1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Cannot see server on network

Discussion in 'Networking' started by Mohsin1, Feb 17, 2011.

Thread Status:
Not open for further replies.
Advertisement
  1. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    None of our workstations can see server in network place which is running windows server 2003 standard.Computers are all on same workgroup.I can ping server by IP or name from all workstations and receive response.Server can also ping workstations by IP or name and receive response.F:\ drive is mapped to all workstations and reconnects at logon.All computers have static IP.We have win 98,2000,XP,7 on network.Following services are started on server:
    Computer Browser
    DHCP Client
    DNS Client
    Network Connetions
    Network Location Awareness
    RPC
    Server
    TCP/IP Netbois helper
    Workstation
    Recently server restarts about twice or thrice a week. I don't know if this hardware or software related.
    Could anybody please help?

    Microsoft Windows [Version 5.2.3790]
    (C) Copyright 1985-2003 Microsoft Corp.
    C:\Documents and Settings\Administrator>NBTSTAT -n
    Local Area Connection:
    Node IpAddress: [192.168.0.2] Scope Id: []
    NetBIOS Local Name Table
    Name Type Status
    ---------------------------------------------
    TEMSIK2003 <00> UNIQUE Registered
    TEMSIK2003 <20> UNIQUE Registered
    FRBSERVER <00> GROUP Registered
    FRBSERVER <1E> GROUP Registered
    FRBSERVER <1D> UNIQUE Registered
    ..__MSBROWSE__.<01> GROUP Registered
    C:\Documents and Settings\Administrator>IPCONFIG /ALL
    Windows IP Configuration
    Host Name . . . . . . . . . . . . : TEMSIK2003
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Unknown
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    Ethernet adapter Local Area Connection:
    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Intel(R) PRO/1000 CT Network Connection
    Physical Address. . . . . . . . . : 00-04-23-B3-88-20
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.168.0.2
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.0.1
    DNS Servers . . . . . . . . . . . : 168.210.2.2
    196.14.239.2
    C:\Documents and Settings\Administrator>
     
  2. neil21stirling

    neil21stirling

    Joined:
    Sep 12, 2007
    Messages:
    607
    before even looking at your problem with seeing the server on the network.
    you really need to get to the answer of why the server is restarting.

    1st place to look will be in the event logs of the server that is assuming your recording error messages in your event logs, under system section, check for errors.
    If the cause if not obvious, please by all means post the event id's and descriptions that you think may be causing you problems and i'll help in any way i can to resolve the issues for you.
     
