RE: MS rec. change for DNS & DHCP running on 1 server needs undoin
- From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
- Date: Mon, 26 Mar 2007 09:16:24 GMT
Hello Customer,
Thank you for kind update.
After analyze your event log, I find many even error 1001, 1002 and 20 on
application hang and printer:
Event Type: Error
Event Source: Application Hang
Event Category: None
Event ID: 1001
Date: 2007-1-17
Time: 2:53:29
User: N/A
Computer: MIKES-DELL
Description:
Fault bucket 296734104.
Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 2007-1-17
Time: 2:50:27
User: N/A
Computer: MIKES-DELL
Description:
Hanging application WINWORD.EXE, version 11.0.8026.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Event Type: Warning
Event Source: Print
Event Category: None
Event ID: 20
Date: 2007-3-23
Time: 4:23:02
User: NT AUTHORITY\SYSTEM
Computer: MIKES-DELL
Description:
Printer Driver Samsung ML-2510 Series for Windows NT x86 Version-3 was
added or updated. Files:- sugo3.DLL, sugo3UI.DLL, sugo3.DLL, sugo3U.DLL,
sugo3U2.DLL, sugo3CM.DLL, sugo3UM.DLL, sugo3M.DLL, sugo3lf.DLL,
sugo3CM.CTD, sugo3UM.XML, sugo3ab.chm, sugo3bp.chm, sugo3cp.chm,
sugo3ct.chm, sugo3cz.chm, sugo3dn.chm, sugo3dt.chm, sugo3el.chm,
sugo3EN.chm, sugo3fi.chm, sugo3fn.chm, sugo3gr.chm, sugo3hb.chm,
sugo3hu.chm, sugo3it.chm, sugo3kr.chm, sugo3nr.chm, sugo3po.chm,
sugo3pt.chm, sugo3ru.chm, sugo3sp.chm, sugo3sw.chm, sugo3tk.chm,
sugo3ab.dat, sugo3bp.dat, sugo3cp.dat, sugo3ct.dat, sugo3cz.dat,
sugo3dn.dat, sugo3dt.dat, sugo3el.dat, sugo3EN.DAT, sugo3fi.dat,
sugo3fn.dat, sugo3gr.dat, sugo3hb.dat, sugo3hu.dat, sugo3it.dat,
sugo3kr.dat, sugo3nr.dat, sugo3po.dat, sugo3pt.dat, sugo3ru.dat,
sugo3sp.dat, sugo3sw.dat, sugo3tk.dat, sugo3M0.BMP, sugo3M1.BMP,
sugo3M2.BMP, sugo3M3.BMP, sugo3u1.bmp, sugo3Ua.BMP, sugo3Ub.BMP,
sugo3UC.BMP, sugo3UG.BMP, sugo3Ul.BMP, sugo3U.BMP, sugo3U.INI, sugo3.VER.
Base on my research, I suggest we try the following steps to see if we can
resolve this issue:
1. This issue may happen if the antivirus software scans the printer folder
"%systemroot%\system32\Spool". Please try to exclude this folder out of the
real-time scan. Please do it on all computers.
If the issue persists, we recommend that you completely uninstall the
antivirus software on printer server computer and problematic clients, for
test. Then, check if this issue recurs.
2. Please do clean boot on printer server and problematic clients at same
time to narrow down this issue:
To clean boot the problematic computer, please use the steps below:
a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
(without the quotation marks). Click OK.
b. In the System Configuration Utility (MSConfig) window, click to select
the Selective Startup button.
c. Click to clear the check mark from the "Load startup items" below
Selective Startup.
d. Click the Services tab, click to check the "Hide All Microsoft Services"
box, and remove all the check marks from the remained Non-Microsoft
Services. Please note that the Exchange services could be marked as
non-Microsoft. Please do not disable those services.
e. Click OK to close the MSConfig window. Click Yes when you are asked to
restart your computer in order to enable the changes.
f. After restarting, please check whether this issue will reoccur.
g. If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.
3. Please install the following hotfix on problematic windows 2003 computer:
Event ID: 20 may be logged frequently on a Windows Server 2003-based
computer when you print to a shared network printer
http://support.microsoft.com/?id=911713
Hope these steps will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: MS rec. change for DNS & DHCP running on 1 server needs
undoin
| thread-index: AcdtChE07h8+5a7JRSSFC7xP6DTjqw==
| X-WBNR-Posting-Host: 70.162.241.243
| From: =?Utf-8?B?UjFuZ0wwcmQ=?= <R1ngL0rd@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <B2BF6377-19C2-4A6C-86A3-A6DEB97126A4@xxxxxxxxxxxxx>
<hpEP2rPbHHA.468@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: MS rec. change for DNS & DHCP running on 1 server needs
undoin
| Date: Thu, 22 Mar 2007 22:14:00 -0700
| Lines: 138
| Message-ID: <C71CED33-F05C-455E-B992-A9D277DC8B47@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2757
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:24804
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| You asked for it...
|
| 1. Please try to show me more details about your print spooler issue, let
| me do more troubleshooting on it.
|
| *--I have a client with SBS 2003 R1 SP1, all patched and updated. About a
| month ago they started to have application hangs when printing (any
| application, not one specific). First I thought it was specific to one
client
| (all clients are XP Pro, patched and updated), so we rebuilt that system.
|
| The problem came back, then it moved to other systems. So I though it was
| specific to one printer (Samsung ML-4600), so I reinstalled the driver
and it
| appeared to solve the problem. Then the problem came back on a different
| printer (HP 5si).
