Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Unstable Terminal Server Environment

Posted on 2009-07-29
Medium Priority
Last Modified: 2013-12-01
I'm supporting 50 users in a multi server 2003 (Dell Server, Exchange 2003 Std, SP2, 4Gb ram, Raid5, 300 Gig free drive space) environment. The main server runs TS and provides Outlook and an industry specific app named Tops to 15 remote users. In the last few months, Weve added a few new printer drivers into the system and just recently, users are complainng of being disconnected from the system numberous times a day and also having problems printing to their local printers from Outlook and Tops while connected remotely.

Is there a tool to capture and identify the cause other than event viewer? Any suggestions on how to stablize the environment for these users?
Question by:Tony Giangreco
  • 2

Accepted Solution

llman earned 2000 total points
ID: 24976442
1) command line based: Download and install Microsoft's LogParser 2.2 (http://www.microsoft.com/DownLoads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en).  Very powerful query capability so filtering can be done to eliminate common events
The following would display all unique events within the last 3 hours in a graphical window as a datagrid:
Start -> All Programs -> Log Parser 2.2 -> Log Parser 2.2
> logparser -i:EVT " SELECT DISTINCT EventId, SourceName FROM System WHERE TimeGenerated > TO_LOCALTIME( SUB( SYSTEM_TIMESTAMP(), TIMESTAMP('3', 'h') )
2) GUI: EventCombMT (http://support.microsoft.com/kb/824209)
LVL 25

Author Comment

by:Tony Giangreco
ID: 24990905
I installed the log parser and pasted the script into the command box. I received tis error:

 Syntax Error: <function-expr>: cannot find closing parenthesis for function TO_LOCALTIME

The server name is hpm1. I'd like to run this to collect data for short periods of time like one hour.  Any idea how I correct the syntax?

Expert Comment

ID: 24996559
Appears my copy/paste was not complete, try:
logparser -i:EVT " SELECT DISTINCT EventId,SourceName FROM System WHERE TimeGenerated > TO_LOCALTIME( SUB( SYSTEM_TIMESTAMP(), TIMESTAMP('1', 'h') ))" -o:DATAGRID

To display all events change to:

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I previously wrote an article addressing the use of UBCD4WIN and SARDU. All are great, but I have always been an advocate of SARDU. Recently it was suggested that I go back and take a look at Easy2Boot in comparison.
I originally wrote this article to compare SARDU and YUMI, but have now added Easy2Boot, since that is the one I currently use and find the easiest to create and alter.
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…
Kernel Data Recovery is a renowned Data Recovery solution provider which offers wide range of softwares for both enterprise and home users with its cost-effective solutions. Let's have a quick overview of the journey and data recovery tools range he…

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question