Good morning everyone. 

I have a Windows Server 2008 R2 system that is protected by Neverfail with a second Windows Server 2008 R2 system for automatic protection in my server environment, and I'm running into a problem where the LANMANSERVER service does not respond to commands to stop the service.  I have attempted to stop the service manually in the services.msc as well as running the command line net stop lanmanserver and I get the verification if I am sure I want to stop this service, and it stays attempting to stop, and then error's out.  This is causing significant delay when doing controlled switches to the second system, and according to Neverfail, there is no software changes that are performed on the LANMANSERVER service when Neverfail is installed, only the automated script that is executed to stop the LANMANSERVER service during the controlled switchover.  I would appreciate any help with figuring out what caused this issue.

Thank you

Hi,

which error do you get?

If it's a timeout you can try to modify the default https://support.microsoft.com/en-us/kb/146092

Hi,

I don't receive an actual error message, I receive after the net stop lanmanserver command the following:

Do you want to continue this operation <Y/N>: y

The Server service is stopping...............................
The Server service could not be stopped.

and it returns me to a command prompt.

You should have the error in the event log [system], it's most likely a timeout (the service didn't stop in n seconds...)

Have a look and try that registry configuration

Hi, this is what I'm seeing in the event log:

- System

  - Provider

   [ Name]  Microsoft-Windows-PerfNet
   [ Guid]  {CAB2B8A5-49B9-4EEC-B1B0-FAC21DA05A3B}
   [ EventSourceName]  PerfNet
 
  - EventID 2005

   [ Qualifiers]  49152
 
   Version 0
 
   Level 2
 
   Task 0
 
   Opcode 0
 
   Keywords 0x80000000000000
 
  - TimeCreated

   [ SystemTime]  2015-06-24T12:48:31.000000000Z
 
   EventRecordID 412123
 
   Correlation
 
  - Execution

   [ ProcessID]  0
   [ ThreadID]  0
 
   Channel Application
 
   Computer *****.*********.lan
 
   Security

- EventData

   050098C00000252101000000

--------------------------------------------------------------------------------

Binary data:

In Words

0000: C0980005 21250000 00000001 

In Bytes

0000: 05 00 98 C0 00 00 25 21   ....%!
0008: 01 00 00 00               ....

 

You should have an event sourced "Service control manager" logged at the same time you try to stop the service

Hi,

Confirm that if the LanManServer can be successfully stopped following the steps below:
1. Open CMD with administrator permission, and type sc queryex lanmanserver end with enter to find out the PID.
2. Type taskkill /f /pid [PID] end with enter to stop the service.

Best Regards,
Eve Wang