Server 2012 r2 got frozen

We have our DC and File-share both server 2012 r2  working as VM hosted on server 2012 R2, yesterday one of the vm a file-share server and VM Host got frozen around 8:16 am EST, users notified me they can login to their pc's but just black screen. I realized that is our file share server because we are using folder redirection for Desktop, documents and Appdata folders pointed to file-share, I tried remoting in to file share server with no luck i was able to ping it with response, then i tried remoting in to VM Host server but same thing i couldn't remote in at the end i had do a hard reboot on VM host and restarted file-share server by stopping it from VM manager because it wasn't shutting down, i have looked in to system and application logs the only thing i found was error of sudden power loss because of hard reboot i did and another error which i assume was just before the freezing time Event ID: 6008 which means it could be antivirus, or application or a hardware failure i couldn't find any hardware failure but we have been using Malwarebytes for several months on VM host server which is not server edition and never had this issue before.
Can someone please help me figuring out why this happened.
Yasir ArfatJunior System AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
Has this happened more than once? If not it may be hard to troubleshoot. Although I would recommend using an antivirus product designed to run on a server as you may run into compatibility or licensing issues.
0
Yasir ArfatJunior System AdministratorAuthor Commented:
This is first time ever, I will try to uninstall and get Avg server edition, BTW do server need an antivirus,
0
yo_beeDirector of Information TechnologyCommented:
I have a few questions.  I am not an expert by any means on what you are asking, but maybe one of my suggestions may get you in the right direction.  I am leaning towards the Host locked up and nothing with the guest machines.  I think they are just byproducts of the host locking up.

How where you trying to see the VM host?

To be clear and I do not want to assume anything,  Is the it Hyper-v OS or VMWARE?

What make and model server is your VM Host software running on?

It looks like the hard reboot did the trick?
0
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

Yasir ArfatJunior System AdministratorAuthor Commented:
VM2 host is on server 2012 r2 hyper-v I tried accessing by kvm and remote but no no
0
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
At the very least you need antivirus on servers that are accessed by users, such as a file server. You could try either uninstalling or disabling your antivirus as a test, but since the problem has only happened once, if it never happens again you have no way of knowing what fixed the problem.

I agree changing to a server antivirus is a good idea though.
0
yo_beeDirector of Information TechnologyCommented:
Does this server have an Out-Of-Band management interface (iLO on HP and iDrac on Dell)?  This would help with visibility of the state of the server at host level.  I have VMWARE and my HP's have iLO licensed.  Previous failures I was able to see that the Esx host had a Purple Screen of Death.  Turned out that the guest NIC was an e1000 and the Esx 5.5 had a known bug that caused a buffer overrun on the host causing a downward spiral.  

Are you running the Host OS strictly as a Hypervisor or does it have other roles that you mentioned in your question?
0
Yasir ArfatJunior System AdministratorAuthor Commented:
Thank you will do that.
0
Scott CSenior EngineerCommented:
To answer your question above about servers and AV...I never put AV on a server.  I always have a firewall in place.  Keep the bad stuff out BEFORE it gets into your system.
1
Yasir ArfatJunior System AdministratorAuthor Commented:
You right but for we now don't have hardware firewall so not much choice until we get the firewall.
0
Olgierd UngehojerSenior Network AdministratorCommented:
What status of VM do you have in Hyper-V manager? Vm is running or paused ? Do you have disk space on host machine ? Do you have host server in data center ? If I have this kind of problem and server is in data center I  ask support to check hardware .
1
compdigit44Commented:
Does the datastore the VM is on have free space?
Also for the guest OS, does the C;\ drive have free space?
What is the memory and vcpus assignments on the VM?
What type of vNic is the VM using?
Whar version of ESXi is the host using the VM was on?
0
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
Experts, as was said this has only happened once. Basic troubleshooting says at this point we really don't know what to change. So changing things willy-nilly is not good advice because you'll never know if the problem is fixed or not.
1
Yasir ArfatJunior System AdministratorAuthor Commented:
Problem is fixed by rebooting the host hyper-v
0
yo_beeDirector of Information TechnologyCommented:
@compdigit44

This is a Microsoft Hyper-V environment.

Some of the areas your are pointing to look at do work in this model, but from what the responses of the Asker it looks like the host is probably the root issue as he was not able to even access the host.
1
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
Yasir as the author you are of course free to close as was explained, but please provide some detail as to why the selected answer helped. That way your answers helps other with the same question.
0
Yasir ArfatJunior System AdministratorAuthor Commented:
The problem resolved by rebooting the VM-DC1 and Hyper-V host server the Antivirus was believe to be the cause of freezing or unresponsive server but still no evidence found of hardware failure events, the Antimalwarebytes is still running on Hyper_V host we will uninstall this week during off time.

Thanks All.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
The point is that rebooting the server didn't really fix the root problem. It just got things going again. The root cause was never identified, however some of the answers are relevant in ways to help find the true source of the problem. They would also help somebody else with the same problem to identify their problems.

If you are looking for suggestion, I would recommend the answers ending in:
922
937
949
248
892

I also believe you answer ending in 043 is relevant if you want to include your own answer (but you get no points).
0
Brian BEE Topic Advisor, Independant Technology ProfessionalCommented:
I made some of the suggestions before the answers that you chose. But whatever, I'm not really in it for the points.
0
Yasir ArfatJunior System AdministratorAuthor Commented:
Thanks everyone for help such great community i found here in expert exchange. i have removed the Malware-bytes and installed the AVG server edition 2012  on hyper-v host since than no freeze or any other issues came across.
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Virtualization

From novice to tech pro — start learning today.