Group:  English: Windows Server ยป microsoft.public.windows.server.sbs
Thread: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019

DotNetBag
.NET Development Newsgroups

HTVi
TV Discussion Newsgroups

Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
Rising Antivirus 2006

Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
crazysupratt[ at ]gmail.com 06.07.2007 16:06:49
Hello everyone. I have a Windows Server 2003 with SP1. On 7/02/07 I
installed microsoft update. The following are the patches that got
installed:

KB916846
KB925902
KB930718
KB931784
KB932168

Anyways, prior to the install/rebooting the server, the server ran
perfectly. No issue whatsoever. After the install and the reboot, it
started to act up. At around 5 am every morning, I get event ID 2019
which is:

"The server was unable to allocate from the system nonpaged pool
because the pool was empty"

Which then follows by:

event ID 2012: "SMTP could not connect to the DNS server "10.0.0.1".
The protocol used was "UDP". It may be down or inaccessible."

event ID 2013 : "SMTP could not connect to any DNS server. Either none
are configured or all are down"

and so forth. It seems that after event ID 2019, everything begin to
not work. The active directory doesn't work, the dns doesn't work.
Once the AD goes down, everything goes down as it relies on AD.
Anyways, how do I go about uninstalling the Patch. Do I go into C:
\Windows and go into each of the UninstallKBxxxx folder and double
click the "spuninst.exe". What is the correct way to do it? Should I
do a system restore? That would mean the weeks data would get lost? If
anyone can help me out and let me know, I would greatly appreciate it.
Also can you advise on why this is happening after the patch install?
Could the patch be corrupted? Let me know. Thank you.

Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
crazysupratt[ at ]gmail.com 06.07.2007 21:42:28
any help advise/help please. Thank you.

Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
"Marina Roos [SBS-MVP]" <marina[ at ]roos.nodontwantspam.nl.com> 06.07.2007 22:24:22
Hi,

Can you post the ipconfig/all from the server and a client please? Which AV
are you using? What other 3rd party programs are installed on the server?

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

<crazysupratt[ at ]gmail.com> schreef in bericht
news:1183738009.228113.228590[ at ]g4g2000hsf.googlegroups.com...
[Quoted Text]
> Hello everyone. I have a Windows Server 2003 with SP1. On 7/02/07 I
> installed microsoft update. The following are the patches that got
> installed:
>
> KB916846
> KB925902
> KB930718
> KB931784
> KB932168
>
> Anyways, prior to the install/rebooting the server, the server ran
> perfectly. No issue whatsoever. After the install and the reboot, it
> started to act up. At around 5 am every morning, I get event ID 2019
> which is:
>
> "The server was unable to allocate from the system nonpaged pool
> because the pool was empty"
>
> Which then follows by:
>
> event ID 2012: "SMTP could not connect to the DNS server "10.0.0.1".
> The protocol used was "UDP". It may be down or inaccessible."
>
> event ID 2013 : "SMTP could not connect to any DNS server. Either none
> are configured or all are down"
>
> and so forth. It seems that after event ID 2019, everything begin to
> not work. The active directory doesn't work, the dns doesn't work.
> Once the AD goes down, everything goes down as it relies on AD.
> Anyways, how do I go about uninstalling the Patch. Do I go into C:
> \Windows and go into each of the UninstallKBxxxx folder and double
> click the "spuninst.exe". What is the correct way to do it? Should I
> do a system restore? That would mean the weeks data would get lost? If
> anyone can help me out and let me know, I would greatly appreciate it.
> Also can you advise on why this is happening after the patch install?
> Could the patch be corrupted? Let me know. Thank you.
>


Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
crazysupratt[ at ]gmail.com 06.07.2007 23:28:48
On Jul 6, 3:24 pm, "Marina Roos [SBS-MVP]"
<mar...[ at ]roos.nodontwantspam.nl.com> wrote:
[Quoted Text]
> Hi,
>
> Can you post the ipconfig/all from the server and a client please? Which AV
> are you using? What other 3rd party programs are installed on the server?
>
> --
> Regards,
>
> Marina Roos
> Microsoft SBS-MVP
> One of the Magical M&M'swww.smallbizserver.net
> Take part in SBS forum:http://www.smallbizserver.net/Default.aspx?tabid=53
>


