Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Networking Networking
Search Search
Search for:
Tech Support Guy > > >

Cannot see server on network


(!)

Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
17-Feb-2011, 06:02 AM #1
Cannot see server on network
None of our workstations can see server in network place which is running windows server 2003 standard.Computers are all on same workgroup.I can ping server by IP or name from all workstations and receive response.Server can also ping workstations by IP or name and receive response.F:\ drive is mapped to all workstations and reconnects at logon.All computers have static IP.We have win 98,2000,XP,7 on network.Following services are started on server:
Computer Browser
DHCP Client
DNS Client
Network Connetions
Network Location Awareness
RPC
Server
TCP/IP Netbois helper
Workstation
Recently server restarts about twice or thrice a week. I don't know if this hardware or software related.
Could anybody please help?

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\Administrator>NBTSTAT -n
Local Area Connection:
Node IpAddress: [192.168.0.2] Scope Id: []
NetBIOS Local Name Table
Name Type Status
---------------------------------------------
TEMSIK2003 <00> UNIQUE Registered
TEMSIK2003 <20> UNIQUE Registered
FRBSERVER <00> GROUP Registered
FRBSERVER <1E> GROUP Registered
FRBSERVER <1D> UNIQUE Registered
..__MSBROWSE__.<01> GROUP Registered
C:\Documents and Settings\Administrator>IPCONFIG /ALL
Windows IP Configuration
Host Name . . . . . . . . . . . . : TEMSIK2003
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 CT Network Connection
Physical Address. . . . . . . . . : 00-04-23-B3-88-20
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 168.210.2.2
196.14.239.2
C:\Documents and Settings\Administrator>
neil21stirling's Avatar
neil21stirling neil21stirling is offline
Member with 602 posts.
 
Join Date: Sep 2007
Location: Fife, Scotland
Experience: Advanced
17-Feb-2011, 07:00 AM #2
before even looking at your problem with seeing the server on the network.
you really need to get to the answer of why the server is restarting.

