Windows Server 2000/2003 Thread, Serious Issue with unresponsive servers! in Technical; We have a serious issue with 3 servers (2 DCs and 1 Exchange Server) where the server becomes totally unresponsive. ...
24th September 2008, 04:13 PM #1
Serious Issue with unresponsive servers!
We have a serious issue with 3 servers (2 DCs and 1 Exchange Server) where the server becomes totally unresponsive. Users can't log on and generally everything starts to fail. When we visit the server, the login box has disappeared and the only thing we can do is a hard reset, this issue has been going on for nearly 6 months now, it started with 1 server and has now affected 3!
It happens at almost random intervals and SLT are starting to get seriously annoyed and we have no idea what the issue is. In addition to this, Ofsted is due soon, probably next month, so... I think that explains that!
The 2 domain controllers are 4 year old IBM eServer MT-M 8670-L1X. Specs:
Dual Intel Xeon 2.80GHz
4Gb RAM (3.81Gb Windows)
Windows Server 2003 R2 x86
The Exchange Server - HP Proliant DL380 G5 (Will have to confirm this, but it's something similar!)
Dual Intel Xeon E5320 1.86GHz
Windows Server 2003 R2 x64
At first we thought the 2 DCs would need replacing, however, the mail server is brand new and giving the exact same issue.
Does anyone have any ideas what could be the problem? We are desperate!
Last edited by Zoom7000; 24th September 2008 at 04:20 PM.
IDG Tech News
24th September 2008, 04:20 PM #2
It definitely sounds like some sort of corruption to me, affecting critical services DNS/DHCP possibly even AD itself. I would highly recommend you check the event logs for any clues. I would also (if possible) run Scandisk (especially on the system drive) to check for errors.
How long has this problem been going on for? What Service Pack are you running on your servers? What AV software do you use? Have you scheduled an over night scan?
24th September 2008, 04:26 PM #3
(Updated the first post!)
Service Packs: SP2 on all servers, latest updates through WSUS.
Anti-Virus: Sophos (LGFL Agreement) Scans every morning at 5am.
I can't make sense of anything really bad in Event Viewer. Can I export the logs somehow?
24th September 2008, 04:28 PM #4
The event logs should give clues as to whats going on, also check for out of place processes within taskman or possibly even use process explorer from sysinternals to take a look.
You can export the logs, within even viewer select the log then right click and select save log file as.
24th September 2008, 04:31 PM #5
Sounds like something bad is being replicated around AD if the new mail server started doing it.
24th September 2008, 04:32 PM #6
I've had servers do the exact same, when they have run out of space on the system drive, but you normally get items in event logs for this,
Could be a bad Active Directory? ~Beaten to the post by Bizzel
Last edited by Newton; 24th September 2008 at 04:33 PM.
Reason: type to slowly
24th September 2008, 04:33 PM #7
How many global catalogues do you have?
24th September 2008, 04:37 PM #8
I forgot to mention the Exchange server is on a totally different domain from the 2 DCs. (2 DCs is Curriculum and Mail Server is Admin - Both separate Forests)
24th September 2008, 04:42 PM #9
When the problem occurs does it affect all boxes at the same time?
Have you tried running DCDIAG and NETDIAG on all of the boxes?
24th September 2008, 04:42 PM #10
is there a trust between them?
24th September 2008, 04:44 PM #11
24th September 2008, 04:45 PM #12
Not tried those, but no, it doesn't affect all 3 at the same time.
Originally Posted by cookie_monster
Yes there is and I've asked the NM, he thinks there are 2 Global Catalogues.
Originally Posted by FN-GM
24th September 2008, 04:47 PM #13
I've got the Event Viewer logs from 1 of the DCs if anyone is interested in having a look, but zipped it's 11Mb so might have to be a email or FTP job!
24th September 2008, 04:49 PM #14
I'd try running them and viewing the output then. I'd also run rootkit revealer and concider running a scan with different AV if you can or even trying temporarily disabling your current product.
24th September 2008, 04:52 PM #15
Thanks for your help guys. I'll give these things a try tomorrow, Right now I've gotta run home. Daughter has thrown up nearly 10 times today. Just hope she gets better before the evening. I was supposed to bring her in to school tomorrow for an event and everyone is so looking forward to seeing her! Moral dilemmas! Professional dilemmas! Argh!
By Edu-IT in forum Hardware
Last Post: 8th February 2008, 07:58 PM
By john in forum Hardware
Last Post: 16th January 2008, 06:29 PM
By mrbios in forum Windows
Last Post: 17th December 2007, 01:40 PM
By maniac in forum Hardware
Last Post: 6th November 2007, 11:05 AM
By sidewinder in forum Wireless Networks
Last Post: 21st November 2006, 11:35 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)