SBS 2003 R2 SP2 - Multiple ID: 333, 1058, 1030 messages errors

Hi,

I am trying to solve this issue but nothing works to fix it.

I see that 1058 and 1030 events are present in the event viewer after the
daily backup (NTBACKUP). Three hours after the event viewer show multiple
and continuous 333 events.

When I started to fix this issue I found the server lost network connection
and services due to a memory exhaust state. I have applied some fixes to
this server and appear not to crash.

I am using a combination of NTBACKUP and COBIAN BACKUP Boletus to do the
system and data backups.

The server model is HP Proliant ML350 G5 and Windows SBS 2003 R2 SP2
operative system and I am honest to say that I never had got so many
problems with a server but this one never stops giving headache.

Please help!!

Best regards,

Juan Carlos

You don't really give much to go on, no details on the error codes, no
details on what you have tried. I suspect the 1030/1058 codes (if they are
group policy codes) are related to your network adapter. Not sure on the
333 code, www.eventid.net may be of help here.

The first thing I'd do:

Run the SBS Best Practice Analyzer and fix what it finds:
http://www.sbslinks.com/sbsbpa.htm

--
Allan Williams




Juan Carlos wrote:
> Hi,
>
> I am trying to solve this issue but nothing works to fix it.
>
> I see that 1058 and 1030 events are present in the event viewer after
> the daily backup (NTBACKUP). Three hours after the event viewer show
> multiple and continuous 333 events.
>
> When I started to fix this issue I found the server lost network
> connection and services due to a memory exhaust state. I have applied
> some fixes to this server and appear not to crash.
>
> I am using a combination of NTBACKUP and COBIAN BACKUP Boletus to do
> the system and data backups.
>
> The server model is HP Proliant ML350 G5 and Windows SBS 2003 R2 SP2
> operative system and I am honest to say that I never had got so many
> problems with a server but this one never stops giving headache.
>
> Please help!!
>
> Best regards,
>
> Juan Carlos

Thank you for your response.

Sorry for the inconveniences. I give you more details about the error codes
in the following lines. I do not paste the entire error messages because
server operative system language is spanish and I think it might be
sufficient to enumerate the error codes.

Event viewer - Application:

Type Date Time Origin Category Event
User Machine
Error - 30/08/2010 23:47:09 Userenv - 1058
System Server
Error - 30/08/2010 23:47:09 Userenv - 1030
System Server

Previous message to the errors:

Information 30/08/2010 23:03:31 ntbackup - 8000 -
Server

I think the errors often are appearing after the ntbackup operation.

Event viewer - System:
Type Date Time Origin
Category Event User Machine
Error - 31/08/2010 2:45:43 Application Popup -
333 - Server

From this moment the error occurs each few seconds. I have applied some fix
to the server to eliminate the memory exhausted event and system crash but I
do not found why this error start and how to stop.

I have modified the network controller configuration disabling the TCP
offload engine that is a common error 333 in some servers.

If the server is rebooted errors message stop and all appear be ok.

Sorry for my poor english.

Best regards,

Juan Carlos



"Al Williams" <> escribió en el mensaje de
noticias news:...
> You don't really give much to go on, no details on the error codes, no
> details on what you have tried. I suspect the 1030/1058 codes (if they
> are group policy codes) are related to your network adapter. Not sure on
> the 333 code, www.eventid.net may be of help here.
>
> The first thing I'd do:
>
> Run the SBS Best Practice Analyzer and fix what it finds:
> http://www.sbslinks.com/sbsbpa.htm
>
> --
> Allan Williams
>
>
>
>
> Juan Carlos wrote:
>> Hi,
>>
>> I am trying to solve this issue but nothing works to fix it.
>>
>> I see that 1058 and 1030 events are present in the event viewer after
>> the daily backup (NTBACKUP). Three hours after the event viewer show
>> multiple and continuous 333 events.
>>
>> When I started to fix this issue I found the server lost network
>> connection and services due to a memory exhaust state. I have applied
>> some fixes to this server and appear not to crash.
>>
>> I am using a combination of NTBACKUP and COBIAN BACKUP Boletus to do
>> the system and data backups.
>>
>> The server model is HP Proliant ML350 G5 and Windows SBS 2003 R2 SP2
>> operative system and I am honest to say that I never had got so many
>> problems with a server but this one never stops giving headache.
>>
>> Please help!!
>>
>> Best regards,
>>
>> Juan Carlos
>
>
>

During some test the server crashed with system error ID 2020 origin Srv and
appearing lots of different messages with incorrect image: dumpel.exe :
Application or DLL C:\Program Files\Exchsrvr\res\mdbmsg.dll and more until
the server had been rebooted.

