Solved

Debugging Windows Server 2008 R2

Posted on 2011-03-21
8
1,716 Views
Last Modified: 2012-06-22
Hello,

We are running a Windows Server 2008 R2 as our print server and last week the server became unresponsive and none of the 20 printers the print server serves was working anymore. This is a pretty severe problem since there are over 250 users which were not able to print anymore.

There was not much time for trouble-shooting and I was not able to log into the server because it was super slow and hung on loading my desktop so we simply rebooted the server. Afterwards I checked and I found the following error in the application log:

-------------------------------------------------------------------------------------------------------------------
Log Name: Application
Source: Application Error
Date: 3/16/2011 4:16:30 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325
Exception code: 0xc000071f
Fault offset: 0x000000000006dd2c
Faulting process id: 0xb24
Faulting application start time: 0x01cbd90b721147ec
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: a92762cb-5012-11e0-b04c-005056a354cf
-------------------------------------------------------------------------------------------------------------------

In the System eventlog I found this:
-------------------------------------------------------------------------------------------------------------------
----------------------------------------------------
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/16/2011 4:18:27 PM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.
----------------------------------------------------

Both of the errors do not really tell me too much. I know which .dll caused the issue and that one of the services crashed but I do not know.

I have been asked to take some steps so next time the crash happens we would have more detailed information about what exactly caused it and then figure out a way to prevent us from such issue.

I am not sure how to takle that. Is there some debugging software I should run or is there any onboad tool I could use?

Thank you
Mc2102
0
Comment
Question by:Mc2102
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
8 Comments
 

Author Comment

by:Mc2102
ID: 35182126
Just found this article about Dr Watson. Could that help?

http://support.microsoft.com/kb/275481
0
 
LVL 44

Expert Comment

by:Jackie Man
ID: 35289782
According to trial1982, it says:-

"Hi I suspect its due to printer drivers. Uninstall and reinstall latest printer drivers.

Alternatively, you could follow this article for a thorough investigation. http://blogs.technet.com/b/perfguru/archive/2008/08/06/print-spooler-crash-troubleshooting-steps.aspx"

Source: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_26453590.html
0
 

Accepted Solution

by:
Mc2102 earned 0 total points
ID: 35323966
Hi - sorry for leaving this question idle for so long.
 
I further invested the 'The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required ' error and found a suggested fix which includes adding the folowing permissions to the  the registry key HKEY_CLASSES_ROOT/CLSID/{{8BC3F05E-D86B-11D0-A075-00C04FB68820}.
- Authenticated users: Read access
- Network Service: Full control

I found the fix here:
http://www.eventid.net/display.asp?eventid=10010&eventno=508&source=DCOM&phase=1

I implemented this change over a week ago and so far the issue has not come back.
0
 

Author Closing Comment

by:Mc2102
ID: 35360808
I found the fix to my issue myself.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In 2017, ransomware will become so virulent and widespread that if you aren’t a victim yourself, you will know someone who is.
An article on effective troubleshooting
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question