|
| These printers are connected via clients on the LAN which are acting as
| their printer servers. I noticed that the server might have been acting
as a
| secondary print server to these printers, so I turned off the Print
Spooler
| on the server and it appeared to solve the problem. Then the problem came
| back, now it appears to have stayed with one printer (the 5si) and is not
| going away. Around the same time this started, I had noticed that this
| printer had a NIC card and I attached it to the network, but hadn't set
it up
| on the server as a resource yet. I have since disconnected its NIC hoping
| that might solve the problem, no luck.
|
| {----Here is what I was looking for, so apperantly this was not the
cause. I
| thought that I had made this change before the issues started, but I was
| wrong. Please advised based on all this new information I'm provided.
| Thanks----}
| During a recent Server Restart, I noted an informational warning "The
DHCP
| service has detected that it is running on a DC and has no credentials
| configured for use with Dynamic DNS registrations initiated by the DHCP
| service." So I made the recommended updates in hopes that this would
solve
| the problem. This was after a 5 hour diagnostic/troubleshoot to resolve
this
| issue but the problem came back.
|
| Yesterday, I installed some server security updates and turned off
spooling
| for that printer from the clients that serving as the printer server and
| restarted the server. The issue came back in the morning.
|
| Today I'm going out to connect the printer to the network and turn back
on
| print spooling on the server and attach activate it on the server in
hopes of
| trying to track down what's causing this issue. I have a sneaking
suspicion
| that it will come back. I just reinstalled the printer driver on the
current
| client that is acting as a print server and hope it will solve the
problem.
|
| I don't know if I can provide more information about he infrastructure
| except that it's running a DI-514 Router, a Switch, has 7 computers (most
are
| new DELL GX520's) and 1 PowerEdge 830 Server. The DHCP is being handled
by
| the server, not the router.
|
| Well no one has offer up any advise and I done more changes to no avail.
I
| have replaced the switch, updated the firmware on the D-Link DL-514
router.
| Blown and reseated all Cat5 cables. Checked and updated the Security on
the
| printer. Found out that I get about 2-3 days of working with the printer
and
| then the users system hangs. It appears random with no specific situation
| that causes the Application Hang. It can hang Word, AutoCAD, Explorer,
etc.
|
| The systems are all using the most recent version of the spooler
| 5.1.2600.2696 and when you stop and start the spooler service you get
another
| 2-3 days of functionality. When stopping the spooler services, as you can
| imagine, it freezes says it can't stop the service/the service did not
| respond but it does shut it down. My customer has finally started
questioning
| the service I'm providing and I've brought in a fresh experienced mind to
| help me troubleshoot. We are stuck. It is difficult to troubleshoot
because
| of the time period it takes to replicate the issue 2-3 days. We can try
| solutions which work for a while then break down again. Any advise would
be
| greatly appreciated.
|
| Microsoft Partner suggested I run a machine with no services (except
| necessary MS services) and see if it will replicate. I went further and
| removed a computer from the network for over 1 month now and connected it
| directly to the printer. This system has not had the spooler issue since.
At
| this point I can rebuild the server or my last ditch attempt before that
is
| to find this case/recommendation/kb/techweb/knowledge base. Is anyone
aware
| of this from MS (details below). I seem to remember I was getting an
error in
| the event log via the Server Mgmt console and when I clicked through to
MS
| that where I was given the instructions. The Event Log has lost the issue
so
| I'm trying to track it down.
|
| 2. Please let me know the detail steps of the recommendation action, this
| will help me to judge whether the print spooler issue is related to the
| recommendation action and help us to find out the roll back action.
| *--See {} note in item 1. I'm barking up the wrong tree, but would still
| like help with my issue.
|
| 3. Do you have any DNS or DHCP issue till now?
| *-- No just that error message.
|
| 4. What's scene make you think the print spooler issue is related to the
| recommendation action about DHCP and DNS?
| *-- None now, but I'm still having the issue.
|
| 5. Save the application event log and system event log as evt files on
the
| problematic machines and send to my mailbox: v-terliu@xxxxxxxxxxxxxx
| *--Have sent. Thanks for any help you can provide.
|
|
| "Terence Liu [MSFT]" wrote:
|
| > Hello Customer,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand that you have an issue with
the
| > print spooler and you surmise it related to the recommendation action
on
| > DNS and DHCP. So you want to roll back this action. If I have
misunderstood
| > the problem, please don't hesitate to let me know.
| >
| > Before we go any further, please let me know the following information
so
| > that we can understand your situation more clearly.
| >
| > 1. Please try to show me more details about your print spooler issue,
let
| > me do more troubleshooting on it.
| >
| > 2. Please let me know the detail steps of the recommendation action,
this
| > will help me to judge whether the print spooler issue is related to the
| > recommendation action and help us to find out the roll back action.
| >
| > 3. Do you have any DNS or DHCP issue till now?
| >
| > 4. What's scene make you think the print spooler issue is related to
the
| > recommendation action about DHCP and DNS?
| >
| > 5. Save the application event log and system event log as evt files on
the
| > problematic machines and send to my mailbox: v-terliu@xxxxxxxxxxxxx
| >
| > Thanks for your time and effort on it and I look forward to your reply.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
|
.
- References:
- RE: MS rec. change for DNS & DHCP running on 1 server needs undoing
- From: Terence Liu [MSFT]
- RE: MS rec. change for DNS & DHCP running on 1 server needs undoing
- Prev by Date: RE: REmove Bakup References SBS 2K3
- Next by Date: Re: Can i send mails from Internet to Intranet?
- Previous by thread: RE: MS rec. change for DNS & DHCP running on 1 server needs undoing
- Next by thread: RE: msg tracking of fwd
- Index(es):