Matt Donk
asked on
Files Saved on Network Share Freezing - Can Only Hard Shutdown to Close
Greetings,
Sometime around early May Employees at our company started experience issues where mostly Excel files saved on a network share would freeze and go "not responding" to the point where we couldn't end the Excel process to close it and Windows would hang if we tried shutting down or restarting. The only way out of it is a hard shutdown. We've found this happen with Word files as well but mostly Excel files. Everything works fine locally on the machine it's only when opening and saving Excel files on a network share. We're all on Windows 7 Enterprise and our servers are a mix between 2003 R2 through 2012. The network share is on Server 2003 R2. We've had a number of changes in our environment lately making it hard to pinpoint the cause. Around the time this problem started we began rolling out Kaspersky Endpoint Security for our anti-virus and Lync 2013. We're all using Microsoft Office 2010 along with Lync 2013 which is giving us Office 2013 updates. We've tried several things on local computer like repair/reinstall Office, adjusted certain Excel settings, new Windows profiles and we also restarted the server containing the network share. One of the users who had this issue we're having test Office 2013 and they haven't had the issue since. Another we removed Kaspersky and they haven't had an issue since which is still making finding the problem difficult. Most users having the problem were consistently getting the application logs below regarding Excel application hung. It's possible there were more changes in our environment around this time and I have more information but I'll start with this. Any idea's here on what could be causing the problems? I didn't find much with the logs below. I haven't tried any old Windows updates that relate to this issue since it just started I didn't thing an update from years ago would help but I'm open for any suggestions.
Log Name: Application
Source: Application Hang
Date: 6/5/2015 11:01:59 AM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: removed
Description:
The program EXCEL.EXE version 14.0.7149.5000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 2350
Start Time: 01d09fa50e1cc684
Termination Time: 60000
Application Path: C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
Report Id: eb95d2b7-0b98-11e5-becb-ec f4bb691a89
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Hang" />
<EventID Qualifiers="0">1002</Event ID>
<Level>2</Level>
<Task>101</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-06-05T16: 01:59.0000 00000Z" />
<EventRecordID>13472</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>removedbyMatt</C omputer>
<Security />
</System>
<EventData>
<Data>EXCEL.EXE</Data>
<Data>14.0.7149.5000</Data >
<Data>2350</Data>
<Data>01d09fa50e1cc684</Da ta>
<Data>60000</Data>
<Data>C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE< /Data>
<Data>eb95d2b7-0b98-11e5-b ecb-ecf4bb 691a89</Da ta>
<Binary>55006E006B006E006F 0077006E00 00000000</ Binary>
</EventData>
</Event>
Log Name: Application
Source: Windows Error Reporting
Date: 6/5/2015 11:00:52 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: removed
Description:
Fault bucket , type 0
Event Name: AppHangB1
Response: Not available
Cab Id: 0
Problem signature:
P1: EXCEL.EXE
P2: 14.0.7149.5000
P3: 552dcfc6
P4: 4f78
P5: 0
P6:
P7:
P8:
P9:
P10:
Attached files:
These files may be available here:
C:\Users\removed\AppData\L ocal\Micro soft\Windo ws\WER\Rep ortArchive \AppHang_E XCEL.EXE_f 9584e6b7b3 04f2e99ae4 6bb422cfa0 e5e5be14_2 05ed143
Analysis symbol:
Rechecking for solution: 0
Report Id: eb95d2b7-0b98-11e5-becb-ec f4bb691a89
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</Event ID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-06-05T16: 00:52.0000 00000Z" />
<EventRecordID>13471</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>removed</Compute r>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>AppHangB1</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>EXCEL.EXE</Data>
<Data>14.0.7149.5000</Data >
<Data>552dcfc6</Data>
<Data>4f78</Data>
<Data>0</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\Users\removed\App Data\Local \Microsoft \Windows\W ER\ReportA rchive\App Hang_EXCEL .EXE_f9584 e6b7b304f2 e99ae46bb4 22cfa0e5e5 be14_205ed 143</Data>
<Data>
</Data>
<Data>0</Data>
<Data>eb95d2b7-0b98-11e5-b ecb-ecf4bb 691a89</Da ta>
<Data>0</Data>
</EventData>
</Event>
Sometime around early May Employees at our company started experience issues where mostly Excel files saved on a network share would freeze and go "not responding" to the point where we couldn't end the Excel process to close it and Windows would hang if we tried shutting down or restarting. The only way out of it is a hard shutdown. We've found this happen with Word files as well but mostly Excel files. Everything works fine locally on the machine it's only when opening and saving Excel files on a network share. We're all on Windows 7 Enterprise and our servers are a mix between 2003 R2 through 2012. The network share is on Server 2003 R2. We've had a number of changes in our environment lately making it hard to pinpoint the cause. Around the time this problem started we began rolling out Kaspersky Endpoint Security for our anti-virus and Lync 2013. We're all using Microsoft Office 2010 along with Lync 2013 which is giving us Office 2013 updates. We've tried several things on local computer like repair/reinstall Office, adjusted certain Excel settings, new Windows profiles and we also restarted the server containing the network share. One of the users who had this issue we're having test Office 2013 and they haven't had the issue since. Another we removed Kaspersky and they haven't had an issue since which is still making finding the problem difficult. Most users having the problem were consistently getting the application logs below regarding Excel application hung. It's possible there were more changes in our environment around this time and I have more information but I'll start with this. Any idea's here on what could be causing the problems? I didn't find much with the logs below. I haven't tried any old Windows updates that relate to this issue since it just started I didn't thing an update from years ago would help but I'm open for any suggestions.
