Server Lockout

[sipacino]

Hi all,

Aby help would me much appreciated as I am really scratching my head on this one.

About twice a week my Windows 2003 SBS (Only server in organisation) locks all the users out (cannot log in) and stops most of the primary services from working. Only a reboot solves the problem. There are a number of event logs listed in System which I have included below. In addition, there is a DNS error 4000 'Unable to Open Active Directory'

Anyone?

Many thanks
Simon
-------------------------------------------------------------
Event Type: Error
Event Source: IIS Config
Event Category: Catalog
Event ID: 51228
Date: 27/10/2005
Time: 09:15:07
User: N/A
Computer: SERVER01
Description:
An error occurred while saving the metabase file. This can happen when the metabase XML file is in use by another program, or if the disk is full. Check for corresponding events in the event log for more details.
ErrorCode : 0x80070533

Event Type: Error
Event Source: KDC
Event Category: None
Event ID: 7
Date: 27/10/2005
Time: 09:16:39
User: N/A
Computer: SERVER01
Description:
The Security Account Manager failed a KDC request in an unexpected way. The error is in the data field. The account name was SERVER01$@NLGN.LOCAL and lookup type 0x28.
Data:
0000: 17 00 00 c0 ...À

Event Type: Error
Event Source: smtpsvc
Event Category: None
Event ID: 429
Date: 27/10/2005
Time: 09:22:44
User: N/A
Computer: SERVER01
Description:
Virtual Server Invalid Mail Queue Directory: The specified mail queue directory is not valid. Cannot start the SMTP Service.
Data:
0000: 33 05 00 00 3...

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5722
Date: 27/10/2005
Time: 09:26:54
User: N/A
Computer: SERVER01
Description:
The session setup from the computer NLGN19 failed to authenticate. The name(s) of the account(s) referenced in the security database is NLGN19$. The following error occurred:
Not enough storage is available to process this command.
Data:
0000: 17 00 00 c0 ...À

Event Type: Error
Event Source: SBCore
Event Category: None
Event ID: 1023
Date: 27/10/2005
Time: 09:27:58
User: N/A
Computer: SERVER01
Description:
The license store for the client access licenses is not valid. Only the minimum number of client access licenses will be available until a valid license store is restored. For more information, see Help in the Licensing snap-in.

Event Type: Error
Event Source: Schannel
Event Category: None
Event ID: 36870
Date: 27/10/2005
Time: 09:31:36
User: N/A
Computer: SERVER01
Description:
A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x533.

Event Type: Error
Event Source: HTTP
Event Category: None
Event ID: 15000
Date: 27/10/2005
Time: 09:33:35
User: N/A
Computer: SERVER01
Description:
Unable to create log file C:\WINDOWS\system32\LogFiles\W3SVC1. Make sure that the logging directory is correct and this computer has write access to that directory.
Data:
0000: 00 00 04 00 02 00 52 00 ......R.
0008: 00 00 00 00 98 3a 00 c0 ....?:.À
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 72 00 00 c0 r..À

 

[markpirvine]

Hi,

I'm belive that I'm having a similar problem with W2K3 Enterprise - except I don't have any event logs to help me. Have you had any success locating the problem?

Mark

 

[sipacino]

Not as yet! We have definitely got a malfunctioning POP3 Collector which is causing some issues. We also think we may have been hacked (buffer overflow weakness) but are looking into it. Will let you know if I get any other information.

Simon