From: Sergio Ricci on
Hi Robert,

Thanks again for posting back.

I have already scheduled next Monday to shutdown the virtual machine and see
if the problem reoccurs. I will of course post back with the results.

I have also had some feedback from VMware experts who have suggested I make
some configuration changes to the VM. These changes have been planned for
this evening (depending on what time I finish a planned task which is also
scheduled for this evening).

I'll let you know how testing goes and thanks again for your reply.
Sergio

"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
news:rcBr%23tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl...
> Hi Sergio,
>
> Thanks for your reply.
>
> Since the issue occurs after you installed VMware Server, you can arrange
> time to stop VMware Server and see if the problem can be reproduced. Based
> on my experince, VMware Server can cost large amount of system resource
> and
> cause the server losing response.
>
> I am looking forward to hear from you.
>
> If you need further assistance, please don't hesitate to let me know.
>
> Best regards,
>
> Robert Li(MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
>
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
> <From: "Sergio Ricci" <name(a)domain.com>
> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
> <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
> <aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
> Performing Disk Operations
> <Date: Thu, 29 Nov 2007 00:20:06 -0000
> <Lines: 469
> <X-Priority: 3
> <X-MSMail-Priority: Normal
> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
> <X-RFC2646: Format=Flowed; Original
> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
> <X-Antivirus: avast! (VPS 071128-0, 28/11/2007), Outbound message
> <X-Antivirus-Status: Clean
> <Message-ID: <eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
> <Newsgroups: microsoft.public.windows.server.sbs
> <NNTP-Posting-Host: 88-97-154-134.dsl.zen.co.uk 88.97.154.134
> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78728
> <X-Tomcat-NG: microsoft.public.windows.server.sbs
> <
> <Robert,
> <
> <Thanks again for your reply.
> <
> <I have gone through your post and carried out your suggestion where
> <possible. I would advise the following however:
> <
> <Step 1: The anti-virus has 'On-Access' scanning disabled. All the same I
> <confirm that the anti-virus is already configured to exclude from
> scanning
> <the directories listed in the KB.
> <
> <Step 2: The 'Interval Time' for both the Mailbox Store and Public Store
> were
> <already set to 'Never'. All the same I enabled Full-Text Indexing, waited
> <until it was enabled, set the 'Interval Time' to 'Always' and applied the
> <settings. I then waited a short time, reset the 'Interval Time' back to
> <'Never' and then disabled Full-Text Indexing.
> <
> <I confirm that 'Checksum Offloading' (as I believe it's called by HP) is
> <disabled on all NIC's using the Advanced tab of each NIC and confirm that
> <the registry value 'EnableTCPA' mentioned in your post is already set to
> '0'
> <(zero).
> <
> <None of the NIC's on the server appear to have the 'Receive Side Scaling'
> <feature and so no action was taken in this respect.
> <
> <To answer your questions at the end of your post:
> <
> <1) Having checked the change logs and emails, it would appear that the
> issue
> <(Event ID: 7011 in the Windows System log) began to appear around the
> time
> <that VMware Server was installed. This re-enforces my working premis that
> <the issue is caused by the Virtual Server that is also installed on the
> box.
> <I have posted in the VMware forum also so I am hoping to receive some
> <suggestions as to configuration changes that I can make to the Virtual
> <Machine that may resolve the issue.
> <
> <2) The users I have spoken to and who connect to the SBS server have
> <informed me that when the issue occurs they are essentially unable to
> access
> <anything on the server. I will have to confirm at a later date if the
> <clients are able to ping the server.
> <
> <3) When the issue occurs I am unable to open anything on the server but I
> <should reiterate that I am managing and accessing the server remotely via
> <RDP.
> <
> <Thank you again for your time.
> <Kind regards,
> <Sergio
> <
> <
> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
> <news:aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl...
> <> Hi Sergio,
> <>
> <> Thanks for your reply.
> <>
> <> I researched your log and found the following event:
> <>
> <> Event Type: Error
> <> Event Source: MSExchangeIS Mailbox Store
> <> Event Category: General
> <> Event ID: 7200
> <> Computer: SERVER1
> <> Description:
> <> Background thread FDoUpdateCatalog halted on database "First Storage
> <> Group\Mailbox Store (SERVER1)" due to error code 0x80004005.
> <>
> <> The thread FDoUpdateCatalog may cause server freezing. Based on my
> <> research, please take the following steps to narrow down this issue:
> <>
> <> Step 1: This issue occurs when the Anti Virus software scans Exchange
> <> directory. Please ensure the Exchange directory is excluded from
> scanning.
> <>
> <> More info:
> <>
> <> 823166 Overview of Exchange Server 2003 and antivirus software
> <> http://support.microsoft.com/?id=823166
> <>
> <> Step 2: This issue occurs when full-text indexing was originally set
> with
> <> the interval time set to always, and then the service was disabled and
> the
> <> interval time was not set back to never. To fix this ,please take the
> <> steps
> <> in the following KB:
> <>
> <> XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in
> <> Application
> <> Event Log Every 15 Minutes
> <> http://support.microsoft.com/?id=293370
> <>
> <> Note: This KB also applies to Exchange 2003.
> <>
> <> In addition, I noticed you installed Windows 2003 SP2 on SBS server, it
> <> may
> <> cause network problem, please Disable Receive Side Scaling and
> offloading
> <> support. Then check again.
> <>
> <> To disable Receive Side Scaling:
> <>
> <> 1. Click Start, click Run, type ncpa.cpl, and then click OK.
> <> 2. Right-click a network adapter object, and then click Properties.
> <> 3. Click Configure, and then click the Advanced tab.
> <> 4. In the Property list, click Receive Side Scaling, click Disable in
> the
> <> Value list, and then click OK.
> <> 5. Repeat steps 2 through 4 for each network adapter object.
> <>
> <> To disable offloading support
> <>
> <> 1. Click Start, click Run, type regedit, and then click OK.
> <> 2. Locate and then click the following registry subkey:
> <> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
> <> 3. In the details pane, right-click EnableTCPA, and then click Modify.
> <> 4. In the Value data box, type 0 (zero), and then click OK.
> <> 5. Exit Registry Editor.
> <> 6. Restart the computer.
> <>
> <> More info:
> <> You may experience network-related problems after you install Windows
> <> Server 2003 SP2 or the Scalable Networking Pack on a Windows Small
> <> Business
> <> Server 2003-based computer
> <> http://support.microsoft.com/kb/936594
> <>
> <> If the problem persists, please help me collect the following
> information
> <> for deep research:
> <>
> <> 1. What important change did you make before the issue first occurred?
> <> 2. When the issue occurs, can the clients ping the server or visit
> server
> <> network share on SBS?
> <> 3. When the issue occurs, can the administrator do normal operations
> such
> <> as open IE on SBS server?
> <>
> <> I am looking forward to hear from you.
> <>
> <> If you need further assistance, please don't hesitate to let me know.
> <>
> <> Best regards,
> <>
> <> Robert Li(MSFT)
> <>
> <> Microsoft CSS Online Newsgroup Support
> <>
> <> Get Secure! - www.microsoft.com/security
> <>
> <> =====================================================
> <>
> <> This newsgroup only focuses on SBS technical issues. If you have issues
> <> regarding other Microsoft products, you'd better post in the
> corresponding
> <> newsgroups so that they can be resolved in an efficient and timely
> manner.
> <> You can locate the newsgroup here:
> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> <>
> <> When opening a new thread via the web interface, we recommend you check
> <> the
> <> "Notify me of replies" box to receive e-mail notifications when there
> are
> <> any updates in your thread. When responding to posts via your
> newsreader,
> <> please "Reply to Group" so that others may learn and benefit from your
> <> issue.
> <>
> <> Microsoft engineers can only focus on one issue per thread. Although we
> <> provide other information for your reference, we recommend you post
> <> different incidents in different threads to keep the thread clean. In
> <> doing
> <> so, it will ensure your issues are resolved in a timely manner.
> <>
> <> For urgent issues, you may want to contact Microsoft CSS directly.
> Please
> <> check http://support.microsoft.com for regional support phone numbers.
> <>
> <> Any input or comments in this thread are highly appreciated.
> <>
> <> =====================================================
> <>
> <> This posting is provided "AS IS" with no warranties, and confers no
> <> rights.
> <>
> <> --------------------
> <> <From: "Sergio Ricci" <me(a)domainname.com>
> <> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
> <> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
> <> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
> <> Performing Disk Operations
> <> <Date: Tue, 27 Nov 2007 13:56:03 -0000
> <> <Lines: 238
> <> <X-Priority: 3
> <> <X-MSMail-Priority: Normal
> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
> <> <X-RFC2646: Format=Flowed; Original
> <> <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
> <> <Newsgroups: microsoft.public.windows.server.sbs
> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
> <> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
> <> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78255
> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
> <> <
> <> <Hi Robert.
> <> <
> <> <Thanks for taking time out to read my post and to reply.
> <> <
> <> <Your understanding of the issue is correct; the SBS server freezes for
> <> <several mins and then works again.
> <> <
> <> <I have carried out several diagnostic tests of the server hardware, in
> <> <particular the HDD and so far everything has come back clean. I will
> <> <however, check that the components are in the HCL list. In addition I
> <> will
> <> <also carry out the tests you have requested (e.g. ping test etc) but I
> <> <should point out that I only support the server and don't actually
> <> connect
> <> <to it myself so it is difficult to find the exact moment that the
> issue
> <> <occurs to carry out the requested tests.
> <> <
> <> <At this point I would like to mention that from tests I carried out
> <> <yesterday evening, I am now working on the premis that the issue is
> being
> <> <cause by a Virtual Server that is also installed on the SBS server
> <> (please
> <> <also see my reply post to Pedro CR). I will need to discuss with the
> <> client
> <> <if the Virtual Server can be moved or shut down for a few days to see
> if
> <> the
> <> <problem re-occurs.
> <> <
> <> <All the same, I will send you an MPS Report shortly.
> <> <
> <> <Once again, thank you for your interest in my issue and for your
> reply.
> <> It's
> <> <greatly appreciated.
> <> <
> <> <Sergio
> <> <
> <> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
> <> <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl...
> <> <> Hi Sergio,
> <> <>
> <> <> Thanks for posting in our newsgroup.
> <> <>
> <> <> From your description, I know that your SBS server freezes for
> several
> <> <> minutes and then work again. If that's not right, please don't
> hesitate
> <> to
> <> <> let me know.
> <> <>
> <> <> Based on my experience, the server freeze issue may be caused by
> <> hardware.
> <> <> If we narrow down that's caused by hardware, you need to contact the
> <> <> hardware manufacture for more help. Thanks for your understanding.
> <> <>
> <> <> Please let me know the following to make the situation more clearly:
> <> <>
> <> <> 1. When the issue occurs, can you ping the server or visit server
> <> network
> <> <> share?
> <> <> 2. When the issue occurs, can the administrator do normal operations
> <> such
> <> <> as open IE on SBS server?
> <> <>
> <> <> Based on my research, please take the following steps to narrow down
> <> this
> <> <> issue:
> <> <>
> <> <> Step 1:Please ensure the RAID controller and NICs are in the HCL
> list:
> <> <>
> <> <> Windows Server Catalog of Tested Products
> <> <> http://www.windowsservercatalog.com/
> <> <>
> <> <> Please also install the latest disk controller driver and test
> again.
> <> <>
> <> <> Step 2: Please make a clean boot to make sure the problem is not
> caused
> <> <> third party software:
> <> <>
> <> <> 1. Click Start->Run...->type msconfig and press Enter.
> <> <> 2. Click Services tab and select Hide All Microsoft Services and
> <> Disable
> <> <> All third party Services.
> <> <> 3. Click Startup tab and Disable All startup items.
> <> <> 4. Click OK and choose Restart.
> <> <> 5. After reboot, check whether the problem still occurs.
> <> <> 6. If there are no more problems, please use the above steps to
> enable
> <> <> services and startup items one by one in order to figure out the
> root
> <> <> cause
> <> <> of this issue.
> <> <>
> <> <> Please help me collect the following information and I need to do
> deep
> <> <> research:
> <> <>
> <> <> 1. What important change did you make before the issue first
> occurred?
> <> <>
> <> <> 2. MPS Report
> <> <>
> <> <> 1) Download MPS report tool from:
> <> <>
> <>
> http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
> <> <> 15706/MPSRPT_SETUPPerf.EXE
> <> <> 2) Run the MPSRPT_SETUPPerf.exe on the server box.
> <> <> 3) Wait for 10~15 minutes.
> <> <> 4) Open Windows explorer, navigate to
> <> <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\
> <> <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject:
> <> <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when
> <> Performing
> <> <> Disk Operations.
> <> <>
> <> <> I am looking forward to hear from you.
> <> <>
> <> <> If you need further assistance, please don't hesitate to let me
> know.
> <> <>
> <> <> Best regards,
> <> <>
> <> <> Robert Li(MSFT)
> <> <>
> <> <> Microsoft CSS Online Newsgroup Support
> <> <>
> <> <> Get Secure! - www.microsoft.com/security
> <> <>
> <> <> =====================================================
> <> <>
> <> <> This newsgroup only focuses on SBS technical issues. If you have
> issues
> <> <> regarding other Microsoft products, you'd better post in the
> <> corresponding
> <> <> newsgroups so that they can be resolved in an efficient and timely
> <> manner.
> <> <> You can locate the newsgroup here:
> <> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> <> <>
> <> <> When opening a new thread via the web interface, we recommend you
> check
> <> <> the
> <> <> "Notify me of replies" box to receive e-mail notifications when
> there
> <> are
> <> <> any updates in your thread. When responding to posts via your
> <> newsreader,
> <> <> please "Reply to Group" so that others may learn and benefit from
> your
> <> <> issue.
> <> <>
> <> <> Microsoft engineers can only focus on one issue per thread. Although
> we
> <> <> provide other information for your reference, we recommend you post
> <> <> different incidents in different threads to keep the thread clean.
> In
> <> <> doing
> <> <> so, it will ensure your issues are resolved in a timely manner.
> <> <>
> <> <> For urgent issues, you may want to contact Microsoft CSS directly.
> <> Please
> <> <> check http://support.microsoft.com for regional support phone
> numbers.
> <> <>
> <> <> Any input or comments in this thread are highly appreciated.
> <> <>
> <> <> =====================================================
> <> <>
> <> <> This posting is provided "AS IS" with no warranties, and confers no
> <> <> rights.
> <> <>
> <> <> --------------------
> <> <> <From: "Sergio Ricci" <me(a)domainname.com>
> <> <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when
> <> Performing
> <> <> Disk Operations
> <> <> <Date: Mon, 26 Nov 2007 12:57:58 -0000
> <> <> <Lines: 68
> <> <> <X-Priority: 3
> <> <> <X-MSMail-Priority: Normal
> <> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> <> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
> <> <> <X-RFC2646: Format=Flowed; Original
> <> <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
> <> <> <Newsgroups: microsoft.public.windows.server.sbs
> <> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
> <> <> <Path:
> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
> <> <> <Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.sbs:77994
> <> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
> <> <> <
> <> <> <Hi,
> <> <> <
> <> <> <We have a Win2K3 SBS Premium SBS server that has for the past few
> <> weeks
> <> <> been
> <> <> <having a few issues that primarily manifests itself as the server
> <> <> freezing
> <> <> <for several minutes and then springing back to into life. During
> the
> <> <> freeze,
> <> <> <users get the popup balloon telling them that Exchange is trying to
> <> <> retrieve
> <> <> <data.
> <> <> <
> <> <> <Going through the logs Event ID: 7011 always seems to be recorded
> <> around
> <> <> the
> <> <> <time the freeze happens. I've done some research into Event ID:
> 7011
> <> and
> <> <> <most suggest modifying the following registry key:
> <> <> <
> <> <>
> <>
> <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter
> <> <> s
> <> <> <
> <> <> <[REG_DWORD] autodisconnect:
> <> <> <Original Value: 'f'
> <> <> <New Current Value: 'fff'
> <> <> <
> <> <> <Making this change does appear to have improved matters but what is
> <> also
> <> <> <worrying is that certain disk operations such as 'chkdsk' and
> 'defrag'
> <> <> cause
> <> <> <the server to freeze resulting in the above log being written. I
> have
> <> <> <downloaded an evaluation copy of Diskeeper 2008 Server to see if
> that
> <> <> also
> <> <> <caused a reoccurance of the issue and it does.
> <> <> <
> <> <> <A bit about the server:
> <> <> <
> <> <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS
> <> <> <Hardware: HP Proliant ML350 G4
> <> <> <Smart Array 641 Controller
> <> <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive
> <> <> <x1 Intel Xeon 3.4GHz Processor
> <> <> <4GB of RAM
> <> <> <
> <> <> <Hardware diagnostics (using HP diag tools) show no issues.
> <> <> <
> <> <> <Changes Made so far:
> <> <> <
> <> <> <The following are the changes made (with results) made to the
> server
> <> so
> <> <> far
> <> <> <in an attempt to resolve the issue:
> <> <> <1) Recreated NtFrs database (result = no improvement)
> <> <> <2) Ensured that NtFrs database was excluded from any virus scans
> <> <> <3) Removed Windows Defender from Server (no improvement)
> <> <> <4) Stopped SQL/ACT7 database instances from auto starting
> <> <> <5) Increased File Replication Service Timeout by modifying the
> <> registry
> <> <> <value above from it's old value to it's new current value (appears
> to
> <> <> have
> <> <> <improved things so far but only made the change late last week so
> <> still
> <> <> <early days).
> <> <> <
> <> <> <NB: When I say thatit has 'improved things', it has improved things
> to
> <> <> the
> <> <> <point that the server doesn't appear to hang as often during the
> day
> <> <> under
> <> <> <normal use (before it would freeze 5 or more times a day, now we
> are
> <> <> <currently down to 1 freeze in 2 days). However, if I run 'chkdsk'
> or
> <> try
> <> <> to
> <> <> <do a 'defrag', it will still freeze for several minutes.
> <> <> <
> <> <> <The freeze also causes me to lose any network connection and
> affects
> <> the
> <> <> <connection to the server via the remote management board.
> <> <> <
> <> <> <Any help or pointers in resolving the issue would be greatly
> <> appreciated.
> <> <> <
> <> <> <Thansk in advance.
> <> <> <Sergio
> <> <> <
> <> <> <PS: Does Microsoft Professional Support no longer offer the email
> <> support
> <> <> <option which cost, from memory, under �100 which was great if it
> <> wasn't
> <> <> <urgent? I only seem to find the 'phone and email' support offering
> <> which
> <> <> <costs �199+VAT
> <> <> <
> <> <> <
> <> <> <
> <> <>
> <> <
> <> <
> <> <
> <>
> <
> <
> <
>


