Windows 2000 Help!!!

[klhoskins]

Somewhat tough to explain but here goes. We have had this issue on approximately 15 of our Windows 2000 servers at random times over the last year. Most recently on a "Powered by Windows" NAS server. I'm not sure exactly what the cause is, but there are a repeating 1000 and 1001 events. Also, when you look at the local group memberships on the server itself, all "domain groups" that are members of the "local groups" show as a GUID and do not appear to be functional. Removing TCP/IP and reinstalling it localy fixes the issue but I need to know the cause. I have read all the tech docs I can find on Event 1000 and 1001 but they don't seem to apply in our case. Group policy not getting applied seems to be a side affect of the main issue. I can log on to the domain and use network resources with no problem. It has occurred on servers with various SP's and hardware config. Anyone have any ideas on this???

 

[CEChriss]

What are the sources assoc. with the 1000 1001 events

 

[klhoskins]

The Sources assoc.???

They are "userenv" errors in the application event log.
Basically it's errors stating that group policy files cannot be accessed so GPO's weren't applied.

I have tried accessing the resources using UNC and it does fail (\\domain.com\sysvol).

 

[CEChriss]

Are you able to copy both the errors on this site. It wouldl help alot in quickly finding a resolution

 

[oisnds]

I had simular errors. Problem showed up after installing Blaster hot fix.
In my situation I was using dynamic profiles and they were not being removed when the user logged out of the server. The error would show up when the user tried to login again and the profile could not be created.
Removing the patch fixed the problem.

 

[mitsuman]

This is frustrating beyond believe.
Heres the setup:
Win2k Sp4, no updates available
Legato Networker 7.1.1
Server is rebooting randomly about twice daily with the following error logged by Compaq Notifier:Blue Screen Trap (BugCheck, STOP: 0x000000B8 (0x00000000, 0x00000000, 0x00000000, 0x00000000))
Windows logs:
Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6008
Date: 4/27/2004
Time: 9:47:15 PM
User: N/A
Computer: Description:
The previous system shutdown at 9:42:00 PM on 4/27/2004 was unexpected.
Data:
0000: d4 07 04 00 02 00 1b 00 Ô.......
0008: 15 00 2a 00 00 00 88 00 ..*...?.
0010: d4 07 04 00 03 00 1c 00 Ô.......
0018: 04 00 2a 00 00 00 88 00 ..*...?.

and then:
vent Type: Information
Event Source: Save Dump
Event Category: None
Event ID: 1001
Date: 4/19/2004
Time: 9:59:41 PM
User: N/A
Computer:
Description:
The computer has rebooted from a bugcheck. The bugcheck was: 0x000000b8 (0x00000000, 0x00000000, 0x00000000, 0x00000000). Microsoft Windows 2000 [v15.2195]. A dump was saved in: C:\WINNT\MEMORY.DMP.

Has anyone seen this?
Is there anything I can do?
Any help is appreciated.

 

[klhoskins]

So, turns out it was something simple which I should have caught. It turns out that occasionally for some "unknown" reason, the TCP/IP Netbios helper service is getting set to manual for startup. Then, onm the subsequent reboot, the issue presents itself. I didn't even notice it until I decided to check the services on a server that was having the issue against one that wasn't and noticed that it wasn't running. Started it up and immediately, it started working fine.

My question is this... If Netbios is enabled on the adapter, why doesn't the OS ensure that that service is started??? Also, why could I get to server shares using UNC just fine, just not \\domain.com\sysvol???