Windows 2000 server "hanging"

[Guest]

Hello,

We're having a very odd problem with a file server, what seems to happen is
that it will stop allowing access to shared folders, if you make the
connection before what ever happens happens, everything continues fine. If
you try and make a new connection, you cant.

Running net view \\wokapp03 times out with a network error, as our logon
scripts ( kixtart 4.22 ) map departmental and home drives to this server it
prevents
people from logging on.

The departmental drives ( around 90 gigs worth of data ) use to be held on
another Win 2K SP4 server, which occasionally ( twice a month at most ) had
the same problems. Since moving the folders over to the new server the server
has crashed twice in 24 hours.

Server in question


* Win 2K SP4 all hotfixes installed.
* Storagecentral 4.1 build 462 since deinstalled ( had
shut down the service after the first crash,since the 2nd
crash, deinstalled, reinstalled as deinstalling did not prevent crashes )
* DL380 G3 1024 MB Memory, 2.8 Gig CPU
* 3 x 146 gig drives,RAID 5 config, HP/Compaq Smartarray 5i

CPU, network and diskusage are all under 10 or 20% during
work times.

Only log events are in wbemprox.log and wbemcore.log

wbemcore.log

(Tue Feb 01 11:53:00 2005) : Core physically unloaded!
(Wed Feb 02 12:01:05 2005) : Core physically unloaded!
(Mon Feb 07 13:42:27 2005) : Core physically unloaded!
(Tue Feb 08 10:19:49 2005) : Core physically unloaded!

wbemprox.log

Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code is
0x8004100e(Tue Feb 01 11:55:47 2005) :
NTLMLogin resulted in hr = 0x8004100e(Tue Feb 01 11:55:47 2005) :
Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code is
0x8004100e(Wed Feb 02 12:03:50 2005) :
NTLMLogin resulted in hr = 0x8004100e(Wed Feb 02 12:03:51 2005) :
Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code is
0x8004100e(Mon Feb 07 13:45:33 2005) :
NTLMLogin resulted in hr = 0x8004100e(Mon Feb 07 13:45:34 2005) :
Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code is
0x8004100e(Tue Feb 08 10:22:43 2005) :
NTLMLogin resulted in hr = 0x8004100e(Tue Feb 08 10:22:43 2005) :
Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code is
0x8004100e

All the times given correspond to this "crash" and subsequent reboot.

Any ideas what the problem is??

 

[Dave Patrick]

Check Event Viewer for errors. Also the NIC may be failing.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hello,
|
| We're having a very odd problem with a file server, what seems to happen
is
| that it will stop allowing access to shared folders, if you make the
| connection before what ever happens happens, everything continues fine. If
| you try and make a new connection, you cant.
|
| Running net view \\wokapp03 times out with a network error, as our logon
| scripts ( kixtart 4.22 ) map departmental and home drives to this server
it
| prevents
| people from logging on.
|
| The departmental drives ( around 90 gigs worth of data ) use to be held on
| another Win 2K SP4 server, which occasionally ( twice a month at most )
had
| the same problems. Since moving the folders over to the new server the
server
| has crashed twice in 24 hours.
|
| Server in question
|
|
| * Win 2K SP4 all hotfixes installed.
| * Storagecentral 4.1 build 462 since deinstalled ( had
| shut down the service after the first crash,since the 2nd
| crash, deinstalled, reinstalled as deinstalling did not prevent crashes )
| * DL380 G3 1024 MB Memory, 2.8 Gig CPU
| * 3 x 146 gig drives,RAID 5 config, HP/Compaq Smartarray 5i
|
| CPU, network and diskusage are all under 10 or 20% during
| work times.
|
| Only log events are in wbemprox.log and wbemcore.log
|
| wbemcore.log
|
| (Tue Feb 01 11:53:00 2005) : Core physically unloaded!
| (Wed Feb 02 12:01:05 2005) : Core physically unloaded!
| (Mon Feb 07 13:42:27 2005) : Core physically unloaded!
| (Tue Feb 08 10:19:49 2005) : Core physically unloaded!
|
| wbemprox.log
|
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Tue Feb 01 11:55:47 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Tue Feb 01 11:55:47 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Wed Feb 02 12:03:50 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Wed Feb 02 12:03:51 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Mon Feb 07 13:45:33 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Mon Feb 07 13:45:34 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Tue Feb 08 10:22:43 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Tue Feb 08 10:22:43 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e
|
| All the times given correspond to this "crash" and subsequent reboot.
|
| Any ideas what the problem is??
|
|

 

[Guest]

Dave,

Thanks for responding, there's no entry in the event log thats abnormal, and
this problem was happening on a different server with a different NIC,
different OS, different port on the switch and during the period of the
troubles we've replaced the switch.

