LanManServer and LanManWorkstation crashing

Chris · 24-04-2007

We use a program in house that monitors specific critical services and sends
alerts when any monitored service fails. Every once in a while we are getting
alerts that the LanManServ er and LanManWorkstation services have failed on
two servers. Sure enough, log in to the servers and both services are
stopped. They will start up again easy enough but I'm trying to investigate
the root cause of why they stop in the first place.

There are no indications in the Application, Security or Event logs that
directly refer to the services themselves nor are there any errors that occur
around the same time. Yesterday, both servers had the same problem about an
hour apart of each other. A few minutes before the failures, there are
several Info Event ID 17's for Windows Update Agent followed by an Info Event
ID 3 for AeLookupSvc (full text listed far below). Would seem a little too
coincidental that both have the same events running up to their stop times an
hour apart.

Any one else seen anything like this? I already verfied that no one
installed the updates it mentions.

Event ID 17:

Installation Ready: The following updates are downloaded and ready for
installation. To install the updates, an administrator should log on to this
computer and Windows will prompt with further instructions:
- Security Update for Windows Server 2003 (KB932168)
- Security Update for Windows Server 2003 (KB931784)
- Security Update for Windows Server 2003 (KB925902)
- Security Update for Windows Server 2003 (KB930178)

Event ID 3:

The Application Experience Lookup service started successfully.

Chris · 25-04-2007

Gotta hate it when you spend all that time recreating the wheel only to find
that some one already had it patented :-/

http://support.microsoft.com/kb/927891

"Chris" wrote:

>
> We use a program in house that monitors specific critical services and sends
> alerts when any monitored service fails. Every once in a while we are getting
> alerts that the LanManServ er and LanManWorkstation services have failed on
> two servers. Sure enough, log in to the servers and both services are
> stopped. They will start up again easy enough but I'm trying to investigate
> the root cause of why they stop in the first place.
>
> There are no indications in the Application, Security or Event logs that
> directly refer to the services themselves nor are there any errors that occur
> around the same time. Yesterday, both servers had the same problem about an
> hour apart of each other. A few minutes before the failures, there are
> several Info Event ID 17's for Windows Update Agent followed by an Info Event
> ID 3 for AeLookupSvc (full text listed far below). Would seem a little too
> coincidental that both have the same events running up to their stop times an
> hour apart.
>
> Any one else seen anything like this? I already verfied that no one
> installed the updates it mentions.
>
>
> Event ID 17:
>
> Installation Ready: The following updates are downloaded and ready for
> installation. To install the updates, an administrator should log on to this
> computer and Windows will prompt with further instructions:
> - Security Update for Windows Server 2003 (KB932168)
> - Security Update for Windows Server 2003 (KB931784)
> - Security Update for Windows Server 2003 (KB925902)
> - Security Update for Windows Server 2003 (KB930178)
>
> Event ID 3:
>
> The Application Experience Lookup service started successfully.
>

George Valkov · 25-04-2007

Surptisingly my server suffers the same problem, except that the
LanManServer/Workstation services are disabled so they cannot crush.

However when I try to install service pack 1 for Visual Studio 2005, windows
installer eats 100% CPU for about 2 hours and finally fails and aborts the
installation. I read about that somewhere and found out that it fails to
calculate the hash of some 500MB big installer package (because of not
enough RAM, well there's just 1GB physical + 2GB swap and only 300MB are in
use).

I shall try to see if this update will fix the problem.