Log Name: Application
Source: Application Hang
Date: 6/5/2015 11:01:59 AM
Event ID: 1002
Task Category: (101)
Level: Error
Keywords: Classic
User: N/A
Computer: removed
Description:
The program EXCEL.EXE version 14.0.7149.5000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
Process ID: 2350
Start Time: 01d09fa50e1cc684
Termination Time: 60000
Application Path: C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
Report Id: eb95d2b7-0b98-11e5-becb-ec
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Hang" />
<EventID Qualifiers="0">1002</Event
<Level>2</Level>
<Task>101</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-06-05T16:
<EventRecordID>13472</Even
<Channel>Application</Chan
<Computer>removedbyMatt</C
<Security />
</System>
<EventData>
<Data>EXCEL.EXE</Data>
<Data>14.0.7149.5000</Data
<Data>2350</Data>
<Data>01d09fa50e1cc684</Da
<Data>60000</Data>
<Data>C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE<
<Data>eb95d2b7-0b98-11e5-b
<Binary>55006E006B006E006F
</EventData>
</Event>
Log Name: Application
Source: Windows Error Reporting
Date: 6/5/2015 11:00:52 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: removed
Description:
Fault bucket , type 0
Event Name: AppHangB1
Response: Not available
Cab Id: 0
Problem signature:
P1: EXCEL.EXE
P2: 14.0.7149.5000
P3: 552dcfc6
P4: 4f78
P5: 0
P6:
P7:
P8:
P9:
P10:
Attached files:
These files may be available here:
C:\Users\removed\AppData\L
Analysis symbol:
Rechecking for solution: 0
Report Id: eb95d2b7-0b98-11e5-becb-ec
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</Event
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-06-05T16:
<EventRecordID>13471</Even
<Channel>Application</Chan
<Computer>removed</Compute
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>AppHangB1</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>EXCEL.EXE</Data>
<Data>14.0.7149.5000</Data
<Data>552dcfc6</Data>
<Data>4f78</Data>
<Data>0</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>C:\Users\removed\App
<Data>
</Data>
<Data>0</Data>
<Data>eb95d2b7-0b98-11e5-b
<Data>0</Data>
</EventData>
</Event>
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for the replies. We have over 1000 employees but not everyone is using files on the K drive that often. It's a random intermittent issue that I've been able to replicate at times and unable to at other times. I can't necessarily say it happens to everyone who works on these files on the K drive but I'm sure some haven't had the issue yet. It's doesn't seem to be the files themselves it's happen to several. It happened to me on a new file recently created. I'll have to check on the speed of the network. Several users and computers having the issue I don't have an exact number as not everyone is reporting the issue either. Some have it everyday and others only once or twice in a matter of weeks. Kaspersky Endpoint Security 10 is the AV were pushing out now and everyone having the issue has it.
We are exploring moving to a newer server. The server now is Windows 2003 but it's a virtual server on a VMware host.
I'm having issues finding this File Validation registry path, it's not matching up with what I have. I did a search for "filevalidation" and it didn't find anything.
Thanks for your time!
We are exploring moving to a newer server. The server now is Windows 2003 but it's a virtual server on a VMware host.
I'm having issues finding this File Validation registry path, it's not matching up with what I have. I did a search for "filevalidation" and it didn't find anything.
Thanks for your time!
Try HKEY_CURRENT_USER\Software \Policies\ Microsoft\ Office\14. 0\Excel\Se curity
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
how many users and machines?
what av are you using?