Phantom Freeze Post SP1

Installed SP1 about a week ago on a server that previous to the install was
trouble free. Since SP1 the Server simply quits functioning. Server goes
black, stays running but all services are unreachable. Exchange disconnects
from clients. All that can be done is hold the power button in until the
server shutdowns and then power it back on. This is new since SP1. Previously
this server had no issues. There is nothing in the event logs to indicate the
cause of the freeze. The freeze follows no pattern. The times of day are
random and it happens about once every 36 – 40 hours.

It is not heat, power supply, memory, disk space or UPS. The only thing I
can think of is it might be Trend Micro. The only reason I mentioned this is
I have seen more than a few references to Trend Micro problems post SP1. I am
going to uninstall and re-install to see if this stops the phantom freeze and
will post back my findings. However, if anybody else has any insight, all
thoughts appreciated.

Thank You

JLS

Hello JLS,

Thank you for posting to the SBS Newsgroup.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

I understand that after you installed SP1, your SBS 2K3 server hangs for
every 36 or 40 hours, also your Exchange server does not work. If I have
misunderstood your concern, please let me know.

For critical issue, we suggest customer that contact Microsoft Product
Support Services via telephone for quick solution, and a dedicated Support
Professional can assist with your request. Please be advised that
contacting phone support will be a charged call.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below.

http://support.microsoft.com/default...S;PHONENUMBERS

If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.

Here, we are still glad to be of assistance on your issue. Please see my
following information:

1> Please be more clarifier, is it Windows server 2003 SP1 or Small
Business Server 2003 SP1 installed on your SBS 2K3 Server? We do not
suggest that only install Windows server 2003 SP1 on the serve due to some
integrated issue. Now, I assume that you install SBS 2K3 SP1.

2> We do see some issues with Trend Micro, so I suggest you that perform a
clean boot on your server and see whether this is a third party issue. To
do so, please see:

a. Click Start->Run, type "MSCONFIG" (without the quotation marks) and
click OK.

b. In the System Configuration Utility (MSConfig) window, click the
"Startup" tab.

c. Click to clear all the check marks from the list box under "Startup".

d. Click the Services tab, check the "Hide all Microsoft Services" box and
then click the "Disable All" button to disable the non-Microsoft services.

e. Click OK to close the MSConfig window. Click Yes when you are asked to
restart your computer in order to enable the changes.

f. After restarting, please check whether this issue still exists.

2> If the issue persists, please help to gather the following log files to
check whether the SBS 2K3 SP1 has being successfully installed on your
Server.

a. Is it a SBS 2K3 Standard or Premium version server?

b. On the server, go to C:\Program Files\Microsoft integration\windows
small business server 2003\logs.

c. For upgrading to Windows Small Business Server 2003 SP1 (Q885918),
please go to C:\Windows\KB885918.log, and paste the full content to the
Newsgroup.

Please zip all the files and send to my mailbox.

I am appreciated your time. If anything is unclear, please feel free to let
me know. I am looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: Phantom Freeze Post SP1
>thread-index: AcWfqv6lTpOYpr0jQsub31JAqqXZ+w==
>X-WBNR-Posting-Host: 24.85.224.239
>From: =?Utf-8?B?SkxT?= <>
>Subject: Phantom Freeze Post SP1
>Date: Fri, 12 Aug 2005 19:02:01 -0700
>Lines: 20
>Message-ID: <AF684A06-07A2-48D9-BFEB->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSF TNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143861
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Installed SP1 about a week ago on a server that previous to the install
was
>trouble free. Since SP1 the Server simply quits functioning. Server goes
>black, stays running but all services are unreachable. Exchange
disconnects
>from clients. All that can be done is hold the power button in until the
>server shutdowns and then power it back on. This is new since SP1.
Previously
>this server had no issues. There is nothing in the event logs to indicate
the
>cause of the freeze. The freeze follows no pattern. The times of day are
>random and it happens about once every 36 – 40 hours.
>
>It is not heat, power supply, memory, disk space or UPS. The only thing I
>can think of is it might be Trend Micro. The only reason I mentioned this
is
>I have seen more than a few references to Trend Micro problems post SP1. I
am
>going to uninstall and re-install to see if this stops the phantom freeze
and
>will post back my findings. However, if anybody else has any insight, all
>thoughts appreciated.
>
>Thank You
>
>JLS
>
>

I suspect it is Trend Micro SMB causing this Server to intermittently freeze
post SP1, but I do not have enough information yet to form a conclusion. The
Event logs are clean. No events to indicate why the Server quits providing
services and freeze. It is not a heat or Power issue. I do not use UPS
software for a number of reasons, so it is not UPS. I just have a gut feeling
that it is Scanmail for Exchange that is hanging this server. On Friday
night I removed Trend Micro from the server. Rebooted and ran a health check
on all services
– OK. Reinstalled Trend SMB Client\Server\Messaging Suite and reinstalled
Scanmail for Exchange and rebooted. Event logs are clean, except for
dsrestor, which after reading around, I can essentially ignore. I will run
the server over the weekend, see what happens and post my results on Monday.
Since SP1 the Server has not had an uptime of more than 36 hours, so Monday
should be a good preliminary test. Thanks

JLS



""Brandy Nee [MSFT]"" wrote:

> Hello JLS,
>
> Thank you for posting to the SBS Newsgroup.
>
> I am sorry for the delayed response due to weekend. Please understand that
> the newsgroups are staffed weekdays by Microsoft Support professionals to
> answer your systems and applications questions. Your understanding is
> greatly appreciated!
>
> I understand that after you installed SP1, your SBS 2K3 server hangs for
> every 36 or 40 hours, also your Exchange server does not work. If I have
> misunderstood your concern, please let me know.
>
> For critical issue, we suggest customer that contact Microsoft Product
> Support Services via telephone for quick solution, and a dedicated Support
> Professional can assist with your request. Please be advised that
> contacting phone support will be a charged call.
>
> To obtain the phone numbers for specific technology request please take a
> look at the web site listed below.
>
> http://support.microsoft.com/default...S;PHONENUMBERS
>
> If you are outside the US please see http://support.microsoft.com for
> regional support phone numbers.
>
> Here, we are still glad to be of assistance on your issue. Please see my
> following information:
>
> 1> Please be more clarifier, is it Windows server 2003 SP1 or Small
> Business Server 2003 SP1 installed on your SBS 2K3 Server? We do not
> suggest that only install Windows server 2003 SP1 on the serve due to some
> integrated issue. Now, I assume that you install SBS 2K3 SP1.
>
> 2> We do see some issues with Trend Micro, so I suggest you that perform a
> clean boot on your server and see whether this is a third party issue. To
> do so, please see:
>
> a. Click Start->Run, type "MSCONFIG" (without the quotation marks) and
> click OK.
>
> b. In the System Configuration Utility (MSConfig) window, click the
> "Startup" tab.
>
> c. Click to clear all the check marks from the list box under "Startup".
>
> d. Click the Services tab, check the "Hide all Microsoft Services" box and
> then click the "Disable All" button to disable the non-Microsoft services.
>
> e. Click OK to close the MSConfig window. Click Yes when you are asked to
> restart your computer in order to enable the changes.
>
> f. After restarting, please check whether this issue still exists.
>
> 2> If the issue persists, please help to gather the following log files to
> check whether the SBS 2K3 SP1 has being successfully installed on your
> Server.
>
> a. Is it a SBS 2K3 Standard or Premium version server?
>
> b. On the server, go to C:\Program Files\Microsoft integration\windows
> small business server 2003\logs.
>
> c. For upgrading to Windows Small Business Server 2003 SP1 (Q885918),
> please go to C:\Windows\KB885918.log, and paste the full content to the
> Newsgroup.
>
> Please zip all the files and send to my mailbox.
>
> I am appreciated your time. If anything is unclear, please feel free to let
> me know. I am looking forward to hearing from you!
>
> Best regards,
>
> Brandy Nee
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
> --------------------
> >Thread-Topic: Phantom Freeze Post SP1
> >thread-index: AcWfqv6lTpOYpr0jQsub31JAqqXZ+w==
> >X-WBNR-Posting-Host: 24.85.224.239
> >From: =?Utf-8?B?SkxT?= <>
> >Subject: Phantom Freeze Post SP1
> >Date: Fri, 12 Aug 2005 19:02:01 -0700
> >Lines: 20
> >Message-ID: <AF684A06-07A2-48D9-BFEB->
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 8bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windows.server.sbs
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSF TNGXA03.phx.gbl
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143861
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Installed SP1 about a week ago on a server that previous to the install
> was
> >trouble free. Since SP1 the Server simply quits functioning. Server goes
> >black, stays running but all services are unreachable. Exchange
> disconnects
> >from clients. All that can be done is hold the power button in until the
> >server shutdowns and then power it back on. This is new since SP1.
> Previously
> >this server had no issues. There is nothing in the event logs to indicate
> the
> >cause of the freeze. The freeze follows no pattern. The times of day are
> >random and it happens about once every 36 – 40 hours.
> >
> >It is not heat, power supply, memory, disk space or UPS. The only thing I
> >can think of is it might be Trend Micro. The only reason I mentioned this
> is
> >I have seen more than a few references to Trend Micro problems post SP1. I
> am
> >going to uninstall and re-install to see if this stops the phantom freeze
> and
> >will post back my findings. However, if anybody else has any insight, all
> >thoughts appreciated.
> >
> >Thank You
> >
> >JLS
> >
> >
>
>

