Server 2012 R2 Strange DC Behaviour

We are getting some strange behavior on our primary server.

Server Background:
Server 2012 R2, DC, File Server, Hyper-V host
Hosts around 10tb of data which is DFSr'd to 2 oversea servers
Hosts an Exchange VM plus an assortment of application VMs

Issue:
Works fine after reboot for around 2 weeks, after this the first issue noticed is that we can't RDP to the box. Sits for ever on applying group policies. A reboot resolves the issue, however today out of luck, I was logged on when one of the other techs complained they could not get on.

All end user services seem unaffected, Everyone can access the shares, log on, all the VMs are still running.

The first thing I check is group policies: gpresult /h gp.html - This has now locked up (or taking a long time, has been an hour)
Event viewer is uninformative except for the <GPClient> is taking a long time for operation Logon.

Went to check the status of GPO sync. GPO Manager hangs.

I check GPO sync from our backup DC and everything is in sync. Ironically, when I forced the GPO Manager to user the main DC it still works fine from that box.

I open Hyper-V manager on an unrelated issue, and can not connect to Hyper-V server, yet VMs are running ok.

I attempt to use Hyper-V manager on the backup DC to open the main server, but it won;t connect to the main server. No error, just nothing.

I goto check on services, Get an hourglass for half a second, then nothing. Again no error, just nothing. - Update, in the time it took me to write this, the services window came up.

Task manager looks healthy enough, no run-away tasks that can be seen.

I'm after 1 of 2 options at this stage. Since I know a reboot solves it for a while, something somewhere has hung. If I can find that bit, maybe I can restart it without having to restart the entire server.

Or 2, actually fixing the issue.

Any idea guys on where to start?
WargameskhaineAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
This is very common when ADDS and Hyper-V are installed on the same OS. Simple resource contention and eventually it just falls over.

Hyoer-V should *always* (without exception!) be isolated if you are going to run it. All other roles should be in VMs or on other servers.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
WargameskhaineAuthor Commented:
Thanks Cliff,

I've done some research and it appears you are spot on! In addition to other security matters. Since we have other DC's at this site I believe that I'll have to reboot to return to a normal state, then DC Promo the Hpyer-V box out of the domain, which will likely solve the problem moving forward.

A link for future readers:
http://www.altaro.com/hyper-v/reasons-not-to-make-hyper-v-a-domain-controller/

Regards,

Allan
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.