Hello,

We just restart one windows 2008 server, and now we can not connect
anymore via remote desktop to it and also the http service is not working
anymore. but we can ping the server !

do you have some idea of what could have happen to the server ?

Thanks you by advance




--
stephane

Http://www.arkadia.com/fra/
Http://www.arkadia.com/usa/
Http://www.arkadia.com/rus/

loki <loki5100-newsgroup@newsgroup> wrote:

> Hello,
>
> We just restart one windows 2008 server, and now we can not connect
> anymore via remote desktop to it and also the http service is not
> working anymore. but we can ping the server !
>
> do you have some idea of what could have happen to the server ?
>
> Thanks you by advance

Log in at the console and check the event logs for errors/clues.

"loki" <loki5100-newsgroup@newsgroup> wrote in message
news:B8879FDF-1579-4E66-804C-3545F4864D4D@newsgroup

> Hello,
>
> We just restart one windows 2008 server, and now we can not connect
> anymore via remote desktop to it and also the http service is not working
> anymore. but we can ping the server !
>
> do you have some idea of what could have happen to the server ?
>
> Thanks you by advance
>
>
> --
> stephane

Same comment as for the post headed "Trouble with Remote Desktop", posted 30
minutes before your post.

"loki" <loki5100-newsgroup@newsgroup> wrote in message
news:3721A299-A5A8-466E-BFD0-5D3DA207D01A@newsgroup

> Yes of course... nothing work also some strange bug in
> IIS (i can not see the web site configuration details for
> exemple)
>
> i not understand why nothing work just after a simple
> restart ! Is this is already happen to someone ?
>
> thanks you by advance
> stephane
>

No, that's not supposed to happen. It could be something else is causing it.
Post an ipconfig /all from the server, as well as the EventID# and Source
Names and the error messages in the events that you see from errors in the
event logs. This will better help than the descriptions you've provided.

Ace

"loki" <loki5100-newsgroup@newsgroup> wrote in message
news:C2E312C0-149E-460A-8F78-3ED2F856AA2C@newsgroup

> the problem is that now i can not anymore login under the server
> for what i see when i was logged (but in safe mode) is that
> in the event they was no error message at all ! this was supprised me,
> i was hopping to see some error why all the service not
> start... nothing !! just i notice that in the event log we miss
> some entry like :
> MSDTC started with the following settings: ...
> The Terminal Services Configuration service entered the running state.
> The Server service entered the running state.
> The World Wide Web Publishing Service service entered the running state.
>
> that mean the service not start ! but no explanation why they not start,
> no error !
> so it's look like the process do an infinite loop somewhere between
> "File System Filter 'luafv' (6.0, 2008-01-19T05:59:06.000Z) has
> successfully
> loaded and registered with Filter Manager"
> and
> "The Plug and Play service entered the running state"
>
> that delay all the other event to happen !
> network card driver error ? (but in safe mode i have the internet...)
> other driver error ? but why no error in the event log ...
>
>
> below all the event just after a reboot for the
> 1rt time the server :

<snipped>

Lot's of info. Thank you. :-)

However, nothing specific stands out. I can't find anything specific with
the "The File System Filter 'luafv' issue" The informational stuff is just
letting you know what's starting, etc.

How about the ipconfig /all?

Was anything installed or changed prior to this all happening?

Ace

> Lot's of info. Thank you. :-)

>
> However, nothing specific stands out. I can't find anything specific with
> the "The File System Filter 'luafv' issue" The informational stuff is just
> letting you know what's starting, etc.
>
> How about the ipconfig /all?
>
> Was anything installed or changed prior to this all happening?
>
> Ace

you see like me, nothing wrong in the event log ! i can not believe it !
it like i do a bad nightmare. unfortunatly i don't have anymore access
to the server i don't remembered about the ipconfig / all, but i thing
this was ok (because we can use the internet from the server, i connect
to it in safe mode by vnc)

i don't install anything on this server this year (except the windows
update)
and for the 3 last week we haven't installed any windows update.

what i know :
1/ the server was reboot 2 week ago du to a power faillure. but work
well after.
2/ we reboot the server around 1 time a week for the maintenance
of the IIS application
3/ we have 3 other server that are exactly the same that still work
very well (the server are dell PowerEdge 2950, 4 go of memory,
sas hard drive)
3/ it's a web server, more than 20 000 people everyday on it.
could it be an attack that destroy the server ? a fail in php ? but
in this case why the server crash only after we do a reboot ?
4/ when the guy connect in normal mode (but the first time
it's was impossible for him because it's was "apply user settings
for undefinite time), he notice some probleme with the driver of
the network card (also he notice that the windows seam very unstable
some device are not show in the device manager for exemple)
5/ also i notice some strange but in IIS (but i don't know
if it's was because i was in safe mode). for exemple i can
not see the website configuration detail panel of one website,
alway i receive an error when i try to do it given me an empty
configuration panel

thank again for you help !

stephane

"loki" <loki5100-newsgroup@newsgroup> wrote in message
news:CE223B4F-B9CA-4350-82ED-35E967EF30B7@newsgroup

>> Lot's of info. Thank you. :-)
>>
>> However, nothing specific stands out. I can't find anything specific with
>> the "The File System Filter 'luafv' issue" The informational stuff is
>> just letting you know what's starting, etc.
>>
>> How about the ipconfig /all?
>>
>> Was anything installed or changed prior to this all happening?
>>
>> Ace

>
>
> you see like me, nothing wrong in the event log ! i can not believe it !
> it like i do a bad nightmare. unfortunatly i don't have anymore access
> to the server i don't remembered about the ipconfig / all, but i thing
> this was ok (because we can use the internet from the server, i connect
> to it in safe mode by vnc)
>
> i don't install anything on this server this year (except the windows
> update)
> and for the 3 last week we haven't installed any windows update.
>
> what i know :
> 1/ the server was reboot 2 week ago du to a power faillure. but work
> well after.
> 2/ we reboot the server around 1 time a week for the maintenance
> of the IIS application
> 3/ we have 3 other server that are exactly the same that still work
> very well (the server are dell PowerEdge 2950, 4 go of memory,
> sas hard drive)
> 3/ it's a web server, more than 20 000 people everyday on it.
> could it be an attack that destroy the server ? a fail in php ? but
> in this case why the server crash only after we do a reboot ?
> 4/ when the guy connect in normal mode (but the first time
> it's was impossible for him because it's was "apply user settings
> for undefinite time), he notice some probleme with the driver of
> the network card (also he notice that the windows seam very unstable
> some device are not show in the device manager for exemple)
> 5/ also i notice some strange but in IIS (but i don't know
> if it's was because i was in safe mode). for exemple i can
> not see the website configuration detail panel of one website,
> alway i receive an error when i try to do it given me an empty
> configuration panel
>
> thank again for you help !
>
> stephane

I see, so there were two things that seems possibly mitigated this:

1. Power failure forcing it down.

2. Possible change in the web app during maintenance, but I don't think this
would have caused it.

If you boot in Safe Mode, none of the drivers and most services are not
started. That is why you can't do anything with IIS in safe mode.

I think the NIC got hit, possibly something else, too. Reboot into the BIOS.
Disable the NICs, and boot up.

If you have another NIC to install, disable the onboard NICs, and install
the other NIC. Go into Safe Mode with networking, set the IP addresses, then
reboot in normal mode. If that works, then you know it's a NIC issue or
something else on the board that can't communicate with the NIC. If this is
the case, call Dell to replace the board, assuming it's still under
warranty.

Ace