Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3

Posted on 2012-03-21
6
Medium Priority
?
1,137 Views
Last Modified: 2014-02-26
Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3
0
Comment
Question by:tjmustang
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 9

Expert Comment

by:lisfolks
ID: 37761547
Is the server being rebooted or shut down for maintenance or something once a week? If the server itself is shut down for any reason, the DNS server portion will be shut down as well. You would then see that message in the event viewer.
0
 

Author Comment

by:tjmustang
ID: 37762690
Preceeding the Internet going down the following stand out in the Windows event viewer

Event ID 4622
The COM+ Event System could not marshal the subscriber for subscription {39E31634-F045-4A1E-A5D5-7EBF2E4A1816}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}.  The HRESULT was 80070005.
Event ID 8193
Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...).  hr = 0x80070005, Access is denied.
.

Operation:
   Initializing Writer

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer

Event ID 4625
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event ID 1001
Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Windows.NetworkDiagnostics.1.0
P2: Default
P3: 1.0.0.0
P4: Default
P5:
P6:
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:
C:\Users\Administrator\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Window_bd5996727e9ea1acda90841fa2c99a88df4fb9d6_3f391465

Analysis symbol:
Rechecking for solution: 0
Report Id: 8da18694-7379-11e1-96f2-782bcb1de3af

Event ID 4400
The description for Event ID 4400 from source NPS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

SERVER1.MCS.co
MS1
0
 
LVL 9

Expert Comment

by:lisfolks
ID: 37762910
Wow - okay - not sure that has anything to do with the DNS issue.

1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

2nd, regarding your VSS error message, the following post suggests that this is a known issue with Windows 2008 r2. It is caused by a permissions change related to the DHCP role. It likely has nothing to do with your DNS issue.
VSS event 8193 0x80070005, Access is denied, Initializing Writer following DHCP install
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:tjmustang
ID: 37762923
1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

I agree with this, I am never on site when it happens and limited to trying to troubleshoot after the fact without real conditions.
0
 

Accepted Solution

by:
tjmustang earned 0 total points
ID: 38458890
please close this
0
 

Author Closing Comment

by:tjmustang
ID: 39888242
Iasked for the question to be closed
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Log files are useful in diagnosing and repairing problems.  This is a list of common log files and their standard locations that I've compiled.   While this is not exhaustive, it is a pretty good list that I've found to be useful.  I may update it f…
This article describes how to set permissions to allow a limited-permissions user to start and stop a particular System Service.   It is always best to give users only the permissions that they need to perform their job, so tweaking particular permi…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question