Event ID: 7011 (NtFrs Service) + Server Freezes when Performing Disk Operations
|
Prev: OWA in win sbs 2003 R2 standard sp2 does not work inside or outsi
Next: VSS Errors in Event Log
From: Sergio Ricci on 27 Nov 2007 08:56 Hi Robert. Thanks for taking time out to read my post and to reply. Your understanding of the issue is correct; the SBS server freezes for several mins and then works again. I have carried out several diagnostic tests of the server hardware, in particular the HDD and so far everything has come back clean. I will however, check that the components are in the HCL list. In addition I will also carry out the tests you have requested (e.g. ping test etc) but I should point out that I only support the server and don't actually connect to it myself so it is difficult to find the exact moment that the issue occurs to carry out the requested tests. At this point I would like to mention that from tests I carried out yesterday evening, I am now working on the premis that the issue is being cause by a Virtual Server that is also installed on the SBS server (please also see my reply post to Pedro CR). I will need to discuss with the client if the Virtual Server can be moved or shut down for a few days to see if the problem re-occurs. All the same, I will send you an MPS Report shortly. Once again, thank you for your interest in my issue and for your reply. It's greatly appreciated. Sergio "Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl... > Hi Sergio, > > Thanks for posting in our newsgroup. > > From your description, I know that your SBS server freezes for several > minutes and then work again. If that's not right, please don't hesitate to > let me know. > > Based on my experience, the server freeze issue may be caused by hardware. > If we narrow down that's caused by hardware, you need to contact the > hardware manufacture for more help. Thanks for your understanding. > > Please let me know the following to make the situation more clearly: > > 1. When the issue occurs, can you ping the server or visit server network > share? > 2. When the issue occurs, can the administrator do normal operations such > as open IE on SBS server? > > Based on my research, please take the following steps to narrow down this > issue: > > Step 1:Please ensure the RAID controller and NICs are in the HCL list: > > Windows Server Catalog of Tested Products > http://www.windowsservercatalog.com/ > > Please also install the latest disk controller driver and test again. > > Step 2: Please make a clean boot to make sure the problem is not caused > third party software: > > 1. Click Start->Run...->type msconfig and press Enter. > 2. Click Services tab and select Hide All Microsoft Services and Disable > All third party Services. > 3. Click Startup tab and Disable All startup items. > 4. Click OK and choose Restart. > 5. After reboot, check whether the problem still occurs. > 6. If there are no more problems, please use the above steps to enable > services and startup items one by one in order to figure out the root > cause > of this issue. > > Please help me collect the following information and I need to do deep > research: > > 1. What important change did you make before the issue first occurred? > > 2. MPS Report > > 1) Download MPS report tool from: > http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 > 15706/MPSRPT_SETUPPerf.EXE > 2) Run the MPSRPT_SETUPPerf.exe on the server box. > 3) Wait for 10~15 minutes. > 4) Open Windows explorer, navigate to > %SYSTEMROOT%\MPSReports\Setup\Reports\cab\ > 5) Send the .cab file to v-robeli(a)microsoft.com with subject: > 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when Performing > Disk Operations. > > I am looking forward to hear from you. > > If you need further assistance, please don't hesitate to let me know. > > Best regards, > > Robert Li(MSFT) > > Microsoft CSS Online Newsgroup Support > > Get Secure! - www.microsoft.com/security > > ===================================================== > > This newsgroup only focuses on SBS technical issues. If you have issues > regarding other Microsoft products, you'd better post in the corresponding > newsgroups so that they can be resolved in an efficient and timely manner. > You can locate the newsgroup here: > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > > When opening a new thread via the web interface, we recommend you check > the > "Notify me of replies" box to receive e-mail notifications when there are > any updates in your thread. When responding to posts via your newsreader, > please "Reply to Group" so that others may learn and benefit from your > issue. > > Microsoft engineers can only focus on one issue per thread. Although we > provide other information for your reference, we recommend you post > different incidents in different threads to keep the thread clean. In > doing > so, it will ensure your issues are resolved in a timely manner. > > For urgent issues, you may want to contact Microsoft CSS directly. Please > check http://support.microsoft.com for regional support phone numbers. > > Any input or comments in this thread are highly appreciated. > > ===================================================== > > This posting is provided "AS IS" with no warranties, and confers no > rights. > > -------------------- > <From: "Sergio Ricci" <me(a)domainname.com> > <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when Performing > Disk Operations > <Date: Mon, 26 Nov 2007 12:57:58 -0000 > <Lines: 68 > <X-Priority: 3 > <X-MSMail-Priority: Normal > <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > <X-RFC2646: Format=Flowed; Original > <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> > <Newsgroups: microsoft.public.windows.server.sbs > <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 > <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl > <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:77994 > <X-Tomcat-NG: microsoft.public.windows.server.sbs > < > <Hi, > < > <We have a Win2K3 SBS Premium SBS server that has for the past few weeks > been > <having a few issues that primarily manifests itself as the server > freezing > <for several minutes and then springing back to into life. During the > freeze, > <users get the popup balloon telling them that Exchange is trying to > retrieve > <data. > < > <Going through the logs Event ID: 7011 always seems to be recorded around > the > <time the freeze happens. I've done some research into Event ID: 7011 and > <most suggest modifying the following registry key: > < > <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter > s > < > <[REG_DWORD] autodisconnect: > <Original Value: 'f' > <New Current Value: 'fff' > < > <Making this change does appear to have improved matters but what is also > <worrying is that certain disk operations such as 'chkdsk' and 'defrag' > cause > <the server to freeze resulting in the above log being written. I have > <downloaded an evaluation copy of Diskeeper 2008 Server to see if that > also > <caused a reoccurance of the issue and it does. > < > <A bit about the server: > < > <OS: Win2K3 Premium (w/ ISA Server 2000) SBS > <Hardware: HP Proliant ML350 G4 > <Smart Array 641 Controller > <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive > <x1 Intel Xeon 3.4GHz Processor > <4GB of RAM > < > <Hardware diagnostics (using HP diag tools) show no issues. > < > <Changes Made so far: > < > <The following are the changes made (with results) made to the server so > far > <in an attempt to resolve the issue: > <1) Recreated NtFrs database (result = no improvement) > <2) Ensured that NtFrs database was excluded from any virus scans > <3) Removed Windows Defender from Server (no improvement) > <4) Stopped SQL/ACT7 database instances from auto starting > <5) Increased File Replication Service Timeout by modifying the registry > <value above from it's old value to it's new current value (appears to > have > <improved things so far but only made the change late last week so still > <early days). > < > <NB: When I say thatit has 'improved things', it has improved things to > the > <point that the server doesn't appear to hang as often during the day > under > <normal use (before it would freeze 5 or more times a day, now we are > <currently down to 1 freeze in 2 days). However, if I run 'chkdsk' or try > to > <do a 'defrag', it will still freeze for several minutes. > < > <The freeze also causes me to lose any network connection and affects the > <connection to the server via the remote management board. > < > <Any help or pointers in resolving the issue would be greatly appreciated. > < > <Thansk in advance. > <Sergio > < > <PS: Does Microsoft Professional Support no longer offer the email support > <option which cost, from memory, under �100 which was great if it wasn't > <urgent? I only seem to find the 'phone and email' support offering which > <costs �199+VAT > < > < > < >