From: Robert Li [MSFT] on
Hi Sergio,

Thanks for your reply.

Please take your time to change the Vmware setting.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: "Sergio Ricci" <me(a)domainname.com>
<References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
<OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
<aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
<eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
<rcBr#tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl>
<Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
Performing Disk Operations
<Date: Thu, 29 Nov 2007 13:52:57 -0000
<Lines: 624
<X-Priority: 3
<X-MSMail-Priority: Normal
<X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
<X-RFC2646: Format=Flowed; Original
<Message-ID: <#gQMT$oMIHA.5208(a)TK2MSFTNGP04.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78891
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hi Robert,
<
<Thanks again for posting back.
<
<I have already scheduled next Monday to shutdown the virtual machine and
see
<if the problem reoccurs. I will of course post back with the results.
<
<I have also had some feedback from VMware experts who have suggested I
make
<some configuration changes to the VM. These changes have been planned for
<this evening (depending on what time I finish a planned task which is also
<scheduled for this evening).
<
<I'll let you know how testing goes and thanks again for your reply.
<Sergio
<
<"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
<news:rcBr%23tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl...
<> Hi Sergio,
<>
<> Thanks for your reply.
<>
<> Since the issue occurs after you installed VMware Server, you can arrange
<> time to stop VMware Server and see if the problem can be reproduced.
Based
<> on my experince, VMware Server can cost large amount of system resource
<> and
<> cause the server losing response.
<>
<> I am looking forward to hear from you.
<>
<> If you need further assistance, please don't hesitate to let me know.
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
<> the
<> "Notify me of replies" box to receive e-mail notifications when there are
<> any updates in your thread. When responding to posts via your newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
<> doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly. Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
<> rights.
<>
<> --------------------
<> <From: "Sergio Ricci" <name(a)domain.com>
<> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
<> <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
<> <aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
<> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
<> Performing Disk Operations
<> <Date: Thu, 29 Nov 2007 00:20:06 -0000
<> <Lines: 469
<> <X-Priority: 3
<> <X-MSMail-Priority: Normal
<> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
<> <X-RFC2646: Format=Flowed; Original
<> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
<> <X-Antivirus: avast! (VPS 071128-0, 28/11/2007), Outbound message
<> <X-Antivirus-Status: Clean
<> <Message-ID: <eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <NNTP-Posting-Host: 88-97-154-134.dsl.zen.co.uk 88.97.154.134
<> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78728
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <
<> <Robert,
<> <
<> <Thanks again for your reply.
<> <
<> <I have gone through your post and carried out your suggestion where
<> <possible. I would advise the following however:
<> <
<> <Step 1: The anti-virus has 'On-Access' scanning disabled. All the same I
<> <confirm that the anti-virus is already configured to exclude from
<> scanning
<> <the directories listed in the KB.
<> <
<> <Step 2: The 'Interval Time' for both the Mailbox Store and Public Store
<> were
<> <already set to 'Never'. All the same I enabled Full-Text Indexing,
waited
<> <until it was enabled, set the 'Interval Time' to 'Always' and applied
the
<> <settings. I then waited a short time, reset the 'Interval Time' back to
<> <'Never' and then disabled Full-Text Indexing.
<> <
<> <I confirm that 'Checksum Offloading' (as I believe it's called by HP) is
<> <disabled on all NIC's using the Advanced tab of each NIC and confirm
that
<> <the registry value 'EnableTCPA' mentioned in your post is already set to
<> '0'
<> <(zero).
<> <
<> <None of the NIC's on the server appear to have the 'Receive Side
Scaling'
<> <feature and so no action was taken in this respect.
<> <
<> <To answer your questions at the end of your post:
<> <
<> <1) Having checked the change logs and emails, it would appear that the
<> issue
<> <(Event ID: 7011 in the Windows System log) began to appear around the
<> time
<> <that VMware Server was installed. This re-enforces my working premis
that
<> <the issue is caused by the Virtual Server that is also installed on the
<> box.
<> <I have posted in the VMware forum also so I am hoping to receive some
<> <suggestions as to configuration changes that I can make to the Virtual
<> <Machine that may resolve the issue.
<> <
<> <2) The users I have spoken to and who connect to the SBS server have
<> <informed me that when the issue occurs they are essentially unable to
<> access
<> <anything on the server. I will have to confirm at a later date if the
<> <clients are able to ping the server.
<> <
<> <3) When the issue occurs I am unable to open anything on the server but
I
<> <should reiterate that I am managing and accessing the server remotely
via
<> <RDP.
<> <
<> <Thank you again for your time.
<> <Kind regards,
<> <Sergio
<> <
<> <
<> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
<> <news:aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl...
<> <> Hi Sergio,
<> <>
<> <> Thanks for your reply.
<> <>
<> <> I researched your log and found the following event:
<> <>
<> <> Event Type: Error
<> <> Event Source: MSExchangeIS Mailbox Store
<> <> Event Category: General
<> <> Event ID: 7200
<> <> Computer: SERVER1
<> <> Description:
<> <> Background thread FDoUpdateCatalog halted on database "First Storage
<> <> Group\Mailbox Store (SERVER1)" due to error code 0x80004005.
<> <>
<> <> The thread FDoUpdateCatalog may cause server freezing. Based on my
<> <> research, please take the following steps to narrow down this issue:
<> <>
<> <> Step 1: This issue occurs when the Anti Virus software scans Exchange
<> <> directory. Please ensure the Exchange directory is excluded from
<> scanning.
<> <>
<> <> More info:
<> <>
<> <> 823166 Overview of Exchange Server 2003 and antivirus software
<> <> http://support.microsoft.com/?id=823166
<> <>
<> <> Step 2: This issue occurs when full-text indexing was originally set
<> with
<> <> the interval time set to always, and then the service was disabled and
<> the
<> <> interval time was not set back to never. To fix this ,please take the
<> <> steps
<> <> in the following KB:
<> <>
<> <> XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in
<> <> Application
<> <> Event Log Every 15 Minutes
<> <> http://support.microsoft.com/?id=293370
<> <>
<> <> Note: This KB also applies to Exchange 2003.
<> <>
<> <> In addition, I noticed you installed Windows 2003 SP2 on SBS server,
it
<> <> may
<> <> cause network problem, please Disable Receive Side Scaling and
<> offloading
<> <> support. Then check again.
<> <>
<> <> To disable Receive Side Scaling:
<> <>
<> <> 1. Click Start, click Run, type ncpa.cpl, and then click OK.
<> <> 2. Right-click a network adapter object, and then click Properties.
<> <> 3. Click Configure, and then click the Advanced tab.
<> <> 4. In the Property list, click Receive Side Scaling, click Disable in
<> the
<> <> Value list, and then click OK.
<> <> 5. Repeat steps 2 through 4 for each network adapter object.
<> <>
<> <> To disable offloading support
<> <>
<> <> 1. Click Start, click Run, type regedit, and then click OK.
<> <> 2. Locate and then click the following registry subkey:
<> <> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
<> <> 3. In the details pane, right-click EnableTCPA, and then click Modify.
<> <> 4. In the Value data box, type 0 (zero), and then click OK.
<> <> 5. Exit Registry Editor.
<> <> 6. Restart the computer.
<> <>
<> <> More info:
<> <> You may experience network-related problems after you install Windows
<> <> Server 2003 SP2 or the Scalable Networking Pack on a Windows Small
<> <> Business
<> <> Server 2003-based computer
<> <> http://support.microsoft.com/kb/936594
<> <>
<> <> If the problem persists, please help me collect the following
<> information
<> <> for deep research:
<> <>
<> <> 1. What important change did you make before the issue first occurred?
<> <> 2. When the issue occurs, can the clients ping the server or visit
<> server
<> <> network share on SBS?
<> <> 3. When the issue occurs, can the administrator do normal operations
<> such
<> <> as open IE on SBS server?
<> <>
<> <> I am looking forward to hear from you.
<> <>
<> <> If you need further assistance, please don't hesitate to let me know.
<> <>
<> <> Best regards,
<> <>
<> <> Robert Li(MSFT)
<> <>
<> <> Microsoft CSS Online Newsgroup Support
<> <>
<> <> Get Secure! - www.microsoft.com/security
<> <>
<> <> =====================================================
<> <>
<> <> This newsgroup only focuses on SBS technical issues. If you have
issues
<> <> regarding other Microsoft products, you'd better post in the
<> corresponding
<> <> newsgroups so that they can be resolved in an efficient and timely
<> manner.
<> <> You can locate the newsgroup here:
<> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <>
<> <> When opening a new thread via the web interface, we recommend you
check
<> <> the
<> <> "Notify me of replies" box to receive e-mail notifications when there
<> are
<> <> any updates in your thread. When responding to posts via your
<> newsreader,
<> <> please "Reply to Group" so that others may learn and benefit from your
<> <> issue.
<> <>
<> <> Microsoft engineers can only focus on one issue per thread. Although
we
<> <> provide other information for your reference, we recommend you post
<> <> different incidents in different threads to keep the thread clean. In
<> <> doing
<> <> so, it will ensure your issues are resolved in a timely manner.
<> <>
<> <> For urgent issues, you may want to contact Microsoft CSS directly.
<> Please
<> <> check http://support.microsoft.com for regional support phone numbers.
<> <>
<> <> Any input or comments in this thread are highly appreciated.
<> <>
<> <> =====================================================
<> <>
<> <> This posting is provided "AS IS" with no warranties, and confers no
<> <> rights.
<> <>
<> <> --------------------
<> <> <From: "Sergio Ricci" <me(a)domainname.com>
<> <> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<> <> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
<> <> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
<> <> Performing Disk Operations
<> <> <Date: Tue, 27 Nov 2007 13:56:03 -0000
<> <> <Lines: 238
<> <> <X-Priority: 3
<> <> <X-MSMail-Priority: Normal
<> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
<> <> <X-RFC2646: Format=Flowed; Original
<> <> <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
<> <> <Newsgroups: microsoft.public.windows.server.sbs
<> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
<> <> <Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
