Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2290
  • Last Modified:

Windows Server 2003 terminal server locks up

The system hangs and I have to restart the terminal server - occurs every several days with the following event id's
Event Type:      Warning
Event Source:      Srv
Event Category:      None
Event ID:      2021
Date:            12/17/2009
Time:            10:45:11 AM
User:            N/A
Computer:      HSIWIN
Description:
The server was unable to allocate a work item 7 times in the last 60 seconds.

Event Type:      Warning
Event Source:      Ftdisk
Event Category:      Disk
Event ID:      57
Date:            12/17/2009
Time:            10:45:13 AM
User:            N/A
Computer:      HSIWIN
Description:
The system failed to flush data to the transaction log. Corruption may occur.

Event Type:      Error
Event Source:      Service Control Manager
Event Category:      None
Event ID:      7031
Date:            12/17/2009
Time:            10:45:36 AM
User:            N/A
Computer:      HSIWIN
Description:
The VMware Tools Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 300000 milliseconds: Restart the service.

Event Type:      Warning
Event Source:      Srv
Event Category:      None
Event ID:      2021
Date:            12/17/2009
Time:            10:46:11 AM
User:            N/A
Computer:      HSIWIN
Description:
The server was unable to allocate a work item 153 times in the last 60 seconds.

Event Type:      Error
Event Source:      Srv
Event Category:      None
Event ID:      2019
Date:            12/17/2009
Time:            10:46:11 AM
User:            N/A
Computer:      HSIWIN
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.

Event Type:      Error
Event Source:      NETLOGON
Event Category:      None
Event ID:      5719
Date:            12/17/2009
Time:            10:46:29 AM
User:            N/A
Computer:      HSIWIN
Description:
This computer was not able to set up a secure session with a domain controller in domain HOWARDSHEPPARD due to the following:
There are currently no logon servers available to service the logon request.  
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.  

ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.

Any help is greatly appreciated.
0
lisaj599
Asked:
lisaj599
  • 3
  • 3
1 Solution
 
grantsewellCommented:
This is a terminal server, correct? This really looks like an issue with a program on the system - do you have any legacy or custom applications installed? Did you use the correct process for installing applications on a terminal server?

http://support.microsoft.com/kb/822219
0
 
lisaj599Author Commented:
Yes this is a terminal server.  Do you know a good way to determine which program could be causing the issue?  We don't have any custom applications.  We run Office 2003, IBM iSeries Access, Time Clock Plus 5.0, CA ArcServe Backup, Kaspersky Labs Anti-Virus, Mcleod Imaging software.  The correct process was used for installing applications on a terminal server.  
0
 
grantsewellCommented:
Anything major happening in the application error logs? Anything you can correlate between the two?

Is BackupExec installed on the server?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
lisaj599Author Commented:
I have attached a screenshot of everything installed on the terminal server.  I am going through the application error logs - I have the following 2 errors around the time of the server hang:

Event Type:      Error
Event Source:      Microsoft Office 11
Event Category:      None
Event ID:      1000
Date:            12/17/2009
Time:            10:17:17 AM
User:            N/A
Computer:      HSIWIN
Description:
Faulting application outlook.exe, version 11.0.8312.0, stamp 4a403990, faulting module emsmdb32.dll, version 11.0.8200.0, stamp 472f93df, debug? 0, fault address 0x0000a654.

Event Type:      Error
Event Source:      CA_LIC
Event Category:      None
Event ID:      5000
Date:            12/17/2009
Time:            10:37:05 AM
User:            N/A
Computer:      HSIWIN
Description:
'CA Licensing -3AVM CA ARCserve Backup r12.5 Agent for Open File for Virtual Machines on Windows - License Failure. Please contact your account representative to obtain a new license.  LRF=3AVM, 005056976f74, PC_686_4_2533, HSIWIN, 0'

Then this warning:

Event Type:      Warning
Event Source:      PerfDisk
Event Category:      None
Event ID:      2001
Date:            12/17/2009
Time:            10:45:05 AM
User:            N/A
Computer:      HSIWIN
Description:
Unable to read the disk performance information from the system. Disk performance counters must be enabled for at least one physical disk or logical volume in order for these counters to appear. Disk performance counters can be enabled by using the Hardware Device Manager property pages. The status code returned is in the first DWORD in the Data section.



Doc2.doc
0
 
grantsewellCommented:
It's gotta be the CA ArcServe application. It's specifically referenced in the Microsoft KB: http://support.microsoft.com/kb/822219

"To resolve this issue, contact the manufacturer of the program to inquire about the availability of a filter driver update. For more information about how to contact Computer Associates to obtain the latest update for the Ofant.sys driver, visit the following Computer Associates Web site:
http://www.ca.com/support/"
0
 
lisaj599Author Commented:
uninstalled Kaspersky AV and seems to have resolved issue
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now