Solved

Debugging Windows Server 2008 R2

Posted on 2011-03-21
8
1,724 Views
Last Modified: 2012-06-22
Hello,

We are running a Windows Server 2008 R2 as our print server and last week the server became unresponsive and none of the 20 printers the print server serves was working anymore. This is a pretty severe problem since there are over 250 users which were not able to print anymore.

There was not much time for trouble-shooting and I was not able to log into the server because it was super slow and hung on loading my desktop so we simply rebooted the server. Afterwards I checked and I found the following error in the application log:

-------------------------------------------------------------------------------------------------------------------
Log Name: Application
Source: Application Error
Date: 3/16/2011 4:16:30 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325
Exception code: 0xc000071f
Fault offset: 0x000000000006dd2c
Faulting process id: 0xb24
Faulting application start time: 0x01cbd90b721147ec
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: a92762cb-5012-11e0-b04c-005056a354cf
-------------------------------------------------------------------------------------------------------------------

In the System eventlog I found this:
-------------------------------------------------------------------------------------------------------------------
----------------------------------------------------
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/16/2011 4:18:27 PM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.
----------------------------------------------------

Both of the errors do not really tell me too much. I know which .dll caused the issue and that one of the services crashed but I do not know.

I have been asked to take some steps so next time the crash happens we would have more detailed information about what exactly caused it and then figure out a way to prevent us from such issue.

I am not sure how to takle that. Is there some debugging software I should run or is there any onboad tool I could use?

Thank you
Mc2102
0
Comment
Question by:Mc2102
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
8 Comments
 

Author Comment

by:Mc2102
ID: 35182126
Just found this article about Dr Watson. Could that help?

http://support.microsoft.com/kb/275481
0
 
LVL 45

Expert Comment

by:Jackie Man
ID: 35289782
According to trial1982, it says:-

"Hi I suspect its due to printer drivers. Uninstall and reinstall latest printer drivers.

Alternatively, you could follow this article for a thorough investigation. http://blogs.technet.com/b/perfguru/archive/2008/08/06/print-spooler-crash-troubleshooting-steps.aspx"

Source: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_26453590.html
0
 

Accepted Solution

by:
Mc2102 earned 0 total points
ID: 35323966
Hi - sorry for leaving this question idle for so long.
 
I further invested the 'The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required ' error and found a suggested fix which includes adding the folowing permissions to the  the registry key HKEY_CLASSES_ROOT/CLSID/{{8BC3F05E-D86B-11D0-A075-00C04FB68820}.
- Authenticated users: Read access
- Network Service: Full control

I found the fix here:
http://www.eventid.net/display.asp?eventid=10010&eventno=508&source=DCOM&phase=1

I implemented this change over a week ago and so far the issue has not come back.
0
 

Author Closing Comment

by:Mc2102
ID: 35360808
I found the fix to my issue myself.
0

Featured Post

Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article explains how to install and use the NTBackup utility that comes with Windows Server.
There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question