Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Debugging Windows Server 2008 R2

Posted on 2011-03-21
8
1,711 Views
Last Modified: 2012-06-22
Hello,

We are running a Windows Server 2008 R2 as our print server and last week the server became unresponsive and none of the 20 printers the print server serves was working anymore. This is a pretty severe problem since there are over 250 users which were not able to print anymore.

There was not much time for trouble-shooting and I was not able to log into the server because it was super slow and hung on loading my desktop so we simply rebooted the server. Afterwards I checked and I found the following error in the application log:

-------------------------------------------------------------------------------------------------------------------
Log Name: Application
Source: Application Error
Date: 3/16/2011 4:16:30 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325
Exception code: 0xc000071f
Fault offset: 0x000000000006dd2c
Faulting process id: 0xb24
Faulting application start time: 0x01cbd90b721147ec
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: a92762cb-5012-11e0-b04c-005056a354cf
-------------------------------------------------------------------------------------------------------------------

In the System eventlog I found this:
-------------------------------------------------------------------------------------------------------------------
----------------------------------------------------
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/16/2011 4:18:27 PM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.
----------------------------------------------------

Both of the errors do not really tell me too much. I know which .dll caused the issue and that one of the services crashed but I do not know.

I have been asked to take some steps so next time the crash happens we would have more detailed information about what exactly caused it and then figure out a way to prevent us from such issue.

I am not sure how to takle that. Is there some debugging software I should run or is there any onboad tool I could use?

Thank you
Mc2102
0
Comment
Question by:Mc2102
  • 3
8 Comments
 

Author Comment

by:Mc2102
ID: 35182126
Just found this article about Dr Watson. Could that help?

http://support.microsoft.com/kb/275481
0
 
LVL 44

Expert Comment

by:Jackie Man
ID: 35289782
According to trial1982, it says:-

"Hi I suspect its due to printer drivers. Uninstall and reinstall latest printer drivers.

Alternatively, you could follow this article for a thorough investigation. http://blogs.technet.com/b/perfguru/archive/2008/08/06/print-spooler-crash-troubleshooting-steps.aspx"

Source: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_26453590.html
0
 

Accepted Solution

by:
Mc2102 earned 0 total points
ID: 35323966
Hi - sorry for leaving this question idle for so long.
 
I further invested the 'The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required ' error and found a suggested fix which includes adding the folowing permissions to the  the registry key HKEY_CLASSES_ROOT/CLSID/{{8BC3F05E-D86B-11D0-A075-00C04FB68820}.
- Authenticated users: Read access
- Network Service: Full control

I found the fix here:
http://www.eventid.net/display.asp?eventid=10010&eventno=508&source=DCOM&phase=1

I implemented this change over a week ago and so far the issue has not come back.
0
 

Author Closing Comment

by:Mc2102
ID: 35360808
I found the fix to my issue myself.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
Employees depend heavily on their PCs, and new threats like ransomware make it even more critical to protect their important data.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question