"Chris" wrote:
| Gotta hate it when you spend all that time recreating the wheel only to
find
| that some one already had it patented :-/
|
| http://support.microsoft.com/kb/927891
|
|
| "Chris" wrote:
|
| >
| > We use a program in house that monitors specific critical services and
sends
| > alerts when any monitored service fails. Every once in a while we are
getting
| > alerts that the LanManServ er and LanManWorkstation services have failed
on
| > two servers. Sure enough, log in to the servers and both services are
| > stopped. They will start up again easy enough but I'm trying to
investigate
| > the root cause of why they stop in the first place.
| >
| > There are no indications in the Application, Security or Event logs that
| > directly refer to the services themselves nor are there any errors that
occur
| > around the same time. Yesterday, both servers had the same problem about
an
| > hour apart of each other. A few minutes before the failures, there are
| > several Info Event ID 17's for Windows Update Agent followed by an Info
Event
| > ID 3 for AeLookupSvc (full text listed far below). Would seem a little
too
| > coincidental that both have the same events running up to their stop
times an
| > hour apart.
| >
| > Any one else seen anything like this? I already verfied that no one
| > installed the updates it mentions.
| >
| >
| > Event ID 17:
| >
| > Installation Ready: The following updates are downloaded and ready for
| > installation. To install the updates, an administrator should log on to
this
| > computer and Windows will prompt with further instructions:
| > - Security Update for Windows Server 2003 (KB932168)
| > - Security Update for Windows Server 2003 (KB931784)
| > - Security Update for Windows Server 2003 (KB925902)
| > - Security Update for Windows Server 2003 (KB930178)
| >
| > Event ID 3:
| >
| > The Application Experience Lookup service started successfully.
| >

George Valkov · 25-04-2007

This fixed the problem:
http://blogs.msdn.com/heaths/archive...ce-pack-1.aspx

Strange why it's been a known problem for a few months and Microsoft has not
fixed the digital signature checking? Also caching the entire file in RAM is
a very stupid idea! But it seems like the file compare command line utility
[fc.exe] is doing the same stupid thing!

"George Valkov" <a@b.com> wrote in message
news:Oez33qxhHHA.4676@TK2MSFTNGP02.phx.gbl...
| Surptisingly my server suffers the same problem, except that the
| LanManServer/Workstation services are disabled so they cannot crush.
|
| However when I try to install service pack 1 for Visual Studio 2005,
windows
| installer eats 100% CPU for about 2 hours and finally fails and aborts the
| installation. I read about that somewhere and found out that it fails to
| calculate the hash of some 500MB big installer package (because of not
| enough RAM, well there's just 1GB physical + 2GB swap and only 300MB are
in
| use).
|
| I shall try to see if this update will fix the problem.
|
|
|
| "Chris" wrote:
|| Gotta hate it when you spend all that time recreating the wheel only to
| find
|| that some one already had it patented :-/
||
|| http://support.microsoft.com/kb/927891
||
||
|| "Chris" wrote:
||
|| >
|| > We use a program in house that monitors specific critical services and
| sends
|| > alerts when any monitored service fails. Every once in a while we are
| getting
|| > alerts that the LanManServ er and LanManWorkstation services have
failed
| on
|| > two servers. Sure enough, log in to the servers and both services are
|| > stopped. They will start up again easy enough but I'm trying to
| investigate
|| > the root cause of why they stop in the first place.
|| >
|| > There are no indications in the Application, Security or Event logs
that
|| > directly refer to the services themselves nor are there any errors that
| occur
|| > around the same time. Yesterday, both servers had the same problem
about
| an
|| > hour apart of each other. A few minutes before the failures, there are
|| > several Info Event ID 17's for Windows Update Agent followed by an Info
| Event
|| > ID 3 for AeLookupSvc (full text listed far below). Would seem a little
| too
|| > coincidental that both have the same events running up to their stop
| times an
|| > hour apart.
|| >
|| > Any one else seen anything like this? I already verfied that no one
|| > installed the updates it mentions.
|| >
|| >
|| > Event ID 17:
|| >
|| > Installation Ready: The following updates are downloaded and ready for
|| > installation. To install the updates, an administrator should log on to
| this
|| > computer and Windows will prompt with further instructions:
|| > - Security Update for Windows Server 2003 (KB932168)
|| > - Security Update for Windows Server 2003 (KB931784)
|| > - Security Update for Windows Server 2003 (KB925902)
|| > - Security Update for Windows Server 2003 (KB930178)
|| >
|| > Event ID 3:
|| >
|| > The Application Experience Lookup service started successfully.
|| >
|
|