From: Sergio Ricci on 27 Nov 2007 08:57 Robert, Thanks for the clarification. Kind regards, Sergio "Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message news:0tFNEXNMIHA.360(a)TK2MSFTNGHUB02.phx.gbl... > Hi Sergio, > > The ITPro support's cost is $199 (with e-mail and phone call). There is no > support for $100 now. > > Best regards, > > Robert Li(MSFT) > > Microsoft CSS Online Newsgroup Support > > Get Secure! - www.microsoft.com/security > > ===================================================== > > This newsgroup only focuses on SBS technical issues. If you have issues > regarding other Microsoft products, you'd better post in the corresponding > newsgroups so that they can be resolved in an efficient and timely manner. > You can locate the newsgroup here: > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > > When opening a new thread via the web interface, we recommend you check > the > "Notify me of replies" box to receive e-mail notifications when there are > any updates in your thread. When responding to posts via your newsreader, > please "Reply to Group" so that others may learn and benefit from your > issue. > > Microsoft engineers can only focus on one issue per thread. Although we > provide other information for your reference, we recommend you post > different incidents in different threads to keep the thread clean. In > doing > so, it will ensure your issues are resolved in a timely manner. > > For urgent issues, you may want to contact Microsoft CSS directly. Please > check http://support.microsoft.com for regional support phone numbers. > > Any input or comments in this thread are highly appreciated. > > ===================================================== > > This posting is provided "AS IS" with no warranties, and confers no > rights. > > -------------------- > <Newsgroups: microsoft.public.windows.server.sbs > <From: v-robeli(a)online.microsoft.com (Robert Li [MSFT]) > <Organization: Microsoft > <Date: Tue, 27 Nov 2007 08:59:20 GMT > <Subject: RE: Event ID: 7011 (NtFrs Service) + Server Freezes when > Performing Disk Operations > <X-Tomcat-NG: microsoft.public.windows.server.sbs > <MIME-Version: 1.0 > <Content-Type: text/plain > <Content-Transfer-Encoding: 7bit > < > <Hi Sergio, > < > <Thanks for posting in our newsgroup. > < > <From your description, I know that your SBS server freezes for several > <minutes and then work again. If that's not right, please don't hesitate > to > <let me know. > < > <Based on my experience, the server freeze issue may be caused by > hardware. > <If we narrow down that's caused by hardware, you need to contact the > <hardware manufacture for more help. Thanks for your understanding. > < > <Please let me know the following to make the situation more clearly: > < > <1. When the issue occurs, can you ping the server or visit server network > <share? > <2. When the issue occurs, can the administrator do normal operations such > <as open IE on SBS server? > < > <Based on my research, please take the following steps to narrow down this > <issue: > < > <Step 1:Please ensure the RAID controller and NICs are in the HCL list: > < > <Windows Server Catalog of Tested Products > <http://www.windowsservercatalog.com/ > < > <Please also install the latest disk controller driver and test again. > < > <Step 2: Please make a clean boot to make sure the problem is not caused > <third party software: > < > <1. Click Start->Run...->type msconfig and press Enter. > <2. Click Services tab and select Hide All Microsoft Services and Disable > <All third party Services. > <3. Click Startup tab and Disable All startup items. > <4. Click OK and choose Restart. > <5. After reboot, check whether the problem still occurs. > <6. If there are no more problems, please use the above steps to enable > <services and startup items one by one in order to figure out the root > cause > <of this issue. > < > <Please help me collect the following information and I need to do deep > <research: > < > <1. What important change did you make before the issue first occurred? > < > <2. MPS Report > < > <1) Download MPS report tool from: > <http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd > 9 > <15706/MPSRPT_SETUPPerf.EXE > <2) Run the MPSRPT_SETUPPerf.exe on the server box. > <3) Wait for 10~15 minutes. > <4) Open Windows explorer, navigate to > <%SYSTEMROOT%\MPSReports\Setup\Reports\cab\ > <5) Send the .cab file to v-robeli(a)microsoft.com with subject: > <41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when Performing > <Disk Operations. > < > <I am looking forward to hear from you. > < > <If you need further assistance, please don't hesitate to let me know. > < > <Best regards, > < > <Robert Li(MSFT) > < > <Microsoft CSS Online Newsgroup Support > < > <Get Secure! - www.microsoft.com/security > < > <===================================================== > < > <This newsgroup only focuses on SBS technical issues. If you have issues > <regarding other Microsoft products, you'd better post in the > corresponding > <newsgroups so that they can be resolved in an efficient and timely > manner. > <You can locate the newsgroup here: > <http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > < > <When opening a new thread via the web interface, we recommend you check > the > <"Notify me of replies" box to receive e-mail notifications when there are > <any updates in your thread. When responding to posts via your newsreader, > <please "Reply to Group" so that others may learn and benefit from your > <issue. > < > <Microsoft engineers can only focus on one issue per thread. Although we > <provide other information for your reference, we recommend you post > <different incidents in different threads to keep the thread clean. In > doing > <so, it will ensure your issues are resolved in a timely manner. > < > <For urgent issues, you may want to contact Microsoft CSS directly. Please > <check http://support.microsoft.com for regional support phone numbers. > < > <Any input or comments in this thread are highly appreciated. > < > <===================================================== > < > <This posting is provided "AS IS" with no warranties, and confers no > rights. > < > <-------------------- > <<From: "Sergio Ricci" <me(a)domainname.com> > <<Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when Performing > <Disk Operations > <<Date: Mon, 26 Nov 2007 12:57:58 -0000 > <<Lines: 68 > <<X-Priority: 3 > <<X-MSMail-Priority: Normal > <<X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > <<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > <<X-RFC2646: Format=Flowed; Original > <<Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> > <<Newsgroups: microsoft.public.windows.server.sbs > <<NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 > <<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl > <<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:77994 > <<X-Tomcat-NG: microsoft.public.windows.server.sbs > << > <<Hi, > << > <<We have a Win2K3 SBS Premium SBS server that has for the past few weeks > <been > <<having a few issues that primarily manifests itself as the server > freezing > <<for several minutes and then springing back to into life. During the > <freeze, > <<users get the popup balloon telling them that Exchange is trying to > <retrieve > <<data. > << > <<Going through the logs Event ID: 7011 always seems to be recorded around > <the > <<time the freeze happens. I've done some research into Event ID: 7011 and > <<most suggest modifying the following registry key: > << > <<HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\paramete > r > <s > << > <<[REG_DWORD] autodisconnect: > <<Original Value: 'f' > <<New Current Value: 'fff' > << > <<Making this change does appear to have improved matters but what is also > <<worrying is that certain disk operations such as 'chkdsk' and 'defrag' > <cause > <<the server to freeze resulting in the above log being written. I have > <<downloaded an evaluation copy of Diskeeper 2008 Server to see if that > also > <<caused a reoccurance of the issue