companyweb unavailable - sbs2003 - IIS - connection refused

We have an SBS 2003 with all the updates installed. All of a sudden, the companyweb, owa, ... is unavailable.
I checked all the services and restarted them but whitout result.
When i check the httperr logile is can see that there is an iphone who constantly makes connections and then after a while the log continues with connection refused.
I've attached the httperr logfile.
I already added the registrykey EnableAggressiveMemoryUsage but the problem returns.
What is the reason for this and how can i solve this ones and for all?
Grtz
Filip
httperr15.log
LVL 2
FlipTripAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cris HannaSr IT Support EngineerCommented:
my first suggestion, download the SBS BPA (Best Practice Analyzer) at www.sbsbpa.com and fix everything it finds
 
0
FlipTripAuthor Commented:
ok, I'll try that.
0
FlipTripAuthor Commented:
2 or 3 days ago I have run the SBS BPA tool and corrected all the proposed problems.
A few minutes ago we had the same problem again. I had to reboot the server to resolve the issue.
It seems that the problem occured after an error of shadow copies. I've also checked the HTTPERR log again. It holds the same events as the one i posted earlier. The connection refused errors returned again after the same user tries to connect with his iphone. I've now disabled the mobile services for that user.

These are the errors in event viewer:
Event Type:      Error
Event Source:      VolSnap
Event Category:      None
Event ID:      13
Date:            15/04/2010
Time:            21:21:08
User:            N/A
Computer:      PWLSBS01
Description:
The shadow copy of volume C: could not grow its shadow copy storage on volume C:.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 03 00 58 00   ......X.
0008: 00 00 00 00 0d 00 06 c0   .......À
0010: 02 00 00 00 9a 00 00 c0   ....¿..À
0018: 0b 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Event Type:      Error
Event Source:      Srv
Event Category:      None
Event ID:      2019
Date:            15/04/2010
Time:            22:01:53
User:            N/A
Computer:      PWLSBS01
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 04 00 01 00 54 00   ......T.
0008: 00 00 00 00 e3 07 00 c0   ....ã..À
0010: 00 00 00 00 9a 00 00 c0   ....¿..À
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
0028: 03 00 00 00               ....    

Event Type:      Error
Event Source:      VolSnap
Event Category:      None
Event ID:      28
Date:            16/04/2010
Time:            7:00:00
User:            N/A
Computer:      PWLSBS01
Description:
The shadow copy of volume C: could not be created due to a failure in creating the necessary on disk structures.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 58 00   ......X.
0008: 00 00 00 00 1c 00 06 c0   .......À
0010: 00 00 00 00 9a 00 00 c0   ....¿..À
0018: 0d 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Event Type:      Error
Event Source:      SBCore
Event Category:      None
Event ID:      1011
Date:            16/04/2010
Time:            7:32:03
User:            N/A
Computer:      PWLSBS01
Description:
Multiple domain controllers running Windows Server 2003 for Small Business Server have been detected in your domain. To prevent this computer from shutting down in the future, you must remove all but one of these from the domain.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type:      Error
Event Source:      DNS
Event Category:      None
Event ID:      4015
Date:            15/04/2010
Time:            22:04:19
User:            N/A
Computer:      PWLSBS01
Description:
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 52 00 00 00               R...    

Grtz
Filip
0
RovastarCommented:
Can you have all the feilds to your http.sys error log? There could be something in there.

http://support.microsoft.com/kb/832975/
0
FlipTripAuthor Commented:
It seems that the problem has been resolved since I disabled the mobile access for the user with the iphone.

Grtz
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.