<> <> <Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:78255
<> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <> <
<> <> <Hi Robert.
<> <> <
<> <> <Thanks for taking time out to read my post and to reply.
<> <> <
<> <> <Your understanding of the issue is correct; the SBS server freezes
for
<> <> <several mins and then works again.
<> <> <
<> <> <I have carried out several diagnostic tests of the server hardware,
in
<> <> <particular the HDD and so far everything has come back clean. I will
<> <> <however, check that the components are in the HCL list. In addition I
<> <> will
<> <> <also carry out the tests you have requested (e.g. ping test etc) but
I
<> <> <should point out that I only support the server and don't actually
<> <> connect
<> <> <to it myself so it is difficult to find the exact moment that the
<> issue
<> <> <occurs to carry out the requested tests.
<> <> <
<> <> <At this point I would like to mention that from tests I carried out
<> <> <yesterday evening, I am now working on the premis that the issue is
<> being
<> <> <cause by a Virtual Server that is also installed on the SBS server
<> <> (please
<> <> <also see my reply post to Pedro CR). I will need to discuss with the
<> <> client
<> <> <if the Virtual Server can be moved or shut down for a few days to
see
<> if
<> <> the
<> <> <problem re-occurs.
<> <> <
<> <> <All the same, I will send you an MPS Report shortly.
<> <> <
<> <> <Once again, thank you for your interest in my issue and for your
<> reply.
<> <> It's
<> <> <greatly appreciated.
<> <> <
<> <> <Sergio
<> <> <
<> <> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
<> <> <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl...
<> <> <> Hi Sergio,
<> <> <>
<> <> <> Thanks for posting in our newsgroup.
<> <> <>
<> <> <> From your description, I know that your SBS server freezes for
<> several
<> <> <> minutes and then work again. If that's not right, please don't
<> hesitate
<> <> to
<> <> <> let me know.
<> <> <>
<> <> <> Based on my experience, the server freeze issue may be caused by
<> <> hardware.
<> <> <> If we narrow down that's caused by hardware, you need to contact
the
<> <> <> hardware manufacture for more help. Thanks for your understanding.
<> <> <>
<> <> <> Please let me know the following to make the situation more
clearly:
<> <> <>
<> <> <> 1. When the issue occurs, can you ping the server or visit server
<> <> network
<> <> <> share?
<> <> <> 2. When the issue occurs, can the administrator do normal
operations
<> <> such
<> <> <> as open IE on SBS server?
<> <> <>
<> <> <> Based on my research, please take the following steps to narrow
down
<> <> this
<> <> <> issue:
<> <> <>
<> <> <> Step 1:Please ensure the RAID controller and NICs are in the HCL
<> list:
<> <> <>
<> <> <> Windows Server Catalog of Tested Products
<> <> <> http://www.windowsservercatalog.com/
<> <> <>
<> <> <> Please also install the latest disk controller driver and test
<> again.
<> <> <>
<> <> <> Step 2: Please make a clean boot to make sure the problem is not
<> caused
<> <> <> third party software:
<> <> <>
<> <> <> 1. Click Start->Run...->type msconfig and press Enter.
<> <> <> 2. Click Services tab and select Hide All Microsoft Services and
<> <> Disable
<> <> <> All third party Services.
<> <> <> 3. Click Startup tab and Disable All startup items.
<> <> <> 4. Click OK and choose Restart.
<> <> <> 5. After reboot, check whether the problem still occurs.
<> <> <> 6. If there are no more problems, please use the above steps to
<> enable
<> <> <> services and startup items one by one in order to figure out the
<> root
<> <> <> cause
<> <> <> of this issue.
<> <> <>
<> <> <> Please help me collect the following information and I need to do
<> deep
<> <> <> research:
<> <> <>
<> <> <> 1. What important change did you make before the issue first
<> occurred?
<> <> <>
<> <> <> 2. MPS Report
<> <> <>
<> <> <> 1) Download MPS report tool from:
<> <> <>
<> <>
<>
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
<> <> <> 15706/MPSRPT_SETUPPerf.EXE
<> <> <> 2) Run the MPSRPT_SETUPPerf.exe on the server box.
<> <> <> 3) Wait for 10~15 minutes.
<> <> <> 4) Open Windows explorer, navigate to
<> <> <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\
<> <> <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject:
<> <> <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when
<> <> Performing
<> <> <> Disk Operations.
<> <> <>
<> <> <> I am looking forward to hear from you.
<> <> <>
<> <> <> If you need further assistance, please don't hesitate to let me
<> know.
<> <> <>
<> <> <> Best regards,
<> <> <>
<> <> <> Robert Li(MSFT)
<> <> <>
<> <> <> Microsoft CSS Online Newsgroup Support
<> <> <>
<> <> <> Get Secure! - www.microsoft.com/security
<> <> <>
<> <> <> =====================================================
<> <> <>
<> <> <> This newsgroup only focuses on SBS technical issues. If you have
<> issues
<> <> <> regarding other Microsoft products, you'd better post in the
<> <> corresponding
<> <> <> newsgroups so that they can be resolved in an efficient and timely
<> <> manner.
<> <> <> You can locate the newsgroup here:
<> <> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <> <>
<> <> <> When opening a new thread via the web interface, we recommend you
<> check
<> <> <> the
<> <> <> "Notify me of replies" box to receive e-mail notifications when
<> there
<> <> are
<> <> <> any updates in your thread. When responding to posts via your
<> <> newsreader,
<> <> <> please "Reply to Group" so that others may learn and benefit from
<> your
<> <> <> issue.
<> <> <>
<> <> <> Microsoft engineers can only focus on one issue per thread.
Although
<> we
<> <> <> provide other information for your reference, we recommend you post
<> <> <> different incidents in different threads to keep the thread clean.
<> In
<> <> <> doing
<> <> <> so, it will ensure your issues are resolved in a timely manner.
<> <> <>
<> <> <> For urgent issues, you may want to contact Microsoft CSS directly.
<> <> Please
<> <> <> check http://support.microsoft.com for regional support phone
<> numbers.
<> <> <>
<> <> <> Any input or comments in this thread are highly appreciated.
<> <> <>
<> <> <> =====================================================
<> <> <>
<> <> <> This posting is provided "AS IS" with no warranties, and confers no
<> <> <> rights.
<> <> <>
<> <> <> --------------------
<> <> <> <From: "Sergio Ricci" <me(a)domainname.com>
<> <> <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when
<> <> Performing
<> <> <> Disk Operations
<> <> <> <Date: Mon, 26 Nov 2007 12:57:58 -0000
<> <> <> <Lines: 68
<> <> <> <X-Priority: 3
<> <> <> <X-MSMail-Priority: Normal
<> <> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<> <> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
<> <> <> <X-RFC2646: Format=Flowed; Original
<> <> <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<> <> <> <Newsgroups: microsoft.public.windows.server.sbs
<> <> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
<> <> <> <Path:
<> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
<> <> <> <Xref: TK2MSFTNGHUB02.phx.gbl
<> microsoft.public.windows.server.sbs:77994
<> <> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <> <> <
<> <> <> <Hi,
<> <> <> <
<> <> <> <We have a Win2K3 SBS Premium SBS server that has for the past few
<> <> weeks
<> <> <> been
<> <> <> <having a few issues that primarily manifests itself as the server
<> <> <> freezing
<> <> <> <for several minutes and then springing back to into life. During
<> the
<> <> <> freeze,
<> <> <> <users get the popup balloon telling them that Exchange is trying
to
<> <> <> retrieve
<> <> <> <data.
<> <> <> <
<> <> <> <Going through the logs Event ID: 7011 always seems to be recorded
<> <> around
<> <> <> the
<> <> <> <time the freeze happens. I've done some research into Event ID:
<> 7011
<> <> and
<> <> <> <most suggest modifying the following registry key:
<> <> <> <
<> <> <>
<> <>
<>
<HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter
<> <> <> s
<> <> <> <
<> <> <> <[REG_DWORD] autodisconnect:
<> <> <> <Original Value: 'f'
<> <> <> <New Current Value: 'fff'
<> <> <> <
<> <> <> <Making this change does appear to have improved matters but what
is
<> <> also
<> <> <> <worrying is that certain disk operations such as 'chkdsk' and
<> 'defrag'
<> <> <> cause
<> <> <> <the server to freeze resulting in the above log being written. I
<> have
<> <> <> <downloaded an evaluation copy of Diskeeper 2008 Server to see if
<> that
<> <> <> also
<> <> <> <caused a reoccurance of the issue and it does.
<> <> <> <
<> <> <> <A bit about the server:
<> <> <> <
<> <> <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS
<> <> <> <Hardware: HP Proliant ML350 G4
<> <> <> <Smart Array 641 Controller
<> <> <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive
<> <> <> <x1 Intel Xeon 3.4GHz Processor
<> <> <> <4GB of RAM
<> <> <> <
<> <> <> <Hardware diagnostics (using HP diag tools) show no issues.
<> <> <> <
<> <> <> <Changes Made so far:
<> <> <> <
<> <> <> <The following are the changes made (with results) made to the
<> server
<> <> so
<> <> <> far
<> <> <> <in an attempt to resolve the issue:
<> <> <> <1) Recreated NtFrs database (result = no improvement)
<> <> <> <2) Ensured that NtFrs database was excluded from any virus scans
<> <> <> <3) Removed Windows Defender from Server (no improvement)
<> <> <> <4) Stopped SQL/ACT7 database instances from auto starting
<> <> <> <5) Increased File Replication Service Timeout by modifying the
<> <> registry
<> <> <> <value above from it's old value to it's new current value
(appears
<> to
<> <> <> have
<> <> <> <improved things so far but only made the change late last week so
<> <> still
<> <> <> <early days).
<> <> <> <
<> <> <> <NB: When I say thatit has 'improved things', it has improved
things
<> to
<> <> <> the
<> <> <> <point that the server doesn't appear to hang as often during the
<> day
<> <> <> under
<> <> <> <normal use (before it would freeze 5 or more times a day, now we
<> are
<> <> <> <currently down to 1 freeze in 2 days). However, if I run 'chkdsk'
<> or
<> <> try
<> <> <> to
<> <> <> <do a 'defrag', it will still freeze for several minutes.
<> <> <> <
<> <> <> <The freeze also causes me to lose any network connection and
<> affects
<> <> the
<> <> <> <connection to the server via the remote management board.
<> <> <> <
<> <> <> <Any help or pointers in resolving the issue would be greatly
<> <> appreciated.
<> <> <> <
<> <> <> <Thansk in advance.
<> <> <> <Sergio
<> <> <> <
<> <> <> <PS: Does Microsoft Professional Support no longer offer the email
<> <> support
<> <> <> <option which cost, from memory, under �100 which was great if it
<> <> wasn't
<> <> <> <urgent? I only seem to find the 'phone and email' support offering
<> <> which
<> <> <> <costs �199+VAT
<> <> <> <
<> <> <> <
<> <> <> <
<> <> <>
<> <> <
<> <> <
<> <> <
<> <>
<> <
<> <
<> <
<>
<
<
<

From: Sergio Ricci on
Hi.

It turns out that the issue, in my case, was related to the Virtual Server
that was running on the hardware.

I made configuration changes to the Virtual Machine as suggested by one of
the VMware experts on the VMware Server forum and the issue appears to have
been resolved. Please see the following URL for more info:

http://communities.vmware.com/thread/115000?tstart=100

Thanks to all for taking an interest in my issue and for taking to time to
assist. It's appreciated.