and it does. > << > <<A bit about the server: > << > <<OS: Win2K3 Premium (w/ ISA Server 2000) SBS > <<Hardware: HP Proliant ML350 G4 > <<Smart Array 641 Controller > <<x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive > <<x1 Intel Xeon 3.4GHz Processor > <<4GB of RAM > << > <<Hardware diagnostics (using HP diag tools) show no issues. > << > <<Changes Made so far: > << > <<The following are the changes made (with results) made to the server so > <far > <<in an attempt to resolve the issue: > <<1) Recreated NtFrs database (result = no improvement) > <<2) Ensured that NtFrs database was excluded from any virus scans > <<3) Removed Windows Defender from Server (no improvement) > <<4) Stopped SQL/ACT7 database instances from auto starting > <<5) Increased File Replication Service Timeout by modifying the registry > <<value above from it's old value to it's new current value (appears to > have > <<improved things so far but only made the change late last week so still > <<early days). > << > <<NB: When I say thatit has 'improved things', it has improved things to > the > <<point that the server doesn't appear to hang as often during the day > under > <<normal use (before it would freeze 5 or more times a day, now we are > <<currently down to 1 freeze in 2 days). However, if I run 'chkdsk' or try > <to > <<do a 'defrag', it will still freeze for several minutes. > << > <<The freeze also causes me to lose any network connection and affects the > <<connection to the server via the remote management board. > << > <<Any help or pointers in resolving the issue would be greatly > appreciated. > << > <<Thansk in advance. > <<Sergio > << > <<PS: Does Microsoft Professional Support no longer offer the email > support > <<option which cost, from memory, under �100 which was great if it wasn't > <<urgent? I only seem to find the 'phone and email' support offering which > <<costs �199+VAT > << > << > << > < >
From: Robert Li [MSFT] on 27 Nov 2007 22:25 Hi Sergio, Thanks for your reply. I researched your log and found the following event: Event Type: Error Event Source: MSExchangeIS Mailbox Store Event Category: General Event ID: 7200 Computer: SERVER1 Description: Background thread FDoUpdateCatalog halted on database "First Storage Group\Mailbox Store (SERVER1)" due to error code 0x80004005. The thread FDoUpdateCatalog may cause server freezing. Based on my research, please take the following steps to narrow down this issue: Step 1: This issue occurs when the Anti Virus software scans Exchange directory. Please ensure the Exchange directory is excluded from scanning. More info: 823166 Overview of Exchange Server 2003 and antivirus software http://support.microsoft.com/?id=823166 Step 2: This issue occurs when full-text indexing was originally set with the interval time set to always, and then the service was disabled and the interval time was not set back to never. To fix this ,please take the steps in the following KB: XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in Application Event Log Every 15 Minutes http://support.microsoft.com/?id=293370 Note: This KB also applies to Exchange 2003. In addition, I noticed you installed Windows 2003 SP2 on SBS server, it may cause network problem, please Disable Receive Side Scaling and offloading support. Then check again. To disable Receive Side Scaling: 1. Click Start, click Run, type ncpa.cpl, and then click OK. 2. Right-click a network adapter object, and then click Properties. 3. Click Configure, and then click the Advanced tab. 4. In the Property list, click Receive Side Scaling, click Disable in the Value list, and then click OK. 5. Repeat steps 2 through 4 for each network adapter object. To disable offloading support 1. Click Start, click Run, type regedit, and then click OK. 2. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters 3. In the details pane, right-click EnableTCPA, and then click Modify. 4. In the Value data box, type 0 (zero), and then click OK. 5. Exit Registry Editor. 6. Restart the computer. More info: You may experience network-related problems after you install Windows Server 2003 SP2 or the Scalable Networking Pack on a Windows Small Business Server 2003-based computer http://support.microsoft.com/kb/936594 If the problem persists, please help me collect the following information for deep research: 1. What important change did you make before the issue first occurred? 2. When the issue occurs, can the clients ping the server or visit server network share on SBS? 3. When the issue occurs, can the administrator do normal operations such as open IE on SBS server? I am looking forward to hear from you. If you need further assistance, please don't hesitate to let me know. Best regards, Robert Li(MSFT) Microsoft CSS Online Newsgroup Support Get Secure! - www.microsoft.com/security ===================================================== This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue. Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner. For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers. Any input or comments in this thread are highly appreciated. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- <From: "Sergio Ricci" <me(a)domainname.com> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when Performing Disk Operations <Date: Tue, 27 Nov 2007 13:56:03 -0000 <Lines: 238 <X-Priority: 3 <X-MSMail-Priority: Normal <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 <X-RFC2646: Format=Flowed; Original <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl> <Newsgroups: microsoft.public.windows.server.sbs <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78255 <X-Tomcat-NG: microsoft.public.windows.server.sbs < <Hi Robert. < <Thanks for taking time out to read my post and to reply. < <Your understanding of the issue is correct; the SBS server freezes for <several mins and then works again. < <I have carried out several diagnostic tests of the server hardware, in <particular the HDD and so far everything has come back clean. I will <however, check that the components are in the HCL list. In addition I will <also carry out the tests you have requested (e.g. ping test etc) but I <should point out that I only support the server and don't actually connect <to it myself so it is difficult to find the exact moment that the issue <occurs to carry out the requested tests. < <At this point I would like to mention that from tests I carried out <yesterday evening, I am now working on the premis that the issue is being <cause by a Virtual Server that is also installed on the SBS server (please <also see my reply post to Pedro CR). I will need to discuss with the client <if the Virtual Server can be moved or shut down for a few days to see if the <problem re-occurs. < <All the same, I will send you an MPS Report shortly. < <Once again, thank you for your interest in my issue and for your reply. It's <greatly appreciated. < <Sergio < <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl... <> Hi Sergio, <> <> Thanks for posting in our newsgroup. <> <> From your description, I know that your SBS server freezes for several <> minutes and then work again. If that's not right, please don't hesitate to <> let me know. <> <> Based on my experience, the server freeze issue may be caused by hardware. <> If we narrow down that's caused by hardware, you need to contact the <> hardware manufacture for more help. Thanks for your understanding. <> <> Please let me know the following to make the situation more clearly: <> <> 1. When the issue occurs, can you ping the server or visit server network <> share? <> 2. When the issue occurs, can the administrator do normal operations such <> as open IE on SBS server? <> <> Based on my research, please take the following steps to narrow down this <> issue: <> <> Step 1:Please ensure the RAID controller and NICs are in the HCL list: <> <> Windows Server Catalog of Tested Products <> http://www.windowsservercatalog.com/ <> <> Please also install the latest disk controller driver and test again. <> <> Step 2: Please make a clean boot to make sure the problem is not caused <> third party software: <> <> 1. Click Start->Run...