Unstable Terminal Server Environment

I'm supporting 50 users in a multi server 2003 (Dell Server, Exchange 2003 Std, SP2, 4Gb ram, Raid5, 300 Gig free drive space) environment. The main server runs TS and provides Outlook and an industry specific app named Tops to 15 remote users. In the last few months, Weve added a few new printer drivers into the system and just recently, users are complainng of being disconnected from the system numberous times a day and also having problems printing to their local printers from Outlook and Tops while connected remotely.

Is there a tool to capture and identify the cause other than event viewer? Any suggestions on how to stablize the environment for these users?
LVL 25
Tony GiangrecoAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

1) command line based: Download and install Microsoft's LogParser 2.2 (http://www.microsoft.com/DownLoads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en).  Very powerful query capability so filtering can be done to eliminate common events
The following would display all unique events within the last 3 hours in a graphical window as a datagrid:
Start -> All Programs -> Log Parser 2.2 -> Log Parser 2.2
> logparser -i:EVT " SELECT DISTINCT EventId, SourceName FROM System WHERE TimeGenerated > TO_LOCALTIME( SUB( SYSTEM_TIMESTAMP(), TIMESTAMP('3', 'h') )
2) GUI: EventCombMT (http://support.microsoft.com/kb/824209)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Tony GiangrecoAuthor Commented:
I installed the log parser and pasted the script into the command box. I received tis error:

 Syntax Error: <function-expr>: cannot find closing parenthesis for function TO_LOCALTIME

The server name is hpm1. I'd like to run this to collect data for short periods of time like one hour.  Any idea how I correct the syntax?
Appears my copy/paste was not complete, try:
logparser -i:EVT " SELECT DISTINCT EventId,SourceName FROM System WHERE TimeGenerated > TO_LOCALTIME( SUB( SYSTEM_TIMESTAMP(), TIMESTAMP('1', 'h') ))" -o:DATAGRID

To display all events change to:
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
System Utilities

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.