Server 2008 DNS Stops

[Arlyn_L]

I am using a single Server 2008 Standard Edition as a DC with DNS. The DNS
service stops working frequently (every few hours). There is nothing in the
DNS log indicating a problem. I can restart the service and it works for a
time, then stops. The only symptom I have been able to find are entries in
the Windows Applications Log:

Faulting application dns.exe, version 6.0.6001.18081, time stamp 0x4842018e,
faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec,
exception code 0xc0000374, fault offset 0x00000000000a6e97, process id 0xf20,
application start time 0x01c8ff2c1cdf4151.

Faulting application dns.exe, version 6.0.6001.18081, time stamp 0x4842018e,
faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec,
exception code 0xc0000374, fault offset 0x00000000000a6e97, process id 0xf58,
application start time 0x01c8ff340bed7d32.

There are also entries in the Administrative Events log:

The DNS Server service terminated unexpectedly. It has done this 2 time(s).
The following corrective action will be taken in 300000 milliseconds:
Restart the service.

There are entries in the DNS log just after each of these error messages
indicating the DNS service has started.

The entries occurred a few minutes apart (2 min 21 sec).

I detect the problem when I try an action requiring access to the Active
Directory which fails.

Any suggestions on how to resolve this annoyance will be appreciated.
--
Arlyn_L

[Ace Fekay [MVP Direcrtory Services]]

"Arlyn_L" <Arlyn_L@newsgroup.nospam> wrote in message
news:91DEC1DE-5B9E-4E50-A0E3-98CD9BFF087A@microsoft.com...
>I am using a single Server 2008 Standard Edition as a DC with DNS. The DNS
> service stops working frequently (every few hours). There is nothing in
> the
> DNS log indicating a problem. I can restart the service and it works for
> a
> time, then stops. The only symptom I have been able to find are entries
> in
> the Windows Applications Log:
>
> Faulting application dns.exe, version 6.0.6001.18081, time stamp
> 0x4842018e,
> faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec,
> exception code 0xc0000374, fault offset 0x00000000000a6e97, process id
> 0xf20,
> application start time 0x01c8ff2c1cdf4151.
>
> Faulting application dns.exe, version 6.0.6001.18081, time stamp
> 0x4842018e,
> faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec,
> exception code 0xc0000374, fault offset 0x00000000000a6e97, process id
> 0xf58,
> application start time 0x01c8ff340bed7d32.
>
> There are also entries in the Administrative Events log:
>
> The DNS Server service terminated unexpectedly. It has done this 2
> time(s).
> The following corrective action will be taken in 300000 milliseconds:
> Restart the service.
>
> There are entries in the DNS log just after each of these error messages
> indicating the DNS service has started.
>
> The entries occurred a few minutes apart (2 min 21 sec).
>
> I detect the problem when I try an action requiring access to the Active
> Directory which fails.
>
> Any suggestions on how to resolve this annoyance will be appreciated.
> --
> Arlyn_L

I would have looked up the EventID#s for you, but you didn't post them. For
starters, take a look at www.eventid.net to see what they have to say about
the event IDs.

Also, it would be helpful to get a little more info about this machine.
What was the very last thing done, installed, a config change, removed, etc,
etc, prior to this occuring?
Is it up to date hotfix and updates wise?
Is RRAS installed?
Is there more than one NIC?
Is IPSec running on it?
Is it a DC?
Any third party tools, utilities, apps, etc, installed that uses the DNS
service or that may intefere with ports UDP & TCP 53?


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations

[Arlyn_L]

The event ID was 1000 with a source of Application Error and a Task Category
of (100).

The server is a DC with all current updates and hot fixes. This problem has
been occurring since installation of Server 2008 on the machine which was a
new computer. There are 2 Nics, one of which is not connected to anything
and is disabled in the bios.