->type msconfig and press Enter. <> 2. Click Services tab and select Hide All Microsoft Services and Disable <> All third party Services. <> 3. Click Startup tab and Disable All startup items. <> 4. Click OK and choose Restart. <> 5. After reboot, check whether the problem still occurs. <> 6. If there are no more problems, please use the above steps to enable <> services and startup items one by one in order to figure out the root <> cause <> of this issue. <> <> Please help me collect the following information and I need to do deep <> research: <> <> 1. What important change did you make before the issue first occurred? <> <> 2. MPS Report <> <> 1) Download MPS report tool from: <> http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 <> 15706/MPSRPT_SETUPPerf.EXE <> 2) Run the MPSRPT_SETUPPerf.exe on the server box. <> 3) Wait for 10~15 minutes. <> 4) Open Windows explorer, navigate to <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\ <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject: <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when Performing <> Disk Operations. <> <> I am looking forward to hear from you. <> <> If you need further assistance, please don't hesitate to let me know. <> <> Best regards, <> <> Robert Li(MSFT) <> <> Microsoft CSS Online Newsgroup Support <> <> Get Secure! - www.microsoft.com/security <> <> ===================================================== <> <> This newsgroup only focuses on SBS technical issues. If you have issues <> regarding other Microsoft products, you'd better post in the corresponding <> newsgroups so that they can be resolved in an efficient and timely manner. <> You can locate the newsgroup here: <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx <> <> When opening a new thread via the web interface, we recommend you check <> the <> "Notify me of replies" box to receive e-mail notifications when there are <> any updates in your thread. When responding to posts via your newsreader, <> please "Reply to Group" so that others may learn and benefit from your <> issue. <> <> Microsoft engineers can only focus on one issue per thread. Although we <> provide other information for your reference, we recommend you post <> different incidents in different threads to keep the thread clean. In <> doing <> so, it will ensure your issues are resolved in a timely manner. <> <> For urgent issues, you may want to contact Microsoft CSS directly. Please <> check http://support.microsoft.com for regional support phone numbers. <> <> Any input or comments in this thread are highly appreciated. <> <> ===================================================== <> <> This posting is provided "AS IS" with no warranties, and confers no <> rights. <> <> -------------------- <> <From: "Sergio Ricci" <me(a)domainname.com> <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when Performing <> Disk Operations <> <Date: Mon, 26 Nov 2007 12:57:58 -0000 <> <Lines: 68 <> <X-Priority: 3 <> <X-MSMail-Priority: Normal <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 <> <X-RFC2646: Format=Flowed; Original <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> <> <Newsgroups: microsoft.public.windows.server.sbs <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 <> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl <> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:77994 <> <X-Tomcat-NG: microsoft.public.windows.server.sbs <> < <> <Hi, <> < <> <We have a Win2K3 SBS Premium SBS server that has for the past few weeks <> been <> <having a few issues that primarily manifests itself as the server <> freezing <> <for several minutes and then springing back to into life. During the <> freeze, <> <users get the popup balloon telling them that Exchange is trying to <> retrieve <> <data. <> < <> <Going through the logs Event ID: 7011 always seems to be recorded around <> the <> <time the freeze happens. I've done some research into Event ID: 7011 and <> <most suggest modifying the following registry key: <> < <> <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter <> s <> < <> <[REG_DWORD] autodisconnect: <> <Original Value: 'f' <> <New Current Value: 'fff' <> < <> <Making this change does appear to have improved matters but what is also <> <worrying is that certain disk operations such as 'chkdsk' and 'defrag' <> cause <> <the server to freeze resulting in the above log being written. I have <> <downloaded an evaluation copy of Diskeeper 2008 Server to see if that <> also <> <caused a reoccurance of the issue and it does. <> < <> <A bit about the server: <> < <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS <> <Hardware: HP Proliant ML350 G4 <> <Smart Array 641 Controller <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive <> <x1 Intel Xeon 3.4GHz Processor <> <4GB of RAM <> < <> <Hardware diagnostics (using HP diag tools) show no issues. <> < <> <Changes Made so far: <> < <> <The following are the changes made (with results) made to the server so <> far <> <in an attempt to resolve the issue: <> <1) Recreated NtFrs database (result = no improvement) <> <2) Ensured that NtFrs database was excluded from any virus scans <> <3) Removed Windows Defender from Server (no improvement) <> <4) Stopped SQL/ACT7 database instances from auto starting <> <5) Increased File Replication Service Timeout by modifying the registry <> <value above from it's old value to it's new current value (appears to <> have <> <improved things so far but only made the change late last week so still <> <early days). <> < <> <NB: When I say thatit has 'improved things', it has improved things to <> the <> <point that the server doesn't appear to hang as often during the day <> under <> <normal use (before it would freeze 5 or more times a day, now we are <> <currently down to 1 freeze in 2 days). However, if I run 'chkdsk' or try <> to <> <do a 'defrag', it will still freeze for several minutes. <> < <> <The freeze also causes me to lose any network connection and affects the <> <connection to the server via the remote management board. <> < <> <Any help or pointers in resolving the issue would be greatly appreciated. <> < <> <Thansk in advance. <> <Sergio <> < <> <PS: Does Microsoft Professional Support no longer offer the email support <> <option which cost, from memory, under �100 which was great if it wasn't <> <urgent? I only seem to find the 'phone and email' support offering which <> <costs �199+VAT <> < <> < <> < <> < < <
From: Sergio Ricci on 28 Nov 2007 19:20 Robert, Thanks again for your reply. I have gone through your post and carried out your suggestion where possible. I would advise the following however: Step 1: The anti-virus has 'On-Access' scanning disabled. All the same I confirm that the anti-virus is already configured to exclude from scanning the directories listed in the KB. Step 2: The 'Interval Time' for both the Mailbox Store and Public Store were already set to 'Never'. All the same I enabled Full-Text Indexing, waited until it was enabled, set the 'Interval Time' to 'Always' and applied the settings. I then waited a short time, reset the 'Interval Time' back to 'Never' and then disabled Full-Text Indexing. I confirm that 'Checksum Offloading' (as I believe it's called by HP) is disabled on all NIC's using the Advanced tab of each NIC and confirm that the registry value 'EnableTCPA' mentioned in your post is already set to '0' (zero). None of the NIC's on the server appear to have the 'Receive Side Scaling' feature and so no action was taken in this respect. To answer your questions at the end of your post: 1) Having checked the change logs and emails, it would appear that the issue (Event ID: 7011 in the Windows System log) began to appear around the time that VMware Server was installed. This re-enforces my working premis that the issue is caused by the Virtual Server that is also installed on the box. I have posted in the VMware forum also so I am hoping to receive some suggestions as to configuration changes that I can make to the Virtual Machine that may resolve the issue. 2) The users I have spoken to and who connect to the SBS server have informed me that when the issue occurs they are essentially unable to access anything on the server. I will have to confirm at a later date if the clients are able to ping the server. 