From: jmillerWV on 5 Jan 2010 11:02 Hello all, the problems are growing I am now having to reboot the server many times during the day due to the tcpsvcs.exe failing. now I am begining to see more failures the latest "Blue screen" is MEMORY MANAGMENT (standard blue screen dialog) Technical information STOP 0x0000001A (0x00003452, 0x02B49201, 0xC0502DE4, 0x00000080) Thought this may help. On one re-boot this morning I received so many errors in the event viewer that on one error it said the server does not exist. below is the captured error messages: Event Type: Warning Event Source: WinMgmt Event Category: None Event ID: 5603 Date: 1/5/2010 Time: 8:59:42 AM User: NT AUTHORITY\SYSTEM Computer: LIBERTYRS-MAIN Description: A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Warning Event Source: WinMgmt Event Category: None Event ID: 5603 Date: 1/5/2010 Time: 8:59:42 AM User: NT AUTHORITY\SYSTEM Computer: LIBERTYRS-MAIN Description: A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: MSExchangeDSAccess Event Category: Topology Event ID: 2103 Date: 1/5/2010 Time: 8:46:56 AM User: N/A Computer: LIBERTYRS-MAIN Description: Process MAD.EXE (PID=6520). All Global Catalog Servers in use are not responding: libertyrs-main.LibertyRS.local For more information, click http://www.microsoft.com/contentredirect.asp. Event Type: Error Event Source: MSExchangeAL Event Category: Service Control Event ID: 8250 Date: 1/5/2010 Time: 8:46:51 AM User: N/A Computer: LIBERTYRS-MAIN Description: The Win32 API call 'DsGetDCNameW' returned error code [0x862] The specified component could not be found in the configuration information. The service could not be initialized. Make sure that the operating system was installed properly. For more information, click http://www.microsoft.com/contentredirect.asp. Event Type: Error Event Source: MSExchangeAL Event Category: LDAP Operations Event ID: 8026 Date: 1/5/2010 Time: 8:46:51 AM User: N/A Computer: LIBERTYRS-MAIN Description: LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for distinguished name ''. Directory returned error:[0x51] Server Down. For more information, click http://www.microsoft.com/contentredirect.asp. Event Type: Error Event Source: MSExchangeAL Event Category: LDAP Operations Event ID: 8026 Date: 1/5/2010 Time: 8:46:50 AM User: N/A Computer: LIBERTYRS-MAIN Description: LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for distinguished name ''. Directory returned error:[0x51] Server Down. For more information, click http://www.microsoft.com/contentredirect.asp. Event Type: Error Event Source: MSExchangeDSAccess Event Category: Topology Event ID: 2102 Date: 1/5/2010 Time: 8:46:46 AM User: N/A Computer: LIBERTYRS-MAIN Description: Process MAD.EXE (PID=6520). All Domain Controller Servers in use are not responding: libertyrs-main.LibertyRS.local For more information, click http://www.microsoft.com/contentredirect.asp. Event Type: Information Event Source: ESENT Event Category: General Event ID: 101 Date: 1/5/2010 Time: 8:46:45 AM User: N/A Computer: LIBERTYRS-MAIN Description: lsass (564) The database engine stopped. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: MSExchangeAL Event Category: LDAP Operations Event ID: 8026 Date: 1/5/2010 Time: 8:46:44 AM User: N/A Computer: LIBERTYRS-MAIN Description: LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for distinguished name ''. Directory returned error:[0x51] Server Down. For more information, click http://www.microsoft.com/contentredirect.asp. Event Type: Error Event Source: Application Error Event Category: None Event ID: 1001 Date: 1/5/2010 Time: 8:41:17 AM User: N/A Computer: LIBERTYRS-MAIN Description: Fault bucket 156882893. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 42 75 63 6b 65 74 3a 20 Bucket: 0008: 31 35 36 38 38 32 38 39 15688289 0010: 33 0d 0a 3.. Event Type: Error Event Source: Userenv Event Category: None Event ID: 1030 Date: 1/5/2010 Time: 5:18:01 AM User: NT AUTHORITY\SYSTEM Computer: LIBERTYRS-MAIN Description: Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: Userenv Event Category: None Event ID: 1006 Date: 1/5/2010 Time: 5:18:01 AM User: NT AUTHORITY\SYSTEM Computer: LIBERTYRS-MAIN Description: Windows cannot bind to LibertyRS.local domain. (Timeout). Group Policy processing aborted. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: POP3 Connector Event Category: Download Event ID: 1019 Date: 1/5/2010 Time: 4:35:33 AM User: N/A Computer: LIBERTYRS-MAIN Description: The message download process finished with one or more errors. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: POP3 Connector Event Category: Download Event ID: 1023 Date: 1/5/2010 Time: 4:35:33 AM User: N/A Computer: LIBERTYRS-MAIN Description: The downloading process for mailbox <lrsinc [mail.casinternet.net]> was ended with one or more errors. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Event Type: Error Event Source: POP3 Connector Event Category: Download Event ID: 1036 Date: 1/5/2010 Time: 4:35:33 AM User: N/A Computer: LIBERTYRS-MAIN Description: An error occurred during a POP3 transaction to server <mail.casinternet.net [lrsinc]>. The error is 0 (The operation completed successfully. ). For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Sorry for the lenghty post. Am I looking at a reinstall of SBS2k3 or what? Agian thanks in advance for your assistance.
From: SteveB on 5 Jan 2010 11:16 With so many problems your best bet may be to initiate a support call to CSS. "jmillerWV" <jmillerWV(a)discussions.microsoft.com> wrote in message news:E35D5A73-56C6-4AA4-8CEB-083CA89484BA(a)microsoft.com... > Hello all, the problems are growing I am now having to reboot the server > many > times during the day due to the tcpsvcs.exe failing. now I am begining to > see > more failures the latest "Blue screen" is > MEMORY MANAGMENT > (standard blue screen dialog) > Technical information > STOP 0x0000001A (0x00003452, 0x02B49201, 0xC0502DE4, 0x00000080) > > Thought this may help. On one re-boot this morning I received so many > errors > in the event viewer that on one error it said the server does not exist. > below is the captured error messages: > Event Type: Warning > Event Source: WinMgmt > Event Category: None > Event ID: 5603 > Date: 1/5/2010 > Time: 8:59:42 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > A provider, PerfProv, has been registered in the WMI namespace, > ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the > HostingModel property. This provider will be run using the LocalSystem > account. This account is privileged and the provider may cause a security > violation if it does not correctly impersonate user requests. Ensure that > provider has been reviewed for security behavior and update the > HostingModel > property of the provider registration to an account with the least > privileges > possible for the required functionality. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Warning > Event Source: WinMgmt > Event Category: None > Event ID: 5603 > Date: 1/5/2010 > Time: 8:59:42 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > A provider, PerfProv, has been registered in the WMI namespace, > ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the > HostingModel property. This provider will be run using the LocalSystem > account. This account is privileged and the provider may cause a security > violation if it does not correctly impersonate user requests. Ensure that > provider has been reviewed for security behavior and update the > HostingModel > property of the provider registration to an account with the least > privileges > possible for the required functionality. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > Event Type: Error > Event Source: MSExchangeDSAccess > Event Category: Topology > Event ID: 2103 > Date: 1/5/2010 > Time: 8:46:56 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Process MAD.EXE (PID=6520). All Global Catalog Servers in use are not > responding: > libertyrs-main.LibertyRS.local > > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: Service Control > Event ID: 8250 > Date: 1/5/2010 > Time: 8:46:51 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The Win32 API call 'DsGetDCNameW' returned error code [0x862] The > specified > component could not be found in the configuration information. The > service > could not be initialized. Make sure that the operating system was > installed > properly. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:51 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:50 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeDSAccess > Event Category: Topology > Event ID: 2102 > Date: 1/5/2010 > Time: 8:46:46 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Process MAD.EXE (PID=6520). All Domain Controller Servers in use are not > responding: > libertyrs-main.LibertyRS.local > > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Information > Event Source: ESENT > Event Category: General > Event ID: 101 > Date: 1/5/2010 > Time: 8:46:45 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > lsass (564) The database engine stopped. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:44 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > > Event Type: Error > Event Source: Application Error > Event Category: None > Event ID: 1001 > Date: 1/5/2010 > Time: 8:41:17 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Fault bucket 156882893. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > 0008: 31 35 36 38 38 32 38 39 15688289 > 0010: 33 0d 0a 3.. > > > Event Type: Error > Event Source: Userenv > Event Category: None > Event ID: 1030 > Date: 1/5/2010 > Time: 5:18:01 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > Windows cannot query for the list of Group Policy objects. Check the event > log for possible messages previously logged by the policy engine that > describes the reason for this. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Error > Event Source: Userenv > Event Category: None > Event ID: 1006 > Date: 1/5/2010 > Time: 5:18:01 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > Windows cannot bind to LibertyRS.local domain. (Timeout). Group Policy > processing aborted. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1019 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The message download process finished with one or more errors. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1023 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The downloading process for mailbox <lrsinc [mail.casinternet.net]> was > ended with one or more errors. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1036 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > An error occurred during a POP3 transaction to server > <mail.casinternet.net > [lrsinc]>. The error is 0 (The operation completed successfully. > ). > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > Sorry for the lenghty post. Am I looking at a reinstall of SBS2k3 or > what? > Agian thanks in advance for your assistance. > >
From: Cliff Galiher on 5 Jan 2010 11:29 Honestly, I feel bad. I've seen your other posts, but didn't pay too much attention as you were getting great help from other users. The fact that you had multiple other posts (including one that made me think you were going to migrate/re-install) means I didn't...until now...realize the seriousness or depth of your situation. But after searching and re-reading *all* of your posts. I have one simple question. Have you eliminated the possibility that this is just a plain old hardware failure somehow? I don't see any indication that you have. But blue screens with increasing frequency, a system that is *actively* degrading before your eyes, etc... I'd look at a failing RAM stick, failing disk or controller, or even an overheating CPU. This just *sounds* like a hardware problem to me... -Cliff "jmillerWV" <jmillerWV(a)discussions.microsoft.com> wrote in message news:E35D5A73-56C6-4AA4-8CEB-083CA89484BA(a)microsoft.com... > Hello all, the problems are growing I am now having to reboot the server > many > times during the day due to the tcpsvcs.exe failing. now I am begining to > see > more failures the latest "Blue screen" is > MEMORY MANAGMENT > (standard blue screen dialog) > Technical information > STOP 0x0000001A (0x00003452, 0x02B49201, 0xC0502DE4, 0x00000080) > > Thought this may help. On one re-boot this morning I received so many > errors > in the event viewer that on one error it said the server does not exist. > below is the captured error messages: > Event Type: Warning > Event Source: WinMgmt > Event Category: None > Event ID: 5603 > Date: 1/5/2010 > Time: 8:59:42 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > A provider, PerfProv, has been registered in the WMI namespace, > ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the > HostingModel property. This provider will be run using the LocalSystem > account. This account is privileged and the provider may cause a security > violation if it does not correctly impersonate user requests. Ensure that > provider has been reviewed for security behavior and update the > HostingModel > property of the provider registration to an account with the least > privileges > possible for the required functionality. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Warning > Event Source: WinMgmt > Event Category: None > Event ID: 5603 > Date: 1/5/2010 > Time: 8:59:42 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > A provider, PerfProv, has been registered in the WMI namespace, > ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the > HostingModel property. This provider will be run using the LocalSystem > account. This account is privileged and the provider may cause a security > violation if it does not correctly impersonate user requests. Ensure that > provider has been reviewed for security behavior and update the > HostingModel > property of the provider registration to an account with the least > privileges > possible for the required functionality. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > Event Type: Error > Event Source: MSExchangeDSAccess > Event Category: Topology > Event ID: 2103 > Date: 1/5/2010 > Time: 8:46:56 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Process MAD.EXE (PID=6520). All Global Catalog Servers in use are not > responding: > libertyrs-main.LibertyRS.local > > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: Service Control > Event ID: 8250 > Date: 1/5/2010 > Time: 8:46:51 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The Win32 API call 'DsGetDCNameW' returned error code [0x862] The > specified > component could not be found in the configuration information. The > service > could not be initialized. Make sure that the operating system was > installed > properly. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:51 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:50 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeDSAccess > Event Category: Topology > Event ID: 2102 > Date: 1/5/2010 > Time: 8:46:46 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Process MAD.EXE (PID=6520). All Domain Controller Servers in use are not > responding: > libertyrs-main.LibertyRS.local > > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Information > Event Source: ESENT > Event Category: General > Event ID: 101 > Date: 1/5/2010 > Time: 8:46:45 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > lsass (564) The database engine stopped. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:44 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > > Event Type: Error > Event Source: Application Error > Event Category: None > Event ID: 1001 > Date: 1/5/2010 > Time: 8:41:17 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Fault bucket 156882893. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > 0008: 31 35 36 38 38 32 38 39 15688289 > 0010: 33 0d 0a 3.. > > > Event Type: Error > Event Source: Userenv > Event Category: None > Event ID: 1030 > Date: 1/5/2010 > Time: 5:18:01 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > Windows cannot query for the list of Group Policy objects. Check the event > log for possible messages previously logged by the policy engine that > describes the reason for this. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Error > Event Source: Userenv > Event Category: None > Event ID: 1006 > Date: 1/5/2010 > Time: 5:18:01 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > Windows cannot bind to LibertyRS.local domain. (Timeout). Group Policy > processing aborted. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1019 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The message download process finished with one or more errors. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1023 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The downloading process for mailbox <lrsinc [mail.casinternet.net]> was > ended with one or more errors. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1036 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > An error occurred during a POP3 transaction to server > <mail.casinternet.net > [lrsinc]>. The error is 0 (The operation completed successfully. > ). > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > Sorry for the lenghty post. Am I looking at a reinstall of SBS2k3 or > what? > Agian thanks in advance for your assistance. > >
From: Bobby Janow on 5 Jan 2010 12:23 Try swapping out your NIC. "jmillerWV" <jmillerWV(a)discussions.microsoft.com> wrote in message news:E35D5A73-56C6-4AA4-8CEB-083CA89484BA(a)microsoft.com... > Hello all, the problems are growing I am now having to reboot the server > many > times during the day due to the tcpsvcs.exe failing. now I am begining to > see > more failures the latest "Blue screen" is > MEMORY MANAGMENT > (standard blue screen dialog) > Technical information > STOP 0x0000001A (0x00003452, 0x02B49201, 0xC0502DE4, 0x00000080) > > Thought this may help. On one re-boot this morning I received so many > errors > in the event viewer that on one error it said the server does not exist. > below is the captured error messages: > Event Type: Warning > Event Source: WinMgmt > Event Category: None > Event ID: 5603 > Date: 1/5/2010 > Time: 8:59:42 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > A provider, PerfProv, has been registered in the WMI namespace, > ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the > HostingModel property. This provider will be run using the LocalSystem > account. This account is privileged and the provider may cause a security > violation if it does not correctly impersonate user requests. Ensure that > provider has been reviewed for security behavior and update the > HostingModel > property of the provider registration to an account with the least > privileges > possible for the required functionality. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Warning > Event Source: WinMgmt > Event Category: None > Event ID: 5603 > Date: 1/5/2010 > Time: 8:59:42 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > A provider, PerfProv, has been registered in the WMI namespace, > ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the > HostingModel property. This provider will be run using the LocalSystem > account. This account is privileged and the provider may cause a security > violation if it does not correctly impersonate user requests. Ensure that > provider has been reviewed for security behavior and update the > HostingModel > property of the provider registration to an account with the least > privileges > possible for the required functionality. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > Event Type: Error > Event Source: MSExchangeDSAccess > Event Category: Topology > Event ID: 2103 > Date: 1/5/2010 > Time: 8:46:56 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Process MAD.EXE (PID=6520). All Global Catalog Servers in use are not > responding: > libertyrs-main.LibertyRS.local > > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: Service Control > Event ID: 8250 > Date: 1/5/2010 > Time: 8:46:51 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The Win32 API call 'DsGetDCNameW' returned error code [0x862] The > specified > component could not be found in the configuration information. The > service > could not be initialized. Make sure that the operating system was > installed > properly. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:51 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:50 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Error > Event Source: MSExchangeDSAccess > Event Category: Topology > Event ID: 2102 > Date: 1/5/2010 > Time: 8:46:46 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Process MAD.EXE (PID=6520). All Domain Controller Servers in use are not > responding: > libertyrs-main.LibertyRS.local > > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > Event Type: Information > Event Source: ESENT > Event Category: General > Event ID: 101 > Date: 1/5/2010 > Time: 8:46:45 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > lsass (564) The database engine stopped. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: MSExchangeAL > Event Category: LDAP Operations > Event ID: 8026 > Date: 1/5/2010 > Time: 8:46:44 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local for > distinguished name ''. Directory returned error:[0x51] Server Down. > > For more information, click http://www.microsoft.com/contentredirect.asp. > > > > Event Type: Error > Event Source: Application Error > Event Category: None > Event ID: 1001 > Date: 1/5/2010 > Time: 8:41:17 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > Fault bucket 156882893. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > 0008: 31 35 36 38 38 32 38 39 15688289 > 0010: 33 0d 0a 3.. > > > Event Type: Error > Event Source: Userenv > Event Category: None > Event ID: 1030 > Date: 1/5/2010 > Time: 5:18:01 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > Windows cannot query for the list of Group Policy objects. Check the event > log for possible messages previously logged by the policy engine that > describes the reason for this. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Error > Event Source: Userenv > Event Category: None > Event ID: 1006 > Date: 1/5/2010 > Time: 5:18:01 AM > User: NT AUTHORITY\SYSTEM > Computer: LIBERTYRS-MAIN > Description: > Windows cannot bind to LibertyRS.local domain. (Timeout). Group Policy > processing aborted. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1019 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The message download process finished with one or more errors. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1023 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > The downloading process for mailbox <lrsinc [mail.casinternet.net]> was > ended with one or more errors. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > > Event Type: Error > Event Source: POP3 Connector > Event Category: Download > Event ID: 1036 > Date: 1/5/2010 > Time: 4:35:33 AM > User: N/A > Computer: LIBERTYRS-MAIN > Description: > An error occurred during a POP3 transaction to server > <mail.casinternet.net > [lrsinc]>. The error is 0 (The operation completed successfully. > ). > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > > Sorry for the lenghty post. Am I looking at a reinstall of SBS2k3 or > what? > Agian thanks in advance for your assistance. > >