Sergio

"Sergio Ricci" <me(a)domainname.com> wrote in message
news:%23gQMT$oMIHA.5208(a)TK2MSFTNGP04.phx.gbl...
> Hi Robert,
>
> Thanks again for posting back.
>
> I have already scheduled next Monday to shutdown the virtual machine and
> see if the problem reoccurs. I will of course post back with the results.
>
> I have also had some feedback from VMware experts who have suggested I
> make some configuration changes to the VM. These changes have been planned
> for this evening (depending on what time I finish a planned task which is
> also scheduled for this evening).
>
> I'll let you know how testing goes and thanks again for your reply.
> Sergio
>
> "Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
> news:rcBr%23tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl...
>> Hi Sergio,
>>
>> Thanks for your reply.
>>
>> Since the issue occurs after you installed VMware Server, you can arrange
>> time to stop VMware Server and see if the problem can be reproduced.
>> Based
>> on my experince, VMware Server can cost large amount of system resource
>> and
>> cause the server losing response.
>>
>> I am looking forward to hear from you.
>>
>> If you need further assistance, please don't hesitate to let me know.
>>
>> Best regards,
>>
>> Robert Li(MSFT)
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>>
>> =====================================================
>>
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
>> corresponding
>> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>>
>> =====================================================
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>> <From: "Sergio Ricci" <name(a)domain.com>
>> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
>> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
>> <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
>> <aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
>> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
>> Performing Disk Operations
>> <Date: Thu, 29 Nov 2007 00:20:06 -0000
>> <Lines: 469
>> <X-Priority: 3
>> <X-MSMail-Priority: Normal
>> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
>> <X-RFC2646: Format=Flowed; Original
>> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
>> <X-Antivirus: avast! (VPS 071128-0, 28/11/2007), Outbound message
>> <X-Antivirus-Status: Clean
>> <Message-ID: <eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
>> <Newsgroups: microsoft.public.windows.server.sbs
>> <NNTP-Posting-Host: 88-97-154-134.dsl.zen.co.uk 88.97.154.134
>> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78728
>> <X-Tomcat-NG: microsoft.public.windows.server.sbs
>> <
>> <Robert,
>> <
>> <Thanks again for your reply.
>> <
>> <I have gone through your post and carried out your suggestion where
>> <possible. I would advise the following however:
>> <
>> <Step 1: The anti-virus has 'On-Access' scanning disabled. All the same I
>> <confirm that the anti-virus is already configured to exclude from
>> scanning
>> <the directories listed in the KB.
>> <
>> <Step 2: The 'Interval Time' for both the Mailbox Store and Public Store
>> were
>> <already set to 'Never'. All the same I enabled Full-Text Indexing,
>> waited
>> <until it was enabled, set the 'Interval Time' to 'Always' and applied
>> the
>> <settings. I then waited a short time, reset the 'Interval Time' back to
>> <'Never' and then disabled Full-Text Indexing.
>> <
>> <I confirm that 'Checksum Offloading' (as I believe it's called by HP) is
>> <disabled on all NIC's using the Advanced tab of each NIC and confirm
>> that
>> <the registry value 'EnableTCPA' mentioned in your post is already set to
>> '0'
>> <(zero).
>> <
>> <None of the NIC's on the server appear to have the 'Receive Side
>> Scaling'
>> <feature and so no action was taken in this respect.
>> <
>> <To answer your questions at the end of your post:
>> <
>> <1) Having checked the change logs and emails, it would appear that the
>> issue
>> <(Event ID: 7011 in the Windows System log) began to appear around the
>> time
>> <that VMware Server was installed. This re-enforces my working premis
>> that
>> <the issue is caused by the Virtual Server that is also installed on the
>> box.
>> <I have posted in the VMware forum also so I am hoping to receive some
>> <suggestions as to configuration changes that I can make to the Virtual
>> <Machine that may resolve the issue.
>> <
>> <2) The users I have spoken to and who connect to the SBS server have
>> <informed me that when the issue occurs they are essentially unable to
>> access
>> <anything on the server. I will have to confirm at a later date if the
>> <clients are able to ping the server.
>> <
>> <3) When the issue occurs I am unable to open anything on the server but
>> I
>> <should reiterate that I am managing and accessing the server remotely
>> via
>> <RDP.
>> <
>> <Thank you again for your time.
>> <Kind regards,
>> <Sergio
>> <
>> <
>> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
>> <news:aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl...
>> <> Hi Sergio,
>> <>
>> <> Thanks for your reply.
>> <>
>> <> I researched your log and found the following event:
>> <>
>> <> Event Type: Error
>> <> Event Source: MSExchangeIS Mailbox Store
>> <> Event Category: General
>> <> Event ID: 7200
>> <> Computer: SERVER1
>> <> Description:
>> <> Background thread FDoUpdateCatalog halted on database "First Storage
>> <> Group\Mailbox Store (SERVER1)" due to error code 0x80004005.
>> <>
>> <> The thread FDoUpdateCatalog may cause server freezing. Based on my
>> <> research, please take the following steps to narrow down this issue:
>> <>
>> <> Step 1: This issue occurs when the Anti Virus software scans Exchange
>> <> directory. Please ensure the Exchange directory is excluded from
>> scanning.
>> <>
>> <> More info:
>> <>
>> <> 823166 Overview of Exchange Server 2003 and antivirus software
>> <> http://support.microsoft.com/?id=823166
>> <>
>> <> Step 2: This issue occurs when full-text indexing was originally set
>> with
>> <> the interval time set to always, and then the service was disabled and
>> the
>> <> interval time was not set back to never. To fix this ,please take the
>> <> steps
>> <> in the following KB:
>> <>
>> <> XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in
>> <> Application
>> <> Event Log Every 15 Minutes
>> <> http://support.microsoft.com/?id=293370
>> <>
>> <> Note: This KB also applies to Exchange 2003.
>> <>
>> <> In addition, I noticed you installed Windows 2003 SP2 on SBS server,
>> it
>> <> may
>> <> cause network problem, please Disable Receive Side Scaling and
>> offloading
>> <> support. Then check again.
>> <>
>> <> To disable Receive Side Scaling:
>> <>
>> <> 1. Click Start, click Run, type ncpa.cpl, and then click OK.
>> <> 2. Right-click a network adapter object, and then click Properties.
>> <> 3. Click Configure, and then click the Advanced tab.
>> <> 4. In the Property list, click Receive Side Scaling, click Disable in
>> the
>> <> Value list, and then click OK.
>> <> 5. Repeat steps 2 through 4 for each network adapter object.
>> <>
>> <> To disable offloading support
>> <>
>> <> 1. Click Start, click Run, type regedit, and then click OK.
>> <> 2. Locate and then click the following registry subkey:
>> <> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
>> <> 3. In the details pane, right-click EnableTCPA, and then click Modify.
>> <> 4. In the Value data box, type 0 (zero), and then click OK.
>> <> 5. Exit Registry Editor.
>> <> 6. Restart the computer.
>> <>
>> <> More info:
>> <> You may experience network-related problems after you install Windows
>> <> Server 2003 SP2 or the Scalable Networking Pack on a Windows Small
>> <> Business
>> <> Server 2003-based computer
>> <> http://support.microsoft.com/kb/936594
>> <>
>> <> If the problem persists, please help me collect the following
>> information
>> <> for deep research:
>> <>
>> <> 1. What important change did you make before the issue first occurred?
>> <> 2. When the issue occurs, can the clients ping the server or visit
>> server
>> <> network share on SBS?
>> <> 3. When the issue occurs, can the administrator do normal operations
>> such
>> <> as open IE on SBS server?
>> <>
>> <> I am looking forward to hear from you.
>> <>
>> <> If you need further assistance, please don't hesitate to let me know.
>> <>
>> <> Best regards,
>> <>
>> <> Robert Li(MSFT)
>> <>
>> <> Microsoft CSS Online Newsgroup Support
>> <>
>> <> Get Secure! - www.microsoft.com/security
>> <>
>> <> =====================================================
>> <>
>> <> This newsgroup only focuses on SBS technical issues. If you have
>> issues
>> <> regarding other Microsoft products, you'd better post in the
>> corresponding
>> <> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> <> You can locate the newsgroup here:
>> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>> <>
>> <> When opening a new thread via the web interface, we recommend you
>> check
>> <> the
>> <> "Notify me of replies" box to receive e-mail notifications when there
>> are
>> <> any updates in your thread. When responding to posts via your
>> newsreader,
>> <> please "Reply to Group" so that others may learn and benefit from your
>> <> issue.
>> <>
>> <> Microsoft engineers can only focus on one issue per thread. Although
>> we
>> <> provide other information for your reference, we recommend you post
>> <> different incidents in different threads to keep the thread clean. In
>> <> doing
>> <> so, it will ensure your issues are resolved in a timely manner.
>> <>
>> <> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>> <> check http://support.microsoft.com for regional support phone numbers.
>> <>
>> <> Any input or comments in this thread are highly appreciated.
>> <>
>> <> =====================================================
>> <>
>> <> This posting is provided "AS IS" with no warranties, and confers no
>> <> rights.
>> <>
>> <> --------------------
>> <> <From: "Sergio Ricci" <me(a)domainname.com>
>> <> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
>> <> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
>> <> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
>> <> Performing Disk Operations
>> <> <Date: Tue, 27 Nov 2007 13:56:03 -0000
>> <> <Lines: 238
>> <> <X-Priority: 3
>> <> <X-MSMail-Priority: Normal
>> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
>> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
>> <> <X-RFC2646: Format=Flowed; Original
>> <> <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
>> <> <Newsgroups: microsoft.public.windows.server.sbs
>> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
>> <> <Path:
>> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
>> <> <Xref: TK2MSFTNGHUB02.phx.gbl
>> microsoft.public.windows.server.sbs:78255
>> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
>> <> <
>> <> <Hi Robert.
>> <> <
>> <> <Thanks for taking time out to read my post and to reply.
>> <> <
>> <> <Your understanding of the issue is correct; the SBS server freezes
>> for
>> <> <several mins and then works again.
>> <> <
>> <> <I have carried out several diagnostic tests of the server hardware,
>> in
>> <> <particular the HDD and so far everything has come back clean. I will
>> <> <however, check that the components are in the HCL list. In addition I
>> <> will
>> <> <also carry out the tests you have requested (e.g. ping test etc) but
>> I
>> <> <should point out that I only support the server and don't actually
>> <> connect
>> <> <to it myself so it is difficult to find the exact moment that the
>> issue
>> <> <occurs to carry out the requested tests.
>> <> <
>> <> <At this point I would like to mention that from tests I carried out
>> <> <yesterday evening, I am now working on the premis that the issue is
>> being
>> <> <cause by a Virtual Server that is also installed on the SBS server
>> <> (please
>> <> <also see my reply post to Pedro CR). I will need to discuss with the
>> <> client
>> <> <if the Virtual Server can be moved or shut down for a few days to see
>> if
>> <> the
>> <> <problem re-occurs.
>> <> <
>> <> <All the same, I will send you an MPS Report shortly.
>> <> <
>> <> <Once again, thank you for your interest in my issue and for your
>> reply.
>> <> It's
>> <> <greatly appreciated.
>> <> <
>> <> <Sergio
>> <> <
>> <> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
>> <> <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl...
>> <> <> Hi Sergio,
>> <> <>
>> <> <> Thanks for posting in our newsgroup.
>> <> <>
>> <> <> From your description, I know that your SBS server freezes for
>> several
>> <> <> minutes and then work again. If that's not right, please don't
>> hesitate
>> <> to
>> <> <> let me know.
>> <> <>
>> <> <> Based on my experience, the server freeze issue may be caused by
>> <> hardware.
>> <> <> If we narrow down that's caused by hardware, you need to contact
>> the
>> <> <> hardware manufacture for more help. Thanks for your understanding.
>> <> <>
>> <> <> Please let me know the following to make the situation more
>> clearly:
>> <> <>
>> <> <> 1. When the issue occurs, can you ping the server or visit server
>> <> network
>> <> <> share?
>> <> <> 2. When the issue occurs, can the administrator do normal
>> operations
>> <> such
>> <> <> as open IE on SBS server?
>> <> <>
>> <> <> Based on my research, please take the following steps to narrow
>> down
>> <> this
>> <> <> issue:
>> <> <>
>> <> <> Step 1:Please ensure the RAID controller and NICs are in the HCL
>> list:
>> <> <>
>> <> <> Windows Server Catalog of Tested Products
>> <> <> http://www.windowsservercatalog.com/
>> <> <>
>> <> <> Please also install the latest disk controller driver and test
>> again.
>> <> <>
>> <> <> Step 2: Please make a clean boot to make sure the problem is not
>> caused
>> <> <> third party software:
>> <> <>
>> <> <> 1. Click Start->Run...->type msconfig and press Enter.
>> <> <> 2. Click Services tab and select Hide All Microsoft Services and
>> <> Disable
>> <> <> All third party Services.
>> <> <> 3. Click Startup tab and Disable All startup items.
>> <> <> 4. Click OK and choose Restart.
>> <> <> 5. After reboot, check whether the problem still occurs.
>> <> <> 6. If there are no more problems, please use the above steps to
>> enable
>> <> <> services and startup items one by one in order to figure out the
>> root
>> <> <> cause
>> <> <> of this issue.
>> <> <>
>> <> <> Please help me collect the following information and I need to do
>> deep
>> <> <> research:
>> <> <>
>> <> <> 1. What important change did you make before the issue first
>> occurred?
>> <> <>
>> <> <> 2. MPS Report
>> <> <>
>> <> <> 1) Download MPS report tool from:
>> <> <>
>> <>
>> http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
>> <> <> 15706/MPSRPT_SETUPPerf.EXE
>> <> <> 2) Run the MPSRPT_SETUPPerf.exe on the server box.
>> <> <> 3) Wait for 10~15 minutes.
>> <> <> 4) Open Windows explorer, navigate to
>> <> <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\
>> <> <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject:
>> <> <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when
>> <> Performing
>> <> <> Disk Operations.
>> <> <>
>> <> <> I am looking forward to hear from you.
>> <> <>
>> <> <> If you need further assistance, please don't hesitate to let me
>> know.
>> <> <>
>> <> <> Best regards,
>> <> <>
>> <> <> Robert Li(MSFT)
>> <> <>
>> <> <> Microsoft CSS Online Newsgroup Support
>> <> <>
>> <> <> Get Secure! - www.microsoft.com/security
>> <> <>
>> <> <> =====================================================
>> <> <>
>> <> <> This newsgroup only focuses on SBS technical issues. If you have
>> issues
>> <> <> regarding other Microsoft products, you'd better post in the
>> <> corresponding
>> <> <> newsgroups so that they can be resolved in an efficient and timely
>> <> manner.
>> <> <> You can locate the newsgroup here:
>> <> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>> <> <>
>> <> <> When opening a new thread via the web interface, we recommend you
>> check
>> <> <> the
>> <> <> "Notify me of replies" box to receive e-mail notifications when
>> there
>> <> are
>> <> <> any updates in your thread. When responding to posts via your
>> <> newsreader,
>> <> <> please "Reply to Group" so that others may learn and benefit from
>> your
>> <> <> issue.
>> <> <>
>> <> <> Microsoft engineers can only focus on one issue per thread.
>> Although
>> we
>> <> <> provide other information for your reference, we recommend you post
>> <> <> different incidents in different threads to keep the thread clean.
>> In
>> <> <> doing
>> <> <> so, it will ensure your issues are resolved in a timely manner.
>> <> <>
>> <> <> For urgent issues, you may want to contact Microsoft CSS directly.
>> <> Please
>> <> <> check http://support.microsoft.com for regional support phone
>> numbers.
>> <> <>
>> <> <> Any input or comments in this thread are highly appreciated.
>> <> <>
>> <> <> =====================================================
>> <> <>
>> <> <> This posting is provided "AS IS" with no warranties, and confers no
>> <> <> rights.
>> <> <>
>> <> <> --------------------
>> <> <> <From: "Sergio Ricci" <me(a)domainname.com>
>> <> <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when
>> <> Performing
>> <> <> Disk Operations
>> <> <> <Date: Mon, 26 Nov 2007 12:57:58 -0000
>> <> <> <Lines: 68
>> <> <> <X-Priority: 3
>> <> <> <X-MSMail-Priority: Normal
>> <> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
>> <> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
>> <> <> <X-RFC2646: Format=Flowed; Original
>> <> <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
>> <> <> <Newsgroups: microsoft.public.windows.server.sbs
>> <> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
>> <> <> <Path:
>> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
>> <> <> <Xref: TK2MSFTNGHUB02.phx.gbl
>> microsoft.public.windows.server.sbs:77994
>> <> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
>> <> <> <
>> <> <> <Hi,
>> <> <> <
>> <> <> <We have a Win2K3 SBS Premium SBS server that has for the past few
>> <> weeks
>> <> <> been
>> <> <> <having a few issues that primarily manifests itself as the server
>> <> <> freezing
>> <> <> <for several minutes and then springing back to into life. During
>> the
>> <> <> freeze,
>> <> <> <users get the popup balloon telling them that Exchange is trying
>> to
>> <> <> retrieve
>> <> <> <data.
>> <> <> <
>> <> <> <Going through the logs Event ID: 7011 always seems to be recorded
>> <> around
>> <> <> the
>> <> <> <time the freeze happens. I've done some research into Event ID:
>> 7011
>> <> and
>> <> <> <most suggest modifying the following registry key:
>> <> <> <
>> <> <>
>> <>
>> <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter
>> <> <> s
>> <> <> <
>> <> <> <[REG_DWORD] autodisconnect:
>> <> <> <Original Value: 'f'
>> <> <> <New Current Value: 'fff'
>> <> <> <
>> <> <> <Making this change does appear to have improved matters but what
>> is
>> <> also
>> <> <> <worrying is that certain disk operations such as 'chkdsk' and
>> 'defrag'
>> <> <> cause
>> <> <> <the server to freeze resulting in the above log being written. I
>> have
>> <> <> <downloaded an evaluation copy of Diskeeper 2008 Server to see if
>> that
>> <> <> also
>> <> <> <caused a reoccurance of the issue and it does.
>> <> <> <
>> <> <> <A bit about the server:
>> <> <> <
>> <> <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS
>> <> <> <Hardware: HP Proliant ML350 G4
>> <> <> <Smart Array 641 Controller
>> <> <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive
>> <> <> <x1 Intel Xeon 3.4GHz Processor
>> <> <> <4GB of RAM
>> <> <> <
>> <> <> <Hardware diagnostics (using HP diag tools) show no issues.
>> <> <> <
>> <> <> <Changes Made so far:
>> <> <> <
>> <> <> <The following are the changes made (with results) made to the
>> server
>> <> so
>> <> <> far
>> <> <> <in an attempt to resolve the issue:
>> <> <> <1) Recreated NtFrs database (result = no improvement)
>> <> <> <2) Ensured that NtFrs database was excluded from any virus scans
>> <> <> <3) Removed Windows Defender from Server (no improvement)
>> <> <> <4) Stopped SQL/ACT7 database instances from auto starting
>> <> <> <5) Increased File Replication Service Timeout by modifying the
>> <> registry
>> <> <> <value above from it's old value to it's new current value (appears
>> to
>> <> <> have
>> <> <> <improved things so far but only made the change late last week so
>> <> still
>> <> <> <early days).
>> <> <> <
>> <> <> <NB: When I say thatit has 'improved things', it has improved
>> things
>> to
>> <> <> the
>> <> <> <point that the server doesn't appear to hang as often during the
>> day
>> <> <> under
>> <> <> <normal use (before it would freeze 5 or more times a day, now we
>> are
>> <> <> <currently down to 1 freeze in 2 days). However, if I run 'chkdsk'
>> or
>> <> try
>> <> <> to
>> <> <> <do a 'defrag', it will still freeze for several minutes.
>> <> <> <
>> <> <> <The freeze also causes me to lose any network connection and
>> affects
>> <> the
>> <> <> <connection to the server via the remote management board.
>> <> <> <
>> <> <> <Any help or pointers in resolving the issue would be greatly
>> <> appreciated.
>> <> <> <
>> <> <> <Thansk in advance.
>> <> <> <Sergio
>> <> <> <
>> <> <> <PS: Does Microsoft Professional Support no longer offer the email
>> <> support
>> <> <> <option which cost, from memory, under �100 which was great if it
>> <> wasn't
>> <> <> <urgent? I only seem to find the 'phone and email' support offering
>> <> which
>> <> <> <costs �199+VAT
>> <> <> <
>> <> <> <
>> <> <> <
>> <> <>
>> <> <
>> <> <
>> <> <
>> <>
>> <
>> <
>> <
>>
>
>