  3. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    Thanks for your time.
    The last restart we had was on 16/02/2011.Here is a event log taken from event viewer, System log. This is before and after restart. After the System log is a log from event viewer, Application log
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:26:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Universal Microsoft service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:26:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The System Manager service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7026
    Date: 2011/02/16
    Time: 02:26:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The following boot-start or system-start driver(s) failed to load:
    i8042prt
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7036
    Date: 2011/02/16
    Time: 02:26:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Telephony service entered the running state.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7035
    Date: 2011/02/16
    Time: 02:26:56 PM
    User: NT AUTHORITY\SYSTEM
    Computer: TEMSIK2003
    Description:
    The Remote Access Connection Manager service was successfully sent a start control.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7036
    Date: 2011/02/16
    Time: 02:26:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Remote Access Connection Manager service entered the running state.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: EventLog
    Event Category: None
    Event ID: 6008
    Date: 2011/02/16
    Time: 02:30:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The previous system shutdown at 2:25:14 PM on 2/16/2011 was unexpected.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: db 07 02 00 03 00 10 00 Û.......
    0008: 0e 00 19 00 0e 00 6d 00 ......m.
    0010: db 07 02 00 03 00 10 00 Û.......
    0018: 0c 00 19 00 0e 00 6d 00 ......m.
    Event Type: Information
    Event Source: EventLog
    Event Category: None
    Event ID: 6009
    Date: 2011/02/16
    Time: 02:30:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Microsoft (R) Windows (R) 5.02. 3790 Service Pack 2 Multiprocessor Free.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: DCOM
    Event Category: None
    Event ID: 10026
    Date: 2011/02/16
    Time: 02:30:56 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The COM sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\Ole\EventLog.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: IPSec
    Event Category: None
    Event ID: 4295
    Date: 2011/02/16
    Time: 02:30:44 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The IPSec Driver is starting in Bypass mode. No IPSec security is being applied while this computer starts up. IPSec policies, if they have been assigned, will be applied to this computer after the IPSec services start.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00 01 00 54 00 ......T.
    0008: 00 00 00 00 c7 10 00 40 ....Ç..@
    0010: 01 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    Event Type: Information
    Event Source: E1000
    Event Category: None
    Event ID: 33
    Date: 2011/02/16
    Time: 02:30:47 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Intel(R) PRO/1000 CT Network Connection Link has been established: 100Mbps full duplex.
    Data:
    0000: 00 00 04 00 02 00 58 00 ......X.
    0008: 00 00 00 00 21 00 04 40 ....!..@
    0010: 00 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    0028: 21 00 04 40 !..@
    Event Type: Information
    Event Source: Tcpip
    Event Category: None
    Event ID: 4201
    Date: 2011/02/16
    Time: 02:30:49 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The system detected that network adapter \DEVICE\TCPIP_{FA883755-560D-4539-A035-8B4B091D7CE0} was connected to the network, and has initiated normal operation over the network adapter.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00 02 00 50 00 ......P.
    0008: 00 00 00 00 69 10 00 40 ....i..@
    0010: 02 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    Event Type: Warning
    Event Source: USER32
    Event Category: None
    Event ID: 1076
    Date: 2011/02/16
    Time: 02:31:35 PM
    User: TEMSIK2003\Administrator
    Computer: TEMSIK2003
    Description:
    The reason supplied by user TEMSIK2003\Administrator for the last unexpected shutdown of this computer is: Power Failure: Environment
    Reason Code: 0x806000c
    Bug ID:
    Bugcheck String:
    Comment:
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 0c 00 06 08 .... Event Type: Information