1st place to look will be in the event logs of the server that is assuming your recording error messages in your event logs, under system section, check for errors.
If the cause if not obvious, please by all means post the event id's and descriptions that you think may be causing you problems and i'll help in any way i can to resolve the issues for you.
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
18-Feb-2011, 04:48 AM #3
Thanks for your time.
The last restart we had was on 16/02/2011.Here is a event log taken from event viewer, System log. This is before and after restart. After the System log is a log from event viewer, Application log
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:26:56 PM
User: N/A
Computer: TEMSIK2003
Description:
The Universal Microsoft service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:26:56 PM
User: N/A
Computer: TEMSIK2003
Description:
The System Manager service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7026
Date: 2011/02/16
Time: 02:26:56 PM
User: N/A
Computer: TEMSIK2003
Description:
The following boot-start or system-start driver(s) failed to load:
i8042prt
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 2011/02/16
Time: 02:26:56 PM
User: N/A
Computer: TEMSIK2003
Description:
The Telephony service entered the running state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 2011/02/16
Time: 02:26:56 PM
User: NT AUTHORITY\SYSTEM
Computer: TEMSIK2003
Description:
The Remote Access Connection Manager service was successfully sent a start control.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 2011/02/16
Time: 02:26:56 PM
User: N/A
Computer: TEMSIK2003
Description:
The Remote Access Connection Manager service entered the running state.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6008
Date: 2011/02/16
Time: 02:30:56 PM
User: N/A
Computer: TEMSIK2003
Description:
The previous system shutdown at 2:25:14 PM on 2/16/2011 was unexpected.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: db 07 02 00 03 00 10 00 .......
0008: 0e 00 19 00 0e 00 6d 00 ......m.
0010: db 07 02 00 03 00 10 00 .......
0018: 0c 00 19 00 0e 00 6d 00 ......m.
Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6009
Date: 2011/02/16
Time: 02:30:56 PM
User: N/A
Computer: TEMSIK2003
Description:
Microsoft (R) Windows (R) 5.02. 3790 Service Pack 2 Multiprocessor Free.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: DCOM
Event Category: None
Event ID: 10026
Date: 2011/02/16
Time: 02:30:56 PM
User: N/A
Computer: TEMSIK2003
Description:
The COM sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\Ole\EventLog.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: IPSec
Event Category: None
Event ID: 4295
Date: 2011/02/16
Time: 02:30:44 PM
User: N/A
Computer: TEMSIK2003
Description:
The IPSec Driver is starting in Bypass mode. No IPSec security is being applied while this computer starts up. IPSec policies, if they have been assigned, will be applied to this computer after the IPSec services start.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 c7 10 00 40 ......@
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Information
Event Source: E1000
Event Category: None
Event ID: 33
Date: 2011/02/16
Time: 02:30:47 PM
User: N/A
Computer: TEMSIK2003
Description:
Intel(R) PRO/1000 CT Network Connection Link has been established: 100Mbps full duplex.
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 21 00 04 40 ....!..@
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 21 00 04 40 !..@
Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4201
Date: 2011/02/16
Time: 02:30:49 PM
User: N/A
Computer: TEMSIK2003
Description:
The system detected that network adapter \DEVICE\TCPIP_{FA883755-560D-4539-A035-8B4B091D7CE0} was connected to the network, and has initiated normal operation over the network adapter.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 69 10 00 40 ....i..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1076
Date: 2011/02/16
Time: 02:31:35 PM
User: TEMSIK2003\Administrator
Computer: TEMSIK2003
Description:
The reason supplied by user TEMSIK2003\Administrator for the last unexpected shutdown of this computer is: Power Failure: Environment
Reason Code: 0x806000c
Bug ID:
Bugcheck String:
Comment:
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 00 06 08 .... Event Type: Information
Event Source: IPSec
Event Category: None
Event ID: 4294
Date: 2011/02/16
Time: 02:31:41 PM
User: N/A
Computer: TEMSIK2003
Description:
The IPSec driver has entered Secure mode. IPSec policies, if they have been configured, are now being applied to this computer.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 c6 10 00 40 ......@
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Information
Event Source: WinRM
Event Category: None
Event ID: 10148
Date: 2011/02/16
Time: 02:32:21 PM
User: N/A
Computer: TEMSIK2003
Description:
The WinRM service is listening for WS-Management requests.
User Action
Use the following command to see the specific IPs on which WinRM is listening:
winrm enumerate winrm/config/listener
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:33:26 PM
User: N/A
Computer: TEMSIK2003
Description:
The Boot Config service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:33:26 PM
User: N/A
Computer: TEMSIK2003
Description:
The Boot Manager service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:33:26 PM
User: N/A
Computer: TEMSIK2003
Description:
The Security Update service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:33:26 PM
User: N/A
Computer: TEMSIK2003
Description:
The Time Helper service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:33:26 PM
User: N/A
Computer: TEMSIK2003
Description:
The Time Manager service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:33:26 PM
User: N/A
Computer: TEMSIK2003
Description:
The Universal Microsoft service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 2011/02/16
Time: 02:33:26 PM
User: N/A
Computer: TEMSIK2003
Description:
The System Manager service terminated with the following error:
The specified module could not be found.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: E1000
Event Category: None
Event ID: 27
Date: 2011/02/16
Time: 02:46:16 PM
User: N/A
Computer: TEMSIK2003
Description:
Intel(R) PRO/1000 CT Network Connection Link has been disconnected.
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 1b 00 04 80 .......?
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 1b 00 04 80 ...?
Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4202
Date: 2011/02/16
Time: 02:46:24 PM
User: N/A
Computer: TEMSIK2003
Description:
The system detected that network adapter \DEVICE\TCPIP_{FA883755-560D-4539-A035-8B4B091D7CE0} was disconnected from the network, and the adapter's network configuration has been released. If the network adapter was not disconnected, this may indicate that it has malfunctioned. Please contact your vendor for updated drivers.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 6a 10 00 40 ....j..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Information
Event Source: BROWSER
Event Category: None
Event ID: 8033
Date: 2011/02/16
Time: 02:46:24 PM
User: N/A
Computer: TEMSIK2003
Description:
The browser has forced an election on network \Device\NetBT_Tcpip_{FA883755-560D-4539-A035-8B4B091D7CE0} because a master browser was stopped.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: E1000
Event Category: None
Event ID: 33
Date: 2011/02/16
Time: 02:46:34 PM
User: N/A
Computer: TEMSIK2003
Description:
Intel(R) PRO/1000 CT Network Connection Link has been established: 100Mbps full duplex.
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 21 00 04 40 ....!..@
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 21 00 04 40 !..@
Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4201
Date: 2011/02/16
Time: 02:46:34 PM
User: N/A
Computer: TEMSIK2003
Description:
The system detected that network adapter \DEVICE\TCPIP_{FA883755-560D-4539-A035-8B4B091D7CE0} was connected to the network, and has initiated normal operation over the network adapter.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 69 10 00 40 ....i..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