From: Robert Li [MSFT] on
Hi Sergio,

Thanks for your reply.

I am glad to know the issue was resolved after you changed the Virtual
Machine setting. I'd like to give you the following information for your
reference:

Backing Up and Restoring Windows Small Business Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyID=487736f8-f6f5-436d-
a82d-0c8d66e2a634&DisplayLang=en

Windows Small Business Server Technical Library
http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/4082d695
-2075-4ca0-8af8-99fd04b78b2d1033.mspx?mfr=true

Hope this helps.

If you have any questions in further, please don't hesitate to post in our
newsgroup.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: "Sergio Ricci" <me(a)domainname.com>
<References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
<OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
<aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
<eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
<rcBr#tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl>
<#gQMT$oMIHA.5208(a)TK2MSFTNGP04.phx.gbl>
<Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
Performing Disk Operations
<Date: Wed, 5 Dec 2007 17:24:34 -0000
<Lines: 671
<X-Priority: 3
<X-MSMail-Priority: Normal
<X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
<X-RFC2646: Format=Flowed; Response
<Message-ID: <e33CpR2NIHA.4272(a)TK2MSFTNGP06.phx.gbl>
<Newsgroups: microsoft.public.windows.server.sbs
<NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
<Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:80233
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Hi.
<
<It turns out that the issue, in my case, was related to the Virtual Server
<that was running on the hardware.
<
<I made configuration changes to the Virtual Machine as suggested by one of
<the VMware experts on the VMware Server forum and the issue appears to
have
<been resolved. Please see the following URL for more info:
<
<http://communities.vmware.com/thread/115000?tstart=100
<
<Thanks to all for taking an interest in my issue and for taking to time to
<assist. It's appreciated.
<
<Sergio
<
<"Sergio Ricci" <me(a)domainname.com> wrote in message
<news:%23gQMT$oMIHA.5208(a)TK2MSFTNGP04.phx.gbl...
<> Hi Robert,
<>
<> Thanks again for posting back.
<>
<> I have already scheduled next Monday to shutdown the virtual machine and
<> see if the problem reoccurs. I will of course post back with the results.
<>
<> I have also had some feedback from VMware experts who have suggested I
<> make some configuration changes to the VM. These changes have been
planned
<> for this evening (depending on what time I finish a planned task which
is
<> also scheduled for this evening).
<>
<> I'll let you know how testing goes and thanks again for your reply.
<> Sergio
<>
<> "Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
<> news:rcBr%23tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl...
<>> Hi Sergio,
<>>
<>> Thanks for your reply.
<>>
<>> Since the issue occurs after you installed VMware Server, you can
arrange
<>> time to stop VMware Server and see if the problem can be reproduced.
<>> Based
<>> on my experince, VMware Server can cost large amount of system resource
<>> and
<>> cause the server losing response.
<>>
<>> I am looking forward to hear from you.
<>>
<>> If you need further assistance, please don't hesitate to let me know.
<>>
<>> Best regards,
<>>
<>> Robert Li(MSFT)
<>>
<>> Microsoft CSS Online Newsgroup Support
<>>
<>> Get Secure! - www.microsoft.com/security
<>>
<>> =====================================================
<>>
<>> This newsgroup only focuses on SBS technical issues. If you have issues
<>> regarding other Microsoft products, you'd better post in the
<>> corresponding
<>> newsgroups so that they can be resolved in an efficient and timely
<>> manner.
<>> You can locate the newsgroup here:
<>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>>
<>> When opening a new thread via the web interface, we recommend you check
<>> the
<>> "Notify me of replies" box to receive e-mail notifications when there
are
<>> any updates in your thread. When responding to posts via your
newsreader,
<>> please "Reply to Group" so that others may learn and benefit from your
<>> issue.
<>>
<>> Microsoft engineers can only focus on one issue per thread. Although we
<>> provide other information for your reference, we recommend you post
<>> different incidents in different threads to keep the thread clean. In
<>> doing
<>> so, it will ensure your issues are resolved in a timely manner.
<>>
<>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<>> check http://support.microsoft.com for regional support phone numbers.
<>>
<>> Any input or comments in this thread are highly appreciated.
<>>
<>> =====================================================
<>>
<>> This posting is provided "AS IS" with no warranties, and confers no
<>> rights.
<>>
<>> --------------------
<>> <From: "Sergio Ricci" <name(a)domain.com>
<>> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<>> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
<>> <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
<>> <aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
<>> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
<>> Performing Disk Operations
<>> <Date: Thu, 29 Nov 2007 00:20:06 -0000
<>> <Lines: 469
<>> <X-Priority: 3
<>> <X-MSMail-Priority: Normal
<>> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
<>> <X-RFC2646: Format=Flowed; Original
<>> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
<>> <X-Antivirus: avast! (VPS 071128-0, 28/11/2007), Outbound message
<>> <X-Antivirus-Status: Clean
<>> <Message-ID: <eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
<>> <Newsgroups: microsoft.public.windows.server.sbs
<>> <NNTP-Posting-Host: 88-97-154-134.dsl.zen.co.uk 88.97.154.134
<>> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
<>> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:78728
<>> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<>> <
<>> <Robert,
<>> <
<>> <Thanks again for your reply.
<>> <
<>> <I have gone through your post and carried out your suggestion where
<>> <possible. I would advise the following however:
<>> <
<>> <Step 1: The anti-virus has 'On-Access' scanning disabled. All the same
I
<>> <confirm that the anti-virus is already configured to exclude from
<>> scanning
<>> <the directories listed in the KB.
<>> <
<>> <Step 2: The 'Interval Time' for both the Mailbox Store and Public Store
<>> were
<>> <already set to 'Never'. All the same I enabled Full-Text Indexing,
<>> waited
<>> <until it was enabled, set the 'Interval Time' to 'Always' and applied
<>> the
<>> <settings. I then waited a short time, reset the 'Interval Time' back to
<>> <'Never' and then disabled Full-Text Indexing.
<>> <
<>> <I confirm that 'Checksum Offloading' (as I believe it's called by HP)
is
<>> <disabled on all NIC's using the Advanced tab of each NIC and confirm
<>> that
<>> <the registry value 'EnableTCPA' mentioned in your post is already set
to
<>> '0'
<>> <(zero).
<>> <
<>> <None of the NIC's on the server appear to have the 'Receive Side
<>> Scaling'
<>> <feature and so no action was taken in this respect.
<>> <
<>> <To answer your questions at the end of your post:
<>> <
<>> <1) Having checked the change logs and emails, it would appear that the
<>> issue
<>> <(Event ID: 7011 in the Windows System log) began to appear around the
<>> time
<>> <that VMware Server was installed. This re-enforces my working premis
<>> that
<>> <the issue is caused by the Virtual Server that is also installed on the
<>> box.
<>> <I have posted in the VMware forum also so I am hoping to receive some
<>> <suggestions as to configuration changes that I can make to the Virtual
<>> <Machine that may resolve the issue.
<>> <
<>> <2) The users I have spoken to and who connect to the SBS server have
<>> <informed me that when the issue occurs they are essentially unable to
<>> access
<>> <anything on the server. I will have to confirm at a later date if the
<>> <clients are able to ping the server.
<>> <
<>> <3) When the issue occurs I am unable to open anything on the server
but
<>> I
<>> <should reiterate that I am managing and accessing the server remotely
<>> via
<>> <RDP.
<>> <
<>> <Thank you again for your time.
<>> <Kind regards,
<>> <Sergio
<>> <
<>> <
<>> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
<>> <news:aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl...
<>> <> Hi Sergio,
<>> <>
<>> <> Thanks for your reply.
<>> <>
<>> <> I researched your log and found the following event:
<>> <>
<>> <> Event Type: Error
<>> <> Event Source: MSExchangeIS Mailbox Store
<>> <> Event Category: General
<>> <> Event ID: 7200
<>> <> Computer: SERVER1
<>> <> Description:
<>> <> Background thread FDoUpdateCatalog halted on database "First Storage
<>> <> Group\Mailbox Store (SERVER1)" due to error code 0x80004005.
<>> <>
<>> <> The thread FDoUpdateCatalog may cause server freezing. Based on my
<>> <> research, please take the following steps to narrow down this issue:
<>> <>
<>> <> Step 1: This issue occurs when the Anti Virus software scans Exchange
<>> <> directory. Please ensure the Exchange directory is excluded from
<>> scanning.
<>> <>
<>> <> More info:
<>> <>
<>> <> 823166 Overview of Exchange Server 2003 and antivirus software
<>> <> http://support.microsoft.com/?id=823166
<>> <>
<>> <> Step 2: This issue occurs when full-text indexing was originally set
<>> with
<>> <> the interval time set to always, and then the service was disabled
and
<>> the
<>> <> interval time was not set back to never. To fix this ,please take the
<>> <> steps
<>> <> in the following KB:
<>> <>
<>> <> XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in
<>> <> Application
<>> <> Event Log Every 15 Minutes
<>> <> http://support.microsoft.com/?id=293370
<>> <>
<>> <> Note: This KB also applies to Exchange 2003.
<>> <>
<>> <> In addition, I noticed you installed Windows 2003 SP2 on SBS server,
<>> it
<>> <> may
<>> <> cause network problem, please Disable Receive Side Scaling and
<>> offloading
<>> <> support. Then check again.
<>> <>
<>> <> To disable Receive Side Scaling:
<>> <>
<>> <> 1. Click Start, click Run, type ncpa.cpl, and then click OK.
<>> <> 2. Right-click a network adapter object, and then click Properties.
<>> <> 3. Click Configure, and then click the Advanced tab.
<>> <> 4. In the Property list, click Receive Side Scaling, click Disable
in
<>> the
<>> <> Value list, and then click OK.
<>> <> 5. Repeat steps 2 through 4 for each network adapter object.
<>> <>
<>> <> To disable offloading support
<>> <>
<>> <> 1. Click Start, click Run, type regedit, and then click OK.
<>> <> 2. Locate and then click the following registry subkey:
<>> <> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
<>> <> 3. In the details pane, right-click EnableTCPA, and then click
Modify.
<>> <> 4. In the Value data box, type 0 (zero), and then click OK.
<>> <> 5. Exit Registry Editor.
<>> <> 6. Restart the computer.
<>> <>
<>> <> More info:
<>> <> You may experience network-related problems after you install Windows
<>> <> Server 2003 SP2 or the Scalable Networking Pack on a Windows Small
<>> <> Business
<>> <> Server 2003-based computer
<>> <> http://support.microsoft.com/kb/936594
<>> <>
<>> <> If the problem persists, please help me collect the following
<>> information
<>> <> for deep research:
<>> <>
<>> <> 1. What important change did you make before the issue first
occurred?
<>> <> 2. When the issue occurs, can the clients ping the server or visit
<>> server
<>> <> network share on SBS?
<>> <> 3. When the issue occurs, can the administrator do normal operations
<>> such
<>> <> as open IE on SBS server?
<>> <>
<>> <> I am looking forward to hear from you.
<>> <>
<>> <> If you need further assistance, please don't hesitate to let me know.
<>> <>
<>> <> Best regards,
<>> <>
<>> <> Robert Li(MSFT)
<>> <>
<>> <> Microsoft CSS Online Newsgroup Support
<>> <>
<>> <> Get Secure! - www.microsoft.com/security
<>> <>
<>> <> =====================================================
<>> <>
<>> <> This newsgroup only focuses on SBS technical issues. If you have
<>> issues
<>> <> regarding other Microsoft products, you'd better post in the
<>> corresponding
<>> <> newsgroups so that they can be resolved in an efficient and timely
<>> manner.
<>> <> You can locate the newsgroup here:
<>> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>> <>
<>> <> When opening a new thread via the web interface, we recommend you
<>> check
<>> <> the
<>> <> "Notify me of replies" box to receive e-mail notifications when
there
<>> are
<>> <> any updates in your thread. When responding to posts via your
<>> newsreader,
<>> <> please "Reply to Group" so that others may learn and benefit from
your
<>> <> issue.
<>> <>
<>> <> Microsoft engineers can only focus on one issue per thread. Although
