Event ID 5719 - Not enough storage? 1

[BBousman1]

Every once in awhile we notice this error in our Event Viewer. When this error kicks off, all the printers associated with this server have a status of ERROR and none of the end users can print until we restart the server. I haven't been able to find a whole lot of information about this issue. It used to be happening on multiple servers but now it seems to have gone away on all of them except this one server. Does anyone have any ideas?

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5719
Date: 5/12/2008
Time: 9:52:56 AM
User: N/A
Computer: TWHTAPPPDS1
Description:
This computer was not able to set up a secure session with a domain controller in domain HCA due to the following:
Not enough storage is available to process this command.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.

ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.

 

[JPJeffery]

Is there plenty of free disk space?

Is the swap file set to a static size (rather than system managed)?

Is there enough (free) RAM?

All very basic questions whch you've probably already checked but I felt I should ask anyway, just to be sure.

I used to get similar errors with some servers when I worked for IBM (hhhhhoik! spit!) and the only resolution to the problem was to reboot the server when the symptoms occurred. Hardly ideal, I know as it's dealing with the symptoms rather than the root cause, but the issue was with the virtual memory filling up.

JJ
[small][purple]Variables won't. Constants aren't[/purple]
There is no apostrophe in the plural of PC (or PST, or CPU, or HDD, or FDD, and so on)[/small]

 

[BBousman1]

We have 38.1GB of free space on the hard drive so that's not an issue.

I've never heard of a swap file before. How do I check that setting?

We just upgraded the server to have 2GB of RAM and we still get the issue.

Should I try increasing the virtual memory? Right now it's set to 2047MB.

 

[JPJeffery]

Swap File = Virtual Memory. I'd let the system set it for you (I believe the radio button is labelled as "System Managed Size").

JJ
[small][purple]Variables won't. Constants aren't[/purple]
There is no apostrophe in the plural of PC (or PST, or CPU, or HDD, or FDD, and so on)[/small]

 

[BBousman1]

Ah okay, I've guess I've never heard of it called a Swap File before. It was set to a custom value but I switched it to System Managed so hopefully that'll solve our problem. Thanks!

 

[JPJeffery]

I guess at the age of 42 I've finally become an old fella. Sounds like the phrase "Swap File" is o-o-o-o-o-old fashioned!

JJ
[small][purple]Variables won't. Constants aren't[/purple]
There is no apostrophe in the plural of PC (or PST, or CPU, or HDD, or FDD, and so on)[/small]

 

[BBousman1]

hahaha well I'm only 23 so maybe I'm just too young. We're planning on restarting the server @ 5pm tonight so hopefully that'll fix our problems. Thanks for all the help!

 

[JPJeffery]

Let us know how you get on, you young whippersnapper.

JJ
[small][purple]Variables won't. Constants aren't[/purple]
There is no apostrophe in the plural of PC (or PST, or CPU, or HDD, or FDD, and so on)[/small]

 

[BBousman1]

JJ,
Got the error again today after switching the virtual memory to System Managed Size.

Under the "Total paging file size for all drives" section it says Recommended: 3070MB and Currently Allocated: 2047MB, do you think we should try adding another GB to this server?

BB

 

[JPJeffery]

I don't see any harm in doing so. The usual recommended size is 1.5 x RAM hence your system is suggesting 3070Mb (2Gb x 1.5 = 3Gb).

When I reset mine I forgot to click the 'Set' button so perhaps that was something you missed (it's easily done)?

So, get to the Virtual Memory dialogue, click on 'Custom', enter 3070 in to the 'Initial Size' field, and again in to the 'Maximum Size' field, click 'Set', then OK your way out.

To check it's taken affect look for pagefile.sys in the root of C: (you'll need to untick 'Hide Operating System Files' in the Folder Options dialogue ('View' menu) from the Explorer 'Tools' menu).

Way back when pagefiles were still known as Swap Files it used to be an idea to boot up from another disk and delete that pagefile.sys to force the OS to create a new one when you reboot with the normal C: disk, in case of corruption in the page file.

Ideally the pagefile should be contiguous, so another thing to try is defrag the C: drive, although if there's already a lot of free space this may not be an issue. Try Executive Software's Diskeeper. This will show you the fragmentation of your drive as well as the fragmentation of the paging file itself.

http://www.petri.co.il/pagefile_optimization.htm

looks like an excellent guide to paging files.

Also, it might be worth double-checking that the memory installed is the right/best sort (which seems unlikely to be an issue, to be fair).

I hope some of this helps!

JJ
[small][purple]Variables won't. Constants aren't[/purple]
There is no apostrophe in the plural of PC (or PST, or CPU, or HDD, or FDD, and so on)[/small]

 

[BBousman1]

JJ,
I tried that, and yes I did hit Set, but we got the error again this morning. I looked for the Paging File but couldn't find it, although when I do a performance monitor it says it's located at C:\pagefile.sys so I don't know what's going on. I think we're going to try to add another GB of RAM as well as make sure what's in there is compatible and then format the hard drive and do a fresh install to see if that will help. I'll let you know what I find out.