3) When the issue occurs I am unable to open anything on the server but I should reiterate that I am managing and accessing the server remotely via RDP. Thank you again for your time. Kind regards, Sergio "Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message news:aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl... > Hi Sergio, > > Thanks for your reply. > > I researched your log and found the following event: > > Event Type: Error > Event Source: MSExchangeIS Mailbox Store > Event Category: General > Event ID: 7200 > Computer: SERVER1 > Description: > Background thread FDoUpdateCatalog halted on database "First Storage > Group\Mailbox Store (SERVER1)" due to error code 0x80004005. > > The thread FDoUpdateCatalog may cause server freezing. Based on my > research, please take the following steps to narrow down this issue: > > Step 1: This issue occurs when the Anti Virus software scans Exchange > directory. Please ensure the Exchange directory is excluded from scanning. > > More info: > > 823166 Overview of Exchange Server 2003 and antivirus software > http://support.microsoft.com/?id=823166 > > Step 2: This issue occurs when full-text indexing was originally set with > the interval time set to always, and then the service was disabled and the > interval time was not set back to never. To fix this ,please take the > steps > in the following KB: > > XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in > Application > Event Log Every 15 Minutes > http://support.microsoft.com/?id=293370 > > Note: This KB also applies to Exchange 2003. > > In addition, I noticed you installed Windows 2003 SP2 on SBS server, it > may > cause network problem, please Disable Receive Side Scaling and offloading > support. Then check again. > > To disable Receive Side Scaling: > > 1. Click Start, click Run, type ncpa.cpl, and then click OK. > 2. Right-click a network adapter object, and then click Properties. > 3. Click Configure, and then click the Advanced tab. > 4. In the Property list, click Receive Side Scaling, click Disable in the > Value list, and then click OK. > 5. Repeat steps 2 through 4 for each network adapter object. > > To disable offloading support > > 1. Click Start, click Run, type regedit, and then click OK. > 2. Locate and then click the following registry subkey: > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters > 3. In the details pane, right-click EnableTCPA, and then click Modify. > 4. In the Value data box, type 0 (zero), and then click OK. > 5. Exit Registry Editor. > 6. Restart the computer. > > More info: > You may experience network-related problems after you install Windows > Server 2003 SP2 or the Scalable Networking Pack on a Windows Small > Business > Server 2003-based computer > http://support.microsoft.com/kb/936594 > > If the problem persists, please help me collect the following information > for deep research: > > 1. What important change did you make before the issue first occurred? > 2. When the issue occurs, can the clients ping the server or visit server > network share on SBS? > 3. When the issue occurs, can the administrator do normal operations such > as open IE on SBS server? > > I am looking forward to hear from you. > > If you need further assistance, please don't hesitate to let me know. > > Best regards, > > Robert Li(MSFT) > > Microsoft CSS Online Newsgroup Support > > Get Secure! - www.microsoft.com/security > > ===================================================== > > This newsgroup only focuses on SBS technical issues. If you have issues > regarding other Microsoft products, you'd better post in the corresponding > newsgroups so that they can be resolved in an efficient and timely manner. > You can locate the newsgroup here: > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > > When opening a new thread via the web interface, we recommend you check > the > "Notify me of replies" box to receive e-mail notifications when there are > any updates in your thread. When responding to posts via your newsreader, > please "Reply to Group" so that others may learn and benefit from your > issue. > > Microsoft engineers can only focus on one issue per thread. Although we > provide other information for your reference, we recommend you post > different incidents in different threads to keep the thread clean. In > doing > so, it will ensure your issues are resolved in a timely manner. > > For urgent issues, you may want to contact Microsoft CSS directly. Please > check http://support.microsoft.com for regional support phone numbers. > > Any input or comments in this thread are highly appreciated. > > ===================================================== > > This posting is provided "AS IS" with no warranties, and confers no > rights. > > -------------------- > <From: "Sergio Ricci" <me(a)domainname.com> > <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> > <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl> > <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when > Performing Disk Operations > <Date: Tue, 27 Nov 2007 13:56:03 -0000 > <Lines: 238 > <X-Priority: 3 > <X-MSMail-Priority: Normal > <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > <X-RFC2646: Format=Flowed; Original > <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl> > <Newsgroups: microsoft.public.windows.server.sbs > <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 > <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl > <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78255 > <X-Tomcat-NG: microsoft.public.windows.server.sbs > < > <Hi Robert. > < > <Thanks for taking time out to read my post and to reply. > < > <Your understanding of the issue is correct; the SBS server freezes for > <several mins and then works again. > < > <I have carried out several diagnostic tests of the server hardware, in > <particular the HDD and so far everything has come back clean. I will > <however, check that the components are in the HCL list. In addition I > will > <also carry out the tests you have requested (e.g. ping test etc) but I > <should point out that I only support the server and don't actually > connect > <to it myself so it is difficult to find the exact moment that the issue > <occurs to carry out the requested tests. > < > <At this point I would like to mention that from tests I carried out > <yesterday evening, I am now working on the premis that the issue is being > <cause by a Virtual Server that is also installed on the SBS server > (please > <also see my reply post to Pedro CR). I will need to discuss with the > client > <if the Virtual Server can be moved or shut down for a few days to see if > the > <problem re-occurs. > < > <All the same, I will send you an MPS Report shortly. > < > <Once again, thank you for your interest in my issue and for your reply. > It's > <greatly appreciated. > < > <Sergio > < > <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message > <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl... > <> Hi Sergio, > <> > <> Thanks for posting in our newsgroup. > <> > <> From your description, I know that your SBS server freezes for several > <> minutes and then work again. If that's not right, please don't hesitate > to > <> let me know. > <> > <> Based on my experience, the server freeze issue may be caused by > hardware. > <> If we narrow down that's caused by hardware, you need to contact the > <> hardware manufacture for more help. Thanks for your understanding. > <> > <> Please let me know the following to make the situation more clearly: > <> > <> 1. When the issue occurs, can you ping the server or visit server > network > <> share? > <> 2. When the issue occurs, can the administrator do normal operations > such > <> as open IE on SBS server? > <> > <> Based on my research, please take the following steps to narrow down > this > <> issue: > <> > <> Step 1:Please ensure the RAID controller and NICs are in the HCL list: > <> > <> Windows Server Catalog of Tested Products > <> http://www.windowsservercatalog.com/ > <> > <> Please also install the latest disk controller driver and test again. > <> > <> Step 2: Please make a clean boot to make sure the problem is not caused > <> third party software: > <> > <> 1. Click Start->Run...