Server 2012 r2 got frozen

We have our DC and File-share both server 2012 r2  working as VM hosted on server 2012 R2, yesterday one of the vm a file-share server and VM Host got frozen around 8:16 am EST, users notified me they can login to their pc's but just black screen. I realized that is our file share server because we are using folder redirection for Desktop, documents and Appdata folders pointed to file-share, I tried remoting in to file share server with no luck i was able to ping it with response, then i tried remoting in to VM Host server but same thing i couldn't remote in at the end i had do a hard reboot on VM host and restarted file-share server by stopping it from VM manager because it wasn't shutting down, i have looked in to system and application logs the only thing i found was error of sudden power loss because of hard reboot i did and another error which i assume was just before the freezing time Event ID: 6008 which means it could be antivirus, or application or a hardware failure i couldn't find any hardware failure but we have been using Malwarebytes for several months on VM host server which is not server edition and never had this issue before.
Can someone please help me figuring out why this happened.
Yasir ArfatJunior System AdministratorAsked:
Who is Participating?
 
Yasir ArfatJunior System AdministratorAuthor Commented:
The problem resolved by rebooting the VM-DC1 and Hyper-V host server the Antivirus was believe to be the cause of freezing or unresponsive server but still no evidence found of hardware failure events, the Antimalwarebytes is still running on Hyper_V host we will uninstall this week during off time.

Thanks All.
0
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
Has this happened more than once? If not it may be hard to troubleshoot. Although I would recommend using an antivirus product designed to run on a server as you may run into compatibility or licensing issues.
0
 
Yasir ArfatJunior System AdministratorAuthor Commented:
This is first time ever, I will try to uninstall and get Avg server edition, BTW do server need an antivirus,
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
yo_beeDirector of Information TechnologyCommented:
I have a few questions.  I am not an expert by any means on what you are asking, but maybe one of my suggestions may get you in the right direction.  I am leaning towards the Host locked up and nothing with the guest machines.  I think they are just byproducts of the host locking up.

How where you trying to see the VM host?

To be clear and I do not want to assume anything,  Is the it Hyper-v OS or VMWARE?

What make and model server is your VM Host software running on?

It looks like the hard reboot did the trick?
0
 
Yasir ArfatJunior System AdministratorAuthor Commented:
VM2 host is on server 2012 r2 hyper-v I tried accessing by kvm and remote but no no
0
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
At the very least you need antivirus on servers that are accessed by users, such as a file server. You could try either uninstalling or disabling your antivirus as a test, but since the problem has only happened once, if it never happens again you have no way of knowing what fixed the problem.

I agree changing to a server antivirus is a good idea though.
0
 
yo_beeDirector of Information TechnologyCommented:
Does this server have an Out-Of-Band management interface (iLO on HP and iDrac on Dell)?  This would help with visibility of the state of the server at host level.  I have VMWARE and my HP's have iLO licensed.  Previous failures I was able to see that the Esx host had a Purple Screen of Death.  Turned out that the guest NIC was an e1000 and the Esx 5.5 had a known bug that caused a buffer overrun on the host causing a downward spiral.  

Are you running the Host OS strictly as a Hypervisor or does it have other roles that you mentioned in your question?
0
 
Yasir ArfatJunior System AdministratorAuthor Commented:
Thank you will do that.
0
 
Scott CSenior Systems EnginerCommented:
To answer your question above about servers and AV...I never put AV on a server.  I always have a firewall in place.  Keep the bad stuff out BEFORE it gets into your system.
1
 
Yasir ArfatJunior System AdministratorAuthor Commented:
You right but for we now don't have hardware firewall so not much choice until we get the firewall.
0
 
Olgierd UngehojerSenior Network AdministratorCommented:
What status of VM do you have in Hyper-V manager? Vm is running or paused ? Do you have disk space on host machine ? Do you have host server in data center ? If I have this kind of problem and server is in data center I  ask support to check hardware .
1
 
compdigit44Commented:
Does the datastore the VM is on have free space?
Also for the guest OS, does the C;\ drive have free space?
What is the memory and vcpus assignments on the VM?
What type of vNic is the VM using?
Whar version of ESXi is the host using the VM was on?
0
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
Experts, as was said this has only happened once. Basic troubleshooting says at this point we really don't know what to change. So changing things willy-nilly is not good advice because you'll never know if the problem is fixed or not.
1
 
Yasir ArfatJunior System AdministratorAuthor Commented:
Problem is fixed by rebooting the host hyper-v
0
 
yo_beeDirector of Information TechnologyCommented:
@compdigit44

This is a Microsoft Hyper-V environment.

Some of the areas your are pointing to look at do work in this model, but from what the responses of the Asker it looks like the host is probably the root issue as he was not able to even access the host.
1
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
Yasir as the author you are of course free to close as was explained, but please provide some detail as to why the selected answer helped. That way your answers helps other with the same question.
0
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
The point is that rebooting the server didn't really fix the root problem. It just got things going again. The root cause was never identified, however some of the answers are relevant in ways to help find the true source of the problem. They would also help somebody else with the same problem to identify their problems.

If you are looking for suggestion, I would recommend the answers ending in:
922
937
949
248
892

I also believe you answer ending in 043 is relevant if you want to include your own answer (but you get no points).
0
 
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
I made some of the suggestions before the answers that you chose. But whatever, I'm not really in it for the points.
0
 
Yasir ArfatJunior System AdministratorAuthor Commented:
Thanks everyone for help such great community i found here in expert exchange. i have removed the Malware-bytes and installed the AVG server edition 2012  on hyper-v host since than no freeze or any other issues came across.
1
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.