    Event Source: IPSec
    Event Category: None
    Event ID: 4294
    Date: 2011/02/16
    Time: 02:31:41 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The IPSec driver has entered Secure mode. IPSec policies, if they have been configured, are now being applied to this computer.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00 01 00 54 00 ......T.
    0008: 00 00 00 00 c6 10 00 40 ....Æ..@
    0010: 01 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    Event Type: Information
    Event Source: WinRM
    Event Category: None
    Event ID: 10148
    Date: 2011/02/16
    Time: 02:32:21 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The WinRM service is listening for WS-Management requests.
    User Action
    Use the following command to see the specific IPs on which WinRM is listening:
    winrm enumerate winrm/config/listener
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:33:26 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Boot Config service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:33:26 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Boot Manager service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:33:26 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Security Update service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:33:26 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Time Helper service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:33:26 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Time Manager service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:33:26 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The Universal Microsoft service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Error
    Event Source: Service Control Manager
    Event Category: None
    Event ID: 7023
    Date: 2011/02/16
    Time: 02:33:26 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The System Manager service terminated with the following error:
    The specified module could not be found.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Warning
    Event Source: E1000
    Event Category: None
    Event ID: 27
    Date: 2011/02/16
    Time: 02:46:16 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Intel(R) PRO/1000 CT Network Connection Link has been disconnected.
    Data:
    0000: 00 00 04 00 02 00 58 00 ......X.
    0008: 00 00 00 00 1b 00 04 80 .......?
    0010: 00 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    0028: 1b 00 04 80 ...?
    Event Type: Information
    Event Source: Tcpip
    Event Category: None
    Event ID: 4202
    Date: 2011/02/16
    Time: 02:46:24 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The system detected that network adapter \DEVICE\TCPIP_{FA883755-560D-4539-A035-8B4B091D7CE0} was disconnected from the network, and the adapter's network configuration has been released. If the network adapter was not disconnected, this may indicate that it has malfunctioned. Please contact your vendor for updated drivers.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00 02 00 50 00 ......P.
    0008: 00 00 00 00 6a 10 00 40 ....j..@
    0010: 02 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    Event Type: Information
    Event Source: BROWSER
    Event Category: None
    Event ID: 8033
    Date: 2011/02/16
    Time: 02:46:24 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The browser has forced an election on network \Device\NetBT_Tcpip_{FA883755-560D-4539-A035-8B4B091D7CE0} because a master browser was stopped.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: E1000
    Event Category: None
    Event ID: 33
    Date: 2011/02/16
    Time: 02:46:34 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Intel(R) PRO/1000 CT Network Connection Link has been established: 100Mbps full duplex.
    Data:
    0000: 00 00 04 00 02 00 58 00 ......X.
    0008: 00 00 00 00 21 00 04 40 ....!..@
    0010: 00 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    0028: 21 00 04 40 !..@
    Event Type: Information
    Event Source: Tcpip
    Event Category: None
    Event ID: 4201
    Date: 2011/02/16
    Time: 02:46:34 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The system detected that network adapter \DEVICE\TCPIP_{FA883755-560D-4539-A035-8B4B091D7CE0} was connected to the network, and has initiated normal operation over the network adapter.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 00 00 00 00 02 00 50 00 ......P.
    0008: 00 00 00 00 69 10 00 40 ....i..@
    0010: 02 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........