<>> we
<>> <> provide other information for your reference, we recommend you post
<>> <> different incidents in different threads to keep the thread clean. In
<>> <> doing
<>> <> so, it will ensure your issues are resolved in a timely manner.
<>> <>
<>> <> For urgent issues, you may want to contact Microsoft CSS directly.
<>> Please
<>> <> check http://support.microsoft.com for regional support phone
numbers.
<>> <>
<>> <> Any input or comments in this thread are highly appreciated.
<>> <>
<>> <> =====================================================
<>> <>
<>> <> This posting is provided "AS IS" with no warranties, and confers no
<>> <> rights.
<>> <>
<>> <> --------------------
<>> <> <From: "Sergio Ricci" <me(a)domainname.com>
<>> <> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<>> <> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
<>> <> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
<>> <> Performing Disk Operations
<>> <> <Date: Tue, 27 Nov 2007 13:56:03 -0000
<>> <> <Lines: 238
<>> <> <X-Priority: 3
<>> <> <X-MSMail-Priority: Normal
<>> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<>> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
<>> <> <X-RFC2646: Format=Flowed; Original
<>> <> <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
<>> <> <Newsgroups: microsoft.public.windows.server.sbs
<>> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
<>> <> <Path:
<>> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
<>> <> <Xref: TK2MSFTNGHUB02.phx.gbl
<>> microsoft.public.windows.server.sbs:78255
<>> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<>> <> <
<>> <> <Hi Robert.
<>> <> <
<>> <> <Thanks for taking time out to read my post and to reply.
<>> <> <
<>> <> <Your understanding of the issue is correct; the SBS server freezes
<>> for
<>> <> <several mins and then works again.
<>> <> <
<>> <> <I have carried out several diagnostic tests of the server hardware,
<>> in
<>> <> <particular the HDD and so far everything has come back clean. I will
<>> <> <however, check that the components are in the HCL list. In addition
I
<>> <> will
<>> <> <also carry out the tests you have requested (e.g. ping test etc)
but
<>> I
<>> <> <should point out that I only support the server and don't actually
<>> <> connect
<>> <> <to it myself so it is difficult to find the exact moment that the
<>> issue
<>> <> <occurs to carry out the requested tests.
<>> <> <
<>> <> <At this point I would like to mention that from tests I carried out
<>> <> <yesterday evening, I am now working on the premis that the issue is
<>> being
<>> <> <cause by a Virtual Server that is also installed on the SBS server
<>> <> (please
<>> <> <also see my reply post to Pedro CR). I will need to discuss with the
<>> <> client
<>> <> <if the Virtual Server can be moved or shut down for a few days to
see
<>> if
<>> <> the
<>> <> <problem re-occurs.
<>> <> <
<>> <> <All the same, I will send you an MPS Report shortly.
<>> <> <
<>> <> <Once again, thank you for your interest in my issue and for your
<>> reply.
<>> <> It's
<>> <> <greatly appreciated.
<>> <> <
<>> <> <Sergio
<>> <> <
<>> <> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
<>> <> <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl...
<>> <> <> Hi Sergio,
<>> <> <>
<>> <> <> Thanks for posting in our newsgroup.
<>> <> <>
<>> <> <> From your description, I know that your SBS server freezes for
<>> several
<>> <> <> minutes and then work again. If that's not right, please don't
<>> hesitate
<>> <> to
<>> <> <> let me know.
<>> <> <>
<>> <> <> Based on my experience, the server freeze issue may be caused by
<>> <> hardware.
<>> <> <> If we narrow down that's caused by hardware, you need to contact
<>> the
<>> <> <> hardware manufacture for more help. Thanks for your understanding.
<>> <> <>
<>> <> <> Please let me know the following to make the situation more
<>> clearly:
<>> <> <>
<>> <> <> 1. When the issue occurs, can you ping the server or visit server
<>> <> network
<>> <> <> share?
<>> <> <> 2. When the issue occurs, can the administrator do normal
<>> operations
<>> <> such
<>> <> <> as open IE on SBS server?
<>> <> <>
<>> <> <> Based on my research, please take the following steps to narrow
<>> down
<>> <> this
<>> <> <> issue:
<>> <> <>
<>> <> <> Step 1:Please ensure the RAID controller and NICs are in the HCL
<>> list:
<>> <> <>
<>> <> <> Windows Server Catalog of Tested Products
<>> <> <> http://www.windowsservercatalog.com/
<>> <> <>
<>> <> <> Please also install the latest disk controller driver and test
<>> again.
<>> <> <>
<>> <> <> Step 2: Please make a clean boot to make sure the problem is not
<>> caused
<>> <> <> third party software:
<>> <> <>
<>> <> <> 1. Click Start->Run...->type msconfig and press Enter.
<>> <> <> 2. Click Services tab and select Hide All Microsoft Services and
<>> <> Disable
<>> <> <> All third party Services.
<>> <> <> 3. Click Startup tab and Disable All startup items.
<>> <> <> 4. Click OK and choose Restart.
<>> <> <> 5. After reboot, check whether the problem still occurs.
<>> <> <> 6. If there are no more problems, please use the above steps to
<>> enable
<>> <> <> services and startup items one by one in order to figure out the
<>> root
<>> <> <> cause
<>> <> <> of this issue.
<>> <> <>
<>> <> <> Please help me collect the following information and I need to do
<>> deep
<>> <> <> research:
<>> <> <>
<>> <> <> 1. What important change did you make before the issue first
<>> occurred?
<>> <> <>
<>> <> <> 2. MPS Report
<>> <> <>
<>> <> <> 1) Download MPS report tool from:
<>> <> <>
<>> <>
<>>
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
<>> <> <> 15706/MPSRPT_SETUPPerf.EXE
<>> <> <> 2) Run the MPSRPT_SETUPPerf.exe on the server box.
<>> <> <> 3) Wait for 10~15 minutes.
<>> <> <> 4) Open Windows explorer, navigate to
<>> <> <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\
<>> <> <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject:
<>> <> <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when
<>> <> Performing
<>> <> <> Disk Operations.
<>> <> <>
<>> <> <> I am looking forward to hear from you.
<>> <> <>
<>> <> <> If you need further assistance, please don't hesitate to let me
<>> know.
<>> <> <>
<>> <> <> Best regards,
<>> <> <>
<>> <> <> Robert Li(MSFT)
<>> <> <>
<>> <> <> Microsoft CSS Online Newsgroup Support
<>> <> <>
<>> <> <> Get Secure! - www.microsoft.com/security
<>> <> <>
<>> <> <> =====================================================
<>> <> <>
<>> <> <> This newsgroup only focuses on SBS technical issues. If you have
<>> issues
<>> <> <> regarding other Microsoft products, you'd better post in the
<>> <> corresponding
<>> <> <> newsgroups so that they can be resolved in an efficient and timely
<>> <> manner.
<>> <> <> You can locate the newsgroup here:
<>> <> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>> <> <>
<>> <> <> When opening a new thread via the web interface, we recommend you
<>> check
<>> <> <> the
<>> <> <> "Notify me of replies" box to receive e-mail notifications when
<>> there
<>> <> are
<>> <> <> any updates in your thread. When responding to posts via your
<>> <> newsreader,
<>> <> <> please "Reply to Group" so that others may learn and benefit from
<>> your
<>> <> <> issue.
<>> <> <>
<>> <> <> Microsoft engineers can only focus on one issue per thread.
<>> Although
<>> we
<>> <> <> provide other information for your reference, we recommend you
post
<>> <> <> different incidents in different threads to keep the thread
clean.
<>> In
<>> <> <> doing
<>> <> <> so, it will ensure your issues are resolved in a timely manner.
<>> <> <>
<>> <> <> For urgent issues, you may want to contact Microsoft CSS directly.
<>> <> Please
<>> <> <> check http://support.microsoft.com for regional support phone
<>> numbers.
<>> <> <>
<>> <> <> Any input or comments in this thread are highly appreciated.
<>> <> <>
<>> <> <> =====================================================
<>> <> <>
<>> <> <> This posting is provided "AS IS" with no warranties, and confers
no
<>> <> <> rights.
<>> <> <>
<>> <> <> --------------------
<>> <> <> <From: "Sergio Ricci" <me(a)domainname.com>
<>> <> <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when
<>> <> Performing
<>> <> <> Disk Operations
<>> <> <> <Date: Mon, 26 Nov 2007 12:57:58 -0000
<>> <> <> <Lines: 68
<>> <> <> <X-Priority: 3
<>> <> <> <X-MSMail-Priority: Normal
<>> <> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
<>> <> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
<>> <> <> <X-RFC2646: Format=Flowed; Original
<>> <> <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
<>> <> <> <Newsgroups: microsoft.public.windows.server.sbs
<>> <> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
<>> <> <> <Path:
<>> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
<>> <> <> <Xref: TK2MSFTNGHUB02.phx.gbl
<>> microsoft.public.windows.server.sbs:77994
<>> <> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<>> <> <> <
<>> <> <> <Hi,
<>> <> <> <
<>> <> <> <We have a Win2K3 SBS Premium SBS server that has for the past few
<>> <> weeks
<>> <> <> been
<>> <> <> <having a few issues that primarily manifests itself as the server
<>> <> <> freezing
<>> <> <> <for several minutes and then springing back to into life. During
<>> the
<>> <> <> freeze,
<>> <> <> <users get the popup balloon telling them that Exchange is trying
<>> to
<>> <> <> retrieve
<>> <> <> <data.
<>> <> <> <
<>> <> <> <Going through the logs Event ID: 7011 always seems to be recorded
<>> <> around
<>> <> <> the
<>> <> <> <time the freeze happens. I've done some research into Event ID:
<>> 7011
<>> <> and
<>> <> <> <most suggest modifying the following registry key:
<>> <> <> <
<>> <> <>
<>> <>
<>>
<HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter
<>> <> <> s
<>> <> <> <
<>> <> <> <[REG_DWORD] autodisconnect:
<>> <> <> <Original Value: 'f'
<>> <> <> <New Current Value: 'fff'
<>> <> <> <
<>> <> <> <Making this change does appear to have improved matters but what
<>> is
<>> <> also
<>> <> <> <worrying is that certain disk operations such as 'chkdsk' and
<>> 'defrag'
<>> <> <> cause
<>> <> <> <the server to freeze resulting in the above log being written. I
<>> have
<>> <> <> <downloaded an evaluation copy of Diskeeper 2008 Server to see if
<>> that
<>> <> <> also
<>> <> <> <caused a reoccurance of the issue and it does.
<>> <> <> <
<>> <> <> <A bit about the server:
<>> <> <> <
<>> <> <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS
<>> <> <> <Hardware: HP Proliant ML350 G4
<>> <> <> <Smart Array 641 Controller
<>> <> <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive
<>> <> <> <x1 Intel Xeon 3.4GHz Processor
<>> <> <> <4GB of RAM
<>> <> <> <
<>> <> <> <Hardware diagnostics (using HP diag tools) show no issues.
<>> <> <> <
<>> <> <> <Changes Made so far:
<>> <> <> <
<>> <> <> <The following are the changes made (with results) made to the
<>> server
<>> <> so
<>> <> <> far
<>> <> <> <in an attempt to resolve the issue:
<>> <> <> <1) Recreated NtFrs database (result = no improvement)
<>> <> <> <2) Ensured that NtFrs database was excluded from any virus scans
<>> <> <> <3) Removed Windows Defender from Server (no improvement)
<>> <> <> <4) Stopped SQL/ACT7 database instances from auto starting
<>> <> <> <5) Increased File Replication Service Timeout by modifying the
<>> <> registry
<>> <> <> <value above from it's old value to it's new current value
(appears
<>> to
<>> <> <> have
<>> <> <> <improved things so far but only made the change late last week so
<>> <> still
<>> <> <> <early days).
<>> <> <> <
<>> <> <> <NB: When I say thatit has 'improved things', it has improved
<>> things
<>> to
<>> <> <> the
<>> <> <> <point that the server doesn't appear to hang as often during the
<>> day
<>> <> <> under
<>> <> <> <normal use (before it would freeze 5 or more times a day, now we
<>> are
<>> <> <> <currently down to 1 freeze in 2 days). However, if I run
'chkdsk'
<>> or
<>> <> try
<>> <> <> to
<>> <> <> <do a 'defrag', it will still freeze for several minutes.
<>> <> <> <
<>> <> <> <The freeze also causes me to lose any network connection and
<>> affects
<>> <> the
<>> <> <> <connection to the server via the remote management board.
<>> <> <> <
<>> <> <> <Any help or pointers in resolving the issue would be greatly
<>> <> appreciated.
<>> <> <> <
<>> <> <> <Thansk in advance.
<>> <> <> <Sergio
<>> <> <> <
<>> <> <> <PS: Does Microsoft Professional Support no longer offer the email
<>> <> support
<>> <> <> <option which cost, from memory, under �100 which was great if it
<>> <> wasn't
<>> <> <> <urgent? I only seem to find the 'phone and email' support
offering
<>> <> which
<>> <> <> <costs �199+VAT
<>> <> <> <
<>> <> <> <
<>> <> <> <
<>> <> <>
<>> <> <
<>> <> <
<>> <> <
<>> <>
<>> <
<>> <
<>> <
<>>
<>
<>
<
<
<

From: Sergio Ricci on
Hi Robert,

Thanks for your reply and for the document links.

