i am IT support, this month i have 3 office site server out of problemtheserver will be stop the share but can logon & running,only stop the share serviceuncommon 3 office site samecase(oem server 2003,sbs server 2003)virus or patch problem?in eventlog i cannot find the error message,until the user cannot connection network driver,(1 day,1 time)i need to restart the serverback to normal.

Hello,if i understand you correct your server stops responding after some hours and users are not able to connect to the shares anymore until you reboot the server.Please make sure that DNS is configured correct with using only domain intenral DNS servers on the NIC and NONE ISPs. Please post an unedited ipconfig /all from the servers and a problem client.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

i find in eventlogthe server dns only use myselfip address 192.168.1.100subnet 255.255.255.0gateway 192.168.1.1dns 192.168.1.100For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Event Type:ErrorEvent Source:WLBSEvent Category:NoneEvent ID:35Date:6/24/2009Time:12:03:05 PMUser:N/AComputer:NTSERVER01Description:NLB Cluster 0.0.0.0 : Cluster mode cannot be enabled due to parameter errors. All traffic will be passed through to TCP/IP. Restart cluster operations after fixing the problem by running 'wlbs reload' followed by 'wlbs start'. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 00 00 0c 00 04 00 5a 00 ......Z.0008: 00 00 00 00 23 00 07 c0 ....#..0010: 00 00 00 00 00 00 00 00 ........0018: 00 00 00 00 00 00 00 00 ........0020: 00 00 00 00 00 00 00 00 ........0028: 12 02 04 00 00 00 00 00 ........0030: 00 00 00 00 .... ************************************************************************************Event Type:ErrorEvent Source:UserenvEvent Category:NoneEvent ID:1058Date:6/24/2009Time:4:18:04 PMUser:NT AUTHORITY\SYSTEMComputer:NTSERVER01Description:Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=xxx,DC=hk,DC=local. The file must be present at the location <\\xxx.hk.local\sysvol\xxx.hk.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini>. (Access is denied. ). Group Policy processing aborted. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

i already reinstallion the new server 2003 butalways showEvent Type:WarningEvent Source:MRxSmbEvent Category:NoneEvent ID:3019Date:6/26/2009Time:3:59:44 PMUser:N/AComputer:NTSERVER02Description:The redirector failed to determine the connection type. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 00 00 00 00 04 00 4e 00 ......N.0008: 00 00 00 00 cb 0b 00 80 ......€0010: 00 00 00 00 84 01 00 c0 ....„..0018: 00 00 00 00 00 00 00 00 ........0020: 00 00 00 00 00 00 00 00 ........

Hi YKSang,To narrow down the cause of the event id 3019, could youplease tell us if you havemapped a network drive to a local share?Is yes, the following KB artilce may be helpful for you.Error message: "The redirector failed to determine the connection type"http://support.microsoft.com/default.aspx/kb/315244Hope it helps. This posting is provided "AS IS" with no warranties, and confers no rights.

hi YKsang,this behavior falls into different components of microsoft. files sharing uses 2 major drivers such as mrxsmb.sys and srv.sys along with rdbss.sys and nbt.sys files. make sure you update your server to latest patches which would be first troubleshooting step.second : please give us clear architecture of your file server. such as a) are the shares connected to NAS / SAN or hard disk b) are these shares are configured on cluster ?c) please make sure you have a clean scan of your server < such as AV scan >d) how do you overcome the problem ? after the server is in hang state ?e) does this issue happens sporadically / it happens when accessing certain file types ?f) How much time does it takes to reporduce the issue ?g) if you are able to reproduce the issue very quick, then try safe mode with networking sainath !analyze