    Here is the application error log:
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 17061
    Date: 2011/02/16
    Time: 02:26:14 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Error: 50004 Severity: 10 State: 1 Sophos Endpoint Management:
    Integrity check completed
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 54 c3 00 00 0a 00 00 00 TÃ......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 07 00 00 00 6d 00 61 00 ....m.a.
    0038: 73 00 74 00 65 00 72 00 s.t.e.r.
    0040: 00 00 ..
    Event Type: Information
    Event Source: ESENT
    Event Category: General
    Event ID: 102
    Date: 2011/02/16
    Time: 02:26:20 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Windows (2720) Window
    s: The database engine started a new instance (0).
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: ESENT
    Event Category: Logging/Recovery
    Event ID: 301
    Date: 2011/02/16
    Time: 02:26:22 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Windows (2720) Windows: The database engine has begun replaying logfile C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: ESENT
    Event Category: Logging/Recovery
    Event ID: 302
    Date: 2011/02/16
    Time: 02:26:23 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Windows (2720) Windows: The database engine has successfully completed recovery steps.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: MSDTC
    Event Category: TM
    Event ID: 4193
    Date: 2011/02/16
    Time: 02:31:20 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    MS DTC started with the following settings (OFF = 0 and ON = 1):
    Security Configuration:
    Network Administration of Transactions = 0,
    Network Clients = 0,
    Inbound Distributed Transactions using Native MSDTC Protocol = 0,
    Outbound Distributed Transactions using Native MSDTC Protocol = 0,
    Transaction Internet Protocol (TIP) = 0,
    XA Transactions = 0
    Filtering Duplicate events = 1
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: EventSystem
    Event Category: None
    Event ID: 4625
    Date: 2011/02/16
    Time: 02:31:21 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 17069
    Date: 2011/02/16
    Time: 02:31:36 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Microsoft SQL Server 2005 - 9.00.3042.00 (Intel X86)
    Feb 9 2007 22:47:07
    Copyright (c) 1988-2005 Microsoft Corporation
    Express Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: ad 42 00 00 0a 00 00 00 &shy;B......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 17104
    Date: 2011/02/16
    Time: 02:31:36 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Server process ID is 1728.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: d0 42 00 00 0a 00 00 00 ÐB......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 15268
    Date: 2011/02/16
    Time: 02:31:36 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Authentication mode is WINDOWS-ONLY.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: a4 3b 00 00 0a 00 00 00 ¤;......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 17111
    Date: 2011/02/16
    Time: 02:31:36 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Logging SQL Server messages in file 'C:\Program Files\Microsoft SQL Server\MSSQL$SOPHOS\LOG\ERRORLOG'.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: d7 42 00 00 0a 00 00 00 ×B......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 17176
    Date: 2011/02/16
    Time: 02:31:36 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    This instance of SQL Server last reported using a process ID of 1732 at 2/16/2011 2:25:52 PM (local) 2/16/2011 12:25:52 PM (UTC). This is an informational message only; no user action is required.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 18 43 00 00 0a 00 00 00 .C......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Warning
    Event Source: SQLBrowser
    Event Category: None
    Event ID: 3
    Date: 2011/02/16
    Time: 02:31:45 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The configuration of the AdminConnection\TCP protocol in the SQL instance SOPHOS is not valid.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Warning
    Event Source: SysmonLog
    Event Category: None
    Event ID: 2006
    Date: 2011/02/16
    Time: 02:31:48 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Unable to read the Log File Folder value of the System Overview log or alert configuration. The default value will be used. The error code returned is in the data.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 02 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 19030
    Date: 2011/02/16
    Time: 02:31:49 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    SQL Trace ID 1 was started by login "sa".
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: 56 4a 00 00 0a 00 00 00 VJ......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 07 00 00 00 6d 00 61 00 ....m.a.
    0038: 73 00 74 00 65 00 72 00 s.t.e.r.
    0040: 00 00 ..
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 17663
    Date: 2011/02/16
    Time: 02:31:52 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Server name is 'TEMSIK2003\SOPHOS'. This is an informational message only. No user action is required.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: ff 44 00 00 0a 00 00 00 ÿD......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 07 00 00 00 6d 00 61 00 ....m.a.
    0038: 73 00 74 00 65 00 72 00 s.t.e.r.
    0040: 00 00 ..
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 26048
    Date: 2011/02/16
    Time: 02:31:53 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Server local connection provider is ready to accept connection on [ \\.\pipe\SQLLocal\SOPHOS ].
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: c0 65 00 00 0a 00 00 00 Àe......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 26028
    Date: 2011/02/16
    Time: 02:31:53 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Server named pipe provider is ready to accept connection on [ \\.\pipe\MSSQL$SOPHOS\sql\query ].
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: ac 65 00 00 0a 00 00 00 ¬e......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 26028
    Date: 2011/02/16
    Time: 02:31:53 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    Server named pipe provider is ready to accept connection on [ \\.\pipe\MSSQL$SOPHOS\sql\query ].
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: ac 65 00 00 0a 00 00 00 ¬e......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 26037
    Date: 2011/02/16
    Time: 02:31:53 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    The SQL Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service. Error: 0x54b, state: 3. Failure to register an SPN may cause integrated authentication to fall back to NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: b5 65 00 00 0a 00 00 00 µe......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....
    Event Type: Information
    Event Source: MSSQL$SOPHOS
    Event Category: (2)
    Event ID: 17126
    Date: 2011/02/16
    Time: 02:31:53 PM
    User: N/A
    Computer: TEMSIK2003
    Description:
    SQL Server is now ready for client connections. This is an informational message; no user action is required.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Data:
    0000: e6 42 00 00 0a 00 00 00 æB......
    0008: 12 00 00 00 54 00 45 00 ....T.E.
    0010: 4d 00 53 00 49 00 4b 00 M.S.I.K.
    0018: 32 00 30 00 30 00 33 00 2.0.0.3.
    0020: 5c 00 53 00 4f 00 50 00 \.S.O.P.
    0028: 48 00 4f 00 53 00 00 00 H.O.S...
    0030: 00 00 00 00 ....

