rtjdamen
asked on
NLASVC Event 7011
On our windows 2008 terminal servers i experience logon problems. Sometimes the logon time takes about 10 seconds wile other times it can take up more than 50 seconds only showing an rotating welcome.
i found out that when this problem occurs there is an event loged that sais that the nlasvc didn't response for more than 30 seconds. See the event below.
Log Name: System
Source: Service Control Manager
Date: 5/25/2009 9:31:48 PM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: NLRDMTSR01.virtualcomputin
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-
<EventID Qualifiers="49152">7011</E
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2009-05-25T19:
<EventRecordID>90261</Even
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>NLRDMTSR01.virtu
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">NlaSvc</Data
</EventData>
</Event>
I can't find any solution for this problem, hope someone can help me with this isseu.
i found out that when this problem occurs there is an event loged that sais that the nlasvc didn't response for more than 30 seconds. See the event below.
Log Name: System
Source: Service Control Manager
Date: 5/25/2009 9:31:48 PM
Event ID: 7011
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: NLRDMTSR01.virtualcomputin
Description:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the NlaSvc service.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-
<EventID Qualifiers="49152">7011</E
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2009-05-25T19:
<EventRecordID>90261</Even
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>NLRDMTSR01.virtu
<Security />
</System>
<EventData>
<Data Name="param1">30000</Data>
<Data Name="param2">NlaSvc</Data
</EventData>
</Event>
I can't find any solution for this problem, hope someone can help me with this isseu.
ASKER
This is not the isseu because we do not use this antivirus solution. I think i allready found the cause of this problem. however i can't find a solution for this problem.
The problem is that the lsm.exe service is growing day by day on memory usage. After a couple of days the service uses more then 200mb of memory wich makes everything real slow. I checked the internet for a cause but i found only a small group of users experiencing the same problem. I am testing on the moment. The strange thing is that the service grows even if there are no users logged on during the night. Some times it doesn't grow att all. Sometimes alle my servers have the problem, some days later only one or 2 servers have the problem. Real strange would be very happy if someone can help me on this.
The problem is that the lsm.exe service is growing day by day on memory usage. After a couple of days the service uses more then 200mb of memory wich makes everything real slow. I checked the internet for a cause but i found only a small group of users experiencing the same problem. I am testing on the moment. The strange thing is that the service grows even if there are no users logged on during the night. Some times it doesn't grow att all. Sometimes alle my servers have the problem, some days later only one or 2 servers have the problem. Real strange would be very happy if someone can help me on this.
what ServicePack you have installed on W2k8 TS?
Maybe you can try SP2 of Windows 2008 which has been released last month, i think.
Maybe you can try SP2 of Windows 2008 which has been released last month, i think.
ASKER
I allready tried this, i think it has to do with some of the installed applications on the server. anyone has an idea how i can monitor wich application is putting this memory in use?
200mb of what kind of memory? Commitable memory, Paged or Non Paged Pool memory?
ASKER
i'm not shure, what i see is that the task manager shows about 200mb of memory usage. I think this is commited memory?
Post a screenshot please......Of the Services and the performance tabs.....
ASKER
I will post, i saw this message to late because of an holiday. Tomorrow when the service growed i will add screenshot. Thanks a lot for the help.
I think that 200MB memory that rtjdamen mentioned is the private working set of the lsm.exe. That is the default memory usage that you can see from task manager.
I also have a terminal server farm that runs Windows 2008 with SP2 and experiencing the similar issue, freezing from time to time and seeing the same events on the event logs at the moment of freezing. Would be interested in seeing if you guys can come up with something.
I also have a terminal server farm that runs Windows 2008 with SP2 and experiencing the similar issue, freezing from time to time and seeing the same events on the event logs at the moment of freezing. Would be interested in seeing if you guys can come up with something.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
this is a known issue where i have a server also experience it.
Usually if you have re-direction of shell in your group policy.
Microsoft ackonwledged it and will have a patch ETA 11/27.
http://www.brianmadden.com/forums/t/8/36251.aspx
Usually if you have re-direction of shell in your group policy.
Microsoft ackonwledged it and will have a patch ETA 11/27.
http://www.brianmadden.com/forums/t/8/36251.aspx
ASKER
not resolved
I havea very similar issue... When i try to remote desktop it gets stuck at the welcome screen and never goes through...
When i try to logon locally, i press ctrl-alt-del and then the logon screen never comes up. After a few minutes it just asks me to press ctrl -alt-del again...
I got the error above on my event viewer first then over and over again (until i forced shutdown and restarted)
also seems to be 30sec apart for this message also
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CryptSvc service.
When i try to logon locally, i press ctrl-alt-del and then the logon screen never comes up. After a few minutes it just asks me to press ctrl -alt-del again...
I got the error above on my event viewer first then over and over again (until i forced shutdown and restarted)
also seems to be 30sec apart for this message also
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the CryptSvc service.
Hi,
I've had the same problem and found the cause.
When you are using Windows server 2008 (or R2) and you use a Windows server 2003 terminal services manager to control your Server 2008 machines the LSM.EXE start growing until it crashes. It took me a long long time to find out the cause. But for me this was the solution. I contacted my collegeaus and told them to stop using server 2003 terminal services manager and to start using remote desktop services manager and ever sincen it stopped growing (LSM.exe) and the problem never occured.
I hope this is also the solution for you guys because I know what a pain in the ass this problem is!
BR
Joachim
I've had the same problem and found the cause.
When you are using Windows server 2008 (or R2) and you use a Windows server 2003 terminal services manager to control your Server 2008 machines the LSM.EXE start growing until it crashes. It took me a long long time to find out the cause. But for me this was the solution. I contacted my collegeaus and told them to stop using server 2003 terminal services manager and to start using remote desktop services manager and ever sincen it stopped growing (LSM.exe) and the problem never occured.
I hope this is also the solution for you guys because I know what a pain in the ass this problem is!
BR
Joachim
As far as i remeber there was a issue related to TrendMicro Antivirus which affected NlaSvc:
http://soapster.co.uk/2008/09/08/trend-antivirus-detects-windows-os-as-virus/
Basically, TrendMicro detects nlasvc.dll as a virus and quarantined it.
HTH