>From Server:

DHCP Enbaled: NO
IP address: 10.0.0.1
Subnet Mask: 255.255.255.0
DNS sever: 10.0.0.1
Primary WINS server: 10.0.0.1

Wan Connection:

IP address: x.x.x.x
subnet mask: 255.255.255.248
ip address: x.x.x.x
DNS server: 10.0.0.1


>From one of the client:

IP address is 10.0.0.10
Subnet Mask: 255.255.255.0
Default gateway: 10.0.0.1
DHCP: 10.0.0.1
DNS: 10.0.0.1
Primary WINS: 10.0.0.1

I am using Trend Micro server edition. SMB. Other than 3rd party? Not
that many. Thats not the issue I don't think as everything was working
prior to the patch update and reboot. Thanks for your help.

Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
"Marina Roos [SBS-MVP]" <marina[ at ]roos.nodontwantspam.nl.com> 07.07.2007 00:02:01
Hi,

Can you post the complete ipconfig/all please, as we are missing some vital
information. Open a command prompt by opening Start -> Run from the Start
Menu and type cmd. From the command prompt type ipconfig /all >ip.txt.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

<crazysupratt[ at ]gmail.com> schreef in bericht
news:1183764528.327985.50620[ at ]c77g2000hse.googlegroups.com...
[Quoted Text]
> On Jul 6, 3:24 pm, "Marina Roos [SBS-MVP]"
> <mar...[ at ]roos.nodontwantspam.nl.com> wrote:
> > Hi,
> >
> > Can you post the ipconfig/all from the server and a client please? Which
AV
> > are you using? What other 3rd party programs are installed on the
server?
> >
> > --
> > Regards,
> >
> > Marina Roos
> > Microsoft SBS-MVP
> > One of the Magical M&M'swww.smallbizserver.net
> > Take part in SBS
forum:http://www.smallbizserver.net/Default.aspx?tabid=53
> >
>
>
> >From Server:
>
> DHCP Enbaled: NO
> IP address: 10.0.0.1
> Subnet Mask: 255.255.255.0
> DNS sever: 10.0.0.1
> Primary WINS server: 10.0.0.1
>
> Wan Connection:
>
> IP address: x.x.x.x
> subnet mask: 255.255.255.248
> ip address: x.x.x.x
> DNS server: 10.0.0.1
>
>
> >From one of the client:
>
> IP address is 10.0.0.10
> Subnet Mask: 255.255.255.0
> Default gateway: 10.0.0.1
> DHCP: 10.0.0.1
> DNS: 10.0.0.1
> Primary WINS: 10.0.0.1
>
> I am using Trend Micro server edition. SMB. Other than 3rd party? Not
> that many. Thats not the issue I don't think as everything was working
> prior to the patch update and reboot. Thanks for your help.
>


Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
crazysupratt[ at ]gmail.com 07.07.2007 01:34:04
why would you need the ip address?

Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa[ at ]pacbell.net> 07.07.2007 01:56:43
Badly set up DNS can cause a lot of symptoms.

The symptoms you site .. I'm not seeing on other servers that I have
fully patched.

Never do a system restore from a patch. All you have to do is go into
add/remove, click on show updates and remove them one by one to see
which one might be impacting...