Unfortuantly the only errors I can find that seem to relate to this issue is
the entries from the WBEM sub system.

Regards
Nigel Brodt-Savage

Check Event Viewer for errors. Also the NIC may be failing.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hello,
|
| We're having a very odd problem with a file server, what seems to happen
is
| that it will stop allowing access to shared folders, if you make the
| connection before what ever happens happens, everything continues fine. If
| you try and make a new connection, you cant.
|
| Running net view \\wokapp03 times out with a network error, as our logon
| scripts ( kixtart 4.22 ) map departmental and home drives to this server
it
| prevents
| people from logging on.
|
| The departmental drives ( around 90 gigs worth of data ) use to be held on
| another Win 2K SP4 server, which occasionally ( twice a month at most )
had
| the same problems. Since moving the folders over to the new server the
server
| has crashed twice in 24 hours.
|
| Server in question
|
|
| * Win 2K SP4 all hotfixes installed.
| * Storagecentral 4.1 build 462 since deinstalled ( had
| shut down the service after the first crash,since the 2nd
| crash, deinstalled, reinstalled as deinstalling did not prevent crashes )
| * DL380 G3 1024 MB Memory, 2.8 Gig CPU
| * 3 x 146 gig drives,RAID 5 config, HP/Compaq Smartarray 5i
|
| CPU, network and diskusage are all under 10 or 20% during
| work times.
|
| Only log events are in wbemprox.log and wbemcore.log
|
| wbemcore.log
|
| (Tue Feb 01 11:53:00 2005) : Core physically unloaded!
| (Wed Feb 02 12:01:05 2005) : Core physically unloaded!
| (Mon Feb 07 13:42:27 2005) : Core physically unloaded!
| (Tue Feb 08 10:19:49 2005) : Core physically unloaded!
|
| wbemprox.log
|
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Tue Feb 01 11:55:47 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Tue Feb 01 11:55:47 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Wed Feb 02 12:03:50 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Wed Feb 02 12:03:51 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Mon Feb 07 13:45:33 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Mon Feb 07 13:45:34 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e(Tue Feb 08 10:22:43 2005) :
| NTLMLogin resulted in hr = 0x8004100e(Tue Feb 08 10:22:43 2005) :
| Error loading module {F7CE2E13-8C90-11D1-9E7B-00C04FC324A8}, return code
is
| 0x8004100e
|
| All the times given correspond to this "crash" and subsequent reboot.
|
| Any ideas what the problem is??
|
|

 

[Dave Patrick]

OK, none of that log means anything to me but this may help.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/wbemprox_log.asp

0x8004100e = Namespace specified cannot be found.
If that helps.


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Dave,
|
| Thanks for responding, there's no entry in the event log thats abnormal,
and
| this problem was happening on a different server with a different NIC,
| different OS, different port on the switch and during the period of the
| troubles we've replaced the switch.
|
| Unfortuantly the only errors I can find that seem to relate to this issue
is
| the entries from the WBEM sub system.
|
| Regards
| Nigel Brodt-Savage

 

[Guest]

Dave,

Could be, mentions;

The most common HRESULT from this message indicates that you do not have
permission to perform the action. The second-most common HRESULT indicates
that an incorrect namespace was specified or that the namespace does not
exist. It is also possible to get various RPC errors returned with this
message.

If it's an RPC issue (eg RPC crashing) this could explain why new share
connections are not being connected ..

Only issue is, whats causing the RPC service to crash and how can I trouble
shoot this further?

Regards.

Nigel Brodt-Savage

 

[Dave Patrick]

If you have an issue where the Remote Procedure Call (RPC) service stopped
for some reason then the system log of Event Viewer would reflect this.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Dave,
|
| Could be, mentions;
|
| The most common HRESULT from this message indicates that you do not have
| permission to perform the action. The second-most common HRESULT indicates
| that an incorrect namespace was specified or that the namespace does not
| exist. It is also possible to get various RPC errors returned with this
| message.
|
| If it's an RPC issue (eg RPC crashing) this could explain why new share
| connections are not being connected ..
|
| Only issue is, whats causing the RPC service to crash and how can I
trouble
| shoot this further?
|
| Regards.
|
| Nigel Brodt-Savage

 

[Guest]

Unfortuantly it's not stopping as such, it just seems to stop responding.

Trying to shut down the server service doesnt work, it just fails saying it
timed out.

 

[Dave Patrick]

You'll may need to just do some basic network trouble shooting for the
connection using ipconfig /all, ping, etc. Also be sure to keep an eye on
Event Viewer and Device Manager.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Unfortuantly it's not stopping as such, it just seems to stop responding.
|
| Trying to shut down the server service doesnt work, it just fails saying
it
| timed out.