SBS 2003 Server frozen for half hour every morning, can't find cause in event logs or scheduled tasks?

Posted on 2011-02-28
Last Modified: 2012-05-11
Hi all,

I've been having trouble with my two servers for quite some time and can't pinpoint what the problem is to fix it.  I have a SBS 2003 box that's the DC, DNS, AD, Exchange and SQL - and a terminal server (2003) box that's used to work on and interact with the SBS.  From about 7:20 to 7:50 or 8:00 in the morning every morning my users are able to log into the terminal server, but any are unable to do anything else.  Outlook can't connect to exchange, and our POS software doesn't let them login (event log shows network/SQL timeout errors).

 I've looked at the scheduled tasks on both server, and anything that runs in the morning shows that it finished well before 7am.  Nothing is set to run after then until evening except volume shadow copy (runs at noon).  The only errors i can find on servers are:

on terminal server:
-Winlogin - RPC server is unavailable
-POS software - general network error during pre-handshake authentication.
-(system log) Netlogon event id: 5719.  This computer was not able to set up a secure session with a domain controller in domain ARVIDSONS due to the following:
There are currently no logon servers available to service the logon request.  
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.  

on SBS server:
Event Type:      Error
Event Source:      Report Server Windows Service (MSSQLSERVER)
Event Category:      Management
Event ID:      107

Report Server Windows Service (MSSQLSERVER) cannot connect to the report server database.

Does anyone have any ideas?  we also have intermittent freeze ups during the day, but nothing too long - and i suspect those are because of the server just being under high load and maxed out on capacity between memory (large page file) and disk access.

I've tried running process monitoring tools during the times that it's freezing, but i find it hard to log in during those times as well.  is there software i can run that keeps a history?  

Also - i guess i should say i'm using Kaspersky Server Antivirus on both servers, but don't have it updating or scanning during the morning time.  Symantec backup exec and system recovery both log that they finish their backups before 4am.

Question by:Arvidsons
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
LVL 23

Expert Comment

ID: 34998935
Check if you have a schedule to restart your SBS during that time? It looks like the connection between the TS and SBS had been lost during that time.

Also, you can test the connection by doing a simply PING test. From the TS server do a continuous ping to the SBS (-t parameter) and put the result in a file. You will be able to see in the log file if there is lost connection during the time.

Author Comment

ID: 34998963
Thanks for reply ormerodrutter, I've tried pinging the server during that time and oddly enough that works, so I know the server is up - it just can't seem to do any responses that require more than a ping does.  

Accepted Solution

Arvidsons earned 0 total points
ID: 35233442
Finally found the cause using process explorer and being on site when it was happening.  Turned out it was my kaspersky admin kit running an update twice a day during work hours.  Some kind of driver problem with the update made the server freeze whenever it's run.  As a temporary solution i just moved the update to a later time (11pm).  problem doesn't affect users anymore, so is less urgent now.  

kaspersky admin kit has a few different built in updates - i checked a couple, but missed this one till now.

Author Closing Comment

ID: 35304269
Bandaid solution

Featured Post

The Ideal Solution for Multi-Display Applications

Check out ATEN’s VS1912 12-Port DP Video Wall Media Player at InfoComm 2017. Kerri describes how easy it is to design creative video walls in asymmetric layouts and schedule detailed playlists ahead of time with its advanced scheduling feature.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

More or less everybody in the IT market understands the basics of Networking, however when we start talking about Storage Networks, things get a bit dizzier, and this is where I would like to help.
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question