Hello JLS,

Thank you for posting back and keeping me update!

May I know what exact SP1 you have installed on your SBS 2K3 server,
Windows Server 2003 SP1 or Small Business Server 2003 SP1?

Also, please take your time to run your server and see whether the issue
will occur again. If you have any updates, please feel free to let me know.
I am always stand by and looking forward to hearing from you!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: Phantom Freeze Post SP1
>thread-index: AcWhWmIemL1wKiZ8SpGoFi3QkOqg2w==
>X-WBNR-Posting-Host: 24.85.224.239
>From: =?Utf-8?B?SkxT?= <>
>References: <AF684A06-07A2-48D9-BFEB->
<>
>Subject: RE: Phantom Freeze Post SP1
>Date: Sun, 14 Aug 2005 22:30:01 -0700
>Lines: 181
>Message-ID: <BC167D32-4928-46F0-A50A->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144329
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I suspect it is Trend Micro SMB causing this Server to intermittently
freeze
>post SP1, but I do not have enough information yet to form a conclusion.
The
>Event logs are clean. No events to indicate why the Server quits providing
>services and freeze. It is not a heat or Power issue. I do not use UPS
>software for a number of reasons, so it is not UPS. I just have a gut
feeling
>that it is Scanmail for Exchange that is hanging this server. On Friday
>night I removed Trend Micro from the server. Rebooted and ran a health
check
>on all services
>– OK. Reinstalled Trend SMB Client\Server\Messaging Suite and
reinstalled
>Scanmail for Exchange and rebooted. Event logs are clean, except for
>dsrestor, which after reading around, I can essentially ignore. I will run
>the server over the weekend, see what happens and post my results on
Monday.
>Since SP1 the Server has not had an uptime of more than 36 hours, so
Monday
>should be a good preliminary test. Thanks
>
>JLS
>
>
>
>""Brandy Nee [MSFT]"" wrote:
>
>> Hello JLS,
>>
>> Thank you for posting to the SBS Newsgroup.
>>
>> I am sorry for the delayed response due to weekend. Please understand
that
>> the newsgroups are staffed weekdays by Microsoft Support professionals
to
>> answer your systems and applications questions. Your understanding is
>> greatly appreciated!
>>
>> I understand that after you installed SP1, your SBS 2K3 server hangs for
>> every 36 or 40 hours, also your Exchange server does not work. If I have
>> misunderstood your concern, please let me know.
>>
>> For critical issue, we suggest customer that contact Microsoft Product
>> Support Services via telephone for quick solution, and a dedicated
Support
>> Professional can assist with your request. Please be advised that
>> contacting phone support will be a charged call.
>>
>> To obtain the phone numbers for specific technology request please take
a
>> look at the web site listed below.
>>
>> http://support.microsoft.com/default...S;PHONENUMBERS
>>
>> If you are outside the US please see http://support.microsoft.com for
>> regional support phone numbers.
>>
>> Here, we are still glad to be of assistance on your issue. Please see my
>> following information:
>>
>> 1> Please be more clarifier, is it Windows server 2003 SP1 or Small
>> Business Server 2003 SP1 installed on your SBS 2K3 Server? We do not
>> suggest that only install Windows server 2003 SP1 on the serve due to
some
>> integrated issue. Now, I assume that you install SBS 2K3 SP1.
>>
>> 2> We do see some issues with Trend Micro, so I suggest you that perform
a
>> clean boot on your server and see whether this is a third party issue.
To
>> do so, please see:
>>
>> a. Click Start->Run, type "MSCONFIG" (without the quotation marks) and
>> click OK.
>>
>> b. In the System Configuration Utility (MSConfig) window, click the
>> "Startup" tab.
>>
>> c. Click to clear all the check marks from the list box under "Startup".
>>
>> d. Click the Services tab, check the "Hide all Microsoft Services" box
and
>> then click the "Disable All" button to disable the non-Microsoft
services.
>>
>> e. Click OK to close the MSConfig window. Click Yes when you are asked
to
>> restart your computer in order to enable the changes.
>>
>> f. After restarting, please check whether this issue still exists.
>>
>> 2> If the issue persists, please help to gather the following log files
to
>> check whether the SBS 2K3 SP1 has being successfully installed on your
>> Server.
>>
>> a. Is it a SBS 2K3 Standard or Premium version server?
>>
>> b. On the server, go to C:\Program Files\Microsoft integration\windows
>> small business server 2003\logs.
>>
>> c. For upgrading to Windows Small Business Server 2003 SP1 (Q885918),
>> please go to C:\Windows\KB885918.log, and paste the full content to the
>> Newsgroup.
>>
>> Please zip all the files and send to my mailbox.
>>
>> I am appreciated your time. If anything is unclear, please feel free to
let
>> me know. I am looking forward to hearing from you!
>>
>> Best regards,
>>
>> Brandy Nee
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>>
>>
>> --------------------
>> >Thread-Topic: Phantom Freeze Post SP1
>> >thread-index: AcWfqv6lTpOYpr0jQsub31JAqqXZ+w==
>> >X-WBNR-Posting-Host: 24.85.224.239
>> >From: =?Utf-8?B?SkxT?= <>
>> >Subject: Phantom Freeze Post SP1
>> >Date: Fri, 12 Aug 2005 19:02:01 -0700
>> >Lines: 20
>> >Message-ID: <AF684A06-07A2-48D9-BFEB->
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 8bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSF TNGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143861
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >Installed SP1 about a week ago on a server that previous to the install
>> was
>> >trouble free. Since SP1 the Server simply quits functioning. Server
goes
>> >black, stays running but all services are unreachable. Exchange
>> disconnects
>> >from clients. All that can be done is hold the power button in until
the
>> >server shutdowns and then power it back on. This is new since SP1.
>> Previously
>> >this server had no issues. There is nothing in the event logs to
indicate
>> the
>> >cause of the freeze. The freeze follows no pattern. The times of day
are
>> >random and it happens about once every 36 – 40 hours.
>> >
>> >It is not heat, power supply, memory, disk space or UPS. The only thing
I
>> >can think of is it might be Trend Micro. The only reason I mentioned
this
>> is
>> >I have seen more than a few references to Trend Micro problems post
SP1. I
>> am
>> >going to uninstall and re-install to see if this stops the phantom
freeze
>> and
>> >will post back my findings. However, if anybody else has any insight,
all
>> >thoughts appreciated.
>> >
>> >Thank You
>> >
>> >JLS
>> >
>> >
>>
>>
>

