RE: SBS DS, DNS etc seizing up every few days



I installed all MS updates released last week and installed the newest Intel
matrix storage manager(using ich9r onboard raid) too. Now 3 days without any
misbehaviour.


"Matt" wrote:

Hi,

We have an SBS 2003 R2 server with directory services etc seizing up every
few days and preventing logins.
It's a single nic setup, runs a dhcp service. It has SQL Server and CRM 4
installed on it. It's the only server in the domain. It's otherwise a fairly
standard install. It has hardware raid with a mirrored system drive and a 3
disk raid-5 data drive. Backup is done onto an external usb hdd. It's not a
new install and has been running for some time without problems, this problem
has only started happening in the last few weeks and there have been no
changes I'm aware of that might have triggered it.

The flow of events is variable and occurs every ~1-10 days.
Typically this starts while ntbackup is running, which starts at 23:00.
Though it has happened earlier once.

Around 00:30-01:00 the following errors starts showing up periodically:
Source: Service Control Manager
ID: 7011
Description: "Timeout (30000 milliseconds) waiting for a transaction
response from the NtFrs service. [...]"

Around 04:00-05:00 (but varies a fair bit) a lot of things start failing...
In Directory Service log:
Source: NTDS ISAM
ID: 508
Description: "NTDS (500) NTDSA: A request to write to the file
"C:\WINDOWS\NTDS\edb.log" at offset [...]"

Source: NTDS General
ID: 1126
Description: "Active Directory was unable to establish a connection with
the global catalog. [...]"

Source: NTDS KCC
ID: 1435
Description: "The Knowledge Consistency Checker (KCC) encountered an
unexpected error while performing an Active Directory operation. [...]"

In DNS Server log:
Source: DNS
ID: 4015
Description: "The DNS server has encountered a critical error from the
Active Directory. [...]"

In System log:
Source: KDC
ID: 7
Description: "The Security Account Manager failed a KDC request in an
unexpected way. [...]"

While this is occuring people usually can't login and we end up forcably
rebooting the machine around 09:00.
The backup is still running at that time, where ordinarily it would have
finished by 3 or 4am.
The quantity of these errors is variable, sometimes they're more
intermittant and authentication only fails every so often, sometimes the KDC
errors are coming up constantly a few times a minute.

A couple of times I've been logged on whilst it's in this state and found
the server to be responding fairly normally in most regards, I just can't
login again in another session. Kernel paged memory is a bit on the high side
~260MB, MmSt pool tag using most of it. This seems normal behaviour while
ntbackup is running and is still well below the limit which I believe is set
at ~360MB. Plus we're not seeing any out of pool memory errors.
Disk quotas are not enabled on the System drive and administrator and the
system accounts are not included in them on the Data drive. There's plenty of
free space on both.
We did have AVG on the server, changed it for Sophos and no change.
We've run Dell's diagnostics on the harddrives/controllers and they've shown
no issues.

Uptime inbetween this happening has ranged between 1 and around 10 days.
Sometimes these errors have shown up and then disappeared, apparently
recovered by the next morning and it lasts another few days before having a
more severe attack.

Any ideas?

Thanks,
Matt.
.



Relevant Pages

  • Re: follow-up: need advice for installing VPN on Windows Server 2003
    ... I get this error message: ... Active Directory Federation Services ... X In order to install any ADFS component, ... The specified server cannot perform the requested operation.. ...
    (microsoft.public.windows.server.networking)
  • Re: removing Windows 2008 DC after demotion, time for ntdsutil
    ... Run diagnostics against your Active Directory domain. ... If you don't have the support tools installed, ... Windows 2003 DC had to do a reboot; ... REcently demoted a Windows 2008 x64 Enterprise DC to a member server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Connection to a SAMBA Active Directory
    ... There is no such thing as a SAMBA active directory. ... workstations, servers, mac's, and nix boxes to the AD and then install ... Install Windows 2003 Server. ...
    (microsoft.public.exchange.connectivity)
  • Re: AD Replication issue
    ... If you don't have the support tools installed, install them from your server ... are not replicating to the ADC, ROOTDC is the GC where as ADC is not and ... "The following active directory error occured: ...
    (microsoft.public.win2000.active_directory)
  • Re: SBS DS, DNS etc seizing up every few days
    ... What service pack are you running for SBS and Exchange? ... We have an SBS 2003 R2 server with directory services etc seizing up every ... Source: NTDS ISAM ... unexpected error while performing an Active Directory operation. ...
    (microsoft.public.windows.server.sbs)