lisaj599
asked on
Windows Server 2003 terminal server locks up
The system hangs and I have to restart the terminal server - occurs every several days with the following event id's
Event Type: Warning
Event Source: Srv
Event Category: None
Event ID: 2021
Date: 12/17/2009
Time: 10:45:11 AM
User: N/A
Computer: HSIWIN
Description:
The server was unable to allocate a work item 7 times in the last 60 seconds.
Event Type: Warning
Event Source: Ftdisk
Event Category: Disk
Event ID: 57
Date: 12/17/2009
Time: 10:45:13 AM
User: N/A
Computer: HSIWIN
Description:
The system failed to flush data to the transaction log. Corruption may occur.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 12/17/2009
Time: 10:45:36 AM
User: N/A
Computer: HSIWIN
Description:
The VMware Tools Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Type: Warning
Event Source: Srv
Event Category: None
Event ID: 2021
Date: 12/17/2009
Time: 10:46:11 AM
User: N/A
Computer: HSIWIN
Description:
The server was unable to allocate a work item 153 times in the last 60 seconds.
Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2019
Date: 12/17/2009
Time: 10:46:11 AM
User: N/A
Computer: HSIWIN
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 12/17/2009
Time: 10:46:29 AM
User: N/A
Computer: HSIWIN
Description:
This computer was not able to set up a secure session with a domain controller in domain HOWARDSHEPPARD due to the following:
There are currently no logon servers available to service the logon request.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
Any help is greatly appreciated.
Event Type: Warning
Event Source: Srv
Event Category: None
Event ID: 2021
Date: 12/17/2009
Time: 10:45:11 AM
User: N/A
Computer: HSIWIN
Description:
The server was unable to allocate a work item 7 times in the last 60 seconds.
Event Type: Warning
Event Source: Ftdisk
Event Category: Disk
Event ID: 57
Date: 12/17/2009
Time: 10:45:13 AM
User: N/A
Computer: HSIWIN
Description:
The system failed to flush data to the transaction log. Corruption may occur.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 12/17/2009
Time: 10:45:36 AM
User: N/A
Computer: HSIWIN
Description:
The VMware Tools Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 300000 milliseconds: Restart the service.
Event Type: Warning
Event Source: Srv
Event Category: None
Event ID: 2021
Date: 12/17/2009
Time: 10:46:11 AM
User: N/A
Computer: HSIWIN
Description:
The server was unable to allocate a work item 153 times in the last 60 seconds.
Event Type: Error
Event Source: Srv
Event Category: None
Event ID: 2019
Date: 12/17/2009
Time: 10:46:11 AM
User: N/A
Computer: HSIWIN
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.
Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 12/17/2009
Time: 10:46:29 AM
User: N/A
Computer: HSIWIN
Description:
This computer was not able to set up a secure session with a domain controller in domain HOWARDSHEPPARD due to the following:
There are currently no logon servers available to service the logon request.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.
Any help is greatly appreciated.
ASKER
Yes this is a terminal server. Do you know a good way to determine which program could be causing the issue? We don't have any custom applications. We run Office 2003, IBM iSeries Access, Time Clock Plus 5.0, CA ArcServe Backup, Kaspersky Labs Anti-Virus, Mcleod Imaging software. The correct process was used for installing applications on a terminal server.
Anything major happening in the application error logs? Anything you can correlate between the two?
Is BackupExec installed on the server?
Is BackupExec installed on the server?
ASKER
I have attached a screenshot of everything installed on the terminal server. I am going through the application error logs - I have the following 2 errors around the time of the server hang:
Event Type: Error
Event Source: Microsoft Office 11
Event Category: None
Event ID: 1000
Date: 12/17/2009
Time: 10:17:17 AM
User: N/A
Computer: HSIWIN
Description:
Faulting application outlook.exe, version 11.0.8312.0, stamp 4a403990, faulting module emsmdb32.dll, version 11.0.8200.0, stamp 472f93df, debug? 0, fault address 0x0000a654.
Event Type: Error
Event Source: CA_LIC
Event Category: None
Event ID: 5000
Date: 12/17/2009
Time: 10:37:05 AM
User: N/A
Computer: HSIWIN
Description:
'CA Licensing -3AVM CA ARCserve Backup r12.5 Agent for Open File for Virtual Machines on Windows - License Failure. Please contact your account representative to obtain a new license. LRF=3AVM, 005056976f74, PC_686_4_2533, HSIWIN, 0'
Then this warning:
Event Type: Warning
Event Source: PerfDisk
Event Category: None
Event ID: 2001
Date: 12/17/2009
Time: 10:45:05 AM
User: N/A
Computer: HSIWIN
Description:
Unable to read the disk performance information from the system. Disk performance counters must be enabled for at least one physical disk or logical volume in order for these counters to appear. Disk performance counters can be enabled by using the Hardware Device Manager property pages. The status code returned is in the first DWORD in the Data section.
Doc2.doc
Event Type: Error
Event Source: Microsoft Office 11
Event Category: None
Event ID: 1000
Date: 12/17/2009
Time: 10:17:17 AM
User: N/A
Computer: HSIWIN
Description:
Faulting application outlook.exe, version 11.0.8312.0, stamp 4a403990, faulting module emsmdb32.dll, version 11.0.8200.0, stamp 472f93df, debug? 0, fault address 0x0000a654.
Event Type: Error
Event Source: CA_LIC
Event Category: None
Event ID: 5000
Date: 12/17/2009
Time: 10:37:05 AM
User: N/A
Computer: HSIWIN
Description:
'CA Licensing -3AVM CA ARCserve Backup r12.5 Agent for Open File for Virtual Machines on Windows - License Failure. Please contact your account representative to obtain a new license. LRF=3AVM, 005056976f74, PC_686_4_2533, HSIWIN, 0'
Then this warning:
Event Type: Warning
Event Source: PerfDisk
Event Category: None
Event ID: 2001
Date: 12/17/2009
Time: 10:45:05 AM
User: N/A
Computer: HSIWIN
Description:
Unable to read the disk performance information from the system. Disk performance counters must be enabled for at least one physical disk or logical volume in order for these counters to appear. Disk performance counters can be enabled by using the Hardware Device Manager property pages. The status code returned is in the first DWORD in the Data section.
Doc2.doc
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
uninstalled Kaspersky AV and seems to have resolved issue
http://support.microsoft.com/kb/822219