The server in question, Compaq ML350 was a clean install of SBS 2003 back in
2004. Virus protection on the server was Trend Micro SMB Client, Server,
Messaging Suite 6 for Exchange. All Trend Micro Services were stopped,
disabled and the server was rebooted before applying the full 5 part Service
Pack. After the SP1 installation was completed, Trend Micro Services were
re-enabled and the Server was rebooted.

Afterwards the Server would simply stop providing services and the screen
would go black. Attempts to connect or shutdown the server remotely were
unsuccessful. Server was shutdown manually by punching the power on the
server.

Completely removed and reinstalled Trend Micro, several reboots. Reconnected
all Trend Micro clients. Previous to this procedure the Server did not have
an uptime of more than 36 hours. So far the Server has been running for 51
hours without incident. Is this conclusive? Maybe.

Over the weekend I did perform a test run with 2 other servers and these are
my observations.

2 Compaq ML350 servers, virtually identical to the problem server,
originally with clean installs of SBS 2003 about 8 months ago. Both Servers
were running the same Trend Micro SMB Messaging Suite.

On Server 1 I disabled all Trend Micro Services, rebooted and performed the
full 5 part SP1 install.

On Server 2 I uninstalled the complete Trend Micro Software suite, several
reboots, and then performed the full 5 part SP1 install.

After the install Server 1 seemed fine but Trend Micro was not performing as
before the install. A check of status showed that not all services were quite
running as expected. It is hard to explain, but it was just not right.
Reconnecting the clients showed that privileges had changed on some and not
on others.

On Server 2, the service pack install finished without incident, other than
having to delete the GUID from the registry, HKEY_LOCAL_MACHINE/ SOFTWARE/
MICROSOFT/ MICROSOFT SQL SERVER/ SHAREPOINT/ SQLSERVERAGENT� to allow the
Sqlagent$SBSMONITORING and Sqlagent$SHAREPOINT services to start. I have had
to do this on about half of the SP1 installs. Reinstalled Trend Micro with
Scanmail for Exchange and all clients were reconnected to Trend Micro and all
seems to be working as expected.

Event logs on both Servers were uneventful. On one I got the dsrestr (Server
1) error, but not on Server 2.

As on the original problem Server and Server 1, I have completely removed
and re-installed Trend Micro and so far all seems to be working without any
incidents or errors on both Servers. On Server 2 there have been no further
issues and all 3 have been running throughout the weekend.

If I can offer this conclusion based on this small test scenario, I would
suggest that disabling Trend Micro Client\Server\Messaging Suite is not
sufficient. I might suggest to all preparing to upgrade to SP1 that they
completely uninstall their Trend Micro products prior to the upgrade and then
re-install post SP1 and reconnect the clients to the Server. Reconnecting
each client takes about 1 minute per client. If the original Server from this
post gives me any further problems, I will post the problem at that time.

So far, since removing and reinstalling Trend Micro on the original problem
Server, the server has been up for over 50 hours. A significant improvement
over the previous uptimes post SP1.

Thank You

JLS


""Brandy Nee [MSFT]"" wrote:

> Hello JLS,
>
> Thank you for posting back and keeping me update!
>
> May I know what exact SP1 you have installed on your SBS 2K3 server,
> Windows Server 2003 SP1 or Small Business Server 2003 SP1?
>
> Also, please take your time to run your server and see whether the issue
> will occur again. If you have any updates, please feel free to let me know.
> I am always stand by and looking forward to hearing from you!
>
> Best regards,
>
> Brandy Nee
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
> --------------------
> >Thread-Topic: Phantom Freeze Post SP1
> >thread-index: AcWhWmIemL1wKiZ8SpGoFi3QkOqg2w==
> >X-WBNR-Posting-Host: 24.85.224.239
> >From: =?Utf-8?B?SkxT?= <>
> >References: <AF684A06-07A2-48D9-BFEB->
> <>
> >Subject: RE: Phantom Freeze Post SP1
> >Date: Sun, 14 Aug 2005 22:30:01 -0700
> >Lines: 181
> >Message-ID: <BC167D32-4928-46F0-A50A->
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 8bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windows.server.sbs
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144329
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >I suspect it is Trend Micro SMB causing this Server to intermittently
> freeze
> >post SP1, but I do not have enough information yet to form a conclusion.
> The
> >Event logs are clean. No events to indicate why the Server quits providing
> >services and freeze. It is not a heat or Power issue. I do not use UPS
> >software for a number of reasons, so it is not UPS. I just have a gut
> feeling
> >that it is Scanmail for Exchange that is hanging this server. On Friday
> >night I removed Trend Micro from the server. Rebooted and ran a health
> check
> >on all services
> >– OK. Reinstalled Trend SMB Client\Server\Messaging Suite and
> reinstalled
> >Scanmail for Exchange and rebooted. Event logs are clean, except for
> >dsrestor, which after reading around, I can essentially ignore. I will run
> >the server over the weekend, see what happens and post my results on
> Monday.
> >Since SP1 the Server has not had an uptime of more than 36 hours, so
> Monday
> >should be a good preliminary test. Thanks
> >
> >JLS
> >
> >
> >
> >""Brandy Nee [MSFT]"" wrote:
> >
> >> Hello JLS,
> >>
> >> Thank you for posting to the SBS Newsgroup.
> >>
> >> I am sorry for the delayed response due to weekend. Please understand
> that
> >> the newsgroups are staffed weekdays by Microsoft Support professionals
> to
> >> answer your systems and applications questions. Your understanding is
> >> greatly appreciated!
> >>
> >> I understand that after you installed SP1, your SBS 2K3 server hangs for
> >> every 36 or 40 hours, also your Exchange server does not work. If I have
> >> misunderstood your concern, please let me know.
> >>
> >> For critical issue, we suggest customer that contact Microsoft Product
> >> Support Services via telephone for quick solution, and a dedicated
> Support
> >> Professional can assist with your request. Please be advised that
> >> contacting phone support will be a charged call.
> >>
> >> To obtain the phone numbers for specific technology request please take
> a
> >> look at the web site listed below.
> >>
> >> http://support.microsoft.com/default...S;PHONENUMBERS
> >>
> >> If you are outside the US please see http://support.microsoft.com for
> >> regional support phone numbers.
> >>
> >> Here, we are still glad to be of assistance on your issue. Please see my
> >> following information:
> >>
> >> 1> Please be more clarifier, is it Windows server 2003 SP1 or Small
> >> Business Server 2003 SP1 installed on your SBS 2K3 Server? We do not
> >> suggest that only install Windows server 2003 SP1 on the serve due to
> some
> >> integrated issue. Now, I assume that you install SBS 2K3 SP1.
> >>
> >> 2> We do see some issues with Trend Micro, so I suggest you that perform
> a
> >> clean boot on your server and see whether this is a third party issue.
> To
> >> do so, please see:
> >>
> >> a. Click Start->Run, type "MSCONFIG" (without the quotation marks) and
> >> click OK.
> >>
> >> b. In the System Configuration Utility (MSConfig) window, click the
> >> "Startup" tab.
> >>
> >> c. Click to clear all the check marks from the list box under "Startup".
> >>
> >> d. Click the Services tab, check the "Hide all Microsoft Services" box
> and
> >> then click the "Disable All" button to disable the non-Microsoft
> services.
> >>
> >> e. Click OK to close the MSConfig window. Click Yes when you are asked
> to
> >> restart your computer in order to enable the changes.
> >>
> >> f. After restarting, please check whether this issue still exists.
> >>
> >> 2> If the issue persists, please help to gather the following log files
> to
> >> check whether the SBS 2K3 SP1 has being successfully installed on your
> >> Server.
> >>
> >> a. Is it a SBS 2K3 Standard or Premium version server?
> >>
> >> b. On the server, go to C:\Program Files\Microsoft integration\windows
> >> small business server 2003\logs.
> >>
> >> c. For upgrading to Windows Small Business Server 2003 SP1 (Q885918),
> >> please go to C:\Windows\KB885918.log, and paste the full content to the
> >> Newsgroup.
> >>
> >> Please zip all the files and send to my mailbox.
> >>
> >> I am appreciated your time. If anything is unclear, please feel free to
> let
> >> me know. I am looking forward to hearing from you!
> >>
> >> Best regards,
> >>
> >> Brandy Nee
> >>
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ================================================== ====
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities...s/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> the
> >> "Notify me of replies" box to receive e-mail notifications when there
> are
> >> any updates in your thread. When responding to posts via your
> newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly.
> Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ================================================== ====
> >> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >>
> >>
> >>
> >> --------------------
> >> >Thread-Topic: Phantom Freeze Post SP1
> >> >thread-index: AcWfqv6lTpOYpr0jQsub31JAqqXZ+w==
> >> >X-WBNR-Posting-Host: 24.85.224.239
> >> >From: =?Utf-8?B?SkxT?= <>
> >> >Subject: Phantom Freeze Post SP1
> >> >Date: Fri, 12 Aug 2005 19:02:01 -0700
> >> >Lines: 20
> >> >Message-ID: <AF684A06-07A2-48D9-BFEB->
> >> >MIME-Version: 1.0
> >> >Content-Type: text/plain;
> >> > charset="Utf-8"
> >> >Content-Transfer-Encoding: 8bit
> >> >X-Newsreader: Microsoft CDO for Windows 2000
> >> >Content-Class: urn:content-classes:message
> >> >Importance: normal
> >> >Priority: normal
> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >> >Newsgroups: microsoft.public.windows.server.sbs
> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSF TNGXA03.phx.gbl
> >> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143861
> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >> >
> >> >Installed SP1 about a week ago on a server that previous to the install
> >> was
> >> >trouble free. Since SP1 the Server simply quits functioning. Server
> goes
> >> >black, stays running but all services are unreachable. Exchange
> >> disconnects
> >> >from clients. All that can be done is hold the power button in until
> the
> >> >server shutdowns and then power it back on. This is new since SP1.
> >> Previously
> >> >this server had no issues. There is nothing in the event logs to
> indicate
> >> the
> >> >cause of the freeze. The freeze follows no pattern. The times of day
> are
> >> >random and it happens about once every 36 – 40 hours.
> >> >
> >> >It is not heat, power supply, memory, disk space or UPS. The only thing
> I
> >> >can think of is it might be Trend Micro. The only reason I mentioned
> this
> >> is
> >> >I have seen more than a few references to Trend Micro problems post
> SP1. I
> >> am
> >> >going to uninstall and re-install to see if this stops the phantom
> freeze
> >> and
> >> >will post back my findings. However, if anybody else has any insight,
> all
> >> >thoughts appreciated.
> >> >
> >> >Thank You
> >> >
> >> >JLS
> >> >
> >> >
> >>
> >>
> >
>
>

Hello JLS,

Thank you for posting back and your greatly information sharing!

I need to double check whether the issue has being resolved and thing is
working correctly on our side. We do see may issues related with Trend
Micro. I definitely believe that your information will benifit other
customers who read the newsgroups regularly.