->type msconfig and press Enter. > <> 2. Click Services tab and select Hide All Microsoft Services and > Disable > <> All third party Services. > <> 3. Click Startup tab and Disable All startup items. > <> 4. Click OK and choose Restart. > <> 5. After reboot, check whether the problem still occurs. > <> 6. If there are no more problems, please use the above steps to enable > <> services and startup items one by one in order to figure out the root > <> cause > <> of this issue. > <> > <> Please help me collect the following information and I need to do deep > <> research: > <> > <> 1. What important change did you make before the issue first occurred? > <> > <> 2. MPS Report > <> > <> 1) Download MPS report tool from: > <> > http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 > <> 15706/MPSRPT_SETUPPerf.EXE > <> 2) Run the MPSRPT_SETUPPerf.exe on the server box. > <> 3) Wait for 10~15 minutes. > <> 4) Open Windows explorer, navigate to > <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\ > <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject: > <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when > Performing > <> Disk Operations. > <> > <> I am looking forward to hear from you. > <> > <> If you need further assistance, please don't hesitate to let me know. > <> > <> Best regards, > <> > <> Robert Li(MSFT) > <> > <> Microsoft CSS Online Newsgroup Support > <> > <> Get Secure! - www.microsoft.com/security > <> > <> ===================================================== > <> > <> This newsgroup only focuses on SBS technical issues. If you have issues > <> regarding other Microsoft products, you'd better post in the > corresponding > <> newsgroups so that they can be resolved in an efficient and timely > manner. > <> You can locate the newsgroup here: > <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > <> > <> When opening a new thread via the web interface, we recommend you check > <> the > <> "Notify me of replies" box to receive e-mail notifications when there > are > <> any updates in your thread. When responding to posts via your > newsreader, > <> please "Reply to Group" so that others may learn and benefit from your > <> issue. > <> > <> Microsoft engineers can only focus on one issue per thread. Although we > <> provide other information for your reference, we recommend you post > <> different incidents in different threads to keep the thread clean. In > <> doing > <> so, it will ensure your issues are resolved in a timely manner. > <> > <> For urgent issues, you may want to contact Microsoft CSS directly. > Please > <> check http://support.microsoft.com for regional support phone numbers. > <> > <> Any input or comments in this thread are highly appreciated. > <> > <> ===================================================== > <> > <> This posting is provided "AS IS" with no warranties, and confers no > <> rights. > <> > <> -------------------- > <> <From: "Sergio Ricci" <me(a)domainname.com> > <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when > Performing > <> Disk Operations > <> <Date: Mon, 26 Nov 2007 12:57:58 -0000 > <> <Lines: 68 > <> <X-Priority: 3 > <> <X-MSMail-Priority: Normal > <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > <> <X-RFC2646: Format=Flowed; Original > <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> > <> <Newsgroups: microsoft.public.windows.server.sbs > <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 > <> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl > <> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:77994 > <> <X-Tomcat-NG: microsoft.public.windows.server.sbs > <> < > <> <Hi, > <> < > <> <We have a Win2K3 SBS Premium SBS server that has for the past few > weeks > <> been > <> <having a few issues that primarily manifests itself as the server > <> freezing > <> <for several minutes and then springing back to into life. During the > <> freeze, > <> <users get the popup balloon telling them that Exchange is trying to > <> retrieve > <> <data. > <> < > <> <Going through the logs Event ID: 7011 always seems to be recorded > around > <> the > <> <time the freeze happens. I've done some research into Event ID: 7011 > and > <> <most suggest modifying the following registry key: > <> < > <> > <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter > <> s > <> < > <> <[REG_DWORD] autodisconnect: > <> <Original Value: 'f' > <> <New Current Value: 'fff' > <> < > <> <Making this change does appear to have improved matters but what is > also > <> <worrying is that certain disk operations such as 'chkdsk' and 'defrag' > <> cause > <> <the server to freeze resulting in the above log being written. I have > <> <downloaded an evaluation copy of Diskeeper 2008 Server to see if that > <> also > <> <caused a reoccurance of the issue and it does. > <> < > <> <A bit about the server: > <> < > <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS > <> <Hardware: HP Proliant ML350 G4 > <> <Smart Array 641 Controller > <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive > <> <x1 Intel Xeon 3.4GHz Processor > <> <4GB of RAM > <> < > <> <Hardware diagnostics (using HP diag tools) show no issues. > <> < > <> <Changes Made so far: > <> < > <> <The following are the changes made (with results) made to the server > so > <> far > <> <in an attempt to resolve the issue: > <> <1) Recreated NtFrs database (result = no improvement) > <> <2) Ensured that NtFrs database was excluded from any virus scans > <> <3) Removed Windows Defender from Server (no improvement) > <> <4) Stopped SQL/ACT7 database instances from auto starting > <> <5) Increased File Replication Service Timeout by modifying the > registry > <> <value above from it's old value to it's new current value (appears to > <> have > <> <improved things so far but only made the change late last week so > still > <> <early days). > <> < > <> <NB: When I say thatit has 'improved things', it has improved things to > <> the > <> <point that the server doesn't appear to hang as often during the day > <> under > <> <normal use (before it would freeze 5 or more times a day, now we are > <> <currently down to 1 freeze in 2 days). However, if I run 'chkdsk' or > try > <> to > <> <do a 'defrag', it will still freeze for several minutes. > <> < > <> <The freeze also causes me to lose any network connection and affects > the > <> <connection to the server via the remote management board. > <> < > <> <Any help or pointers in resolving the issue would be greatly > appreciated. > <> < > <> <Thansk in advance. > <> <Sergio > <> < > <> <PS: Does Microsoft Professional Support no longer offer the email > support > <> <option which cost, from memory, under �100 which was great if it > wasn't > <> <urgent? I only seem to find the 'phone and email' support offering > which > <> <costs �199+VAT > <> < > <> < > <> < > <> > < > < > < >
From: Robert Li [MSFT] on 29 Nov 2007 06:32 Hi Sergio, Thanks for your reply. Since the issue occurs after you installed VMware Server, you can arrange time to stop VMware Server and see if the problem can be reproduced. Based on my experince, VMware Server can cost large amount of system resource and cause the server losing response. I am looking forward to hear from you. If you need further assistance, please don't hesitate to let me know. Best regards, Robert Li(MSFT) Microsoft CSS Online Newsgroup Support Get Secure! - www.microsoft.com/security ===================================================== This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue. Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner. For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers. Any input or comments in this thread are highly appreciated. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- <From: "Sergio Ricci" <name(a)domain.com> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl> <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl> <aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when Performing Disk Operations <Date: Thu, 29 Nov 2007 00:20:06 -0000 <Lines: 469 <X-Priority: 3 <X-MSMail-Priority: Normal <X-Newsreader: Microsoft Outlook Express 6.00.2900.3028 <X-RFC2646: Format=Flowed; Original <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 <X-Antivirus: avast! (VPS 071128-0, 28/11/2007), Outbound message <X-Antivirus-Status: Clean <Message-ID: <eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl> <Newsgroups: microsoft.public.windows.server.sbs <NNTP-Posting-Host: 88-97-154-134.dsl.zen.co.uk 88.97.154.134 <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78728 <X-Tomcat-NG: microsoft.public.windows.server.sbs < <Robert, < <Thanks again for your reply. < <I have gone through your post and carried out your suggestion where <possible. I would advise the following however: < <Step 1: The anti-virus has 'On-Access' scanning disabled. All the same I <confirm that the anti-virus is already configured to exclude from scanning <the directories listed in the KB. < <Step 2: The 'Interval Time' for both the Mailbox Store and Public Store were <already set to 'Never'. All the same I enabled Full-Text Indexing, waited <until it was enabled, set the 'Interval Time' to 'Always' and applied the <settings. I then waited a short