BB

 

[1toomany]

HiBBousman

Which OS are you running on your server ?
Do you have a 1GB NIC installed ?
Do you have a second drive in the system ?
Looking in your drive management, what size is your c: partition/volume ?

 

[BBousman1]

We're running Windows Server 2003 Enterprise Edition SP2

The network connections don't say they're 1GB NIC's but when I look at the specs in the user manual it says "Two RJ-45 (for integrated 1-Gigabit NICs)" so I'm guessing we do.

There's only one hard drive in the server which has two partitions:
1: EISA Configuration - 31MB / 31MB Free
2: C: Drive - 46.31GB / 68.21GB Free

 

[1toomany]

BBousman1,

It's possible that NetLogon isn't waiting for the network:-
try this :

http://support.microsoft.com/kb/938449/en-us

If it's an upgraded server (ie FAT 32 file system remained in place) check that the partition or volume size isn't limited.

 

[BBousman1]

Yeah I've already checked into that Knowledge Base article, if you read my first post of this thread, you'll see that the error message we're getting is different than what the KB article says. I did happen to find out that our PageFile.sys is really fragmented so we're going to try defragging it and see if that helps.

 

[theravager]

I cant think of the name of the issue that can cause this atm, but on windows servers if you use a lot of network sessions the server runs out of available (can't think of the word but its the same thing as threads). Some applications can chew up a large amount of the resource as well macafee is probably one of the worst.

Basically what happens is you cannot no longer create sessions to the server but existing connections all work fine, on a reboot everything comes good for a while until you run out of the resource again, this depends on how heavily loaded the server is.

Its a registy setting that by default is pretty large but with the scalability of new servers and the workload being a lot larger it can run out, particularly on clusters or dcs with a large number of clients. M$ probibly should of doubled its default years ago.

If this sounds like the issue you are having, reply and i will check what the key is to modify. Its definitely has no relation to memory or cpu. Sorry I can't recall the name of it offhand.

 

[BBousman1]

What do you mean by a lot of network sessions? (FYI I'm a programmer, not an hardware guy, this issue just got pushed off to me)

Do you think that the fragmented PageFile could have something to do with it though? I've looked on about a dozen of our other servers and none of them have more than 1 fragmentation whereas this server has 50,000!

I'm willing to try anything at the moment so any help you can give me would be much appreciated!

Thanks!

BB

 

[1toomany]

Hi BBousman1,

Sorry, missed the intonation of your first post. Defragging regularly is always a good idea.

1.)What other services are running on that server ? Try disabling various non-critical services (Telnet, Alerter, Messenger etc. - depends on your environment)

2.)What Anti-virus software are you running ?

3.)Another thing to look for is disk I/O errors.

4.)Have you run a performance counter log to record system usage ? Especially check the processes.It is possible your server service is running out of process memory ie. a process on your system is consuming memory handles and not releasing them properly. You would need to identify which one/s and perform relevant corrective action.

5.)Of course it could just be faulty RAM. Have you tried swapping it out with known good RAM?

DDIRR
Discover,Diagnose,Investigate,Repair,Replace.

 

[BBousman1]

Yeah I know defragging every so often is good but I'm talking about the files normal defragging won't let you clean up. That link that JPJeffery gave has another link in it to a program that will defrag the files that are open exclusively when Windows is running and therefore can't be defragged until restart.

1. There's two processes that kill our resources on our servers: sqlservr.exe (SQL Express 2005) & ppwatch.exe (PlanetPress Watch). These will sometimes take our CPU usage up to 100% but our software currently can't run without them.

2. We're running Symantec Client Security on our servers it looks like, I can't change that because I don't have permissions.

3. I've already checked for disk errors and didn't find any.

4. I've run numerous performance monitors and am currently running one right now. None of them show anything out of the ordinary. The one running now is watching the PageFile Usage.

5. We just added another GB of RAM to this server a couple weeks ago and that didn't fix the problem either so I think the RAM is fine.

 

[1toomany]

Out of curiosity...

The way I read the posts is that you problem started with the RAM that was in the machine before you added more. Have you tried removing the original RAM. Sorry if I seem pedantic.

You mentioned that your other servers where displaying similar symptoms but they have "healed" themselves. What changed ?

OK, moving on, is this server the Schema master, Domain naming master, PDC, RID master or infrastructure master. If not the problem could lie with the system this server is trying to connect to. Check any other server which may hold any of the above roles for (if I remember correctly) event 2011. This could mean a stack error.
see

http://support.microsoft.com/kb/314498/

A shot in the dark - try setting your pagefile/ swapfile on a) a second drive, if you have something fast lying around or, b)to 3x minimum, 3x maximum of your RAM.

Will ponder on

DDIRR