If you have any questions or concerns on this issue, please feel free to
post back and let me know. I am glad to be of assistance!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: Phantom Freeze Post SP1
>thread-index: AcWhtZvMjshUgFWiT2avY+BKUaDs3w==
>X-WBNR-Posting-Host: 24.85.224.239
>From: =?Utf-8?B?SkxT?= <>
>References: <AF684A06-07A2-48D9-BFEB->
<>
<BC167D32-4928-46F0-A50A->
<>
>Subject: RE: Phantom Freeze Post SP1
>Date: Mon, 15 Aug 2005 09:23:02 -0700
>Lines: 362
>Message-ID: <687F535F-92F0-48CD-AF68->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144497
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>The server in question, Compaq ML350 was a clean install of SBS 2003 back
in
>2004. Virus protection on the server was Trend Micro SMB Client, Server,
>Messaging Suite 6 for Exchange. All Trend Micro Services were stopped,
>disabled and the server was rebooted before applying the full 5 part
Service
>Pack. After the SP1 installation was completed, Trend Micro Services were
>re-enabled and the Server was rebooted.
>
>Afterwards the Server would simply stop providing services and the screen
>would go black. Attempts to connect or shutdown the server remotely were
>unsuccessful. Server was shutdown manually by punching the power on the
>server.
>
>Completely removed and reinstalled Trend Micro, several reboots.
Reconnected
>all Trend Micro clients. Previous to this procedure the Server did not
have
>an uptime of more than 36 hours. So far the Server has been running for 51
>hours without incident. Is this conclusive? Maybe.
>
>Over the weekend I did perform a test run with 2 other servers and these
are
>my observations.
>
>2 Compaq ML350 servers, virtually identical to the problem server,
>originally with clean installs of SBS 2003 about 8 months ago. Both
Servers
>were running the same Trend Micro SMB Messaging Suite.
>
>On Server 1 I disabled all Trend Micro Services, rebooted and performed
the
>full 5 part SP1 install.
>
>On Server 2 I uninstalled the complete Trend Micro Software suite, several
>reboots, and then performed the full 5 part SP1 install.
>
>After the install Server 1 seemed fine but Trend Micro was not performing
as
>before the install. A check of status showed that not all services were
quite
>running as expected. It is hard to explain, but it was just not right.
>Reconnecting the clients showed that privileges had changed on some and
not
>on others.
>
>On Server 2, the service pack install finished without incident, other
than
>having to delete the GUID from the registry, HKEY_LOCAL_MACHINE/ SOFTWARE/
>MICROSOFT/ MICROSOFT SQL SERVER/ SHAREPOINT/ SQLSERVERAGENT� to allow
the
>Sqlagent$SBSMONITORING and Sqlagent$SHAREPOINT services to start. I have
had
>to do this on about half of the SP1 installs. Reinstalled Trend Micro with
>Scanmail for Exchange and all clients were reconnected to Trend Micro and
all
>seems to be working as expected.
>
>Event logs on both Servers were uneventful. On one I got the dsrestr
(Server
>1) error, but not on Server 2.
>
>As on the original problem Server and Server 1, I have completely removed
>and re-installed Trend Micro and so far all seems to be working without
any
>incidents or errors on both Servers. On Server 2 there have been no
further
>issues and all 3 have been running throughout the weekend.
>
>If I can offer this conclusion based on this small test scenario, I would
>suggest that disabling Trend Micro Client\Server\Messaging Suite is not
>sufficient. I might suggest to all preparing to upgrade to SP1 that they
>completely uninstall their Trend Micro products prior to the upgrade and
then
>re-install post SP1 and reconnect the clients to the Server. Reconnecting
>each client takes about 1 minute per client. If the original Server from
this
>post gives me any further problems, I will post the problem at that time.
>
>So far, since removing and reinstalling Trend Micro on the original
problem
>Server, the server has been up for over 50 hours. A significant
improvement
>over the previous uptimes post SP1.
>
>Thank You
>
>JLS
>
>
>""Brandy Nee [MSFT]"" wrote:
>
>> Hello JLS,
>>
>> Thank you for posting back and keeping me update!
>>
>> May I know what exact SP1 you have installed on your SBS 2K3 server,
>> Windows Server 2003 SP1 or Small Business Server 2003 SP1?
>>
>> Also, please take your time to run your server and see whether the issue
>> will occur again. If you have any updates, please feel free to let me
know.
>> I am always stand by and looking forward to hearing from you!
>>
>> Best regards,
>>
>> Brandy Nee
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>>
>>
>> --------------------
>> >Thread-Topic: Phantom Freeze Post SP1
>> >thread-index: AcWhWmIemL1wKiZ8SpGoFi3QkOqg2w==
>> >X-WBNR-Posting-Host: 24.85.224.239
>> >From: =?Utf-8?B?SkxT?= <>
>> >References: <AF684A06-07A2-48D9-BFEB->
>> <>
>> >Subject: RE: Phantom Freeze Post SP1
>> >Date: Sun, 14 Aug 2005 22:30:01 -0700
>> >Lines: 181
>> >Message-ID: <BC167D32-4928-46F0-A50A->
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 8bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144329
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >I suspect it is Trend Micro SMB causing this Server to intermittently
>> freeze
>> >post SP1, but I do not have enough information yet to form a
conclusion.
>> The
>> >Event logs are clean. No events to indicate why the Server quits
providing
>> >services and freeze. It is not a heat or Power issue. I do not use UPS
>> >software for a number of reasons, so it is not UPS. I just have a gut
>> feeling
>> >that it is Scanmail for Exchange that is hanging this server. On Friday
>> >night I removed Trend Micro from the server. Rebooted and ran a health
>> check
>> >on all services
>> >– OK. Reinstalled Trend SMB Client\Server\Messaging Suite and
>> reinstalled
>> >Scanmail for Exchange and rebooted. Event logs are clean, except for
>> >dsrestor, which after reading around, I can essentially ignore. I will
run
>> >the server over the weekend, see what happens and post my results on
>> Monday.
>> >Since SP1 the Server has not had an uptime of more than 36 hours, so
>> Monday
>> >should be a good preliminary test. Thanks
>> >
>> >JLS
>> >
>> >
>> >
>> >""Brandy Nee [MSFT]"" wrote:
>> >
>> >> Hello JLS,
>> >>
>> >> Thank you for posting to the SBS Newsgroup.
>> >>
>> >> I am sorry for the delayed response due to weekend. Please understand
>> that
>> >> the newsgroups are staffed weekdays by Microsoft Support
professionals
>> to
>> >> answer your systems and applications questions. Your understanding is
>> >> greatly appreciated!
>> >>
>> >> I understand that after you installed SP1, your SBS 2K3 server hangs
for
>> >> every 36 or 40 hours, also your Exchange server does not work. If I
have
>> >> misunderstood your concern, please let me know.
>> >>
>> >> For critical issue, we suggest customer that contact Microsoft
Product
>> >> Support Services via telephone for quick solution, and a dedicated
>> Support
>> >> Professional can assist with your request. Please be advised that
>> >> contacting phone support will be a charged call.
>> >>
>> >> To obtain the phone numbers for specific technology request please
take
>> a
>> >> look at the web site listed below.
>> >>
>> >> http://support.microsoft.com/default...S;PHONENUMBERS
>> >>
>> >> If you are outside the US please see http://support.microsoft.com for
>> >> regional support phone numbers.
>> >>
>> >> Here, we are still glad to be of assistance on your issue. Please see
my
>> >> following information:
>> >>
>> >> 1> Please be more clarifier, is it Windows server 2003 SP1 or Small
>> >> Business Server 2003 SP1 installed on your SBS 2K3 Server? We do not
>> >> suggest that only install Windows server 2003 SP1 on the serve due to
>> some
>> >> integrated issue. Now, I assume that you install SBS 2K3 SP1.
>> >>
>> >> 2> We do see some issues with Trend Micro, so I suggest you that
perform
>> a
>> >> clean boot on your server and see whether this is a third party
issue.
>> To
>> >> do so, please see:
>> >>
>> >> a. Click Start->Run, type "MSCONFIG" (without the quotation marks)
and
>> >> click OK.
>> >>
>> >> b. In the System Configuration Utility (MSConfig) window, click the
>> >> "Startup" tab.
>> >>
>> >> c. Click to clear all the check marks from the list box under
"Startup".
>> >>
>> >> d. Click the Services tab, check the "Hide all Microsoft Services"
box
>> and
>> >> then click the "Disable All" button to disable the non-Microsoft
>> services.
>> >>
>> >> e. Click OK to close the MSConfig window. Click Yes when you are
asked
>> to
>> >> restart your computer in order to enable the changes.
>> >>
>> >> f. After restarting, please check whether this issue still exists.
>> >>
>> >> 2> If the issue persists, please help to gather the following log
files
>> to
>> >> check whether the SBS 2K3 SP1 has being successfully installed on
your
>> >> Server.
>> >>
>> >> a. Is it a SBS 2K3 Standard or Premium version server?
>> >>
>> >> b. On the server, go to C:\Program Files\Microsoft
integration\windows
>> >> small business server 2003\logs.
>> >>
>> >> c. For upgrading to Windows Small Business Server 2003 SP1 (Q885918),
>> >> please go to C:\Windows\KB885918.log, and paste the full content to
the
>> >> Newsgroup.
>> >>
>> >> Please zip all the files and send to my mailbox.
>> >>
>> >> I am appreciated your time. If anything is unclear, please feel free
to
>> let
>> >> me know. I am looking forward to hearing from you!
>> >>
>> >> Best regards,
>> >>
>> >> Brandy Nee
>> >>
>> >> Microsoft CSS Online Newsgroup Support
>> >>
>> >> Get Secure! - www.microsoft.com/security
>> >> ================================================== ====
>> >> This newsgroup only focuses on SBS technical issues. If you have
issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities...s/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
check
>> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
>> are
>> >> any updates in your thread. When responding to posts via your
>> newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from
your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ================================================== ====
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >>
>> >>
>> >> --------------------
>> >> >Thread-Topic: Phantom Freeze Post SP1
>> >> >thread-index: AcWfqv6lTpOYpr0jQsub31JAqqXZ+w==
>> >> >X-WBNR-Posting-Host: 24.85.224.239
>> >> >From: =?Utf-8?B?SkxT?= <>
>> >> >Subject: Phantom Freeze Post SP1
>> >> >Date: Fri, 12 Aug 2005 19:02:01 -0700
>> >> >Lines: 20
>> >> >Message-ID: <AF684A06-07A2-48D9-BFEB->
>> >> >MIME-Version: 1.0
>> >> >Content-Type: text/plain;
>> >> > charset="Utf-8"
>> >> >Content-Transfer-Encoding: 8bit
>> >> >X-Newsreader: Microsoft CDO for Windows 2000
>> >> >Content-Class: urn:content-classes:message
>> >> >Importance: normal
>> >> >Priority: normal
>> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >> >Newsgroups: microsoft.public.windows.server.sbs
>> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >> >Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSF TNGXA03.phx.gbl
>> >> >Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:143861
>> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >> >
>> >> >Installed SP1 about a week ago on a server that previous to the
install
>> >> was
>> >> >trouble free. Since SP1 the Server simply quits functioning. Server
>> goes
>> >> >black, stays running but all services are unreachable. Exchange
>> >> disconnects
>> >> >from clients. All that can be done is hold the power button in until
>> the
>> >> >server shutdowns and then power it back on. This is new since SP1.
>> >> Previously
>> >> >this server had no issues. There is nothing in the event logs to
>> indicate
>> >> the
>> >> >cause of the freeze. The freeze follows no pattern. The times of day
>> are
>> >> >random and it happens about once every 36 – 40
hours.
>> >> >
>> >> >It is not heat, power supply, memory, disk space or UPS. The only
thing
>> I
>> >> >can think of is it might be Trend Micro. The only reason I mentioned
>> this
>> >> is
>> >> >I have seen more than a few references to Trend Micro problems post
>> SP1. I
>> >> am
>> >> >going to uninstall and re-install to see if this stops the phantom
>> freeze
>> >> and
>> >> >will post back my findings. However, if anybody else has any
insight,
>> all
>> >> >thoughts appreciated.
>> >> >
>> >> >Thank You
>> >> >
>> >> >JLS
>> >> >
>> >> >
>> >>
>> >>
>> >
>>
>>
>

