RPC stops responding after Restart of Remote Storage Services

  • Thread starter Thread starter A. Kleinshmidt
  • Start date Start date
A

A. Kleinshmidt

After restart of remote storage File service (which also
restarts the remote storage engine)the Server stops
responding within a range of 15 to 75 Minutes. We used
rping to figure out that rpc stops responding.
It is possible to ping the server, get a nbtstat but it is
not possible to access the shared folders or send a remote
shutdown command. The server doesn't shut down, we only
see a blue screen (with no text) after 20 Minutes we
switched of the server, normally it takes less than 2
minutes to shut down. Event viewer doesn't show any
(helpful) events.

Latest service Packs and security patches have been
applied to the w2k Server a week ago. We haven't had the
Problems with w2kSP3.

I'll provide further information if neccessary.

How can I troubleshoot the rpc problem, are there any
tools to get more information about what goes wrong.

Thanks for Help
Andreas Kleinschmidt
EADS Space Transportation
 
Hello,

Thank you for posting your question here.

This problem can be caused by some virus. Please perform a thorough virus
scan first.

If further assistance is needed, please download Microsoft Product
Support's Reporting Tools and collect the MPS report for your server. We
will perform further research based on the MPS report.

Location:
(http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=CEB
F3C7C-7CA5-408F-88B7-F9C79B7306C0)

NOTE: Be sure to include all text between '(' and ')' when navigating to
this location.

Thanks.


--------------------
| From: "A. Kleinshmidt" <[email protected]>
| Sender: "A. Kleinshmidt" <[email protected]>
| Subject: RPC stops responding after Restart of Remote Storage Services
| Date: Wed, 24 Sep 2003 02:07:09 -0700
| Newsgroups: microsoft.public.win2000.advanced_server
|
| After restart of remote storage File service (which also
| restarts the remote storage engine)the Server stops
| responding within a range of 15 to 75 Minutes. We used
| rping to figure out that rpc stops responding.
| It is possible to ping the server, get a nbtstat but it is
| not possible to access the shared folders or send a remote
| shutdown command. The server doesn't shut down, we only
| see a blue screen (with no text) after 20 Minutes we
| switched of the server, normally it takes less than 2
| minutes to shut down. Event viewer doesn't show any
| (helpful) events.
|
| Latest service Packs and security patches have been
| applied to the w2k Server a week ago. We haven't had the
| Problems with w2kSP3.
|
| I'll provide further information if neccessary.
|
| How can I troubleshoot the rpc problem, are there any
| tools to get more information about what goes wrong.
|
| Thanks for Help
| Andreas Kleinschmidt
| EADS Space Transportation
|
|

Sincerely,

Vivien Wu
MCSA, MCSE2000 and MCDBA2000
Microsoft Partner Online Support


Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please Reply to Group via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided AS IS with no warranties, and confers no rights.
 
Hello Vivien,
thank you for your help and sorry for my late answer. We
had a lot of trouble with that server yesterday and today.

I've done a virusscan on the systemdrive, which showed no
virus (using F-Secure Antivirus 5.40 and up to date
signature files).

At the moment msrpt_alliance.exe is running on the server
and I need an address to send it to. You may send me an
answer to the Address above.

The trouble we had:
When stopping removable storage we got the following error
messages in the event log:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/26/2003
Time: 11:58:46 AM
User: N/A
Computer: <Servername>
Description:
The COM+ Event System service terminated unexpectedly. It
has done this 1 time(s). The following corrective action
will be taken in 60000 milliseconds: Restart the service.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/26/2003
Time: 11:58:46 AM
User: N/A
Computer: <Servername>
Description:
The Network Connections service terminated unexpectedly.
It has done this 1 time(s). The following corrective
action will be taken in 60000 milliseconds: Restart the
service.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/26/2003
Time: 11:58:46 AM
User: N/A
Computer: <Servername>
Description:
The Removable Storage service terminated unexpectedly. It
has done this 1 time(s). The following corrective action
will be taken in 0 milliseconds: No action.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/26/2003
Time: 11:58:46 AM
User: N/A
Computer: <Servername>
Description:
The System Event Notification service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 60000 milliseconds:
Restart the service.

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 9/26/2003
Time: 11:58:46 AM
User: N/A
Computer: <Servername>
Description:
The Wireless Configuration service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 60000 milliseconds:
Restart the service.

After these events (and waiting for the services to start
again) it wasn't possible to open the application event
log (though it was possible to save it). It was possible
to open the other event logs.
20 Minutes later the server stopped responding and the
removable storage database was empty. It took us a while
to restore the database and now it is up and running.

Thanks again for your assistance
Andreas Kleinschmidt
 
Hello,

I have checked your system information; and would like to share the
following information with you.

1. The event error 7031 is related to the RPC service. As you know, those
services depend on RPC. However, we cannot get enough information to find
out the cause.

We have also checked the RPC related files. Your system has installed the
latest RPC update.

To troubleshoot the RPC status, we need to dump the corresponding
svchost.exe process to check the details. Due to the complexity of this
issue we are unable to assist with this request in the newsgroups.

A suggestion would be to contact Microsoft Product Support Services via
telephone so that a dedicated Support Professional can assist with your
request.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below.

http://support.microsoft.com/default.aspx?scid=sz;en-us;top

2. Some other event errors in your system are related to Veritas backup
exec.

(1) Event ID: 1
Event Type: Error
Event Source: Removable Storage Service
Description:
Unable to auto-configure library unit Changer0. The current setup of the
library unit does not support automatic configuration. You will either have
to modify the current setup of the library to adhere to automatic
configuration guidelines (if possible) or manually configure the device.

This message occurs because the Removable Storage Manager (RSM) of Windows
is trying to claim the device, but is unable to do so as VERITAS drivers
now have it.

This is described at:

http://seer.support.veritas.com/docs/236992.htm

(2) Event ID: 10006
Event Type: Error
Event Source: DCOM
Description:
DCOM got error "Class not registered " from the computer <Computername>
when attempting to activate the server:

The suggested workaround per Veritas is to install Certificate Services on
the remote computer(s).

You can check the article below.

http://seer.support.veritas.com/docs/238513.htm

Thank you very much for your cooperation.



--------------------
|| From: "A. Kleinshmidt" <[email protected]>
| Sender: "A. Kleinshmidt" <[email protected]>
| Subject: RE: RPC stops responding after Restart of Remote Storage Services
| Date: Fri, 26 Sep 2003 08:28:54 -0700
| Lines: 178
| Newsgroups: microsoft.public.win2000.advanced_server
|
| Hello Vivien,
| thank you for your help and sorry for my late answer. We
| had a lot of trouble with that server yesterday and today.
|
| I've done a virusscan on the systemdrive, which showed no
| virus (using F-Secure Antivirus 5.40 and up to date
| signature files).
|
| At the moment msrpt_alliance.exe is running on the server
| and I need an address to send it to. You may send me an
| answer to the Address above.
|
| The trouble we had:
| When stopping removable storage we got the following error
| messages in the event log:
| Event Type: Error
| Event Source: Service Control Manager
| Event Category: None
| Event ID: 7031
| Date: 9/26/2003
| Time: 11:58:46 AM
| User: N/A
| Computer: <Servername>
| Description:
| The COM+ Event System service terminated unexpectedly. It
| has done this 1 time(s). The following corrective action
| will be taken in 60000 milliseconds: Restart the service.
|
| Event Type: Error
| Event Source: Service Control Manager
| Event Category: None
| Event ID: 7031
| Date: 9/26/2003
| Time: 11:58:46 AM
| User: N/A
| Computer: <Servername>
| Description:
| The Network Connections service terminated unexpectedly.
| It has done this 1 time(s). The following corrective
| action will be taken in 60000 milliseconds: Restart the
| service.
|
| Event Type: Error
| Event Source: Service Control Manager
| Event Category: None
| Event ID: 7031
| Date: 9/26/2003
| Time: 11:58:46 AM
| User: N/A
| Computer: <Servername>
| Description:
| The Removable Storage service terminated unexpectedly. It
| has done this 1 time(s). The following corrective action
| will be taken in 0 milliseconds: No action.
|
| Event Type: Error
| Event Source: Service Control Manager
| Event Category: None
| Event ID: 7031
| Date: 9/26/2003
| Time: 11:58:46 AM
| User: N/A
| Computer: <Servername>
| Description:
| The System Event Notification service terminated
| unexpectedly. It has done this 1 time(s). The following
| corrective action will be taken in 60000 milliseconds:
| Restart the service.
|
| Event Type: Error
| Event Source: Service Control Manager
| Event Category: None
| Event ID: 7031
| Date: 9/26/2003
| Time: 11:58:46 AM
| User: N/A
| Computer: <Servername>
| Description:
| The Wireless Configuration service terminated
| unexpectedly. It has done this 1 time(s). The following
| corrective action will be taken in 60000 milliseconds:
| Restart the service.
|
| After these events (and waiting for the services to start
| again) it wasn't possible to open the application event
| log (though it was possible to save it). It was possible
| to open the other event logs.
| 20 Minutes later the server stopped responding and the
| removable storage database was empty. It took us a while
| to restore the database and now it is up and running.
|
| Thanks again for your assistance
| Andreas Kleinschmidt
| >-----Original Message-----
| >Hello,
| >
| >Thank you for posting your question here.
| >
| >This problem can be caused by some virus. Please perform
| a thorough virus
| >scan first.
| >
| >If further assistance is needed, please download
| Microsoft Product
| >Support's Reporting Tools and collect the MPS report for
| your server. We
| >will perform further research based on the MPS report.
| >
| >Location:
| >(http://www.microsoft.com/downloads/details.aspx?
| displaylang=en&familyid=CEB
| >F3C7C-7CA5-408F-88B7-F9C79B7306C0)
| >
| >NOTE: Be sure to include all text between '(' and ')'
| when navigating to
| >this location.
| >
| >Thanks.
| >
| >
| >--------------------
| >| From: "A. Kleinshmidt" <[email protected]>
| >| Sender: "A. Kleinshmidt" <[email protected]>
| >| Subject: RPC stops responding after Restart of Remote
| Storage Services
| >| Date: Wed, 24 Sep 2003 02:07:09 -0700
| >| Newsgroups: microsoft.public.win2000.advanced_server
| >|
| >| After restart of remote storage File service (which
| also
| >| restarts the remote storage engine)the Server stops
| >| responding within a range of 15 to 75 Minutes. We used
| >| rping to figure out that rpc stops responding.
| >| It is possible to ping the server, get a nbtstat but it
| is
| >| not possible to access the shared folders or send a
| remote
| >| shutdown command. The server doesn't shut down, we only
| >| see a blue screen (with no text) after 20 Minutes we
| >| switched of the server, normally it takes less than 2
| >| minutes to shut down. Event viewer doesn't show any
| >| (helpful) events.
| >|
| >| Latest service Packs and security patches have been
| >| applied to the w2k Server a week ago. We haven't had
| the
| >| Problems with w2kSP3.
| >|
| >| I'll provide further information if neccessary.
| >|
| >| How can I troubleshoot the rpc problem, are there any
| >| tools to get more information about what goes wrong.
| >|
| >| Thanks for Help
| >| Andreas Kleinschmidt
| >| EADS Space Transportation
| >|
| >|
| >


Sincerely,

Vivien Wu
MCSA, MCSE2000 and MCDBA2000
Microsoft Partner Online Support


Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please Reply to Group via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided AS IS with no warranties, and confers no rights.
 
Back
Top