Wndows 2003 server blue Sreen

[morpheusmuh]

hi there, i have a windows 2003 server running on 2.2ghz celeron wih 6 workstation, lately the users have a problem where whwenever that are working using the shared files the machine blue screens, the server has 2 IDE DRIVES the shared files are on the 2nd drives any ideas? Please

HE WHO SUPPLIES THE REASON DIRECTS THE PASSION......

 

[WillShakespeare]

There's too little information. Blue Screens can happen for a number of reasons,

It could be your hard drive is not well.

If your users can live without a server for a time, run the diagnostics that come iwth the machine/mb and test the IDE ports on the mb, and the drives.

Also, if you post some extra info, this might help some others offer suggestions.

For example, when exactly does this occur? Is it when a specific file is accessed? Can it occur even when they are not sharing the files? If you unshare the files, and put the shared direcetory on the other drive, does the problem still happen?

Will

 

[xmsre]

What was the stop code in the blue screen? Did you have the server set to do a kernal mode memory dump or just ASR? If you have a dump file, load it in the Windbg debugger and do a !analyze. This will give you information on the most likely source of the crash.

 

[morpheusmuh]

The users mapped documents and resources are all on the 2nd ide drive, what ive noticed is that whenever they access anything on their mapped drives the server suddenly blue screens or it restarts, or if i download a file to a mapped drive on the server its restarts the error messages vary as well i havent written all of them down one the messages was "APC_KERNEL.SYS BEGINNING MEMORY DUMP" or "TCPIP.SYS" ive checked the event id,s but i cant find anything in there unusual other than that the machine restarted unexpectedly thanks for your comments so far...

PAIN IS THE MOTHER OF CREATIVITY

 

[xmsre]

Look in the System log for an event 1003:

Date: date
Source: System
Error Time: time
Category: (102)
Type: Error
Event ID: 1003
User: N/A
Computer: COMPUTER
Description: Error code 000000A5, parameter1 00000011, parameter2 00000006, parameter3 00000000, parameter4 00000000. For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data: 0000: 53 79 73 74 65 6d 20 45 System E 0008: 72 72 6f 72 20 20 45 72 rror Er 0010: 72 6f 72 20 63 6f 64 65 ror code 0018: 20 30 30 30 30 30 30 35 00000A5 0020: 30 20 20 50 61 72 61 6d 0 Param 0028: 65 74 65 72 73 20 66 66 eters ff 0030: 66 66 66 66 64 31 2c

The error code should give you an idea of what's going on.


Also look for the file memory.dmp in the systemfolder. If you have it, go to:

http://www.microsoft.com/whdc/devtools/debugging/default.mspx

Read the getting started, then download and install the 32bit version.


Run windbg, and set the symbol path to SRV*c:\websymbols*

http://msdl.microsoft.com/download/symbols

Load the memory.dmp file and issue a !analyze command. The debugger will tell you the module that is the most likely source of the fault.

 

[morpheusmuh]

Yes youre right there is a 1003 event log, ill follow the instructions youve jotted down and let you know the outcome thanks once again.

"PAIN IS THE MOTHER OF CREATIVITY

 

[xmsre]

What was the error code?

 

[morpheusmuh]

Error code 00000020, parameter1 00000000, parameter2 0000ffff, parameter3 00000000, parameter4 00000001.

Thats the error code ive got in there, Thanks

"PAIN IS THE MOTHER OF CREATIVITY

 

[morpheusmuh]

Hi there this is what i got from the debugging session it goes as follows: se !analyze -v to get detailed debugging information.

BugCheck 20, {0, ffff, 0, 1}

Probably caused by : srv.sys ( srv!SrvTerminateWorkerThread+55 )

"PAIN IS THE MOTHER OF CREATIVITY