Regards,
Sergio

"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
news:OWqXFn6NIHA.5204(a)TK2MSFTNGHUB02.phx.gbl...
> Hi Sergio,
>
> Thanks for your reply.
>
> I am glad to know the issue was resolved after you changed the Virtual
> Machine setting. I'd like to give you the following information for your
> reference:
>
> Backing Up and Restoring Windows Small Business Server 2003
> http://www.microsoft.com/downloads/details.aspx?FamilyID=487736f8-f6f5-436d-
> a82d-0c8d66e2a634&DisplayLang=en
>
> Windows Small Business Server Technical Library
> http://technet2.microsoft.com/WindowsServerSolutions/SBS/en/library/4082d695
> -2075-4ca0-8af8-99fd04b78b2d1033.mspx?mfr=true
>
> Hope this helps.
>
> If you have any questions in further, please don't hesitate to post in our
> newsgroup.
>
> Best regards,
>
> Robert Li(MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
>
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
> <From: "Sergio Ricci" <me(a)domainname.com>
> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
> <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
> <aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
> <eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
> <rcBr#tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl>
> <#gQMT$oMIHA.5208(a)TK2MSFTNGP04.phx.gbl>
> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
> Performing Disk Operations
> <Date: Wed, 5 Dec 2007 17:24:34 -0000
> <Lines: 671
> <X-Priority: 3
> <X-MSMail-Priority: Normal
> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
> <X-RFC2646: Format=Flowed; Response
> <Message-ID: <e33CpR2NIHA.4272(a)TK2MSFTNGP06.phx.gbl>
> <Newsgroups: microsoft.public.windows.server.sbs
> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
> <Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:80233
> <X-Tomcat-NG: microsoft.public.windows.server.sbs
> <
> <Hi.
> <
> <It turns out that the issue, in my case, was related to the Virtual
> Server
> <that was running on the hardware.
> <
> <I made configuration changes to the Virtual Machine as suggested by one
> of
> <the VMware experts on the VMware Server forum and the issue appears to
> have
> <been resolved. Please see the following URL for more info:
> <
> <http://communities.vmware.com/thread/115000?tstart=100
> <
> <Thanks to all for taking an interest in my issue and for taking to time
> to
> <assist. It's appreciated.
> <
> <Sergio
> <
> <"Sergio Ricci" <me(a)domainname.com> wrote in message
> <news:%23gQMT$oMIHA.5208(a)TK2MSFTNGP04.phx.gbl...
> <> Hi Robert,
> <>
> <> Thanks again for posting back.
> <>
> <> I have already scheduled next Monday to shutdown the virtual machine
> and
> <> see if the problem reoccurs. I will of course post back with the
> results.
> <>
> <> I have also had some feedback from VMware experts who have suggested I
> <> make some configuration changes to the VM. These changes have been
> planned
> <> for this evening (depending on what time I finish a planned task which
> is
> <> also scheduled for this evening).
> <>
> <> I'll let you know how testing goes and thanks again for your reply.
> <> Sergio
> <>
> <> "Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
> <> news:rcBr%23tnMIHA.4380(a)TK2MSFTNGHUB02.phx.gbl...
> <>> Hi Sergio,
> <>>
> <>> Thanks for your reply.
> <>>
> <>> Since the issue occurs after you installed VMware Server, you can
> arrange
> <>> time to stop VMware Server and see if the problem can be reproduced.
> <>> Based
> <>> on my experince, VMware Server can cost large amount of system
> resource
> <>> and
> <>> cause the server losing response.
> <>>
> <>> I am looking forward to hear from you.
> <>>
> <>> If you need further assistance, please don't hesitate to let me know.
> <>>
> <>> Best regards,
> <>>
> <>> Robert Li(MSFT)
> <>>
> <>> Microsoft CSS Online Newsgroup Support
> <>>
> <>> Get Secure! - www.microsoft.com/security
> <>>
> <>> =====================================================
> <>>
> <>> This newsgroup only focuses on SBS technical issues. If you have
> issues
> <>> regarding other Microsoft products, you'd better post in the
> <>> corresponding
> <>> newsgroups so that they can be resolved in an efficient and timely
> <>> manner.
> <>> You can locate the newsgroup here:
> <>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> <>>
> <>> When opening a new thread via the web interface, we recommend you
> check
> <>> the
> <>> "Notify me of replies" box to receive e-mail notifications when there
> are
> <>> any updates in your thread. When responding to posts via your
> newsreader,
> <>> please "Reply to Group" so that others may learn and benefit from your
> <>> issue.
> <>>
> <>> Microsoft engineers can only focus on one issue per thread. Although
> we
> <>> provide other information for your reference, we recommend you post
> <>> different incidents in different threads to keep the thread clean. In
> <>> doing
> <>> so, it will ensure your issues are resolved in a timely manner.
> <>>
> <>> For urgent issues, you may want to contact Microsoft CSS directly.
> Please
> <>> check http://support.microsoft.com for regional support phone numbers.
> <>>
> <>> Any input or comments in this thread are highly appreciated.
> <>>
> <>> =====================================================
> <>>
> <>> This posting is provided "AS IS" with no warranties, and confers no
> <>> rights.
> <>>
> <>> --------------------
> <>> <From: "Sergio Ricci" <name(a)domain.com>
> <>> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
> <>> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
> <>> <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
> <>> <aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl>
> <>> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
> <>> Performing Disk Operations
> <>> <Date: Thu, 29 Nov 2007 00:20:06 -0000
> <>> <Lines: 469
> <>> <X-Priority: 3
> <>> <X-MSMail-Priority: Normal
> <>> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
> <>> <X-RFC2646: Format=Flowed; Original
> <>> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
> <>> <X-Antivirus: avast! (VPS 071128-0, 28/11/2007), Outbound message
> <>> <X-Antivirus-Status: Clean
> <>> <Message-ID: <eN1hi2hMIHA.4308(a)TK2MSFTNGP05.phx.gbl>
> <>> <Newsgroups: microsoft.public.windows.server.sbs
> <>> <NNTP-Posting-Host: 88-97-154-134.dsl.zen.co.uk 88.97.154.134
> <>> <Path:
> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
> <>> <Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.sbs:78728
> <>> <X-Tomcat-NG: microsoft.public.windows.server.sbs
> <>> <
> <>> <Robert,
> <>> <
> <>> <Thanks again for your reply.
> <>> <
> <>> <I have gone through your post and carried out your suggestion where
> <>> <possible. I would advise the following however:
> <>> <
> <>> <Step 1: The anti-virus has 'On-Access' scanning disabled. All the
> same
> I
> <>> <confirm that the anti-virus is already configured to exclude from
> <>> scanning
><>> <the directories listed in the KB.
> <>> <
> <>> <Step 2: The 'Interval Time' for both the Mailbox Store and Public
> Store
> <>> were
> <>> <already set to 'Never'. All the same I enabled Full-Text Indexing,
> <>> waited
> <>> <until it was enabled, set the 'Interval Time' to 'Always' and applied
> <>> the
> <>> <settings. I then waited a short time, reset the 'Interval Time' back
> to
> <>> <'Never' and then disabled Full-Text Indexing.
> <>> <
> <>> <I confirm that 'Checksum Offloading' (as I believe it's called by HP)
> is
> <>> <disabled on all NIC's using the Advanced tab of each NIC and confirm
> <>> that
> <>> <the registry value 'EnableTCPA' mentioned in your post is already set
> to
> <>> '0'
> <>> <(zero).
> <>> <
> <>> <None of the NIC's on the server appear to have the 'Receive Side
> <>> Scaling'
> <>> <feature and so no action was taken in this respect.
> <>> <
> <>> <To answer your questions at the end of your post:
> <>> <
> <>> <1) Having checked the change logs and emails, it would appear that
> the
> <>> issue
> <>> <(Event ID: 7011 in the Windows System log) began to appear around the
> <>> time
> <>> <that VMware Server was installed. This re-enforces my working premis
> <>> that
> <>> <the issue is caused by the Virtual Server that is also installed on
> the
> <>> box.
> <>> <I have posted in the VMware forum also so I am hoping to receive some
> <>> <suggestions as to configuration changes that I can make to the
> Virtual
> <>> <Machine that may resolve the issue.
> <>> <
> <>> <2) The users I have spoken to and who connect to the SBS server have
> <>> <informed me that when the issue occurs they are essentially unable to
> <>> access
> <>> <anything on the server. I will have to confirm at a later date if the
> <>> <clients are able to ping the server.
> <>> <
> <>> <3) When the issue occurs I am unable to open anything on the server
> but
> <>> I
> <>> <should reiterate that I am managing and accessing the server remotely
> <>> via
> <>> <RDP.
> <>> <
> <>> <Thank you again for your time.
> <>> <Kind regards,
> <>> <Sergio
> <>> <
> <>> <
> <>> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in message
> <>> <news:aPlCg5WMIHA.6908(a)TK2MSFTNGHUB02.phx.gbl...
> <>> <> Hi Sergio,
> <>> <>
> <>> <> Thanks for your reply.
> <>> <>
> <>> <> I researched your log and found the following event:
> <>> <>
> <>> <> Event Type: Error
> <>> <> Event Source: MSExchangeIS Mailbox Store
> <>> <> Event Category: General
> <>> <> Event ID: 7200
> <>> <> Computer: SERVER1
> <>> <> Description:
> <>> <> Background thread FDoUpdateCatalog halted on database "First
> Storage
> <>> <> Group\Mailbox Store (SERVER1)" due to error code 0x80004005.
> <>> <>
> <>> <> The thread FDoUpdateCatalog may cause server freezing. Based on my
> <>> <> research, please take the following steps to narrow down this
> issue:
> <>> <>
> <>> <> Step 1: This issue occurs when the Anti Virus software scans
> Exchange
> <>> <> directory. Please ensure the Exchange directory is excluded from
> <>> scanning.
> <>> <>
> <>> <> More info:
> <>> <>
> <>> <> 823166 Overview of Exchange Server 2003 and antivirus software
> <>> <> http://support.microsoft.com/?id=823166
> <>> <>
> <>> <> Step 2: This issue occurs when full-text indexing was originally
> set
> <>> with
> <>> <> the interval time set to always, and then the service was disabled
> and
> <>> the
> <>> <> interval time was not set back to never. To fix this ,please take
> the
> <>> <> steps
> <>> <> in the following KB:
> <>> <>
> <>> <> XADM: Event ID 7200 for MSExchangeIS Mailbox Store Is Logged in
> <>> <> Application
> <>> <> Event Log Every 15 Minutes
> <>> <> http://support.microsoft.com/?id=293370
> <>> <>
> <>> <> Note: This KB also applies to Exchange 2003.
> <>> <>
> <>> <> In addition, I noticed you installed Windows 2003 SP2 on SBS
> server,
> <>> it
> <>> <> may
> <>> <> cause network problem, please Disable Receive Side Scaling and
> <>> offloading
> <>> <> support. Then check again.
> <>> <>
> <>> <> To disable Receive Side Scaling:
> <>> <>
> <>> <> 1. Click Start, click Run, type ncpa.cpl, and then click OK.
> <>> <> 2. Right-click a network adapter object, and then click Properties.
> <>> <> 3. Click Configure, and then click the Advanced tab.
> <>> <> 4. In the Property list, click Receive Side Scaling, click Disable
> in
> <>> the
> <>> <> Value list, and then click OK.
> <>> <> 5. Repeat steps 2 through 4 for each network adapter object.
> <>> <>
> <>> <> To disable offloading support
> <>> <>
> <>> <> 1. Click Start, click Run, type regedit, and then click OK.
> <>> <> 2. Locate and then click the following registry subkey:
> <>> <>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
> <>> <> 3. In the details pane, right-click EnableTCPA, and then click
> Modify.
> <>> <> 4. In the Value data box, type 0 (zero), and then click OK.
> <>> <> 5. Exit Registry Editor.
> <>> <> 6. Restart the computer.
> <>> <>
> <>> <> More info:
> <>> <> You may experience network-related problems after you install
> Windows
> <>> <> Server 2003 SP2 or the Scalable Networking Pack on a Windows Small
> <>> <> Business
> <>> <> Server 2003-based computer
> <>> <> http://support.microsoft.com/kb/936594
> <>> <>
> <>> <> If the problem persists, please help me collect the following
> <>> information
> <>> <> for deep research:
> <>> <>
> <>> <> 1. What important change did you make before the issue first
> occurred?
> <>> <> 2. When the issue occurs, can the clients ping the server or visit
> <>> server
> <>> <> network share on SBS?
> <>> <> 3. When the issue occurs, can the administrator do normal
> operations
> <>> such
> <>> <> as open IE on SBS server?
> <>> <>
> <>> <> I am looking forward to hear from you.
> <>> <>
> <>> <> If you need further assistance, please don't hesitate to let me
> know.
> <>> <>
> <>> <> Best regards,
> <>> <>
> <>> <> Robert Li(MSFT)
> <>> <>
> <>> <> Microsoft CSS Online Newsgroup Support
> <>> <>
> <>> <> Get Secure! - www.microsoft.com/security
> <>> <>
> <>> <> =====================================================
> <>> <>
> <>> <> This newsgroup only focuses on SBS technical issues. If you have
> <>> issues
> <>> <> regarding other Microsoft products, you'd better post in the
> <>> corresponding
> <>> <> newsgroups so that they can be resolved in an efficient and timely
> <>> manner.
> <>> <> You can locate the newsgroup here:
> <>> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> <>> <>
> <>> <> When opening a new thread via the web interface, we recommend you
> <>> check
> <>> <> the
> <>> <> "Notify me of replies" box to receive e-mail notifications when
> there
> <>> are
> <>> <> any updates in your thread. When responding to posts via your
> <>> newsreader,
> <>> <> please "Reply to Group" so that others may learn and benefit from
> your
> <>> <> issue.
> <>> <>