Here is the application error log:
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 17061
Date: 2011/02/16
Time: 02:26:14 PM
User: N/A
Computer: TEMSIK2003
Description:
Error: 50004 Severity: 10 State: 1 Sophos Endpoint Management:
Integrity check completed
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 54 c3 00 00 0a 00 00 00 T......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 07 00 00 00 6d 00 61 00 ....m.a.
0038: 73 00 74 00 65 00 72 00 s.t.e.r.
0040: 00 00 ..
Event Type: Information
Event Source: ESENT
Event Category: General
Event ID: 102
Date: 2011/02/16
Time: 02:26:20 PM
User: N/A
Computer: TEMSIK2003
Description:
Windows (2720) Window
s: The database engine started a new instance (0).
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: ESENT
Event Category: Logging/Recovery
Event ID: 301
Date: 2011/02/16
Time: 02:26:22 PM
User: N/A
Computer: TEMSIK2003
Description:
Windows (2720) Windows: The database engine has begun replaying logfile C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: ESENT
Event Category: Logging/Recovery
Event ID: 302
Date: 2011/02/16
Time: 02:26:23 PM
User: N/A
Computer: TEMSIK2003
Description:
Windows (2720) Windows: The database engine has successfully completed recovery steps.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: MSDTC
Event Category: TM
Event ID: 4193
Date: 2011/02/16
Time: 02:31:20 PM
User: N/A
Computer: TEMSIK2003
Description:
MS DTC started with the following settings (OFF = 0 and ON = 1):
Security Configuration:
Network Administration of Transactions = 0,
Network Clients = 0,
Inbound Distributed Transactions using Native MSDTC Protocol = 0,
Outbound Distributed Transactions using Native MSDTC Protocol = 0,
Transaction Internet Protocol (TIP) = 0,
XA Transactions = 0
Filtering Duplicate events = 1
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: EventSystem
Event Category: None
Event ID: 4625
Date: 2011/02/16
Time: 02:31:21 PM
User: N/A
Computer: TEMSIK2003
Description:
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 17069
Date: 2011/02/16
Time: 02:31:36 PM
User: N/A
Computer: TEMSIK2003
Description:
Microsoft SQL Server 2005 - 9.00.3042.00 (Intel X86)
Feb 9 2007 22:47:07
Copyright (c) 1988-2005 Microsoft Corporation
Express Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ad 42 00 00 0a 00 00 00 ­B......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 17104
Date: 2011/02/16
Time: 02:31:36 PM
User: N/A
Computer: TEMSIK2003
Description:
Server process ID is 1728.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d0 42 00 00 0a 00 00 00 B......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 15268
Date: 2011/02/16
Time: 02:31:36 PM
User: N/A
Computer: TEMSIK2003
Description:
Authentication mode is WINDOWS-ONLY.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: a4 3b 00 00 0a 00 00 00 ;......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 17111
Date: 2011/02/16
Time: 02:31:36 PM
User: N/A
Computer: TEMSIK2003
Description:
Logging SQL Server messages in file 'C:\Program Files\Microsoft SQL Server\MSSQL$SOPHOS\LOG\ERRORLOG'.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d7 42 00 00 0a 00 00 00 B......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 17176
Date: 2011/02/16
Time: 02:31:36 PM
User: N/A
Computer: TEMSIK2003
Description:
This instance of SQL Server last reported using a process ID of 1732 at 2/16/2011 2:25:52 PM (local) 2/16/2011 12:25:52 PM (UTC). This is an informational message only; no user action is required.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 18 43 00 00 0a 00 00 00 .C......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Warning
Event Source: SQLBrowser
Event Category: None
Event ID: 3
Date: 2011/02/16
Time: 02:31:45 PM
User: N/A
Computer: TEMSIK2003
Description:
The configuration of the AdminConnection\TCP protocol in the SQL instance SOPHOS is not valid.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: SysmonLog
Event Category: None
Event ID: 2006
Date: 2011/02/16
Time: 02:31:48 PM
User: N/A
Computer: TEMSIK2003
Description:
Unable to read the Log File Folder value of the System Overview log or alert configuration. The default value will be used. The error code returned is in the data.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 02 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 19030
Date: 2011/02/16
Time: 02:31:49 PM
User: N/A
Computer: TEMSIK2003
Description:
SQL Trace ID 1 was started by login "sa".
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 56 4a 00 00 0a 00 00 00 VJ......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 07 00 00 00 6d 00 61 00 ....m.a.
0038: 73 00 74 00 65 00 72 00 s.t.e.r.
0040: 00 00 ..
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 17663
Date: 2011/02/16
Time: 02:31:52 PM
User: N/A
Computer: TEMSIK2003
Description:
Server name is 'TEMSIK2003\SOPHOS'. This is an informational message only. No user action is required.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ff 44 00 00 0a 00 00 00 D......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 07 00 00 00 6d 00 61 00 ....m.a.
0038: 73 00 74 00 65 00 72 00 s.t.e.r.
0040: 00 00 ..
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 26048
Date: 2011/02/16
Time: 02:31:53 PM
User: N/A
Computer: TEMSIK2003
Description:
Server local connection provider is ready to accept connection on [ \\.\pipe\SQLLocal\SOPHOS ].
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c0 65 00 00 0a 00 00 00 e......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 26028
Date: 2011/02/16
Time: 02:31:53 PM
User: N/A
Computer: TEMSIK2003
Description:
Server named pipe provider is ready to accept connection on [ \\.\pipe\MSSQL$SOPHOS\sql\query ].
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ac 65 00 00 0a 00 00 00 e......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 26028
Date: 2011/02/16
Time: 02:31:53 PM
User: N/A
Computer: TEMSIK2003
Description:
Server named pipe provider is ready to accept connection on [ \\.\pipe\MSSQL$SOPHOS\sql\query ].
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: ac 65 00 00 0a 00 00 00 e......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 26037
Date: 2011/02/16
Time: 02:31:53 PM
User: N/A
Computer: TEMSIK2003
Description:
The SQL Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service. Error: 0x54b, state: 3. Failure to register an SPN may cause integrated authentication to fall back to NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: b5 65 00 00 0a 00 00 00 e......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....
Event Type: Information
Event Source: MSSQL$SOPHOS
Event Category: (2)
Event ID: 17126
Date: 2011/02/16
Time: 02:31:53 PM
User: N/A
Computer: TEMSIK2003
Description:
SQL Server is now ready for client connections. This is an informational message; no user action is required.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: e6 42 00 00 0a 00 00 00 B......
0008: 12 00 00 00 54 00 45 00 ....T.E.
0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
0018: 32 00 30 00 30 00 33 00 2.0.0.3.
0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
0028: 48 00 4f 00 53 00 00 00 H.O.S...
0030: 00 00 00 00 ....

