LDAP session on directory using port number 389. Directory returned the LDAP error:[0x1] Operations Error" On one it lways seems to happen between 11pm and 6am. I have checked all the scheduled tasks that I know off, Set exchange not to run maintenance overnight (Whilst trying to diagnose). Backup is set to run at 8pm takes 1hr 30min so is always done and dusted before the lock up time. AV is set to scan once a week on sat at 1pm. Simililarities between the two sites are as follows.
The two Sites are different HP Proliant Model Servers

Site One...
Workstation: HP Proliant Server
Raid 1 Mirror (Hardware), 4GB Ram, 2x NIC (1x LAN & 1x WAN Setup)
Windows 2003 SBS inc SP2, EXSP2 Installed & Sharepoint v3.
Sophos AV inc PureMessage (Uninstalled & ran at high risk but issue still occured)
Symantec Backup Exec 11d (Set for manual for a couple of weeks no difference)
Blackberry Enterprise Server (Recent addition was failing before this)
Opera II
(This site to date has always had the issue overnight & I have received early morning calls to restart & get them up and running)

Site Two
Workstation: HP Proliant Server
Raid 1 Mirror (Software), 2GB Ram, 2x NIC (1x LAN & 1x WAN Setup)
Windows 2003 SBS inc SP2, EXSP2 Installed & Sharepoint v3.
AVG Server Adition
Symantec Backup Exec 11d
Sage Line 50
(This site normally happens overnight but I have today had the issue happen at 4pm)

Getting really frustrated with this issue now, just cant seem to get to the bottom of the cause.
Question by:jasonuocs
    LVL 15

    Expert Comment

    Ran an update of all the drivers from the HP website?
    LVL 2

    Author Comment

    Hi Mark,

    I updated all available drivers & Bios as suggested. Same thing this morning. I have noticed I receive the following email abit later...

    Subject: IPSEC Services Alert on SERVER

    Alert on SERVER at 15/02/2009 23:08:35

    PolicyAgent service is Stopped.

    This service provides end-to-end security between clients and servers on TCP/IP networks. If this service is stopped, TCP/IP security between clients and servers on the network will be impaired.

    For more information about this event, see the event logs on the server computer. You can restart this service by using the View Services task in the Server Management Monitoring and Reporting taskpad.

    You can disable this alert by using the Change Alert Notifications task.

    Does this relate to the issue I am having?
    LVL 15

    Expert Comment

    Hmm. I don't think so. This would certainly not lock up the system.

    Have you excluded the Exchange directories from your Anti Virus scan?
    See here:

    What third party apps does this server run?
    LVL 2

    Author Comment

    Yeah I have, Thanks

    Sophos AV
    Blackberry Enterprise
    Symantec backup Exec 11d
    LVL 2

    Accepted Solution

    Still ongoing! Looking to replace server as I suspect it must be a hardware fault.

    Expert Comment

    I do not believe it to be hardware related as I am having the same issue on a Dell Power Edge 840 server.
    4gb memory, Dual Core Xeon Processor, Trend Worry Free AV, Backup Exec 12, SBS 2003 R2 Premium
    RAID 1 config.

    The server seems to just stop responding to client reqeusts and then fills the event log with the 8026 error. Once the server is rebooted, it comes back and is fine for a few days.
    I cannot trace what is causing this problem.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
    I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now