Link to home
Start Free TrialLog in
Avatar of Matt Donk
Matt DonkFlag for United States of America

asked on

Files Saved on Network Share Freezing - Can Only Hard Shutdown to Close

Greetings,

Sometime around early May Employees at our company started experience issues where mostly Excel files saved on a network share would freeze and go "not responding" to the point where we couldn't end the Excel process to close it and Windows would hang if we tried shutting down or restarting.  The only way out of it is a hard shutdown.  We've found this happen with Word files as well but mostly Excel files.  Everything works fine locally on the machine it's only when opening and saving Excel files on a network share.  We're all on Windows 7 Enterprise and our servers are a mix between 2003 R2 through 2012.  The network share is on Server 2003 R2.  We've had a number of changes in our environment lately making it hard to pinpoint the cause.  Around the time this problem started we began rolling out Kaspersky Endpoint Security for our anti-virus and Lync 2013.  We're all using Microsoft Office 2010 along with Lync 2013 which is giving us Office 2013 updates.  We've tried several things on local computer like repair/reinstall Office, adjusted certain Excel settings, new Windows profiles and we also restarted the server containing the network share.  One of the users who had this issue we're having test Office 2013 and they haven't had the issue since.  Another we removed Kaspersky and they haven't had an issue since which is still making finding the problem difficult.  Most users having the problem were consistently getting the application logs below regarding Excel application hung.  It's possible there were more changes in our environment around this time and I have more information but I'll start with this.  Any idea's here on what could be causing the problems?  I didn't find much with the logs below.  I haven't tried any old Windows updates that relate to this issue since it just started I didn't thing an update from years ago would help but I'm open for any suggestions.

Log Name:      Application
Source:        Application Hang
Date:          6/5/2015 11:01:59 AM
Event ID:      1002
Task Category: (101)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      removed
Description:
The program EXCEL.EXE version 14.0.7149.5000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
 Process ID: 2350
 Start Time: 01d09fa50e1cc684
 Termination Time: 60000
 Application Path: C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
 Report Id: eb95d2b7-0b98-11e5-becb-ecf4bb691a89

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Hang" />
    <EventID Qualifiers="0">1002</EventID>
    <Level>2</Level>
    <Task>101</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-06-05T16:01:59.000000000Z" />
    <EventRecordID>13472</EventRecordID>
    <Channel>Application</Channel>
    <Computer>removedbyMatt</Computer>
    <Security />
  </System>
  <EventData>
    <Data>EXCEL.EXE</Data>
    <Data>14.0.7149.5000</Data>
    <Data>2350</Data>
    <Data>01d09fa50e1cc684</Data>
    <Data>60000</Data>
    <Data>C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE</Data>
    <Data>eb95d2b7-0b98-11e5-becb-ecf4bb691a89</Data>
    <Binary>55006E006B006E006F0077006E0000000000</Binary>
  </EventData>
</Event>


Log Name:      Application
Source:        Windows Error Reporting
Date:          6/5/2015 11:00:52 AM
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      removed
Description:
Fault bucket , type 0
Event Name: AppHangB1
Response: Not available
Cab Id: 0

Problem signature:
P1: EXCEL.EXE
P2: 14.0.7149.5000
P3: 552dcfc6
P4: 4f78
P5: 0
P6:
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:
C:\Users\removed\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppHang_EXCEL.EXE_f9584e6b7b304f2e99ae46bb422cfa0e5e5be14_205ed143

Analysis symbol:
Rechecking for solution: 0
Report Id: eb95d2b7-0b98-11e5-becb-ecf4bb691a89
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-06-05T16:00:52.000000000Z" />
    <EventRecordID>13471</EventRecordID>
    <Channel>Application</Channel>
    <Computer>removed</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>AppHangB1</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>EXCEL.EXE</Data>
    <Data>14.0.7149.5000</Data>
    <Data>552dcfc6</Data>
    <Data>4f78</Data>
    <Data>0</Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>
    </Data>
    <Data>C:\Users\removed\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppHang_EXCEL.EXE_f9584e6b7b304f2e99ae46bb422cfa0e5e5be14_205ed143</Data>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>eb95d2b7-0b98-11e5-becb-ecf4bb691a89</Data>
    <Data>0</Data>
  </EventData>
</Event>
SOLUTION
Avatar of Lionel MM
Lionel MM
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of MicrosoftSavvy
MicrosoftSavvy

what is the speed of the network?
how many users and machines?
what av are you using?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Matt Donk

ASKER

Thanks for the replies.  We have over 1000 employees but not everyone is using files on the K drive that often.  It's a random intermittent issue that I've been able to replicate at times and unable to at other times.  I can't necessarily say it happens to everyone who works on these files on the K drive but I'm sure some haven't had the issue yet.  It's doesn't seem to be the files themselves it's happen to several.  It happened to me on a new file recently created.  I'll have to check on the speed of the network.  Several users and computers having the issue I don't have an exact number as not everyone is reporting the issue either.  Some have it everyday and others only once or twice in a matter of weeks.  Kaspersky Endpoint Security 10 is the AV were pushing out now and everyone having the issue has it.

We are exploring moving to a newer server.  The server now is Windows 2003 but it's a virtual server on a VMware host.

I'm having issues finding this File Validation registry path, it's not matching up with what I have.  I did a search for "filevalidation" and it didn't find anything.

Thanks for your time!
Try HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\14.0\Excel\Security
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial