Multitude of problems on Win2k3 servers

[Trana]

Alright where to start...

Sometime about a week ago I started having problems to establish remote desktop connections to various servers. The login screen would either result in:

RPC Server is unavailable.
or
Access denied.

Theres a reghack to ignore user config errors which allows access me to access the servers remotely. But it does not solve the problems which are the reasons why I needed to look at the servers to begin with.

These problems are different depending on the server roles. For instant:

Filservers: fileshares unavailable with network accounts with error (on workstations): "The Local device name is already in use" for some users, not all. Using local server accounts seem to work better.
Database/application servers: various problems related to those applications and databases.
Printerservers: print errors no matter how many times I do normal trouble shooting like clearing queue and restarting print spooler.

Now, the common nominator between all these servers are the following Events:

Application:
Source: Userenv
Event ID: 1053

Windows cannot determine the user or computer name. (Not enough storage is available to complete this operation. ). Group Policy processing aborted.

System:
Source: Browser
Event ID: 8032
The browser service has failed to retrieve the backup list too many times on transport \Device\NetBT_Tcpip_{10348AAB-2793-4294-A0A8-700F9FECCD7C}. The backup browser is stopping.

Source: Netlogon
Event ID: 5719
This computer was not able to set up a secure session with a domain controller in domain mydomain due to the following:
Not enough storage is available to process this command.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.

And a few more similar.

Other than that the servers have very little in common except the operating system (win 2k3):
* Some servers have all Windows Updates, some dont even have SP2
* Different AV products
* Different backup products
* Different domains and sites

Nothing has been intentionally changed on any servers recently.

All problems on the various servers are fixed by a simple restart, but the problems come back within 48 hours.

Any ideas or tips would be greatly appreciated.

 

[Lemon13]

for fileserver

http://www.howtonetworking.com/casestudy/mapping1.htm

for the rest, more information is required (network/dns layout), my guess is a dns problem

M. Knorr

MCSE, MCTS, MCSA, CCNA

 

[itsp1965]

My first guess would have been a flawed update since it is common across all your servers. I don't think DNS is the culprit only because sounds more like a resource issue. So I would gather;

1. A recent update was applied that has issues like a memory leak (have you checked task manager for quick performance stats to see if something is hogging the pagefile/memory). Since you have diff antivirus, backup programs..could be a flawed MS update

2. If all the servers are the same have you recently applied any hardware vendor updates?

3. Do these servers run common applications again pointing to an application update

4. Do you apply any particular group policies against these servers. There could be a GPO that is running amok

5. Is your antivirus up to date? Could be a viral infection

 

[Zelandakh]

Remote to a DC. Patch it. Reboot it. Repeat for all other DCs.

Then try one F&P. Can you access the DCs from there (\\dcname)?

Check WINS and DNS lookups, check event log.

Could be anything, worth trying everything.

 

[Trana]

Thanks for the replies

Lemon13:
If the file server related error message was a single problem that is probably a great link. But the thing is, all these issues are, on the various servers, symptoms of the same problem. Which comes down to those Event Log warnings and errors.

Itsp1965:
1. Servers are on many different patch levels, no common updates have been made.
2. No, different brands/makes/models and I rarely run manufacturer updates on servers anyway.
3. Some of course have the same AV and backup in common, but all in all, I have these problems on servers with 2 different backup programs and 3 different antivirus programs. The only thing they all do have in common is Windows Server 2003.
4. There are GPOs of course, but like 3. there are no common GPOs for all the servers.
5. The 3 different AV products on the various servers are all uptodate and not giving any warnings or alerts of any sort.

Zelandahk:
I will do so. I do think the DCs might the solution after all, however, I have the problems on completely different domains and within those domains, not all servers have the problems.

Its beyond strange, if I only had the problem on one domain I wouldnt be so baffled.

 

[Trana]

Problem solved, the one other thing they had in common was our surveillance system (which I forgot), once that was disabled, everything works.