• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 365
  • Last Modified:

windows server 2008

I have a new Dell PowerEdge 2970 running server 2008 enterprise as a domain controller. For our small company ist a pretty sweet setup, Raid 5 (250GB x3) dual Opteron, 4G ram. We have about 130 users and this server runs AD, DNS, DHCP, and WINS. It is a file server for our shared drives. Every so often we have some serious network problems IE People not able to log in, not accessing their mapped drives, slow response when the drives do work etc. This is a new server less than 6mo old, running 08 and fully patched our network is 100M with servers all connecting to a Gigabit dell switch. When I reboot the server it comes back fine and people can log in again. When I look in my error logs all is well. I have almost no errors and everything appears to be good. Every test I run seems to be clean. any one have thoughts or comments?
0
JDL_Tech
Asked:
JDL_Tech
  • 4
  • 4
  • 2
  • +2
2 Solutions
 
Mike KlineCommented:
So is this a consistent pattern, where the server is rebooted and things work great then over time it starts to degrade until a reboot and the pattern happens again?
Sounds like a memory leak or perf issue.  That you have to try and analyze with perfmon and those sort of logs if it is.  
0
 
JDL_TechAuthor Commented:
I have not found anything consistent. I just started recently, although this has happened in the past but I didn't think much of it at that time. so far in the past few weeks I'd say its gone unresponsive 3 or 4 times seemingly at random
0
 
NJComputerNetworksCommented:
"Every so often we have some serious network problems IE People not able to log in, not accessing their mapped drives, slow response when the drives do work etc"  You will need to troubleshoot with a problematic client computer when this happens.  Just rebooting the server is a nice way to quickly get the users working again, but you won't be able to troubleshoot...

So, if you can find a computer having this problem... try to document the issues.

1) does ping to the server work from the client (how about from the server to the client)?
2) can the user use IE and get out to the internet when the problem occurs?
3) use the NSLOOKUP command and search for your internal windows domain name?  Do you get a list of the DC's IP address back?  How about resolving to the DC?
3a) Check the IP settings...of the server and client to see how they look.
4) in the event log of the server and the client are there anything noticed.
5) Did any new device come on the network when this happened?  Maybe DHCP conflict or something?
6) when this happens, are all of the client OFF the network...or just some... try to identify why some are on and some are off,.
0
The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

 
charlestasseCommented:
Are you teaming the Nics?
what AV are you running?
What version of the Broadcom drivers and suite are you running?
0
 
JDL_TechAuthor Commented:
I was running both NICS but I disabled one for not just to eliminate possible issues there. AV is symantec endpoint running just antivirus/anti spyware (other options are disabled) The drivers are version 12.2.9.0 which I just recently installed...oh and once I did that the 802.1X authenication stopped. Before it would pull up that it was connected to my domain
0
 
charlestasseCommented:
There is a known issue with windows 2008 and Endpoint 11 where network connections stop working, rebooting resolves the issue only for a short period and then it comes back again
0
 
NJComputerNetworksCommented:
0
 
charlestasseCommented:
this issue has been seen on both x32 and x64
0
 
AwinishCommented:
A single server acting as DC(Authentication & Authorization),DNS Server(Name resolution),DHCP server(Assigning IP's),WINS,file serve,might be some other role too,the performance & server freeze issue is expected.
Dns records update,dhcp IP lease,conitnous file access,virus scan of files etc puts lot of load.
Memory leak,slow performance,etc  &  you can't expect.130 users are large amount who is getting authenticated,accessong gpo using sysvol,accessing & modyfying the files.
Server is healvily loaded,need to share load on some other server.

For temp resolution you can run process explorer too as well as scan the system.
Since,user are keeping & accessing the file might be chances a corrupt file is been kept on server,which is causing the issue.

Secondly,if large no of user accessing word or excel file & modifying it at the same time, will surely kill the server.  
Why rebooting solves the problem is because it kills all the conected user session,so untill & unless you segregate few issue,it will give same freeze result.
0
 
JDL_TechAuthor Commented:
thanks everyone for the help I think im gonna look into that symantec fix they have an updated version. never thought an anti virus would cripple the system
0
 
JDL_TechAuthor Commented:
not 100% sure about the solution but looking at some of the information provided it looks likely to be the case
0
 
charlestasseCommented:
Its actually not the first time I have seen Symantec doing this, there have been issues since Corporate edition 10
0

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

  • 4
  • 4
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now