Solved

Debugging Windows Server 2008 R2

Posted on 2011-03-21
8
1,695 Views
Last Modified: 2012-06-22
Hello,

We are running a Windows Server 2008 R2 as our print server and last week the server became unresponsive and none of the 20 printers the print server serves was working anymore. This is a pretty severe problem since there are over 250 users which were not able to print anymore.

There was not much time for trouble-shooting and I was not able to log into the server because it was super slow and hung on loading my desktop so we simply rebooted the server. Afterwards I checked and I found the following error in the application log:

-------------------------------------------------------------------------------------------------------------------
Log Name: Application
Source: Application Error
Date: 3/16/2011 4:16:30 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325
Exception code: 0xc000071f
Fault offset: 0x000000000006dd2c
Faulting process id: 0xb24
Faulting application start time: 0x01cbd90b721147ec
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: a92762cb-5012-11e0-b04c-005056a354cf
-------------------------------------------------------------------------------------------------------------------

In the System eventlog I found this:
-------------------------------------------------------------------------------------------------------------------
----------------------------------------------------
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/16/2011 4:18:27 PM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.
----------------------------------------------------

Both of the errors do not really tell me too much. I know which .dll caused the issue and that one of the services crashed but I do not know.

I have been asked to take some steps so next time the crash happens we would have more detailed information about what exactly caused it and then figure out a way to prevent us from such issue.

I am not sure how to takle that. Is there some debugging software I should run or is there any onboad tool I could use?

Thank you
Mc2102
0
Comment
Question by:Mc2102
  • 3
8 Comments
 

Author Comment

by:Mc2102
ID: 35182126
Just found this article about Dr Watson. Could that help?

http://support.microsoft.com/kb/275481
0
 
LVL 41

Expert Comment

by:Jackie Man
ID: 35289782
According to trial1982, it says:-

"Hi I suspect its due to printer drivers. Uninstall and reinstall latest printer drivers.

Alternatively, you could follow this article for a thorough investigation. http://blogs.technet.com/b/perfguru/archive/2008/08/06/print-spooler-crash-troubleshooting-steps.aspx"

Source: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_26453590.html
0
 

Accepted Solution

by:
Mc2102 earned 0 total points
ID: 35323966
Hi - sorry for leaving this question idle for so long.
 
I further invested the 'The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required ' error and found a suggested fix which includes adding the folowing permissions to the  the registry key HKEY_CLASSES_ROOT/CLSID/{{8BC3F05E-D86B-11D0-A075-00C04FB68820}.
- Authenticated users: Read access
- Network Service: Full control

I found the fix here:
http://www.eventid.net/display.asp?eventid=10010&eventno=508&source=DCOM&phase=1

I implemented this change over a week ago and so far the issue has not come back.
0
 

Author Closing Comment

by:Mc2102
ID: 35360808
I found the fix to my issue myself.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now