Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


SBS 2003 Server frozen for half hour every morning, can't find cause in event logs or scheduled tasks?

Posted on 2011-02-28
Medium Priority
Last Modified: 2012-05-11
Hi all,

I've been having trouble with my two servers for quite some time and can't pinpoint what the problem is to fix it.  I have a SBS 2003 box that's the DC, DNS, AD, Exchange and SQL - and a terminal server (2003) box that's used to work on and interact with the SBS.  From about 7:20 to 7:50 or 8:00 in the morning every morning my users are able to log into the terminal server, but any are unable to do anything else.  Outlook can't connect to exchange, and our POS software doesn't let them login (event log shows network/SQL timeout errors).

 I've looked at the scheduled tasks on both server, and anything that runs in the morning shows that it finished well before 7am.  Nothing is set to run after then until evening except volume shadow copy (runs at noon).  The only errors i can find on servers are:

on terminal server:
-Winlogin - RPC server is unavailable
-POS software - general network error during pre-handshake authentication.
-(system log) Netlogon event id: 5719.  This computer was not able to set up a secure session with a domain controller in domain ARVIDSONS due to the following:
There are currently no logon servers available to service the logon request.  
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.  

on SBS server:
Event Type:      Error
Event Source:      Report Server Windows Service (MSSQLSERVER)
Event Category:      Management
Event ID:      107

Report Server Windows Service (MSSQLSERVER) cannot connect to the report server database.

Does anyone have any ideas?  we also have intermittent freeze ups during the day, but nothing too long - and i suspect those are because of the server just being under high load and maxed out on capacity between memory (large page file) and disk access.

I've tried running process monitoring tools during the times that it's freezing, but i find it hard to log in during those times as well.  is there software i can run that keeps a history?  

Also - i guess i should say i'm using Kaspersky Server Antivirus on both servers, but don't have it updating or scanning during the morning time.  Symantec backup exec and system recovery both log that they finish their backups before 4am.

Question by:Arvidsons
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
LVL 23

Expert Comment

ID: 34998935
Check if you have a schedule to restart your SBS during that time? It looks like the connection between the TS and SBS had been lost during that time.

Also, you can test the connection by doing a simply PING test. From the TS server do a continuous ping to the SBS (-t parameter) and put the result in a file. You will be able to see in the log file if there is lost connection during the time.

Author Comment

ID: 34998963
Thanks for reply ormerodrutter, I've tried pinging the server during that time and oddly enough that works, so I know the server is up - it just can't seem to do any responses that require more than a ping does.  

Accepted Solution

Arvidsons earned 0 total points
ID: 35233442
Finally found the cause using process explorer and being on site when it was happening.  Turned out it was my kaspersky admin kit running an update twice a day during work hours.  Some kind of driver problem with the update made the server freeze whenever it's run.  As a temporary solution i just moved the update to a later time (11pm).  problem doesn't affect users anymore, so is less urgent now.  

kaspersky admin kit has a few different built in updates - i checked a couple, but missed this one till now.

Author Closing Comment

ID: 35304269
Bandaid solution

Featured Post

New benefit for Premium Members - Upgrade now!

Ready to get started with anonymous questions today? It's easy! Learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Hyper-convergence systems have taken the IT world by storm and have quickly started to change our point of view of how the data center should and could be architected. In this article, I’ll explain the benefits of employing a hyper-converged system …
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question