Solved

Debugging Windows Server 2008 R2

Posted on 2011-03-21
8
1,730 Views
Last Modified: 2012-06-22
Hello,

We are running a Windows Server 2008 R2 as our print server and last week the server became unresponsive and none of the 20 printers the print server serves was working anymore. This is a pretty severe problem since there are over 250 users which were not able to print anymore.

There was not much time for trouble-shooting and I was not able to log into the server because it was super slow and hung on loading my desktop so we simply rebooted the server. Afterwards I checked and I found the following error in the application log:

-------------------------------------------------------------------------------------------------------------------
Log Name: Application
Source: Application Error
Date: 3/16/2011 4:16:30 PM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp: 0x4cc7b325
Exception code: 0xc000071f
Fault offset: 0x000000000006dd2c
Faulting process id: 0xb24
Faulting application start time: 0x01cbd90b721147ec
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: a92762cb-5012-11e0-b04c-005056a354cf
-------------------------------------------------------------------------------------------------------------------

In the System eventlog I found this:
-------------------------------------------------------------------------------------------------------------------
----------------------------------------------------
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 3/16/2011 4:18:27 PM
Event ID: 10010
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: server.domain.com
Description:
The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required timeout.
----------------------------------------------------

Both of the errors do not really tell me too much. I know which .dll caused the issue and that one of the services crashed but I do not know.

I have been asked to take some steps so next time the crash happens we would have more detailed information about what exactly caused it and then figure out a way to prevent us from such issue.

I am not sure how to takle that. Is there some debugging software I should run or is there any onboad tool I could use?

Thank you
Mc2102
0
Comment
Question by:Mc2102
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
8 Comments
 

Author Comment

by:Mc2102
ID: 35182126
Just found this article about Dr Watson. Could that help?

http://support.microsoft.com/kb/275481
0
 
LVL 46

Expert Comment

by:Jackie Man
ID: 35289782
According to trial1982, it says:-

"Hi I suspect its due to printer drivers. Uninstall and reinstall latest printer drivers.

Alternatively, you could follow this article for a thorough investigation. http://blogs.technet.com/b/perfguru/archive/2008/08/06/print-spooler-crash-troubleshooting-steps.aspx"

Source: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_26453590.html
0
 

Accepted Solution

by:
Mc2102 earned 0 total points
ID: 35323966
Hi - sorry for leaving this question idle for so long.
 
I further invested the 'The server {8BC3F05E-D86B-11D0-A075-00C04FB68820} did not register with DCOM within the required ' error and found a suggested fix which includes adding the folowing permissions to the  the registry key HKEY_CLASSES_ROOT/CLSID/{{8BC3F05E-D86B-11D0-A075-00C04FB68820}.
- Authenticated users: Read access
- Network Service: Full control

I found the fix here:
http://www.eventid.net/display.asp?eventid=10010&eventno=508&source=DCOM&phase=1

I implemented this change over a week ago and so far the issue has not come back.
0
 

Author Closing Comment

by:Mc2102
ID: 35360808
I found the fix to my issue myself.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article helps those who get the 0xc004d307 error when trying to rearm (reset the license) Office 2013 in a Virtual Desktop Infrastructure (VDI) and/or those trying to prep the master image for Microsoft Key Management (KMS) activation. (i.e.- C…
Sometimes clients can lose connectivity with the Lotus Notes Domino Server, but there's not always an obvious answer as to why it happens.   Read this article to follow one of the first experiences I had with Lotus Notes on a client's machine, my…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question