    Sorry to bombard you with so much info. Sophos antivirus has been removed from the system.
     
  4. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    The restart was about 2:25 PM.
     
  5. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    Anybody that can help?
     
  6. neil21stirling

    neil21stirling

    Joined:
    Sep 12, 2007
    Messages:
    607
    Apologies I took so long to get back to you, but I have had a very busy weekend.
    After looking through your event log, there are quite a few errors relating to services being terminated after the restart.

    Are you having any problems while the server is running? other than not being able to see it on the network?
    When the server restarts. is it always doing it overnight, or does it just happen at random times?
    Has the server only recently started doing this? has it always had this problem since installed?
    Have you applied the latest service packs and updates to the server?

    Sorry i know its alot of questions but the more info i have the better i can help.
     
  7. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    Thanks once again.
    I am not having any other problem while server is running.
    Server restarts randomly, not really overnight.
    The restarting and not seeing server on network is only this year. The company was closed in December for 3 weeks. Server was taken off the premises for security reasons. After bringing it back, server restarts and not seeing it on network and server does not see any computer.
    I think server is upto date.I will recheck.
     
  8. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    Server used to be on automatic updates. I disabled that thinking that it was restarting after updates.
     
  9. neil21stirling

    neil21stirling

    Joined:
    Sep 12, 2007
    Messages:
    607
    My first suggestion would be to uninstall all of the latest service packs and updates installed since the problem started.
    It may be one of these thats started the cause of your problem.

    Once done this get back to me with any running state problems.

    Just to mention I am not saying this will resolve the problem (just first thing to try) also I would not advise keeping the installations and updates off the machine either, however would be worth installing them back onto the server in small batches so that you can determine exactly where and with what update the problem occured.

    Don't get me wrong, re-installing all the updates may not bring the problem back at all, and may just have been an installation anomoly which has been known to happen with windows updates, causing all kinds of problems.

    Anyway once we have removed updates from the equation, if the problem is still occuring, then at least we can move onto the next step and tick them off the list as not the cause.
     
  10. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    ok server was upto date
     
  11. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    Ok, I will try that and get back to you.
     
  12. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    Yesterday I uninstalled updates from January.After restarting server, which was required, I could see all network computers on server and server could be seen from workstations. I thought problem solved. This morning again same problem, server does not any computers and none of the workstations see the server. The server stays on at night and workstations shutdown at night. I then restarted the server (workstations were all still on).After server restart server sees workstations and workstations see server.
    Sorry for the delay, these guys get really anoyed when I tell them to log out to restart server.
     
  13. neil21stirling

    neil21stirling

    Joined:
    Sep 12, 2007
    Messages:
    607
    Well to be honest, the uninstall of the updates was really to solve the server restarting itself. This would probably not resolve the server beeing seen on the network, however from what you have said do the workstations still see the server at the moment?
    any other unsheduled server restarts yet?
     
  14. Mohsin1

    Mohsin1 Thread Starter

    Joined:
    Jan 24, 2011
    Messages:
    14
    So far no restarts of the server. It was restarting only occassionaly, so we'll have to wait and see.
    Workstations cannot see server again.
     
  15. neil21stirling

    neil21stirling

    Joined:
    Sep 12, 2007
    Messages:
    607
    right then.
    Under the assumption so far that the removal of those updates will stop the random restarts.

    You will however need to update the server again at some point with these again. A re-install should not allow for the same issue again. Changes to the updates should have been made by now to allow for errors such as server restart not to happen.

    Should it happen again though, we may need another copy of your system event log.

    Anyway, onto the server not being seen by workstations.

    open a windows explorer window from one of your workstations and try and open directly to server by typing the name of the server into address bar. e.g. \\TEMSIK2003
    It should then show in network places once accessed directly like this, however this may not mean it will keep showing up after machine restarts etc.

    Just to make sure you can connect direct to machine via this method.

    Something else we need to check is that Netbios over TCP/IP is enabled.
    follow the method below for this
    1. Open the Network Connections folder.
    2. Right click the local area network connection and click Properties.
    3. Double click Internet Protocol (TCP/IP).
    4. Click Advanced.
    5. Click WINS.
    6. Click the Enable NetBIOS Over TCP/IP button.

    Ok out of everything once done.

    Technically this should not need a restart, however if server still not showing on network then give both the server and the machine you are using to check this, a restart.
    check again and get back to me.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/981258