RRAS is not installed. IPSec is running. There are no non-Microsoft
programs installed except fot an NVidia Raid driver and two HP printer
drivers. The Microsoft programs are Visual Source Safe and Visual Studio
2005 Premere Partner Edition. Windows Live OneCare for servers is recently
installed.
--
Arlyn_L


"Ace Fekay [MVP Direcrtory Services]" wrote:

>
> "Arlyn_L" <Arlyn_L@newsgroup.nospam> wrote in message
> news:91DEC1DE-5B9E-4E50-A0E3-98CD9BFF087A@microsoft.com...
> >I am using a single Server 2008 Standard Edition as a DC with DNS. The DNS
> > service stops working frequently (every few hours). There is nothing in
> > the
> > DNS log indicating a problem. I can restart the service and it works for
> > a
> > time, then stops. The only symptom I have been able to find are entries
> > in
> > the Windows Applications Log:
> >
> > Faulting application dns.exe, version 6.0.6001.18081, time stamp
> > 0x4842018e,
> > faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec,
> > exception code 0xc0000374, fault offset 0x00000000000a6e97, process id
> > 0xf20,
> > application start time 0x01c8ff2c1cdf4151.
> >
> > Faulting application dns.exe, version 6.0.6001.18081, time stamp
> > 0x4842018e,
> > faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec,
> > exception code 0xc0000374, fault offset 0x00000000000a6e97, process id
> > 0xf58,
> > application start time 0x01c8ff340bed7d32.
> >
> > There are also entries in the Administrative Events log:
> >
> > The DNS Server service terminated unexpectedly. It has done this 2
> > time(s).
> > The following corrective action will be taken in 300000 milliseconds:
> > Restart the service.
> >
> > There are entries in the DNS log just after each of these error messages
> > indicating the DNS service has started.
> >
> > The entries occurred a few minutes apart (2 min 21 sec).
> >
> > I detect the problem when I try an action requiring access to the Active
> > Directory which fails.
> >
> > Any suggestions on how to resolve this annoyance will be appreciated.
> > --
> > Arlyn_L
>
> I would have looked up the EventID#s for you, but you didn't post them. For
> starters, take a look at www.eventid.net to see what they have to say about
> the event IDs.
>
> Also, it would be helpful to get a little more info about this machine.
> What was the very last thing done, installed, a config change, removed, etc,
> etc, prior to this occuring?
> Is it up to date hotfix and updates wise?
> Is RRAS installed?
> Is there more than one NIC?
> Is IPSec running on it?
> Is it a DC?
> Any third party tools, utilities, apps, etc, installed that uses the DNS
> service or that may intefere with ports UDP & TCP 53?
>
>
> --
> Regards,
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
> MVP Microsoft MVP - Directory Services
> Microsoft Certified Trainer
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Infinite Diversities in Infinite Combinations
>
>
>

[Ace Fekay [MVP Direcrtory Services]]

"Arlyn_L" <Arlyn_L@newsgroup.nospam> wrote in message
news:12BDA7AB-99FC-4103-968F-5FB6B6CC0972@microsoft.com...
> The event ID was 1000 with a source of Application Error and a Task
> Category
> of (100).
>
> The server is a DC with all current updates and hot fixes. This problem
> has
> been occurring since installation of Server 2008 on the machine which was
> a
> new computer. There are 2 Nics, one of which is not connected to anything
> and is disabled in the bios.
>
> RRAS is not installed. IPSec is running. There are no non-Microsoft
> programs installed except fot an NVidia Raid driver and two HP printer
> drivers. The Microsoft programs are Visual Source Safe and Visual Studio
> 2005 Premere Partner Edition. Windows Live OneCare for servers is
> recently
> installed.
> --
> Arlyn_L

It would have been easier for you if you were to have copied/pasted the
Event entry, which provides us more info.

Anyway, from what I may be seeing, since the machine is fully up to date,
IPSec may be conflicting with DNS. Or it could be another UDP reliant
service. Read the following to understand what may be happening, especially
956188 and the TechNet Blog.

---------------------------------
Running an netstat -ab is just displaying the 2500 UDP ports that have been
reserved, but not necessarily in use.

