RPC service not available

[khuff01]

I have an SBS 2008 server that was migrated from SBS 2003.
This issue started showing up a day after the SBS 2003 was completely removed from the domain and the migration finished.
At different times during the day, when all users are logged in, the network will get very slow, the SBS 2008 will quit responding to file requests, and new logins will time out with the "The system cannon log you on due to the following error: The RPC service is unavailable."
Only a reboot will clear this issue.
I did not see this occur at all over the weekend when there were only a couple of users logged on.
Once the SBS 2008 has been rebooted there are no issues.

 

[J4M]

Hey khuff
What is the event logs saying when you get this error,

off the top of my head i can only suggest a couple of things

Did you run the SBS 2008 best practise analyser and find any issues on the box ?

Have you disabled IP v6 on the network card? thats causes all sorts of issues

Whats the binding order of the NIC on your machine, your valid LAN adapter should be top of the list

please do come back to us but try get some logs and let us see whats happening

All the best

Jamie

 

[khuff01]

Thanks for the reply
i have run the BPA an corrected those issues,
i had not disabled IPV 6 on the NIC, just made that change and will see how that goes, i only want to make one change at a time.
thanks for your input

 

[J4M]

lol mate, Dont disable IPv6 on the nic was what i ment to convey there, sorry about that !

Do check the nic binding order though, and come back to us about the events in the event viewer when you get a chance

GL mate

Jamie

 

[J4M]

Oh and what antivirus product you using ?

 

[khuff01]

Symantec Endpoint Protection MR4
The management console is on a different server, only the anti-virus client on the SBS 2008.
hehe enabled IPV 6 again, (always the minor details)

 

[J4M]

Thanks for that, im not very familiar with symantec, i seen some issues like your having with trend grinding things to hault, i really could do with a view at the event logs around the time its happening im afraid

Jamie

 

[khuff01]

the only errors i have in the event log are DCOM errors about connecting to a couple of workstations i need to reconnect to the domain. EVENT 10009
no events about RPC or NETLOGON

 

[J4M]

Try looking over this doc mate,

http://support.microsoft.com/kb/957713/en-us

 

[khuff01]

Thanks for the link but i have already seen that one and covered the suggestions.
i think it is time to open a call to MS

 

[J4M]

Sure thing, do come back and lets us all know the resolution when and if you get one


Wish you well !

Jamie

 

[ShackDaddy]

It sounds more like this:

http://blogs.technet.com/sbs/archiv...8-when-using-a-driver-which-utilizes-tdi.aspx

This is a very common issue, and I've had to patch 4-5 SBS 2008 servers to get past this issue. It also tends to crop up once you install AV on your server, but it's actually an issue in the OS.

Dave Shackelford
ThirdTier.net

 

[khuff01]

Thanks for all the help
After getting MS involved it appears the problem was not due to any configuration issues.
It was the SEP client installed on the SBS 2008 server
MS informed me they have had several calls that were resolved by removing the SEP client
I had Symantec Endpoint Protection 11 MR4 client - the anti-virus portion only -- installed on the Server - managed from a Win 2003 server.
Once i removed this client i have had no further issues.
If anyone else has SEP installed on a SBS 2008 server i would recommend uninstalling just to avoid potential problems.