SBS 2003 Server frozen for half hour every morning, can't find cause in event logs or scheduled tasks?

Hi all,

I've been having trouble with my two servers for quite some time and can't pinpoint what the problem is to fix it.  I have a SBS 2003 box that's the DC, DNS, AD, Exchange and SQL - and a terminal server (2003) box that's used to work on and interact with the SBS.  From about 7:20 to 7:50 or 8:00 in the morning every morning my users are able to log into the terminal server, but any are unable to do anything else.  Outlook can't connect to exchange, and our POS software doesn't let them login (event log shows network/SQL timeout errors).

 I've looked at the scheduled tasks on both server, and anything that runs in the morning shows that it finished well before 7am.  Nothing is set to run after then until evening except volume shadow copy (runs at noon).  The only errors i can find on servers are:

on terminal server:
-Winlogin - RPC server is unavailable
-POS software - general network error during pre-handshake authentication.
-(system log) Netlogon event id: 5719.  This computer was not able to set up a secure session with a domain controller in domain ARVIDSONS due to the following:
There are currently no logon servers available to service the logon request.  
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.  

on SBS server:
Event Type:      Error
Event Source:      Report Server Windows Service (MSSQLSERVER)
Event Category:      Management
Event ID:      107

Report Server Windows Service (MSSQLSERVER) cannot connect to the report server database.

Does anyone have any ideas?  we also have intermittent freeze ups during the day, but nothing too long - and i suspect those are because of the server just being under high load and maxed out on capacity between memory (large page file) and disk access.

I've tried running process monitoring tools during the times that it's freezing, but i find it hard to log in during those times as well.  is there software i can run that keeps a history?  

Also - i guess i should say i'm using Kaspersky Server Antivirus on both servers, but don't have it updating or scanning during the morning time.  Symantec backup exec and system recovery both log that they finish their backups before 4am.

Who is Participating?

Improve company productivity with a Business Account.Sign Up

ArvidsonsConnect With a Mentor Author Commented:
Finally found the cause using process explorer and being on site when it was happening.  Turned out it was my kaspersky admin kit running an update twice a day during work hours.  Some kind of driver problem with the update made the server freeze whenever it's run.  As a temporary solution i just moved the update to a later time (11pm).  problem doesn't affect users anymore, so is less urgent now.  

kaspersky admin kit has a few different built in updates - i checked a couple, but missed this one till now.
Check if you have a schedule to restart your SBS during that time? It looks like the connection between the TS and SBS had been lost during that time.

Also, you can test the connection by doing a simply PING test. From the TS server do a continuous ping to the SBS (-t parameter) and put the result in a file. You will be able to see in the log file if there is lost connection during the time.
ArvidsonsAuthor Commented:
Thanks for reply ormerodrutter, I've tried pinging the server during that time and oddly enough that works, so I know the server is up - it just can't seem to do any responses that require more than a ping does.  
ArvidsonsAuthor Commented:
Bandaid solution
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.