time, reset the 'Interval Time' back to <'Never' and then disabled Full-Text Indexing. < <I confirm that 'Checksum Offloading' (as I believe it's called by HP) is <disabled on all NIC's using the Advanced tab of each NIC and confirm that <the registry value 'EnableTCPA' mentioned in your post is already set to '0' <(zero). < <None of the NIC's on the server appear to have the 'Receive Side Scaling' <feature and so no action was taken in this respect. < <To answer your questions at the end of your post: < <1) Having checked the change logs and emails, it would appear that the issue <(Event ID: 7011 in the Windows System log) began to appear around the time <that VMware Server was installed. This re-enforces my working premis that <the issue is caused by the Virtual Server that is also installed on the box. <I have posted in the VMware forum also so I am hoping to receive some <suggestions as to configuration changes that I can make to the Virtual <Machine that may resolve the issue. < <2) The users I have spoken to and who connect to the SBS server have <informed me that when the issue occurs they are essentially unable to access <anything on the server. I will have to confirm at a later date if the <clients are able to ping the server. < <3) When the issue occurs I am unable to open anything on the server but I <should reiterate that I am managing and accessing the server remotely via <RDP. < <Thank you again for your time. <Kind regards, <Sergio < < <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message <news:aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl... <> Hi Sergio, <> <> Thanks for your reply. <> <> I researched your log and found the following event: <> <> Event Type: Error <> Event Source: MSExchangeIS Mailbox Store <> Event Category: General <> Event ID: 7200 <> Computer: SERVER1 <> Description: <> Background thread FDoUpdateCatalog halted on database "First Storage <> Group\Mailbox Store (SERVER1)" due to error code 0x80004005. <> <> The thread FDoUpdateCatalog may cause server freezing. Based on my <> research, please take the following steps to narrow down this issue: <> <> Step 1: This issue occurs when the Anti Virus software scans Exchange <> directory. Please ensure the Exchange directory is excluded from scanning. <> <> More info: <> <> 823166 Overview of Exchange Server 2003 and antivirus software <> http://support.microsoft.com/?id=823166 <> <> Step 2: This issue occurs when full-text indexing was originally set with <> the interval time set to always, and then the service was disabled and the <> interval time was not set back to never. To fix this ,please take the <> steps <> in the following KB: <> <> XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in <> Application <> Event Log Every 15 Minutes <> http://support.microsoft.com/?id=293370 <> <> Note: This KB also applies to Exchange 2003. <> <> In addition, I noticed you installed Windows 2003 SP2 on SBS server, it <> may <> cause network problem, please Disable Receive Side Scaling and offloading <> support. Then check again. <> <> To disable Receive Side Scaling: <> <> 1. Click Start, click Run, type ncpa.cpl, and then click OK. <> 2. Right-click a network adapter object, and then click Properties. <> 3. Click Configure, and then click the Advanced tab. <> 4. In the Property list, click Receive Side Scaling, click Disable in the <> Value list, and then click OK. <> 5. Repeat steps 2 through 4 for each network adapter object. <> <> To disable offloading support <> <> 1. Click Start, click Run, type regedit, and then click OK. <> 2. Locate and then click the following registry subkey: <> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters <> 3. In the details pane, right-click EnableTCPA, and then click Modify. <> 4. In the Value data box, type 0 (zero), and then click OK. <> 5. Exit Registry Editor. <> 6. Restart the computer. <> <> More info: <> You may experience network-related problems after you install Windows <> Server 2003 SP2 or the Scalable Networking Pack on a Windows Small <> Business <> Server 2003-based computer <> http://support.microsoft.com/kb/936594 <> <> If the problem persists, please help me collect the following information <> for deep research: <> <> 1. What important change did you make before the issue first occurred? <> 2. When the issue occurs, can the clients ping the server or visit server <> network share on SBS? <> 3. When the issue occurs, can the administrator do normal operations such <> as open IE on SBS server? <> <> I am looking forward to hear from you. <> <> If you need further assistance, please don't hesitate to let me know. <> <> Best regards, <> <> Robert Li(MSFT) <> <> Microsoft CSS Online Newsgroup Support <> <> Get Secure! - www.microsoft.com/security <> <> ===================================================== <> <> This newsgroup only focuses on SBS technical issues. If you have issues <> regarding other Microsoft products, you'd better post in the corresponding <> newsgroups so that they can be resolved in an efficient and timely manner. <> You can locate the newsgroup here: <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx <> <> When opening a new thread via the web interface, we recommend you check <> the <> "Notify me of replies" box to receive e-mail notifications when there are <> any updates in your thread. When responding to posts via your newsreader, <> please "Reply to Group" so that others may learn and benefit from your <> issue. <> <> Microsoft engineers can only focus on one issue per thread. Although we <> provide other information for your reference, we recommend you post <> different incidents in different threads to keep the thread clean. In <> doing <> so, it will ensure your issues are resolved in a timely manner. <> <> For urgent issues, you may want to contact Microsoft CSS directly. Please <> check http://support.microsoft.com for regional support phone numbers. <> <> Any input or comments in this thread are highly appreciated. <> <> ===================================================== <> <> This posting is provided "AS IS" with no warranties, and confers no <> rights. <> <> -------------------- <> <From: "Sergio Ricci" <me(a)domainname.com> <> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> <> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl> <> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when <> Performing Disk Operations <> <Date: Tue, 27 Nov 2007 13:56:03 -0000 <> <Lines: 238 <> <X-Priority: 3 <> <X-MSMail-Priority: Normal <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 <> <X-RFC2646: Format=Flowed; Original <> <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl> <> <Newsgroups: microsoft.public.windows.server.sbs <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 <> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl <> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78255 <> <X-Tomcat-NG: microsoft.public.windows.server.sbs <> < <> <Hi Robert. <> < <> <Thanks for taking time out to read my post and to reply. <> < <> <Your understanding of the issue is correct; the SBS server freezes for <> <several mins and then works again. <> < <> <I have carried out several diagnostic tests of the server hardware, in <> <particular the HDD and so far everything has come back clean. I will <> <however, check that the components are in the HCL list. In addition I <> will <> <also carry out the tests you have requested (e.g. ping test etc) but I <> <should point out that I only support the server and don't actually <> connect <> <to it myself so it is difficult to find the exact moment that the issue <> <occurs to carry out the requested tests. <> < <> <At this point I would like to mention that from tests I carried out <> <yesterday evening, I am now working on the premis that the issue is being <> <cause by a Virtual Server that is also installed on the SBS server <> (please <> <also see my reply post to Pedro CR). I will need to discuss with the <> client <> <if the Virtual Server can be moved or shut down for a few days to see if <> the <> <problem re-occurs. <> < <> <All the same, I will send you an MPS Report shortly. <> < <> <Once again, thank you for your interest in my issue and for your reply. <> It's <> <greatly appreciated. <> < <> <Sergio <> < <> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message <> <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl... <> <> Hi Sergio, <> <> <> <> Thanks for posting in our newsgroup. <> <> <> <> From your description, I know that your SBS server freezes for several <> <> minutes and then work again. If that's not right, please don't hesitate <> to <> <> let me know. <> <> <> <> Based on my experience, the server freeze issue may be caused by <> hardware. <> <> If we narrow down that's caused by hardware, you need to contact the <> <> hardware manufacture for more help. Thanks for your understanding. <> <> <> <> Please let me know the following to make the situation more clearly: <> <> <> <> 1. When the issue occurs, can you ping the server or visit server <> network <> <> share? <> <> 2. When the issue occurs, can the administrator do normal operations <> such <> <> as open IE on SBS server? <> <> <> <> Based on my research, please take the following steps to narrow down <> this <> <> issue: <> <> <> <> Step 1:Please ensure the RAID controller and NICs are in the HCL list: <> <> <> <> Windows Server Catalog of Tested Products <> <> http://www.windowsservercatalog.com/ <> <> <> <> Please also install the latest disk controller driver and test again. <> <> <> <> Step 2: Please make a clean boot to make sure the problem is not caused <> <> third party software: <> <> <> <> 1. Click Start->Run...