From: Charlie Russel - MVP on 5 Jan 2010 13:34
I agree, Cliff. I think the OP should be grabbing a full backup ASAP and start some serious hardware trouibleshooting. I suspect heat and/or RAM, with heat higher on my list. (RAM will often show first on a server as an NMI stop or ECC error.) -- Charlie. http://msmvps.com/blogs/russel "Cliff Galiher" <cgaliher(a)gmail.com> wrote in message news:ehH4BRijKHA.2188(a)TK2MSFTNGP04.phx.gbl... > Honestly, I feel bad. I've seen your other posts, but didn't pay too much > attention as you were getting great help from other users. The fact that > you had multiple other posts (including one that made me think you were > going to migrate/re-install) means I didn't...until now...realize the > seriousness or depth of your situation. > > But after searching and re-reading *all* of your posts. I have one simple > question. Have you eliminated the possibility that this is just a plain > old hardware failure somehow? I don't see any indication that you have. > But blue screens with increasing frequency, a system that is *actively* > degrading before your eyes, etc... > > I'd look at a failing RAM stick, failing disk or controller, or even an > overheating CPU. This just *sounds* like a hardware problem to me... > > -Cliff > > > "jmillerWV" <jmillerWV(a)discussions.microsoft.com> wrote in message > news:E35D5A73-56C6-4AA4-8CEB-083CA89484BA(a)microsoft.com... >> Hello all, the problems are growing I am now having to reboot the server >> many >> times during the day due to the tcpsvcs.exe failing. now I am begining to >> see >> more failures the latest "Blue screen" is >> MEMORY MANAGMENT >> (standard blue screen dialog) >> Technical information >> STOP 0x0000001A (0x00003452, 0x02B49201, 0xC0502DE4, 0x00000080) >> >> Thought this may help. On one re-boot this morning I received so many >> errors >> in the event viewer that on one error it said the server does not exist. >> below is the captured error messages: >> Event Type: Warning >> Event Source: WinMgmt >> Event Category: None >> Event ID: 5603 >> Date: 1/5/2010 >> Time: 8:59:42 AM >> User: NT AUTHORITY\SYSTEM >> Computer: LIBERTYRS-MAIN >> Description: >> A provider, PerfProv, has been registered in the WMI namespace, >> ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the >> HostingModel property. This provider will be run using the LocalSystem >> account. This account is privileged and the provider may cause a >> security >> violation if it does not correctly impersonate user requests. Ensure >> that >> provider has been reviewed for security behavior and update the >> HostingModel >> property of the provider registration to an account with the least >> privileges >> possible for the required functionality. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> >> Event Type: Warning >> Event Source: WinMgmt >> Event Category: None >> Event ID: 5603 >> Date: 1/5/2010 >> Time: 8:59:42 AM >> User: NT AUTHORITY\SYSTEM >> Computer: LIBERTYRS-MAIN >> Description: >> A provider, PerfProv, has been registered in the WMI namespace, >> ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the >> HostingModel property. This provider will be run using the LocalSystem >> account. This account is privileged and the provider may cause a >> security >> violation if it does not correctly impersonate user requests. Ensure >> that >> provider has been reviewed for security behavior and update the >> HostingModel >> property of the provider registration to an account with the least >> privileges >> possible for the required functionality. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> Event Type: Error >> Event Source: MSExchangeDSAccess >> Event Category: Topology >> Event ID: 2103 >> Date: 1/5/2010 >> Time: 8:46:56 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> Process MAD.EXE (PID=6520). All Global Catalog Servers in use are not >> responding: >> libertyrs-main.LibertyRS.local >> >> >> For more information, click http://www.microsoft.com/contentredirect.asp. >> >> >> Event Type: Error >> Event Source: MSExchangeAL >> Event Category: Service Control >> Event ID: 8250 >> Date: 1/5/2010 >> Time: 8:46:51 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> The Win32 API call 'DsGetDCNameW' returned error code [0x862] The >> specified >> component could not be found in the configuration information. The >> service >> could not be initialized. Make sure that the operating system was >> installed >> properly. >> >> For more information, click http://www.microsoft.com/contentredirect.asp. >> >> >> Event Type: Error >> Event Source: MSExchangeAL >> Event Category: LDAP Operations >> Event ID: 8026 >> Date: 1/5/2010 >> Time: 8:46:51 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local >> for >> distinguished name ''. Directory returned error:[0x51] Server Down. >> >> For more information, click http://www.microsoft.com/contentredirect.asp. >> >> >> >> Event Type: Error >> Event Source: MSExchangeAL >> Event Category: LDAP Operations >> Event ID: 8026 >> Date: 1/5/2010 >> Time: 8:46:50 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local >> for >> distinguished name ''. Directory returned error:[0x51] Server Down. >> >> For more information, click http://www.microsoft.com/contentredirect.asp. >> >> >> Event Type: Error >> Event Source: MSExchangeDSAccess >> Event Category: Topology >> Event ID: 2102 >> Date: 1/5/2010 >> Time: 8:46:46 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> Process MAD.EXE (PID=6520). All Domain Controller Servers in use are not >> responding: >> libertyrs-main.LibertyRS.local >> >> >> For more information, click http://www.microsoft.com/contentredirect.asp. >> >> >> Event Type: Information >> Event Source: ESENT >> Event Category: General >> Event ID: 101 >> Date: 1/5/2010 >> Time: 8:46:45 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> lsass (564) The database engine stopped. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> >> >> Event Type: Error >> Event Source: MSExchangeAL >> Event Category: LDAP Operations >> Event ID: 8026 >> Date: 1/5/2010 >> Time: 8:46:44 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> LDAP Bind was unsuccessful on directory libertyrs-main.LibertyRS.local >> for >> distinguished name ''. Directory returned error:[0x51] Server Down. >> >> For more information, click http://www.microsoft.com/contentredirect.asp. >> >> >> >> Event Type: Error >> Event Source: Application Error >> Event Category: None >> Event ID: 1001 >> Date: 1/5/2010 >> Time: 8:41:17 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> Fault bucket 156882893. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> Data: >> 0000: 42 75 63 6b 65 74 3a 20 Bucket: >> 0008: 31 35 36 38 38 32 38 39 15688289 >> 0010: 33 0d 0a 3.. >> >> >> Event Type: Error >> Event Source: Userenv >> Event Category: None >> Event ID: 1030 >> Date: 1/5/2010 >> Time: 5:18:01 AM >> User: NT AUTHORITY\SYSTEM >> Computer: LIBERTYRS-MAIN >> Description: >> Windows cannot query for the list of Group Policy objects. Check the >> event >> log for possible messages previously logged by the policy engine that >> describes the reason for this. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> >> Event Type: Error >> Event Source: Userenv >> Event Category: None >> Event ID: 1006 >> Date: 1/5/2010 >> Time: 5:18:01 AM >> User: NT AUTHORITY\SYSTEM >> Computer: LIBERTYRS-MAIN >> Description: >> Windows cannot bind to LibertyRS.local domain. (Timeout). Group Policy >> processing aborted. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> >> >> Event Type: Error >> Event Source: POP3 Connector >> Event Category: Download >> Event ID: 1019 >> Date: 1/5/2010 >> Time: 4:35:33 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> The message download process finished with one or more errors. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> >> >> Event Type: Error >> Event Source: POP3 Connector >> Event Category: Download >> Event ID: 1023 >> Date: 1/5/2010 >> Time: 4:35:33 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> The downloading process for mailbox <lrsinc [mail.casinternet.net]> was >> ended with one or more errors. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> >> Event Type: Error >> Event Source: POP3 Connector >> Event Category: Download >> Event ID: 1036 >> Date: 1/5/2010 >> Time: 4:35:33 AM >> User: N/A >> Computer: LIBERTYRS-MAIN >> Description: >> An error occurred during a POP3 transaction to server >> <mail.casinternet.net >> [lrsinc]>. The error is 0 (The operation completed successfully. >> ). >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> >> Sorry for the lenghty post. Am I looking at a reinstall of SBS2k3 or >> what? >> Agian thanks in advance for your assistance. >> >> |