> <>> <> Microsoft engineers can only focus on one issue per thread.
> Although
> <>> we
> <>> <> provide other information for your reference, we recommend you post
> <>> <> different incidents in different threads to keep the thread clean.
> In
> <>> <> doing
> <>> <> so, it will ensure your issues are resolved in a timely manner.
> <>> <>
> <>> <> For urgent issues, you may want to contact Microsoft CSS directly.
> <>> Please
> <>> <> check http://support.microsoft.com for regional support phone
> numbers.
> <>> <>
> <>> <> Any input or comments in this thread are highly appreciated.
> <>> <>
> <>> <> =====================================================
> <>> <>
> <>> <> This posting is provided "AS IS" with no warranties, and confers no
> <>> <> rights.
> <>> <>
> <>> <> --------------------
> <>> <> <From: "Sergio Ricci" <me(a)domainname.com>
> <>> <> <References: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
> <>> <> <zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl>
> <>> <> <Subject: Re: Event ID: 7011 (NtFrs Service) + Server Freezes when
> <>> <> Performing Disk Operations
> <>> <> <Date: Tue, 27 Nov 2007 13:56:03 -0000
> <>> <> <Lines: 238
> <>> <> <X-Priority: 3
> <>> <> <X-MSMail-Priority: Normal
> <>> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> <>> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
> <>> <> <X-RFC2646: Format=Flowed; Original
> <>> <> <Message-ID: <OBZ3q3PMIHA.5988(a)TK2MSFTNGP02.phx.gbl>
> <>> <> <Newsgroups: microsoft.public.windows.server.sbs
> <>> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk 217.204.80.187
> <>> <> <Path:
> <>> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
> <>> <> <Xref: TK2MSFTNGHUB02.phx.gbl
> <>> microsoft.public.windows.server.sbs:78255
> <>> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
> <>> <> <
> <>> <> <Hi Robert.
> <>> <> <
> <>> <> <Thanks for taking time out to read my post and to reply.
> <>> <> <
> <>> <> <Your understanding of the issue is correct; the SBS server freezes
> <>> for
> <>> <> <several mins and then works again.
> <>> <> <
> <>> <> <I have carried out several diagnostic tests of the server
> hardware,
> <>> in
> <>> <> <particular the HDD and so far everything has come back clean. I
> will
> <>> <> <however, check that the components are in the HCL list. In
> addition
> I
> <>> <> will
> <>> <> <also carry out the tests you have requested (e.g. ping test etc)
> but
> <>> I
> <>> <> <should point out that I only support the server and don't actually
> <>> <> connect
> <>> <> <to it myself so it is difficult to find the exact moment that the
> <>> issue
> <>> <> <occurs to carry out the requested tests.
> <>> <> <
> <>> <> <At this point I would like to mention that from tests I carried
> out
> <>> <> <yesterday evening, I am now working on the premis that the issue
> is
> <>> being
> <>> <> <cause by a Virtual Server that is also installed on the SBS server
> <>> <> (please
> <>> <> <also see my reply post to Pedro CR). I will need to discuss with
> the
> <>> <> client
> <>> <> <if the Virtual Server can be moved or shut down for a few days to
> see
> <>> if
> <>> <> the
> <>> <> <problem re-occurs.
> <>> <> <
> <>> <> <All the same, I will send you an MPS Report shortly.
> <>> <> <
> <>> <> <Once again, thank you for your interest in my issue and for your
> <>> reply.
> <>> <> It's
> <>> <> <greatly appreciated.
> <>> <> <
> <>> <> <Sergio
> <>> <> <
> <>> <> <"Robert Li [MSFT]" <v-robeli(a)online.microsoft.com> wrote in
> message
> <>> <> <news:zkqlOPNMIHA.7908(a)TK2MSFTNGHUB02.phx.gbl...
> <>> <> <> Hi Sergio,
> <>> <> <>
> <>> <> <> Thanks for posting in our newsgroup.
> <>> <> <>
> <>> <> <> From your description, I know that your SBS server freezes for
> <>> several
> <>> <> <> minutes and then work again. If that's not right, please don't
> <>> hesitate
> <>> <> to
> <>> <> <> let me know.
> <>> <> <>
> <>> <> <> Based on my experience, the server freeze issue may be caused by
> <>> <> hardware.
> <>> <> <> If we narrow down that's caused by hardware, you need to contact
> <>> the
> <>> <> <> hardware manufacture for more help. Thanks for your
> understanding.
> <>> <> <>
> <>> <> <> Please let me know the following to make the situation more
> <>> clearly:
> <>> <> <>
> <>> <> <> 1. When the issue occurs, can you ping the server or visit
> server
> <>> <> network
> <>> <> <> share?
> <>> <> <> 2. When the issue occurs, can the administrator do normal
> <>> operations
> <>> <> such
> <>> <> <> as open IE on SBS server?
> <>> <> <>
> <>> <> <> Based on my research, please take the following steps to narrow
> <>> down
> <>> <> this
> <>> <> <> issue:
> <>> <> <>
> <>> <> <> Step 1:Please ensure the RAID controller and NICs are in the HCL
> <>> list:
> <>> <> <>
> <>> <> <> Windows Server Catalog of Tested Products
> <>> <> <> http://www.windowsservercatalog.com/
> <>> <> <>
> <>> <> <> Please also install the latest disk controller driver and test
> <>> again.
> <>> <> <>
> <>> <> <> Step 2: Please make a clean boot to make sure the problem is not
> <>> caused
> <>> <> <> third party software:
> <>> <> <>
> <>> <> <> 1. Click Start->Run...->type msconfig and press Enter.
> <>> <> <> 2. Click Services tab and select Hide All Microsoft Services and
> <>> <> Disable
> <>> <> <> All third party Services.
> <>> <> <> 3. Click Startup tab and Disable All startup items.
> <>> <> <> 4. Click OK and choose Restart.
> <>> <> <> 5. After reboot, check whether the problem still occurs.
> <>> <> <> 6. If there are no more problems, please use the above steps to
> <>> enable
> <>> <> <> services and startup items one by one in order to figure out the
> <>> root
> <>> <> <> cause
> <>> <> <> of this issue.
> <>> <> <>
> <>> <> <> Please help me collect the following information and I need to
> do
> <>> deep
> <>> <> <> research:
> <>> <> <>
> <>> <> <> 1. What important change did you make before the issue first
> <>> occurred?
> <>> <> <>
> <>> <> <> 2. MPS Report
> <>> <> <>
> <>> <> <> 1) Download MPS report tool from:
> <>> <> <>
> <>> <>
> <>>
> http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
> <>> <> <> 15706/MPSRPT_SETUPPerf.EXE
> <>> <> <> 2) Run the MPSRPT_SETUPPerf.exe on the server box.
> <>> <> <> 3) Wait for 10~15 minutes.
> <>> <> <> 4) Open Windows explorer, navigate to
> <>> <> <> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\
> <>> <> <> 5) Send the .cab file to v-robeli(a)microsoft.com with subject:
> <>> <> <> 41034061-Event ID: 7011 (NtFrs Service) + Server Freezes when
> <>> <> Performing
> <>> <> <> Disk Operations.
> <>> <> <>
> <>> <> <> I am looking forward to hear from you.
> <>> <> <>
> <>> <> <> If you need further assistance, please don't hesitate to let me
> <>> know.
> <>> <> <>
> <>> <> <> Best regards,
> <>> <> <>
> <>> <> <> Robert Li(MSFT)
> <>> <> <>
> <>> <> <> Microsoft CSS Online Newsgroup Support
> <>> <> <>
> <>> <> <> Get Secure! - www.microsoft.com/security
> <>> <> <>
> <>> <> <> =====================================================
> <>> <> <>
> <>> <> <> This newsgroup only focuses on SBS technical issues. If you have
> <>> issues
> <>> <> <> regarding other Microsoft products, you'd better post in the
> <>> <> corresponding
> <>> <> <> newsgroups so that they can be resolved in an efficient and
> timely
> <>> <> manner.
> <>> <> <> You can locate the newsgroup here:
> <>> <> <>
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
> <>> <> <>
> <>> <> <> When opening a new thread via the web interface, we recommend
> you
> <>> check
> <>> <> <> the
> <>> <> <> "Notify me of replies" box to receive e-mail notifications when
> <>> there
> <>> <> are
> <>> <> <> any updates in your thread. When responding to posts via your
> <>> <> newsreader,
> <>> <> <> please "Reply to Group" so that others may learn and benefit
> from
> <>> your
> <>> <> <> issue.
> <>> <> <>
> <>> <> <> Microsoft engineers can only focus on one issue per thread.
> <>> Although
> <>> we
> <>> <> <> provide other information for your reference, we recommend you
> post
> <>> <> <> different incidents in different threads to keep the thread
> clean.
> <>> In
> <>> <> <> doing
> <>> <> <> so, it will ensure your issues are resolved in a timely manner.
> <>> <> <>
> <>> <> <> For urgent issues, you may want to contact Microsoft CSS
> directly.
> <>> <> Please
> <>> <> <> check http://support.microsoft.com for regional support phone
> <>> numbers.
> <>> <> <>
> <>> <> <> Any input or comments in this thread are highly appreciated.
> <>> <> <>
> <>> <> <> =====================================================
> <>> <> <>
> <>> <> <> This posting is provided "AS IS" with no warranties, and confers
> no
> <>> <> <> rights.
> <>> <> <>
> <>> <> <> --------------------
> <>> <> <> <From: "Sergio Ricci" <me(a)domainname.com>
> <>> <> <> <Subject: Event ID: 7011 (NtFrs Service) + Server Freezes when
> <>> <> Performing
> <>> <> <> Disk Operations
> <>> <> <> <Date: Mon, 26 Nov 2007 12:57:58 -0000
> <>> <> <> <Lines: 68
> <>> <> <> <X-Priority: 3
> <>> <> <> <X-MSMail-Priority: Normal
> <>> <> <> <X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> <>> <> <> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
> <>> <> <> <X-RFC2646: Format=Flowed; Original
> <>> <> <> <Message-ID: <uZn#5vCMIHA.5328(a)TK2MSFTNGP05.phx.gbl>
> <>> <> <> <Newsgroups: microsoft.public.windows.server.sbs
> <>> <> <> <NNTP-Posting-Host: ip-217-204-80-187.easynet.co.uk
> 217.204.80.187
> <>> <> <> <Path:
> <>> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
> <>> <> <> <Xref: TK2MSFTNGHUB02.phx.gbl
> <>> microsoft.public.windows.server.sbs:77994
> <>> <> <> <X-Tomcat-NG: microsoft.public.windows.server.sbs
> <>> <> <> <
> <>> <> <> <Hi,
> <>> <> <> <
> <>> <> <> <We have a Win2K3 SBS Premium SBS server that has for the past
> few
> <>> <> weeks
> <>> <> <> been
> <>> <> <> <having a few issues that primarily manifests itself as the
> server
> <>> <> <> freezing
> <>> <> <> <for several minutes and then springing back to into life.
> During
> <>> the
> <>> <> <> freeze,
> <>> <> <> <users get the popup balloon telling them that Exchange is
> trying
> <>> to
> <>> <> <> retrieve
> <>> <> <> <data.
> <>> <> <> <
> <>> <> <> <Going through the logs Event ID: 7011 always seems to be
> recorded
> <>> <> around
> <>> <> <> the
> <>> <> <> <time the freeze happens. I've done some research into Event ID:
> <>> 7011
> <>> <> and
> <>> <> <> <most suggest modifying the following registry key:
> <>> <> <> <
> <>> <> <>
> <>> <>
> <>>
> <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter
> <>> <> <> s
> <>> <> <> <
> <>> <> <> <[REG_DWORD] autodisconnect:
> <>> <> <> <Original Value: 'f'
> <>> <> <> <New Current Value: 'fff'
> <>> <> <> <
> <>> <> <> <Making this change does appear to have improved matters but
> what
> <>> is
> <>> <> also
> <>> <> <> <worrying is that certain disk operations such as 'chkdsk' and
> <>> 'defrag'
> <>> <> <> cause
> <>> <> <> <the server to freeze resulting in the above log being written.
> I
> <>> have
> <>> <> <> <downloaded an evaluation copy of Diskeeper 2008 Server to see
> if
> <>> that
> <>> <> <> also
> <>> <> <> <caused a reoccurance of the issue and it does.
> <>> <> <> <
> <>> <> <> <A bit about the server:
> <>> <> <> <
> <>> <> <> <OS: Win2K3 Premium (w/ ISA Server 2000) SBS
> <>> <> <> <Hardware: HP Proliant ML350 G4
> <>> <> <> <Smart Array 641 Controller
> <>> <> <> <x3 72.8GB HDD (10K rpm) configured into x1 RAID5 logical drive
> <>> <> <> <x1 Intel Xeon 3.4GHz Processor
> <>> <> <> <4GB of RAM
> <>> <> <> <
> <>> <> <> <Hardware diagnostics (using HP diag tools) show no issues.
> <>> <> <> <
> <>> <> <> <Changes Made so far:
> <>> <> <> <
> <>> <> <> <The following are the changes made (with results) made to the
> <>> server
> <>> <> so
> <>> <> <> far
> <>> <> <> <in an attempt to resolve the issue:
> <>> <> <> <1) Recreated NtFrs database (result = no improvement)
> <>> <> <> <2) Ensured that NtFrs database was excluded from any virus
> scans
> <>> <> <> <3) Removed Windows Defender from Server (no improvement)
> <>> <> <> <4) Stopped SQL/ACT7 database instances from auto starting
> <>> <> <> <5) Increased File Replication Service Timeout by modifying the
> <>> <> registry
> <>> <> <> <value above from it's old value to it's new current value
> (appears
> <>> to
> <>> <> <> have
> <>> <> <> <improved things so far but only made the change late last week
> so
> <>> <> still
> <>> <> <> <early days).
> <>> <> <> <
> <>> <> <> <NB: When I say thatit has 'improved things', it has improved
> <>> things
> <>> to
> <>> <> <> the
> <>> <> <> <point that the server doesn't appear to hang as often during
> the
> <>> day
> <>> <> <> under
> <>> <> <> <normal use (before it would freeze 5 or more times a day, now
> we
> <>> are
> <>> <> <> <currently down to 1 freeze in 2 days). However, if I run
> 'chkdsk'
> <>> or
> <>> <> try
> <>> <> <> to
> <>> <> <> <do a 'defrag', it will still freeze for several minutes.
> <>> <> <> <
> <>> <> <> <The freeze also causes me to lose any network connection and
> <>> affects
> <>> <> the
> <>> <> <> <connection to the server via the remote management board.
> <>> <> <> <
> <>> <> <> <Any help or pointers in resolving the issue would be greatly
> <>> <> appreciated.
> <>> <> <> <
> <>> <> <> <Thansk in advance.
> <>> <> <> <Sergio
> <>> <> <> <
> <>> <> <> <PS: Does Microsoft Professional Support no longer offer the
> email
> <>> <> support
> <>> <> <> <option which cost, from memory, under �100 which was great if
> it
> <>> <> wasn't
> <>> <> <> <urgent? I only seem to find the 'phone and email' support
> offering
> <>> <> which
> <>> <> <> <costs �199+VAT
> <>> <> <> <
> <>> <> <> <
> <>> <> <> <
> <>> <> <>
> <>> <> <
> <>> <> <
> <>> <> <
> <>> <>
> <>> <
> <>> <
> <>> <
> <>>
> <>
> <>
> <
> <
> <
>