Hi guys,
We have a client that has a SBS 2003 SP2 server. All the typical server roles.
At around 12.20am last night the server just has a spaz and decides to stop doing what its supposed to doing after running ok for 9 days. I access it through Teamviewer as the service is still active on the server (and its not reliant on AD). I try to log on and the last time it did this it said there was not enough space to log on (after restart allowed me in). This time its decided to tell me that I cannot log in as the username or password is incorrect. Restart and it allows me in.
Upon viewing the logs I found the following:
Application:
MSExchangeAL errors which have completely fulled the app logs up
(LDAP Bind was unsuccessful on directory eserver.***.local for distinguished name ''. Directory returned error:[0x51] Server Down. )
System:
LSASRV
(The Security System detected an authentication error for the server LDAP/eserver.***.local/***.local@***.LOCAL. The failure code from authentication protocol Kerberos was "Insufficient system resources exist to complete the API.
(0xc000009a)".)
W3SVC
(The World Wide Web Publishing Service encountered an internal error in its process management of worker process '0' serving application pool 'DefaultAppPool'. The data field contains the error number. )
Directory Service:
NTDS ISAM (heaps)
(NTDS (564) NTDSA: Unable to write a shadowed header for file C:\WINDOWS\NTDS\edb.chk. Error -1011.)
DNS Server:
DNS
(The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.)
---------------------------------
Upon restart I have run dcdiag (no issues)
SBS2003 Best Practices Analyser (no issues)
Logs clear up and they are back up and running.
Automatically I assume this is some kind of connectivity issue with AD but that doesn't really explain why its failing over randomly and not really giving me much to go on.
Any help would be much appreciated.
Regards
Peter