Thanks.

"Juan Carlos" <> escribió en el mensaje de noticias
news33C3C64-B8F4-4B41-9EB5-...
> Hi,
>
> I am trying to solve this issue but nothing works to fix it.
>
> I see that 1058 and 1030 events are present in the event viewer after the
> daily backup (NTBACKUP). Three hours after the event viewer show multiple
> and continuous 333 events.
>
> When I started to fix this issue I found the server lost network
> connection and services due to a memory exhaust state. I have applied some
> fixes to this server and appear not to crash.
>
> I am using a combination of NTBACKUP and COBIAN BACKUP Boletus to do the
> system and data backups.
>
> The server model is HP Proliant ML350 G5 and Windows SBS 2003 R2 SP2
> operative system and I am honest to say that I never had got so many
> problems with a server but this one never stops giving headache.
>
> Please help!!
>
> Best regards,
>
> Juan Carlos
>
>

I think the 1058/1030 errors relate to networking issues. Some HP servers
use BroadComm NIC's which can have issues. Make sure they are not set to go
into "powerr-save" and update to the latest NIC driver and fix everything
the BPA indicates. Don't think they are related to NTbackup (your backups
work, correct?)

From eventid.net, the 333 error seems to be related to running out of RAM
pools- check the comments here (there was one related to HP hardware):
http://www.eventid.net/display.asp?e...0Popup&phase=1

Make sure you are not using the /3GB switch and check your free memory
counters. How much RAM installed? (should have at least 3GB). Also check
if SQL or other processes are hogging RAM - google a bit and you can tune
those (exchange's store.exe is supposed to use lots of RAM and will give it
up if need be so ignore that one).

--
Allan Williams




Juan Carlos wrote:
> Thank you for your response.
>
> Sorry for the inconveniences. I give you more details about the error
> codes in the following lines. I do not paste the entire error
> messages because server operative system language is spanish and I
> think it might be sufficient to enumerate the error codes.
>
> Event viewer - Application:
>
> Type Date Time Origin Category Event
> User Machine
> Error - 30/08/2010 23:47:09 Userenv - 1058
> System Server
> Error - 30/08/2010 23:47:09 Userenv - 1030
> System Server
>
> Previous message to the errors:
>
> Information 30/08/2010 23:03:31 ntbackup - 8000 -
> Server
>
> I think the errors often are appearing after the ntbackup operation.
>
> Event viewer - System:
> Type Date Time Origin
> Category Event User Machine
> Error - 31/08/2010 2:45:43 Application Popup -
> 333 - Server
>
> From this moment the error occurs each few seconds. I have applied
> some fix to the server to eliminate the memory exhausted event and
> system crash but I do not found why this error start and how to stop.
>
> I have modified the network controller configuration disabling the TCP
> offload engine that is a common error 333 in some servers.
>
> If the server is rebooted errors message stop and all appear be ok.
>
> Sorry for my poor english.
>
> Best regards,
>
> Juan Carlos
>
>
>
> "Al Williams" <> escribió en el mensaje
> de noticias news:...
>> You don't really give much to go on, no details on the error codes,
>> no details on what you have tried. I suspect the 1030/1058 codes
>> (if they are group policy codes) are related to your network
>> adapter. Not sure on the 333 code, www.eventid.net may be of help
>> here. The first thing I'd do:
>>
>> Run the SBS Best Practice Analyzer and fix what it finds:
>> http://www.sbslinks.com/sbsbpa.htm
>>
>> --
>> Allan Williams
>>
>>
>>
>>
>> Juan Carlos wrote:
>>> Hi,
>>>
>>> I am trying to solve this issue but nothing works to fix it.
>>>
>>> I see that 1058 and 1030 events are present in the event viewer
>>> after the daily backup (NTBACKUP). Three hours after the event
>>> viewer show multiple and continuous 333 events.
>>>
>>> When I started to fix this issue I found the server lost network
>>> connection and services due to a memory exhaust state. I have
>>> applied some fixes to this server and appear not to crash.
>>>
>>> I am using a combination of NTBACKUP and COBIAN BACKUP Boletus to do
>>> the system and data backups.
>>>
>>> The server model is HP Proliant ML350 G5 and Windows SBS 2003 R2 SP2
>>> operative system and I am honest to say that I never had got so many
>>> problems with a server but this one never stops giving headache.
>>>
>>> Please help!!
>>>
>>> Best regards,
>>>
>>> Juan Carlos