Go Premium for a chance to win a PS4. Enter to Win


SBS 2003 Server frozen for half hour every morning, can't find cause in event logs or scheduled tasks?

Posted on 2011-02-28
Medium Priority
Last Modified: 2012-05-11
Hi all,

I've been having trouble with my two servers for quite some time and can't pinpoint what the problem is to fix it.  I have a SBS 2003 box that's the DC, DNS, AD, Exchange and SQL - and a terminal server (2003) box that's used to work on and interact with the SBS.  From about 7:20 to 7:50 or 8:00 in the morning every morning my users are able to log into the terminal server, but any are unable to do anything else.  Outlook can't connect to exchange, and our POS software doesn't let them login (event log shows network/SQL timeout errors).

 I've looked at the scheduled tasks on both server, and anything that runs in the morning shows that it finished well before 7am.  Nothing is set to run after then until evening except volume shadow copy (runs at noon).  The only errors i can find on servers are:

on terminal server:
-Winlogin - RPC server is unavailable
-POS software - general network error during pre-handshake authentication.
-(system log) Netlogon event id: 5719.  This computer was not able to set up a secure session with a domain controller in domain ARVIDSONS due to the following:
There are currently no logon servers available to service the logon request.  
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.  

on SBS server:
Event Type:      Error
Event Source:      Report Server Windows Service (MSSQLSERVER)
Event Category:      Management
Event ID:      107

Report Server Windows Service (MSSQLSERVER) cannot connect to the report server database.

Does anyone have any ideas?  we also have intermittent freeze ups during the day, but nothing too long - and i suspect those are because of the server just being under high load and maxed out on capacity between memory (large page file) and disk access.

I've tried running process monitoring tools during the times that it's freezing, but i find it hard to log in during those times as well.  is there software i can run that keeps a history?  

Also - i guess i should say i'm using Kaspersky Server Antivirus on both servers, but don't have it updating or scanning during the morning time.  Symantec backup exec and system recovery both log that they finish their backups before 4am.

Question by:Arvidsons
  • 3
LVL 23

Expert Comment

ID: 34998935
Check if you have a schedule to restart your SBS during that time? It looks like the connection between the TS and SBS had been lost during that time.

Also, you can test the connection by doing a simply PING test. From the TS server do a continuous ping to the SBS (-t parameter) and put the result in a file. You will be able to see in the log file if there is lost connection during the time.

Author Comment

ID: 34998963
Thanks for reply ormerodrutter, I've tried pinging the server during that time and oddly enough that works, so I know the server is up - it just can't seem to do any responses that require more than a ping does.  

Accepted Solution

Arvidsons earned 0 total points
ID: 35233442
Finally found the cause using process explorer and being on site when it was happening.  Turned out it was my kaspersky admin kit running an update twice a day during work hours.  Some kind of driver problem with the update made the server freeze whenever it's run.  As a temporary solution i just moved the update to a later time (11pm).  problem doesn't affect users anymore, so is less urgent now.  

kaspersky admin kit has a few different built in updates - i checked a couple, but missed this one till now.

Author Closing Comment

ID: 35304269
Bandaid solution

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Usually shares are where we want them for our users and we tend to take them for granted. There are times, however, when those shares may disappear causing difficulty for your users. One of the first things to try is searching for files that shou…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

783 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question