Solved

Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3

Posted on 2012-03-21
6
1,036 Views
Last Modified: 2014-02-26
Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3
0
Comment
Question by:tjmustang
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 9

Expert Comment

by:lisfolks
ID: 37761547
Is the server being rebooted or shut down for maintenance or something once a week? If the server itself is shut down for any reason, the DNS server portion will be shut down as well. You would then see that message in the event viewer.
0
 

Author Comment

by:tjmustang
ID: 37762690
Preceeding the Internet going down the following stand out in the Windows event viewer

Event ID 4622
The COM+ Event System could not marshal the subscriber for subscription {39E31634-F045-4A1E-A5D5-7EBF2E4A1816}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}.  The HRESULT was 80070005.
Event ID 8193
Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...).  hr = 0x80070005, Access is denied.
.

Operation:
   Initializing Writer

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer

Event ID 4625
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event ID 1001
Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Windows.NetworkDiagnostics.1.0
P2: Default
P3: 1.0.0.0
P4: Default
P5:
P6:
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:
C:\Users\Administrator\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Window_bd5996727e9ea1acda90841fa2c99a88df4fb9d6_3f391465

Analysis symbol:
Rechecking for solution: 0
Report Id: 8da18694-7379-11e1-96f2-782bcb1de3af

Event ID 4400
The description for Event ID 4400 from source NPS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

SERVER1.MCS.co
MS1
0
 
LVL 9

Expert Comment

by:lisfolks
ID: 37762910
Wow - okay - not sure that has anything to do with the DNS issue.

1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

2nd, regarding your VSS error message, the following post suggests that this is a known issue with Windows 2008 r2. It is caused by a permissions change related to the DHCP role. It likely has nothing to do with your DNS issue.
VSS event 8193 0x80070005, Access is denied, Initializing Writer following DHCP install
0
MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

 

Author Comment

by:tjmustang
ID: 37762923
1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

I agree with this, I am never on site when it happens and limited to trying to troubleshoot after the fact without real conditions.
0
 

Accepted Solution

by:
tjmustang earned 0 total points
ID: 38458890
please close this
0
 

Author Closing Comment

by:tjmustang
ID: 39888242
Iasked for the question to be closed
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The way I use Experts Exchange to assist me in analyzing and diagnosing a problem is I first enter a Verbose Question at Experts Exchange like: Office 2007 will hang when opening and saving files I then launch WordPad (any text editor will do) an…
This is a fairly complicated script that will install the required prerequisites to install SCCM 2012 R2 on a server.  It was designed under the functional model in order to compartmentalize each step required, reducing the overall complexity.  The …
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question