Solved

Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3

Posted on 2012-03-21
6
1,067 Views
Last Modified: 2014-02-26
Have a Windows 2008 server in production since July 2011 and sudenly the DNS server shuts down once a week and all I see in the DNS event viewer is "the dns server has shut down" and event id 3
0
Comment
Question by:tjmustang
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 9

Expert Comment

by:lisfolks
ID: 37761547
Is the server being rebooted or shut down for maintenance or something once a week? If the server itself is shut down for any reason, the DNS server portion will be shut down as well. You would then see that message in the event viewer.
0
 

Author Comment

by:tjmustang
ID: 37762690
Preceeding the Internet going down the following stand out in the Windows event viewer

Event ID 4622
The COM+ Event System could not marshal the subscriber for subscription {39E31634-F045-4A1E-A5D5-7EBF2E4A1816}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}.  The HRESULT was 80070005.
Event ID 8193
Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...).  hr = 0x80070005, Access is denied.
.

Operation:
   Initializing Writer

Context:
   Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220}
   Writer Name: System Writer

Event ID 4625
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.  The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
Event ID 1001
Fault bucket , type 0
Event Name: ScriptedDiagFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: Microsoft Windows.NetworkDiagnostics.1.0
P2: Default
P3: 1.0.0.0
P4: Default
P5:
P6:
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:
C:\Users\Administrator\AppData\Local\Microsoft\Windows\WER\ReportQueue\NonCritical_Microsoft Window_bd5996727e9ea1acda90841fa2c99a88df4fb9d6_3f391465

Analysis symbol:
Rechecking for solution: 0
Report Id: 8da18694-7379-11e1-96f2-782bcb1de3af

Event ID 4400
The description for Event ID 4400 from source NPS cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

SERVER1.MCS.co
MS1
0
 
LVL 9

Expert Comment

by:lisfolks
ID: 37762910
Wow - okay - not sure that has anything to do with the DNS issue.

1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

2nd, regarding your VSS error message, the following post suggests that this is a known issue with Windows 2008 r2. It is caused by a permissions change related to the DHCP role. It likely has nothing to do with your DNS issue.
VSS event 8193 0x80070005, Access is denied, Initializing Writer following DHCP install
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 

Author Comment

by:tjmustang
ID: 37762923
1st question: is your internet connection actually shutting down, or can users not get to the internet because the DNS server shut down?
- You know, I'm sure, that users will believe the internet connection has shut down because they can't get to a domain, such as google.com, for example. In reality, if the DNS server is down, the internet connection may be present and just fine - the user would have to enter the IP address of the site instead of the domain name to get there.

I agree with this, I am never on site when it happens and limited to trying to troubleshoot after the fact without real conditions.
0
 

Accepted Solution

by:
tjmustang earned 0 total points
ID: 38458890
please close this
0
 

Author Closing Comment

by:tjmustang
ID: 39888242
Iasked for the question to be closed
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The way I use Experts Exchange to assist me in analyzing and diagnosing a problem is I first enter a Verbose Question at Experts Exchange like: Office 2007 will hang when opening and saving files I then launch WordPad (any text editor will do) an…
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question