Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3

Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3
tjmustangAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lisfolksCommented:
Is the server being rebooted or shut down for maintenance or something once a week? If the server itself is shut down for any reason, the DNS server portion will be shut down as well. You would then see that message in the event viewer.
0
tjmustangAuthor Commented:
Preceeding the Internet going down the following stand out in the Windows event viewer

Event ID 4622
The COM+ Event System could not marshal the subscriber for subscription {39E31634-F045-4A1E-A5D5-7EBF2E4A1816}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}.  The HRESULT was 80070005.
Event ID 8193
Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...).  hr = 0x80070005, Access is denied.
.

Operation:
   Initializing Writer

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer

Event ID 4625
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event ID 1001
Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Windows.NetworkDiagnostics.1.0
P2: Default
P3: 1.0.0.0
P4: Default
P5:
P6:
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:
C:\Users\Administrator\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Window_bd5996727e9ea1acda90841fa2c99a88df4fb9d6_3f391465

Analysis symbol:
Rechecking for solution: 0
Report Id: 8da18694-7379-11e1-96f2-782bcb1de3af

Event ID 4400
The description for Event ID 4400 from source NPS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

SERVER1.MCS.co
MS1
0
lisfolksCommented:
Wow - okay - not sure that has anything to do with the DNS issue.

1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

2nd, regarding your VSS error message, the following post suggests that this is a known issue with Windows 2008 r2. It is caused by a permissions change related to the DHCP role. It likely has nothing to do with your DNS issue.
VSS event 8193 0x80070005, Access is denied, Initializing Writer following DHCP install
0
Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

tjmustangAuthor Commented:
1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

I agree with this, I am never on site when it happens and limited to trying to troubleshoot after the fact without real conditions.
0
tjmustangAuthor Commented:
please close this
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tjmustangAuthor Commented:
Iasked for the question to be closed
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.