Question mark on Server in Terminal Services Manager

[Microsoft]

Hi All,

I have a site with Win2k3 Terminal Server and various XP workstations.

The Server is hosting two applications, one custom and the other OFFICE 2000
Premium. The server is also hosting a domain mail server (Exchange2000)

Earlier this week I found that someone was able to get into the SMTP Virtual
Server and use it as a RELAY, even though RELAYING was off!

I fixed this by turning off SPA and sticking to IP checking only. This
stopped the SPAM attacks. Since then however, the server is deciding to
freeze up about twice a day.

I know when it is about to happen. Terminal Services Manager has a Question
Mark over the icon for the server. When you select the server you get
"TERMINAL SERVICES IS GATHERING INFORMATION" and it never finishes.

The server soon hangs and the only way to restart it is to pull the plug. I
have rebuilt this server twice already, What am I doing wrong?

Please Help
Tarkan Shahho

 

[Matthew Harris [MVP]]

SPA? I can't recall what that acronym stands for...

So if you under this SPA change, does the server stabilize
itself and not freeze up anymore?

-M

 

[Microsoft]

Sorry, I should have been clearer.

SPA (aka Secure Password Authentication). The little checkbox in the RELAY
section that allows any AUTHENTICATED user to relay emails. It appears as
though a password has been compromised.

Yes, when I turned this off, the server stopped getting hit by NDA's
resulting from SPAM that was sent from my server and hence let it perform
again, however, I am still experiencing some issues with my Server where
Outlook is freezing. (I have done some more investigation).

What I have found is that OUTLOOK2000 is actually freezing in the client
sessions. When I look at the Terminal Services Manager I can see the user
session state as "DOWN", but I can't reset it? I get a message (stupidly I
didn't write it down - will wait till it happens again)

I can't even end the processes for the session that is down.
One of the processes is a DSWIN.EXE. The others are multiple instances of
Outlook 2000.

regards
Tarkan

 

[Tarkan Shahho]

Apologies for the "From" name, shows you how much time I spend reading
dialog boxes.

I have fixed it.

 

[Matthew Harris [MVP]]

You fixed the "From" problem, or you fixed your entire
problem?

-M

 

[Tarkan Shahho]

ugh! I have done it again..

I only fixed the "From" problem.

 

[Tarkan Shahho]

I have reposted as "outlook appears to be causing...."

please reply to that post.