Sorry to bombard you with so much info. Sophos antivirus has been removed from the system.
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
19-Feb-2011, 05:25 AM #4
The restart was about 2:25 PM.
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
21-Feb-2011, 03:44 AM #5
Anybody that can help?
neil21stirling's Avatar
neil21stirling neil21stirling is offline
Member with 602 posts.
 
Join Date: Sep 2007
Location: Fife, Scotland
Experience: Advanced
21-Feb-2011, 05:33 AM #6
Apologies I took so long to get back to you, but I have had a very busy weekend.
After looking through your event log, there are quite a few errors relating to services being terminated after the restart.

Are you having any problems while the server is running? other than not being able to see it on the network?
When the server restarts. is it always doing it overnight, or does it just happen at random times?
Has the server only recently started doing this? has it always had this problem since installed?
Have you applied the latest service packs and updates to the server?

Sorry i know its alot of questions but the more info i have the better i can help.
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
21-Feb-2011, 06:06 AM #7
Thanks once again.
I am not having any other problem while server is running.
Server restarts randomly, not really overnight.
The restarting and not seeing server on network is only this year. The company was closed in December for 3 weeks. Server was taken off the premises for security reasons. After bringing it back, server restarts and not seeing it on network and server does not see any computer.
I think server is upto date.I will recheck.
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
21-Feb-2011, 06:08 AM #8
Server used to be on automatic updates. I disabled that thinking that it was restarting after updates.
neil21stirling's Avatar
neil21stirling neil21stirling is offline
Member with 602 posts.
 
Join Date: Sep 2007
Location: Fife, Scotland
Experience: Advanced
21-Feb-2011, 06:20 AM #9
My first suggestion would be to uninstall all of the latest service packs and updates installed since the problem started.
It may be one of these thats started the cause of your problem.

Once done this get back to me with any running state problems.

Just to mention I am not saying this will resolve the problem (just first thing to try) also I would not advise keeping the installations and updates off the machine either, however would be worth installing them back onto the server in small batches so that you can determine exactly where and with what update the problem occured.

Don't get me wrong, re-installing all the updates may not bring the problem back at all, and may just have been an installation anomoly which has been known to happen with windows updates, causing all kinds of problems.

Anyway once we have removed updates from the equation, if the problem is still occuring, then at least we can move onto the next step and tick them off the list as not the cause.
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
21-Feb-2011, 06:43 AM #10
ok server was upto date
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
21-Feb-2011, 06:45 AM #11
Ok, I will try that and get back to you.
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
23-Feb-2011, 04:47 AM #12
Yesterday I uninstalled updates from January.After restarting server, which was required, I could see all network computers on server and server could be seen from workstations. I thought problem solved. This morning again same problem, server does not any computers and none of the workstations see the server. The server stays on at night and workstations shutdown at night. I then restarted the server (workstations were all still on).After server restart server sees workstations and workstations see server.
Sorry for the delay, these guys get really anoyed when I tell them to log out to restart server.
neil21stirling's Avatar
neil21stirling neil21stirling is offline
Member with 602 posts.
 
Join Date: Sep 2007
Location: Fife, Scotland
Experience: Advanced
23-Feb-2011, 05:44 AM #13
Well to be honest, the uninstall of the updates was really to solve the server restarting itself. This would probably not resolve the server beeing seen on the network, however from what you have said do the workstations still see the server at the moment?
any other unsheduled server restarts yet?
Mohsin1's Avatar
Mohsin1 Mohsin1 is offline
Junior Member with 14 posts.
THREAD STARTER
 
Join Date: Jan 2011
Experience: Intermediate
23-Feb-2011, 06:01 AM #14
So far no restarts of the server. It was restarting only occassionaly, so we'll have to wait and see.
Workstations cannot see server again.
neil21stirling's Avatar
neil21stirling neil21stirling is offline
Member with 602 posts.
 
Join Date: Sep 2007
Location: Fife, Scotland
Experience: Advanced
23-Feb-2011, 09:50 AM #15
right then.
Under the assumption so far that the removal of those updates will stop the random restarts.

You will however need to update the server again at some point with these again. A re-install should not allow for the same issue again. Changes to the updates should have been made by now to allow for errors such as server restart not to happen.

Should it happen again though, we may need another copy of your system event log.

Anyway, onto the server not being seen by workstations.

open a windows explorer window from one of your workstations and try and open directly to server by typing the name of the server into address bar. e.g. \\TEMSIK2003
It should then show in network places once accessed directly like this, however this may not mean it will keep showing up after machine restarts etc.

Just to make sure you can connect direct to machine via this method.

Something else we need to check is that Netbios over TCP/IP is enabled.
follow the method below for this
1. Open the Network Connections folder.
2. Right click the local area network connection and click Properties.
3. Double click Internet Protocol (TCP/IP).
4. Click Advanced.
5. Click WINS.
6. Click the Enable NetBIOS Over TCP/IP button.

Ok out of everything once done.

Technically this should not need a restart, however if server still not showing on network then give both the server and the machine you are using to check this, a restart.
check again and get back to me.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