MS08-037: Vulnerabilities in DNS could allow spoofing
http://support.microsoft.com/default.aspx/kb/953230

How to reserve a range of ephemeral ports on a computer that is running
Windows Server 2003 or Windows 2000 Server
http://support.microsoft.com/kb/812873

MS08-037: Description of the security update for DNS in Windows Server 2003,
in Windows XP, and in Windows 2000 Server (client side): July 8, 2008:
http://support.microsoft.com/?id=951748

You experience issues with UDP-dependent network services after you install
DNS Server service security update 953230 (MS08-037)
http://support.microsoft.com/default.aspx/kb/956188

Some Services May Fail to Start or May Not Work Properly After Installing
MS08-037 (951746 and 951748)
http://blogs.technet.com/sbs/archive...nd-951748.aspx

SBS Services failing after MS08-037 - KB951746 and 951748
http://msmvps.com/blogs/thenakedmvp/...nd-951748.aspx

--------------------------------------------

Ace

[Ryan Orila]

Hi Ace, I have a different issue regarding DNS Server service on Windows 2008.

We sometimes can't access some websites but after restarting the DNS Server on services.msc, all sites will be accessible. I do not know where to start troubleshooting as no event logs are generated everytime this happens. It also doesn't have a pattern like time, applications running, etc..

Any idea what's causing this?

thanks in advance



Ace Fekay [MVP Direcrtory Services] wrote:

Re: Server 2008 DNS Stops
19-Aug-08

"Arlyn_L" <Arlyn_L@newsgroup.nospam> wrote in message
news:12BDA7AB-99FC-4103-968F-5FB6B6CC0972@microsoft.com...

It would have been easier for you if you were to have copied/pasted the
Event entry, which provides us more info.

Anyway, from what I may be seeing, since the machine is fully up to date,
IPSec may be conflicting with DNS. Or it could be another UDP reliant
service. Read the following to understand what may be happening, especially
956188 and the TechNet Blog.

---------------------------------
Running an netstat -ab is just displaying the 2500 UDP ports that have been
reserved, but not necessarily in use.

MS08-037: Vulnerabilities in DNS could allow spoofing
http://support.microsoft.com/default.aspx/kb/953230

How to reserve a range of ephemeral ports on a computer that is running
Windows Server 2003 or Windows 2000 Server
http://support.microsoft.com/kb/812873

MS08-037: Description of the security update for DNS in Windows Server 2003,
in Windows XP, and in Windows 2000 Server (client side): July 8, 2008:
http://support.microsoft.com/?id=951748

You experience issues with UDP-dependent network services after you install
DNS Server service security update 953230 (MS08-037)
http://support.microsoft.com/default.aspx/kb/956188

Some Services May Fail to Start or May Not Work Properly After Installing
MS08-037 (951746 and 951748)
http://blogs.technet.com/sbs/archive...nd-951748.aspx

SBS Services failing after MS08-037 - KB951746 and 951748
http://msmvps.com/blogs/thenakedmvp/...nd-951748.aspx

--------------------------------------------

Ace

EggHeadCafe - Software Developer Portal of Choice
Some Cool Bing Search Tricks
http://www.eggheadcafe.com/tutorials...earch-tri.aspx

[Meinolf Weber [MVP-DS]]

Hello Ryan,

Please post an unedited ipconfig /all from the server, sounds that there
is a not optimal configuration.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Ace, I have a different issue regarding DNS Server service on
> Windows 2008.
>
> We sometimes can't access some websites but after restarting the DNS
> Server on services.msc, all sites will be accessible. I do not know
> where to start troubleshooting as no event logs are generated
> everytime this happens. It also doesn't have a pattern like time,
> applications running, etc..
>
> Any idea what's causing this?
>
> thanks in advance
>
> Ace Fekay [MVP Direcrtory Services] wrote:
>
> Re: Server 2008 DNS Stops
> 19-Aug-08
> "Arlyn_L" <Arlyn_L@newsgroup.nospam> wrote in message
> news:12BDA7AB-99FC-4103-968F-5FB6B6CC0972@microsoft.com...
>
> It would have been easier for you if you were to have copied/pasted
> the Event entry, which provides us more info.
>
> Anyway, from what I may be seeing, since the machine is fully up to
> date, IPSec may be conflicting with DNS. Or it could be another UDP
> reliant service. Read the following to understand what may be
> happening, especially 956188 and the TechNet Blog.
>
> ---------------------------------
> Running an netstat -ab is just displaying the 2500 UDP ports that have
> been
> reserved, but not necessarily in use.
> MS08-037: Vulnerabilities in DNS could allow spoofing
> http://support.microsoft.com/default.aspx/kb/953230
>
> How to reserve a range of ephemeral ports on a computer that is
> running Windows Server 2003 or Windows 2000 Server
> http://support.microsoft.com/kb/812873
>
> MS08-037: Description of the security update for DNS in Windows Server
> 2003, in Windows XP, and in Windows 2000 Server (client side): July 8,
> 2008: http://support.microsoft.com/?id=951748
>
> You experience issues with UDP-dependent network services after you
> install DNS Server service security update 953230 (MS08-037)
> http://support.microsoft.com/default.aspx/kb/956188
>
> Some Services May Fail to Start or May Not Work Properly After
> Installing
>
> MS08-037 (951746 and 951748)
>
> http://blogs.technet.com/sbs/archive...vices-may-fail
> -to-start-or-may-not-work-properly-after-installing-ms08-037-951746-an
> d-951748.aspx
>
> SBS Services failing after MS08-037 - KB951746 and 951748
>
> http://msmvps.com/blogs/thenakedmvp/...bs-services-fa
> iling-after-ms08-037-kb951746-and-951748.aspx
>
> --------------------------------------------
>
> Ace
>
> EggHeadCafe - Software Developer Portal of Choice
>
> Some Cool Bing Search Tricks
>
> http://www.eggheadcafe.com/tutorials...7-4c94-89e3-57
> 7a6af5987c/some-cool-bing-search-tri.aspx
>

