Solved

SBS 2003 Server frozen for half hour every morning, can't find cause in event logs or scheduled tasks?

Posted on 2011-02-28
4
832 Views
Last Modified: 2012-05-11
Hi all,

I've been having trouble with my two servers for quite some time and can't pinpoint what the problem is to fix it.  I have a SBS 2003 box that's the DC, DNS, AD, Exchange and SQL - and a terminal server (2003) box that's used to work on and interact with the SBS.  From about 7:20 to 7:50 or 8:00 in the morning every morning my users are able to log into the terminal server, but any are unable to do anything else.  Outlook can't connect to exchange, and our POS software doesn't let them login (event log shows network/SQL timeout errors).

 I've looked at the scheduled tasks on both server, and anything that runs in the morning shows that it finished well before 7am.  Nothing is set to run after then until evening except volume shadow copy (runs at noon).  The only errors i can find on servers are:

on terminal server:
-Winlogin - RPC server is unavailable
-POS software - general network error during pre-handshake authentication.
-(system log) Netlogon event id: 5719.  This computer was not able to set up a secure session with a domain controller in domain ARVIDSONS due to the following:
There are currently no logon servers available to service the logon request.  
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.  

on SBS server:
Event Type:      Error
Event Source:      Report Server Windows Service (MSSQLSERVER)
Event Category:      Management
Event ID:      107

Report Server Windows Service (MSSQLSERVER) cannot connect to the report server database.

Does anyone have any ideas?  we also have intermittent freeze ups during the day, but nothing too long - and i suspect those are because of the server just being under high load and maxed out on capacity between memory (large page file) and disk access.

I've tried running process monitoring tools during the times that it's freezing, but i find it hard to log in during those times as well.  is there software i can run that keeps a history?  

Also - i guess i should say i'm using Kaspersky Server Antivirus on both servers, but don't have it updating or scanning during the morning time.  Symantec backup exec and system recovery both log that they finish their backups before 4am.

Thanks!
-Michael
0
Comment
Question by:Arvidsons
  • 3
4 Comments
 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34998935
Check if you have a schedule to restart your SBS during that time? It looks like the connection between the TS and SBS had been lost during that time.

Also, you can test the connection by doing a simply PING test. From the TS server do a continuous ping to the SBS (-t parameter) and put the result in a file. You will be able to see in the log file if there is lost connection during the time.
0
 

Author Comment

by:Arvidsons
ID: 34998963
Thanks for reply ormerodrutter, I've tried pinging the server during that time and oddly enough that works, so I know the server is up - it just can't seem to do any responses that require more than a ping does.  
0
 

Accepted Solution

by:
Arvidsons earned 0 total points
ID: 35233442
Finally found the cause using process explorer and being on site when it was happening.  Turned out it was my kaspersky admin kit running an update twice a day during work hours.  Some kind of driver problem with the update made the server freeze whenever it's run.  As a temporary solution i just moved the update to a later time (11pm).  problem doesn't affect users anymore, so is less urgent now.  

kaspersky admin kit has a few different built in updates - i checked a couple, but missed this one till now.
0
 

Author Closing Comment

by:Arvidsons
ID: 35304269
Bandaid solution
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Every server (virtual or physical) needs a console: and the console can be provided through hardware directly connected, software for remote connections, local connections, through a KVM, etc. This document explains the different types of consol…
Load balancing is the method of dividing the total amount of work performed by one computer between two or more computers. Its aim is to get more work done in the same amount of time, ensuring that all the users get served faster.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now