Solved

Intermittent BSOD on a Server 2008 Standard machine

Posted on 2011-02-28
7
1,129 Views
Last Modified: 2012-05-11
I have searched the knowledge base but haven't been able to find another question with the same issues - so apologies if this has been covered.

We have an HP Proliant DL360 G6 server running Server 2008 Standard 32bit which is intermittently rebooting after a BSOD.  The server is a terminal server which our users log in to to access our transport system which runs on a foxpro database  The crashes this year have been twice in Jan, once in Feb and now today. The times for these crashes vary but generally they occur when users are logged in.

We have run a diagnostics tool supplied by HP, which found no hardware issues. We have also loaded the latest bios for this server.


The error gave the below information:

Problem signature:
  Problem Event Name:      BlueScreen
  OS Version:      6.0.6001.2.1.0.16.7
  Locale ID:      3081

Additional information about the problem:
  BCCode:      1000008e
  BCP1:      C0000005
  BCP2:      81868363
  BCP3:      E9E42840
  BCP4:      00000000
  OS Version:      6_0_6001
  Service Pack:      1_0
  Product:      16_3

Files that help describe the problem:
  C:\Windows\Minidump\Mini030111-01.dmp
  C:\Users\administrator.SCS\AppData\Local\Temp\1\WER-84724-0.sysdata.xml
  C:\Users\administrator.SCS\AppData\Local\Temp\1\WER9819.tmp.version.txt

I have attached the minidump file from today's crash.

Any assistance in figuring out why this is occurring would be greatly appreciated.

Paul


.   Mini030111-01.dmp
0
Comment
Question by:scs-paul
7 Comments
 
LVL 8

Expert Comment

by:devinnoel
Comment Utility
Dump files can be pretty hard to analyze, I rarely do it. What error codes are on the screen when it crashes? You can usually diagnose most BSOD's that are driver related by looking for the .sys file that's listed around half way down the screen. That .sys file is always (almost always?) a driver & in particular the driver that needs to be updated because it's has a bug that causes the BSOD.



You can download the Debugging Tools for Windows from  http://msdn.microsoft.com/en-us/windows/hardware/gg463009.aspx

There is a tutorial in the following link on setting up WinDbg, such as setting the symbol path and utilizing the !analyze -v command:

http://www.sevenforums.com/crash-lockup-debug-how/26584-2-intermediate-configuring-debugging-tools.html
0
 
LVL 30

Accepted Solution

by:
pgm554 earned 500 total points
Comment Utility
0
 
LVL 10

Expert Comment

by:santhoshu
Comment Utility
RDPDD.dll is the cause for the crash.

Below is the excerpt from windbg.

start    end        module name
9e5b0000 9e5d6000   RDPDD      (pdb symbols)          downstreamstore\RDPDD.pdb\85E21256962B4CD68B4E3F3C737C03F11\RDPDD.pdb
    Loaded symbol image file: RDPDD.dll
    Mapped memory image file: downstreamstore\RDPDD.dll\4791923E26000\RDPDD.dll
    Image path: \SystemRoot\System32\RDPDD.dll
    Image name: RDPDD.dll
    Timestamp:        Sat Jan 19 01:01:34 2008 (4791923E)
    CheckSum:         00029F52
    ImageSize:        00026000
    File version:     6.0.6001.18000
    Product version:  6.0.6001.18000
    File flags:       0 (Mask 3F)
    File OS:          40004 NT Win32
    File type:        3.4 Driver
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Microsoft Corporation
    ProductName:      Microsoft® Windows® Operating System
    InternalName:     RDPDD.dll
    OriginalFilename: RDPDD.dll
    ProductVersion:   6.0.6001.18000
    FileVersion:      6.0.6001.18000 (longhorn_rtm.080118-1840)
    FileDescription:  RDP Display Driver
    LegalCopyright:   © Microsoft Corporation. All rights reserved.

Check if you have any new versions of RDPDD.dll (in any MS hotfix or service pack) or I think MS can help because it looks like RDPDD.dll is their  dll.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 8

Expert Comment

by:devinnoel
Comment Utility
RDP is Remote Desktop Protocol, A.K.A. The remote control stuff & Terminal Services.
0
 

Author Comment

by:scs-paul
Comment Utility
Thanks for the assistance.

I have applied the hotfix linked to by pqm554 above as it seemed most relevant to our issue.

Hard to tell if this has fixed the issue given this was intermittently happening once a month.

But if that hasn't worked I would be looking at santhoshu's solution and trying to replace RDPDD.dll
0
 

Author Closing Comment

by:scs-paul
Comment Utility
BSOD has not occurred for over a month since I applied the hotfix.  Will assume issue is fixed.
0

Featured Post

Shouldn't all users have the same email signature?

You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

Join & Write a Comment

this article is a guided solution for most of the common server issues in server hardware tasks we are facing in our routine job works. the topics in the following article covered are, 1) dell hardware raidlevel (Perc) 2) adding HDD 3) how t…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now