->type msconfig and press Enter. <> <> 2. Click Services tab and select Hide All Microsoft Services and <> Disable <> <> All third party Services. <> <> 3. Click Startup tab and Disable All startup items. <> <> 4. Click OK and choose Restart. <> <> 5. After reboot, check whether the problem still occurs. <> <> 6. If there are no more problems, please use the above steps to enable <> <> services and startup items one by one in order to figure out the root <> <> cause <> <> of this issue. <> <> <> <> Please help me collect the following information and I need to do deep <> <> research: <> <> <> <> 1. What important change did you make before the issue first occurred? <> <> <> <> 2. MPS Report <> <> <> <> 1) Download MPS report tool from: <> <> <> http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9 <> <> 15706/MPSRPT_SETUPPerf.EXE <> <> 2) Run the MPSRPT_SETUPPerf.exe on the server box. <> <> 3) Wait for 10~15 minutes. <> <> 4) Open Windows explorer, navigate to <> <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\ <> <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject: <> <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when <> Performing <> <> Disk Operations. <> <> <> <> I am looking forward to hear from you. <> <> <> <> If you need further assistance, please don't hesitate to let me know. <> <> <> <> Best regards, <> <> <> <> Robert Li(MSFT) <> <> <> <> Microsoft CSS Online Newsgroup Support <> <> <> <> Get Secure! - www.microsoft.com/security <> <> <> <> ===================================================== <> <> <> <> This newsgroup only focuses on SBS technical issues. If you have issues <> <> regarding other Microsoft products, you'd better post in the <> corresponding <> <> newsgroups so that they can be resolved in an efficient and timely <> manner. <> <> You can locate the newsgroup here: <> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx <> <> <> <> When opening a new thread via the web interface, we recommend you check <> <> the <> <> "Notify me of replies" box to receive e-mail notifications when there <> are <> <> any updates in your thread. When responding to posts via your <> newsreader, <> <> please "Reply to Group" so that others may learn and benefit from your <> <> issue. <> <> <> <> Microsoft engineers can only focus on one issue per thread. Although we <> <> provide other information for your reference, we recommend you post <> <> different incidents in different threads to keep the thread clean. In <> <> doing <> <> so, it will ensure your issues are resolved in a timely manner. <> <> <> <> For urgent issues, you may want to contact Microsoft CSS directly. <> Please <> <> check http://support.microsoft.com for regional support phone numbers. <> <> <> <> Any input or comments in this thread are highly appreciated. <> <> <> <> ===================================================== <> <> <> <> This posting is provided "AS IS" with no warranties, and confers no <> <> rights. <> <> <> <> -------------------- <> <> <From: "Sergio Ricci" <me(a)domainname.com> <> <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when <> Performing <> <> Disk Operations <> <> <Date: Mon, 26 Nov 2007 12:57:58 -0000 <> <> <Lines: 68 <> <> <X-Priority: 3 <> <> <X-MSMail-Priority: Normal <> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 <> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 <> <> <X-RFC2646: Format=Flowed; Original <> <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl> <> <> <Newsgroups: microsoft.public.windows.server.sbs <> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187 <> <> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl <> <> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:77994 <> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs <> <> < <> <> <Hi, <> <> < <> <> <We have a Win2K3 SBS Premium SBS server that has for the past few <> weeks <> <> been <> <> <having a few issues that primarily manifests itself as the server <> <> freezing <> <> <for several minutes and then springing back to into life. During the <> <> freeze, <> <> <users get the popup balloon telling them that Exchange is trying to <> <> retrieve <> <> <data. <> <> < <> <> <Going through the logs Event ID: 7011 always seems to be recorded <> around <> <> the <> <> <time the freeze happens. I've done some research into Event ID: 7011 <> and <> <> <most suggest modifying the following registry key: <> <> < <> <> <> <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter <> <> s <> <> < <> <> <[REG_DWORD] autodisconnect: <> <> <Original Value: 'f' <> <> <New Current Value: 'fff' <> <> < <> <> <Making this change does appear to have improved matters but what is <> also <> <> <worrying is that certain disk operations such as 'chkdsk' and 'defrag' <> <> cause <> <> <the server to freeze resulting in the above log being written. I have <> <> <downloaded an evaluation copy of Diskeeper 2008 Server to see if that <> <> also <> <> <caused a reoccurance of the issue and it does. <> <> < <> <> <A bit about the server: <> <> < <> <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS <> <> <Hardware: HP Proliant ML350 G4 <> <> <Smart Array 641 Controller <> <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive <> <> <x1 Intel Xeon 3.4GHz Processor <> <> <4GB of RAM <> <> < <> <> <Hardware diagnostics (using HP diag tools) show no issues. <> <> < <> <> <Changes Made so far: <> <> < <> <> <The following are the changes made (with results) made to the server <> so <> <> far <> <> <in an attempt to resolve the issue: <> <> <1) Recreated NtFrs database (result = no improvement) <> <> <2) Ensured that NtFrs database was excluded from any virus scans <> <> <3) Removed Windows Defender from Server (no improvement) <> <> <4) Stopped SQL/ACT7 database instances from auto starting <> <> <5) Increased File Replication Service Timeout by modifying the <> registry <> <> <value above from it's old value to it's new current value (appears to <> <> have <> <> <improved things so far but only made the change late last week so <> still <> <> <early days). <> <> < <> <> <NB: When I say thatit has 'improved things', it has improved things to <> <> the <> <> <point that the server doesn't appear to hang as often during the day <> <> under <> <> <normal use (before it would freeze 5 or more times a day, now we are <> <> <currently down to 1 freeze in 2 days). However, if I run 'chkdsk' or <> try <> <> to <> <> <do a 'defrag', it will still freeze for several minutes. <> <> < <> <> <The freeze also causes me to lose any network connection and affects <> the <> <> <connection to the server via the remote management board. <> <> < <> <> <Any help or pointers in resolving the issue would be greatly <> appreciated. <> <> < <> <> <Thansk in advance. <> <> <Sergio <> <> < <> <> <PS: Does Microsoft Professional Support no longer offer the email <> support <> <> <option which cost, from memory, under �100 which was great if it <> wasn't <> <> <urgent? I only seem to find the 'phone and email' support offering <> which <> <> <costs �199+VAT <> <> < <> <> < <> <> < <> <> <> < <> < <> < <> < < <
First
|
Prev
|
Next
|
Last
Pages: 1 2 3 4 5 Prev: OWA in win sbs 2003 R2 standard sp2 does not work inside or outsi Next: VSS Errors in Event Log |