So far the Server has been up for over 100 hours. This is a significant
improvement. There are no issues in the event logs and all seems to be fine
at this point. I must point out that anybody using Trend Micro SMB
Client\Server\Messaging Suite 6 or 7 that they should install all the patches
for OfficeScan and Scanmail for Exchange post SP1. They should also create
the exclusion list for Scanmail. The document ID for creating the exclusion
list for Scanmail for Exchange is Solution ID: 19178 and can be found here

http://kb.trendmicro.com/solutions/s...lutionID=19178

On Servers both the Trend Micro Scanmail and the OfficeScan Client are
running. This causes a conflict for Virus scanning and Scanmail does not scan
emails properly. The conflict can cause extreme processor activity which I am
theorizing may have been the root cause of the Server to quit providing
services and freeze.

If any further developments occur, I will post back. Thanks to all for their
help.

JLS

""Brandy Nee [MSFT]"" wrote:

> Hello JLS,
>
> Thank you for posting back and your greatly information sharing!
>
> I need to double check whether the issue has being resolved and thing is
> working correctly on our side. We do see may issues related with Trend
> Micro. I definitely believe that your information will benifit other
> customers who read the newsgroups regularly.
>
> If you have any questions or concerns on this issue, please feel free to
> post back and let me know. I am glad to be of assistance!
>
> Best regards,
>
> Brandy Nee
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
> --------------------
> >Thread-Topic: Phantom Freeze Post SP1
> >thread-index: AcWhtZvMjshUgFWiT2avY+BKUaDs3w==
> >X-WBNR-Posting-Host: 24.85.224.239
> >From: =?Utf-8?B?SkxT?= <>
> >References: <AF684A06-07A2-48D9-BFEB->
> <>
> <BC167D32-4928-46F0-A50A->
> <>
> >Subject: RE: Phantom Freeze Post SP1
> >Date: Mon, 15 Aug 2005 09:23:02 -0700
> >Lines: 362
> >Message-ID: <687F535F-92F0-48CD-AF68->
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 8bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windows.server.sbs
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144497
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >The server in question, Compaq ML350 was a clean install of SBS 2003 back
> in
> >2004. Virus protection on the server was Trend Micro SMB Client, Server,
> >Messaging Suite 6 for Exchange. All Trend Micro Services were stopped,
> >disabled and the server was rebooted before applying the full 5 part
> Service
> >Pack. After the SP1 installation was completed, Trend Micro Services were
> >re-enabled and the Server was rebooted.
> >
> >Afterwards the Server would simply stop providing services and the screen
> >would go black. Attempts to connect or shutdown the server remotely were
> >unsuccessful. Server was shutdown manually by punching the power on the
> >server.
> >
> >Completely removed and reinstalled Trend Micro, several reboots.
> Reconnected
> >all Trend Micro clients. Previous to this procedure the Server did not
> have
> >an uptime of more than 36 hours. So far the Server has been running for 51
> >hours without incident. Is this conclusive? Maybe.
> >
> >Over the weekend I did perform a test run with 2 other servers and these
> are
> >my observations.
> >
> >2 Compaq ML350 servers, virtually identical to the problem server,
> >originally with clean installs of SBS 2003 about 8 months ago. Both
> Servers
> >were running the same Trend Micro SMB Messaging Suite.
> >
> >On Server 1 I disabled all Trend Micro Services, rebooted and performed
> the
> >full 5 part SP1 install.
> >
> >On Server 2 I uninstalled the complete Trend Micro Software suite, several
> >reboots, and then performed the full 5 part SP1 install.
> >
> >After the install Server 1 seemed fine but Trend Micro was not performing
> as
> >before the install. A check of status showed that not all services were
> quite
> >running as expected. It is hard to explain, but it was just not right.
> >Reconnecting the clients showed that privileges had changed on some and
> not
> >on others.
> >
> >On Server 2, the service pack install finished without incident, other
> than
> >having to delete the GUID from the registry, HKEY_LOCAL_MACHINE/ SOFTWARE/
> >MICROSOFT/ MICROSOFT SQL SERVER/ SHAREPOINT/ SQLSERVERAGENT� to allow
> the
> >Sqlagent$SBSMONITORING and Sqlagent$SHAREPOINT services to start. I have
> had
> >to do this on about half of the SP1 installs. Reinstalled Trend Micro with
> >Scanmail for Exchange and all clients were reconnected to Trend Micro and
> all
> >seems to be working as expected.
> >
> >Event logs on both Servers were uneventful. On one I got the dsrestr
> (Server
> >1) error, but not on Server 2.
> >
> >As on the original problem Server and Server 1, I have completely removed
> >and re-installed Trend Micro and so far all seems to be working without
> any
> >incidents or errors on both Servers. On Server 2 there have been no
> further
> >issues and all 3 have been running throughout the weekend.
> >
> >If I can offer this conclusion based on this small test scenario, I would
> >suggest that disabling Trend Micro Client\Server\Messaging Suite is not
> >sufficient. I might suggest to all preparing to upgrade to SP1 that they
> >completely uninstall their Trend Micro products prior to the upgrade and
> then
> >re-install post SP1 and reconnect the clients to the Server. Reconnecting
> >each client takes about 1 minute per client. If the original Server from
> this
> >post gives me any further problems, I will post the problem at that time.
> >
> >So far, since removing and reinstalling Trend Micro on the original
> problem
> >Server, the server has been up for over 50 hours. A significant
> improvement
> >over the previous uptimes post SP1.
> >
> >Thank You
> >
> >JLS
> >
> >
> >""Brandy Nee [MSFT]"" wrote:
> >
> >> Hello JLS,
> >>
> >> Thank you for posting back and keeping me update!
> >>
> >> May I know what exact SP1 you have installed on your SBS 2K3 server,
> >> Windows Server 2003 SP1 or Small Business Server 2003 SP1?
> >>
> >> Also, please take your time to run your server and see whether the issue
> >> will occur again. If you have any updates, please feel free to let me
> know.
> >> I am always stand by and looking forward to hearing from you!
> >>
> >> Best regards,
> >>
> >> Brandy Nee
> >>
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ================================================== ====
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities...s/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> the
> >> "Notify me of replies" box to receive e-mail notifications when there
> are
> >> any updates in your thread. When responding to posts via your
> newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly.
> Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ================================================== ====
> >> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >>
> >>
> >>
> >> --------------------
> >> >Thread-Topic: Phantom Freeze Post SP1
> >> >thread-index: AcWhWmIemL1wKiZ8SpGoFi3QkOqg2w==
> >> >X-WBNR-Posting-Host: 24.85.224.239
> >> >From: =?Utf-8?B?SkxT?= <>
> >> >References: <AF684A06-07A2-48D9-BFEB->
> >> <>
> >> >Subject: RE: Phantom Freeze Post SP1
> >> >Date: Sun, 14 Aug 2005 22:30:01 -0700
> >> >Lines: 181
> >> >Message-ID: <BC167D32-4928-46F0-A50A->
> >> >MIME-Version: 1.0
> >> >Content-Type: text/plain;
> >> > charset="Utf-8"
> >> >Content-Transfer-Encoding: 8bit
> >> >X-Newsreader: Microsoft CDO for Windows 2000
> >> >Content-Class: urn:content-classes:message
> >> >Importance: normal
> >> >Priority: normal
> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >> >Newsgroups: microsoft.public.windows.server.sbs
> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144329
> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >> >
> >> >I suspect it is Trend Micro SMB causing this Server to intermittently
> >> freeze
> >> >post SP1, but I do not have enough information yet to form a
> conclusion.
> >> The
> >> >Event logs are clean. No events to indicate why the Server quits
> providing
> >> >services and freeze. It is not a heat or Power issue. I do not use UPS
> >> >software for a number of reasons, so it is not UPS. I just have a gut
> >> feeling
> >> >that it is Scanmail for Exchange that is hanging this server. On Friday
> >> >night I removed Trend Micro from the server. Rebooted and ran a health
> >> check
> >> >on all services
> >> >– OK. Reinstalled Trend SMB Client\Server\Messaging Suite and
> >> reinstalled
> >> >Scanmail for Exchange and rebooted. Event logs are clean, except for
> >> >dsrestor, which after reading around, I can essentially ignore. I will
> run
> >> >the server over the weekend, see what happens and post my results on
> >> Monday.
> >> >Since SP1 the Server has not had an uptime of more than 36 hours, so
> >> Monday
> >> >should be a good preliminary test. Thanks
> >> >
> >> >JLS
> >> >
> >> >
> >> >
> >> >""Brandy Nee [MSFT]"" wrote:
> >> >
> >> >> Hello JLS,
> >> >>
> >> >> Thank you for posting to the SBS Newsgroup.
> >> >>
> >> >> I am sorry for the delayed response due to weekend. Please understand
> >> that
> >> >> the newsgroups are staffed weekdays by Microsoft Support
> professionals
> >> to
> >> >> answer your systems and applications questions. Your understanding is
> >> >> greatly appreciated!
> >> >>
> >> >> I understand that after you installed SP1, your SBS 2K3 server hangs
> for
> >> >> every 36 or 40 hours, also your Exchange server does not work. If I
> have
> >> >> misunderstood your concern, please let me know.
> >> >>
> >> >> For critical issue, we suggest customer that contact Microsoft
> Product
> >> >> Support Services via telephone for quick solution, and a dedicated
> >> Support
> >> >> Professional can assist with your request. Please be advised that

