Slow 2008 reboot after updates

[people3]

HI,

We have frustrating problem when we run windows updates on our servers and reboot them.

The updates install fine but it takes about 1 - 2 hours for the servers to come back up.

We have 5 identical server (dell R710's)

All run Windows 2008 and have varied rolls (32bit and 64bit).

There and no errors in the event log before and after reboots, and the servers are very quick when up and running.

When we come to run the updates each month which we do them manually, they all download and install the updates fine.

However when we reboot the server that’s when it takes so long.

It happens when we reboot the servers one at a time, and wait for each to come back up before rebooting the others.

We do all the updates remotely over remote desktop. Is this normal windows update times in 2008 or have I missed something.

Any help would be great

 

[58sniper]

That's not normal. One thing that can prolong boot times is DNS. If the server booting can't contact a DNS server, it takes much longer.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[people3]

HI Pat,
I though the same but I rebooted a member server, so all active directory and DNS servers were up and working fine but it still took about 1 hour.

Unfortunately due to uptime I have to reboot the servers out of hours so I’m unable to physically see what’s happening on the screen.

Quite often I can ping the server very quickly but remote desktop takes a long time to log back in.

Our Exchange server gives us the same issue. After a reboot I can ping after 5 -10 min but the exchange services didn’t come back on for about 2 hours, and remote desktop.

 

[people3]

From the logs

on the 7th at 22:54 it finished installing all the updates and it requires a reboot

@ 23:20 The Micorosfr.net Framework NGEN v2.0 service entered the stopped state

@ 23:56 The plug and play service entered the stopped state

@ 23:59 Broadcom BCM5716C: Network controller configured for 1GB Full Duplex

The the next System log event is

@ 02:11 File system filter 'luafv has successfully loaded

There are no errors between these events

 

[hydruid]

It sounds like it's dns for sure.

What is the dns set for on your Primary DC and secondary DC's that you're running?

What is the dns set for on member servers?

My posts are my opinion. However if I link a Microsoft Article it doesn't mean I necessarily always agree with it.

 

[people3]

Hi

DNS on the DC (which is a DNS server is)

Prinary DNS is 127.0.0.1
Seconday DNS is 192.168.87.10 (second DNS server)

The membour server DNS is just set to

192.168.86.10 (main DC server shown above)

DNS is active Directory Integrated with no errors in the event log

 

[people3]

I Should add that if i reboot the server without doing any updates it restart within 10 min

Cheers

 

[Roadki11]

I would change the primary dns server to use the physical network address. I have seen goofy things happen when the loopback address is used.

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[people3]

Ok, sorry it's been a while with this but a bit more info.

As stated, if i reboot the servers without installing updates they reboot very quickly.

If I install updates, the servers installs them fine reboots, but when it comes back up it runs some kind of reg check

11346/23911 (\registry\machine\components.......

this takes hours to complete.

It looks like SFC but it only does this after an update, all HDD are fine and raid is latest Firmware.

This happens on most of our 2008 servers. DNS is reporting all ok.

the only other issue we have is slow folder browsing on the server, performance for users and network transfers is fine, and the server is under no load. Only slow when browsing files on the server or via RDP

Any Ideas?

 

[people3]

Hello,

Finaly found out the issue,

it turns out it was Kasperky antivirus.

we also had an issue where folder browsing was very very slow, although server performance was fine.

Exiting Kaspersky or pausing it did not solve the problem.

It had to be uninstalled and reinstalled. (we were on an older version 1212)

Now updates fine and servers are nice and quick