[Ace Fekay [MCT]]

"Ryan Orila" wrote in message news:2009101213647ryan.orila@abojeb.com.ph...
> Hi Ace, I have a different issue regarding DNS Server service on Windows
> 2008.
>
> We sometimes can't access some websites but after restarting the DNS
> Server on services.msc, all sites will be accessible. I do not know where
> to start troubleshooting as no event logs are generated everytime this
> happens. It also doesn't have a pattern like time, applications running,
> etc..
>
> Any idea what's causing this?
>
> thanks in advance
>
>
>
> Ace Fekay [MVP Direcrtory Services] wrote:
>
> Re: Server 2008 DNS Stops
> 19-Aug-08
>
> "Arlyn_L" <Arlyn_L@newsgroup.nospam> wrote in message
> news:12BDA7AB-99FC-4103-968F-5FB6B6CC0972@microsoft.com...
>
> It would have been easier for you if you were to have copied/pasted the
> Event entry, which provides us more info.
>
> Anyway, from what I may be seeing, since the machine is fully up to date,
> IPSec may be conflicting with DNS. Or it could be another UDP reliant
> service. Read the following to understand what may be happening,
> especially
> 956188 and the TechNet Blog.
>
> ---------------------------------
> Running an netstat -ab is just displaying the 2500 UDP ports that have
> been
> reserved, but not necessarily in use.
>
> MS08-037: Vulnerabilities in DNS could allow spoofing
> http://support.microsoft.com/default.aspx/kb/953230
>
> How to reserve a range of ephemeral ports on a computer that is running
> Windows Server 2003 or Windows 2000 Server
> http://support.microsoft.com/kb/812873
>
> MS08-037: Description of the security update for DNS in Windows Server
> 2003,
> in Windows XP, and in Windows 2000 Server (client side): July 8, 2008:
> http://support.microsoft.com/?id=951748
>
> You experience issues with UDP-dependent network services after you
> install
> DNS Server service security update 953230 (MS08-037)
> http://support.microsoft.com/default.aspx/kb/956188
>
> Some Services May Fail to Start or May Not Work Properly After Installing
> MS08-037 (951746 and 951748)
> http://blogs.technet.com/sbs/archive...nd-951748.aspx
>
> SBS Services failing after MS08-037 - KB951746 and 951748
> http://msmvps.com/blogs/thenakedmvp/...nd-951748.aspx
>
> --------------------------------------------
>
> Ace
>
> EggHeadCafe - Software Developer Portal of Choice
> Some Cool Bing Search Tricks
> http://www.eggheadcafe.com/tutorials...earch-tri.aspx



Hi Ryan,

Please post the info Meinolf asked for. In addition, let us know what
Forwarders you've configured, if any, as well as if a PPPoE connection is on
the server.

Ace

[lewis_bates]

Sorry to bump a old thread but i too have the same issue as ryan. Wondering if anyone knows how to cure the problem?