Hello JLS,

Thank you for posting back!

I am glad to hear that you have found the solution and thing is working
correctly on your side now. If you need any assistance in the future,
please feel free to post back. I am glad to be working with you again!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>Thread-Topic: Phantom Freeze Post SP1
>thread-index: AcWiddZcx9jUVjtTSm6DHvXbB5PAcA==
>X-WBNR-Posting-Host: 24.85.224.239
>From: =?Utf-8?B?SkxT?= <>
>References: <AF684A06-07A2-48D9-BFEB->
<>
<BC167D32-4928-46F0-A50A->
<>
<687F535F-92F0-48CD-AF68->
<>
>Subject: RE: Phantom Freeze Post SP1
>Date: Tue, 16 Aug 2005 08:19:04 -0700
>Lines: 323
>Message-ID: <733F97AB-5461-4F03-B5C3->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 8bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144896
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>So far the Server has been up for over 100 hours. This is a significant
>improvement. There are no issues in the event logs and all seems to be
fine
>at this point. I must point out that anybody using Trend Micro SMB
>Client\Server\Messaging Suite 6 or 7 that they should install all the
patches
>for OfficeScan and Scanmail for Exchange post SP1. They should also create
>the exclusion list for Scanmail. The document ID for creating the
exclusion
>list for Scanmail for Exchange is Solution ID: 19178 and can be found here
>
http://kb.trendmicro.com/solutions/s...Detail.asp?sol
utionID=19178
>
>On Servers both the Trend Micro Scanmail and the OfficeScan Client are
>running. This causes a conflict for Virus scanning and Scanmail does not
scan
>emails properly. The conflict can cause extreme processor activity which I
am
>theorizing may have been the root cause of the Server to quit providing
>services and freeze.
>
>If any further developments occur, I will post back. Thanks to all for
their
>help.
>
>JLS
>
>""Brandy Nee [MSFT]"" wrote:
>
>> Hello JLS,
>>
>> Thank you for posting back and your greatly information sharing!
>>
>> I need to double check whether the issue has being resolved and thing is
>> working correctly on our side. We do see may issues related with Trend
>> Micro. I definitely believe that your information will benifit other
>> customers who read the newsgroups regularly.
>>
>> If you have any questions or concerns on this issue, please feel free to
>> post back and let me know. I am glad to be of assistance!
>>
>> Best regards,
>>
>> Brandy Nee
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>>
>>
>> --------------------
>> >Thread-Topic: Phantom Freeze Post SP1
>> >thread-index: AcWhtZvMjshUgFWiT2avY+BKUaDs3w==
>> >X-WBNR-Posting-Host: 24.85.224.239
>> >From: =?Utf-8?B?SkxT?= <>
>> >References: <AF684A06-07A2-48D9-BFEB->
>> <>
>> <BC167D32-4928-46F0-A50A->
>> <>
>> >Subject: RE: Phantom Freeze Post SP1
>> >Date: Mon, 15 Aug 2005 09:23:02 -0700
>> >Lines: 362
>> >Message-ID: <687F535F-92F0-48CD-AF68->
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 8bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144497
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >The server in question, Compaq ML350 was a clean install of SBS 2003
back
>> in
>> >2004. Virus protection on the server was Trend Micro SMB Client,
Server,
>> >Messaging Suite 6 for Exchange. All Trend Micro Services were stopped,
>> >disabled and the server was rebooted before applying the full 5 part
>> Service
>> >Pack. After the SP1 installation was completed, Trend Micro Services
were
>> >re-enabled and the Server was rebooted.
>> >
>> >Afterwards the Server would simply stop providing services and the
screen
>> >would go black. Attempts to connect or shutdown the server remotely
were
>> >unsuccessful. Server was shutdown manually by punching the power on the
>> >server.
>> >
>> >Completely removed and reinstalled Trend Micro, several reboots.
>> Reconnected
>> >all Trend Micro clients. Previous to this procedure the Server did not
>> have
>> >an uptime of more than 36 hours. So far the Server has been running for
51
>> >hours without incident. Is this conclusive? Maybe.
>> >
>> >Over the weekend I did perform a test run with 2 other servers and
these
>> are
>> >my observations.
>> >
>> >2 Compaq ML350 servers, virtually identical to the problem server,
>> >originally with clean installs of SBS 2003 about 8 months ago. Both
>> Servers
>> >were running the same Trend Micro SMB Messaging Suite.
>> >
>> >On Server 1 I disabled all Trend Micro Services, rebooted and performed
>> the
>> >full 5 part SP1 install.
>> >
>> >On Server 2 I uninstalled the complete Trend Micro Software suite,
several
>> >reboots, and then performed the full 5 part SP1 install.
>> >
>> >After the install Server 1 seemed fine but Trend Micro was not
performing
>> as
>> >before the install. A check of status showed that not all services were
>> quite
>> >running as expected. It is hard to explain, but it was just not right.
>> >Reconnecting the clients showed that privileges had changed on some and
>> not
>> >on others.
>> >
>> >On Server 2, the service pack install finished without incident, other
>> than
>> >having to delete the GUID from the registry, HKEY_LOCAL_MACHINE/
SOFTWARE/
>> >MICROSOFT/ MICROSOFT SQL SERVER/ SHAREPOINT/ SQLSERVERAGENT� to
allow
>> the
>> >Sqlagent$SBSMONITORING and Sqlagent$SHAREPOINT services to start. I
have
>> had
>> >to do this on about half of the SP1 installs. Reinstalled Trend Micro
with
>> >Scanmail for Exchange and all clients were reconnected to Trend Micro
and
>> all
>> >seems to be working as expected.
>> >
>> >Event logs on both Servers were uneventful. On one I got the dsrestr
>> (Server
>> >1) error, but not on Server 2.
>> >
>> >As on the original problem Server and Server 1, I have completely
removed
>> >and re-installed Trend Micro and so far all seems to be working without
>> any
>> >incidents or errors on both Servers. On Server 2 there have been no
>> further
>> >issues and all 3 have been running throughout the weekend.
>> >
>> >If I can offer this conclusion based on this small test scenario, I
would
>> >suggest that disabling Trend Micro Client\Server\Messaging Suite is not
>> >sufficient. I might suggest to all preparing to upgrade to SP1 that
they
>> >completely uninstall their Trend Micro products prior to the upgrade
and
>> then
>> >re-install post SP1 and reconnect the clients to the Server.
Reconnecting
>> >each client takes about 1 minute per client. If the original Server
from
>> this
>> >post gives me any further problems, I will post the problem at that
time.
>> >
>> >So far, since removing and reinstalling Trend Micro on the original
>> problem
>> >Server, the server has been up for over 50 hours. A significant
>> improvement
>> >over the previous uptimes post SP1.
>> >
>> >Thank You
>> >
>> >JLS
>> >
>> >
>> >""Brandy Nee [MSFT]"" wrote:
>> >
>> >> Hello JLS,
>> >>
>> >> Thank you for posting back and keeping me update!
>> >>
>> >> May I know what exact SP1 you have installed on your SBS 2K3 server,
>> >> Windows Server 2003 SP1 or Small Business Server 2003 SP1?
>> >>
>> >> Also, please take your time to run your server and see whether the
issue
>> >> will occur again. If you have any updates, please feel free to let me
>> know.
>> >> I am always stand by and looking forward to hearing from you!
>> >>
>> >> Best regards,
>> >>
>> >> Brandy Nee
>> >>
>> >> Microsoft CSS Online Newsgroup Support
>> >>
>> >> Get Secure! - www.microsoft.com/security
>> >> ================================================== ====
>> >> This newsgroup only focuses on SBS technical issues. If you have
issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities...s/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
check
>> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
>> are
>> >> any updates in your thread. When responding to posts via your
>> newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from
your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ================================================== ====
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >>
>> >>
>> >> --------------------
>> >> >Thread-Topic: Phantom Freeze Post SP1
>> >> >thread-index: AcWhWmIemL1wKiZ8SpGoFi3QkOqg2w==
>> >> >X-WBNR-Posting-Host: 24.85.224.239
>> >> >From: =?Utf-8?B?SkxT?= <>
>> >> >References: <AF684A06-07A2-48D9-BFEB->
>> >> <>
>> >> >Subject: RE: Phantom Freeze Post SP1
>> >> >Date: Sun, 14 Aug 2005 22:30:01 -0700
>> >> >Lines: 181
>> >> >Message-ID: <BC167D32-4928-46F0-A50A->
>> >> >MIME-Version: 1.0
>> >> >Content-Type: text/plain;
>> >> > charset="Utf-8"
>> >> >Content-Transfer-Encoding: 8bit
>> >> >X-Newsreader: Microsoft CDO for Windows 2000
>> >> >Content-Class: urn:content-classes:message
>> >> >Importance: normal
>> >> >Priority: normal
>> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >> >Newsgroups: microsoft.public.windows.server.sbs
>> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >> >Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:144329
>> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >> >
>> >> >I suspect it is Trend Micro SMB causing this Server to
intermittently
>> >> freeze
>> >> >post SP1, but I do not have enough information yet to form a
>> conclusion.
>> >> The
>> >> >Event logs are clean. No events to indicate why the Server quits
>> providing
>> >> >services and freeze. It is not a heat or Power issue. I do not use
UPS
>> >> >software for a number of reasons, so it is not UPS. I just have a
gut
>> >> feeling
>> >> >that it is Scanmail for Exchange that is hanging this server. On
Friday
>> >> >night I removed Trend Micro from the server. Rebooted and ran a
health
>> >> check
>> >> >on all services
>> >> >– OK. Reinstalled Trend SMB Client\Server\Messaging
Suite and
>> >> reinstalled
>> >> >Scanmail for Exchange and rebooted. Event logs are clean, except for
>> >> >dsrestor, which after reading around, I can essentially ignore. I
will
>> run
>> >> >the server over the weekend, see what happens and post my results on
>> >> Monday.
>> >> >Since SP1 the Server has not had an uptime of more than 36 hours, so
>> >> Monday
>> >> >should be a good preliminary test. Thanks
>> >> >
>> >> >JLS
>> >> >
>> >> >
>> >> >
>> >> >""Brandy Nee [MSFT]"" wrote:
>> >> >
>> >> >> Hello JLS,
>> >> >>
>> >> >> Thank you for posting to the SBS Newsgroup.
>> >> >>
>> >> >> I am sorry for the delayed response due to weekend. Please
understand
>> >> that
>> >> >> the newsgroups are staffed weekdays by Microsoft Support
>> professionals
>> >> to
>> >> >> answer your systems and applications questions. Your understanding
is
>> >> >> greatly appreciated!
>> >> >>
>> >> >> I understand that after you installed SP1, your SBS 2K3 server
hangs
>> for
>> >> >> every 36 or 40 hours, also your Exchange server does not work. If
I
>> have
>> >> >> misunderstood your concern, please let me know.
>> >> >>
>> >> >> For critical issue, we suggest customer that contact Microsoft
>> Product
>> >> >> Support Services via telephone for quick solution, and a dedicated
>> >> Support
>> >> >> Professional can assist with your request. Please be advised that
>