RE: SBS Slows down and stops

More info:

One that always have problems on startup (error reports twice):

"A provider, PerfProv, has been registered in the WMI namespace,
ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the
HostingModel property. This provider will be run using the LocalSystem
account. This account is privileged and the provider may cause a security
violation if it does not correctly impersonate user requests. Ensure that
provider has been reviewed for security behavior and update the HostingModel
property of the provider registration to an account with the least privileges
possible for the required functionality."



"C. Berry" wrote:

Ever since some time last weekend my SBS frequently slows down and virtually
stops. However, CPU and memory utilization are never out of line.

At random-seeming intervals everything just grinds to a halt. Windows
Explorer, Exchange, the system management and other consoles just slow down
and eventually I have to restart the server to get anything to work.

I've looked in the event log and system reports and nothing jumps out at me
as a cause.

What I've got:
SBS Server 2003 with all updates from the Service Pack 1 document, running
on a dual Xeon (Shows up as 4 processors in system properties), C: is SATA,
mirrored, and holds my system, , while D: is SATA Raid 5 and hosts the
Exchange folders and client data, etc. It has 4GB RAM. I Have about 40 users
set up on the system, about 15 are active now (migrating from a POP mail
server), and all these accounts use the POP3 Connector to scrape email off
the old server. This server is also the TS licensing server for my separate
TS. I have 2 NICS, both have private addresses, but incoming traffic for this
server is all port forwarded (the minimum ports) to the Network interface,
while internal services go to the Local Area interface.

What I've tried:
On Monday the symptons included VERY slow shutdown and startup. I used the
install disk to repair my installation, and reinstalled service packs. The
machine now starts and stops in reasonable time.

I forced the arrays to verify and rebuild.

I replaced the RAM.

I did "clean" restarts (using MSCONFIG)

I scheduled a CHKDSK for both logical drives and they ran with a few errors.
I'm running another CHKDSK now, and will post the results.

I removed all the users from the POP3 Connector script, and the service
automatically stopped.

I ran Symantec AV

I looked up the symptoms on the newsgroup and checked most of the fixes
posted there.

I moved the mailboxes, public folders and logs to another folder (but on the
same logical drive)

Never has my system utilization gone over 50%, and that only when I'm
running a user process. The utilisation always goes down to 1-2%. Network
utilization has never gone over 1-2% on either NIC. Memory usage is in line,
too. Store.exe has gone up to ~500,000K, still only 1/4 of my physical RAM,
and as I've heard, to be expected for Exchange.

My clients are mostly MS Entourage, some Outlook, and several Palm Treos
connecting via MS Activesync.

I do have 2-3 mailboxes over 1G, hopefully temporarily, that were migrated
in from the clients.

Like I said, I checked the events log extensively (have turned on verbose
logging) and see nothing that correlates with the issues. Actually, most of
the errors come from my troubleshooting efforts.

I'm almost to the point of backing up the mailboxes and AD and starting
over. If someone can help me avoid this brute force solution, please do! The
environment is hostile with all these Mac users (including my boss), but they
NEED groupware!

Thanks in advance.
.

Relevant Pages

  • RE: Event 63 Warning
    ... A provider, OffProv12, has been registered in the WMI namespace, ... to use the LocalSystem account. ... From what little I've found refers to a Server. ... This happen if a security updates been applied and the WMI is up and running ...
    (microsoft.public.windowsxp.general)
  • Re: Cannot start services
    ... The solution in my case....once I got the server back in the domain I copied ... see Help and Support Center at ... | A provider, PerfProv, has been registered in the WMI namespace, ... | will be run using the LocalSystem account. ...
    (microsoft.public.windows.server.general)
  • repeated failure of store - securty hack?
    ... I have a problem with a sbs 2003 server runnig fine since commissioning ... This problem is likely due to faulty hardware. ... This provider will be run using the LocalSystem ... This account is privileged and the provider may cause a security ...
    (microsoft.public.windows.server.sbs)
  • Re: Perflib errors in event logs after SP2 installation
    ... the server does seem to be working fine. ... System account is a potential security risk. ... Policy provider runs under the Local System account, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Random Network Disconnects
    ... network and the only way I can seem to get it back up is to restart the box. ... Testing IpConfig - pinging the Secondary WINS server... ... DNS Host Name: itdspstest01.itd.edited.edited ... Provider Version:2 ...
    (microsoft.public.windows.server.dns)