If any at all it would be the Kernel patch...but even then I think there
is something else going on.

crazysupratt[ at ]gmail.com wrote:
[Quoted Text]
> why would you need the ip address?
>
>
Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
"Marina Roos [SBS-MVP]" <marina[ at ]roos.nodontwantspam.nl.com> 07.07.2007 02:12:15
I am not asking you to publish your public IP. I am asking you to post the
full ipconfig, where you can munge your public IP like you did before.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

<crazysupratt[ at ]gmail.com> schreef in bericht
news:1183772044.071759.270920[ at ]d30g2000prg.googlegroups.com...
[Quoted Text]
> why would you need the ip address?
>


Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
crazysupratt[ at ]gmail.com 07.07.2007 21:53:31
On Jul 6, 7:12 pm, "Marina Roos [SBS-MVP]"
<mar...[ at ]roos.nodontwantspam.nl.com> wrote:
[Quoted Text]
> I am not asking you to publish your public IP. I am asking you to post the
> full ipconfig, where you can munge your public IP like you did before.
>
> --
> Regards,
>
> Marina Roos
> Microsoft SBS-MVP
> One of the Magical M&M'swww.smallbizserver.net
> Take part in SBS forum:http://www.smallbizserver.net/Default.aspx?tabid=53
>
> <crazysupr...[ at ]gmail.com> schreef in berichtnews:1183772044.071759.270920[ at ]d30g2000prg.googlegroups.com...
>
>
>
> > why would you need the ip address?- Hide quoted text -
>
> - Show quoted text -

Thank for all your reponses. It is much appreciated. I went ahead and
uninstall all the patches prior to all of the issue and it seem to
resolve the problem. The server is not getting anymore errors. I
checked this morning and no dns or active directory issue that I have
been seeing the last 2 days at around 5 am.

I will go ahead and post the ipconfig /all later on just in case there
are some issue you guys are seeing.

Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
crazysupratt[ at ]gmail.com 08.07.2007 01:48:28
I spoke too soon. I got the Event ID 2019 today at 3:30 pm pacific
time. "The server was unable to allocate from the system nonpaged pool
because the pool was empty" I then checked the DNS server event viewer
and saw Event ID 4015 at 3:31. "The DNS server has encountered a
critical error from the Active Directory. Check that the Active
Directory is functioning properly. The extended error debug
information (which may be empty) is "". The event data contains the
error."

So it seems that Event ID 2019 caused everything to failed. Once
Active Directory stops working, everything doesn't work at all. I'm
deperate in finding a solution to this problem as Monday is just
around the corner and I can't just keep on rebooting the machine.
Please HELP.

Here is the ipconfig as requested:

[Quoted Text]
>From the server:

Windows IP Configuration

Host Name . . . . . . . . . . . . : server1
Primary Dns Suffix . . . . . . . : company.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : company.local

Ethernet adapter Server Local Area Connection:
Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : HP NC7761 Gigabit Server
Adapter
Physical Address. . . . . . . . . : 11-16-35-C2-A4-5F
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.50.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.50.1
Primary WINS Server . . . . . . . : 192.168.50.1

Ethernet adapter WAN Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VIA VT6105 Rhine III Compatible
Fast Ethernet Adapter
Physical Address. . . . . . . . . : 00-13-33-70-EE-5E
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 50.36.126.116
Subnet Mask . . . . . . . . . . . : 255.255.255.248
IP Address. . . . . . . . . . . . : 50.36.126.114
Subnet Mask . . . . . . . . . . . : 255.255.255.248
Default Gateway . . . . . . . . . : 50.36.126.113
DNS Servers . . . . . . . . . . . : 192.168.50.1
NetBIOS over Tcpip. . . . . . . . : Disabled


Here is the ipconfig from a local machine:



Windows IP Configuration

Host Name . . . . . . . . . . . . : ws07
Primary Dns Suffix . . . . . . . : company.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : company.local
company.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : company.local
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
Ethernet
Physical Address. . . . . . . . . : 00-16-17-7E-05-D0
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.50.81
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.50.1
DHCP Server . . . . . . . . . . . : 192.168.50.1
DNS Servers . . . . . . . . . . . : 192.168.50.1
Primary WINS Server . . . . . . . : 192.168.50.1
Lease Obtained. . . . . . . . . . : Thursday, July 05, 2007
5:03:25 PM
Lease Expires . . . . . . . . . . : Friday, July 13, 2007
5:03:25 PM

Let me know what else you need and I will surely provide it. Thank you
for your help in this matter. I appreciate it.




Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
"Marina Roos [SBS-MVP]" <marina[ at ]roos.nodontwantspam.nl.com> 08.07.2007 01:55:14
Hi,

Remove the 2nd public IP from the external nic. Why do you have it
configured that way? CEICW will choke on it. Remove it and rerun CEICW
please.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

<crazysupratt[ at ]gmail.com> schreef in bericht
news:1183859308.297714.232510[ at ]d55g2000hsg.googlegroups.com...
[Quoted Text]
> I spoke too soon. I got the Event ID 2019 today at 3:30 pm pacific
> time. "The server was unable to allocate from the system nonpaged pool
> because the pool was empty" I then checked the DNS server event viewer
> and saw Event ID 4015 at 3:31. "The DNS server has encountered a
> critical error from the Active Directory. Check that the Active
> Directory is functioning properly. The extended error debug
> information (which may be empty) is "". The event data contains the
> error."
>
> So it seems that Event ID 2019 caused everything to failed. Once
> Active Directory stops working, everything doesn't work at all. I'm
> deperate in finding a solution to this problem as Monday is just
> around the corner and I can't just keep on rebooting the machine.
> Please HELP.
>
> Here is the ipconfig as requested:
>
> >From the server:
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : server1
> Primary Dns Suffix . . . . . . . : company.local
> Node Type . . . . . . . . . . . . : Unknown
> IP Routing Enabled. . . . . . . . : Yes
> WINS Proxy Enabled. . . . . . . . : Yes
> DNS Suffix Search List. . . . . . : company.local
>
> Ethernet adapter Server Local Area Connection:
> Connection-specific DNS Suffix . :
>
> Description . . . . . . . . . . . : HP NC7761 Gigabit Server
> Adapter
> Physical Address. . . . . . . . . : 11-16-35-C2-A4-5F
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 192.168.50.1
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . :
> DNS Servers . . . . . . . . . . . : 192.168.50.1
> Primary WINS Server . . . . . . . : 192.168.50.1
>
> Ethernet adapter WAN Connection:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : VIA VT6105 Rhine III Compatible
> Fast Ethernet Adapter
> Physical Address. . . . . . . . . : 00-13-33-70-EE-5E
> DHCP Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : 50.36.126.116
> Subnet Mask . . . . . . . . . . . : 255.255.255.248
> IP Address. . . . . . . . . . . . : 50.36.126.114
> Subnet Mask . . . . . . . . . . . : 255.255.255.248
> Default Gateway . . . . . . . . . : 50.36.126.113
> DNS Servers . . . . . . . . . . . : 192.168.50.1
> NetBIOS over Tcpip. . . . . . . . : Disabled
>
>
> Here is the ipconfig from a local machine:
>
>
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . . . . : ws07
> Primary Dns Suffix . . . . . . . : company.local
> Node Type . . . . . . . . . . . . : Hybrid
> IP Routing Enabled. . . . . . . . : No
> WINS Proxy Enabled. . . . . . . . : No
> DNS Suffix Search List. . . . . . : company.local
> company.local
>
> Ethernet adapter Local Area Connection:
>
> Connection-specific DNS Suffix . : company.local
> Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
> Ethernet
> Physical Address. . . . . . . . . : 00-16-17-7E-05-D0
> Dhcp Enabled. . . . . . . . . . . : Yes
> Autoconfiguration Enabled . . . . : Yes
> IP Address. . . . . . . . . . . . : 192.168.50.81
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> Default Gateway . . . . . . . . . : 192.168.50.1
> DHCP Server . . . . . . . . . . . : 192.168.50.1
> DNS Servers . . . . . . . . . . . : 192.168.50.1
> Primary WINS Server . . . . . . . : 192.168.50.1
> Lease Obtained. . . . . . . . . . : Thursday, July 05, 2007
> 5:03:25 PM
> Lease Expires . . . . . . . . . . : Friday, July 13, 2007
> 5:03:25 PM
>
> Let me know what else you need and I will surely provide it. Thank you
> for your help in this matter. I appreciate it.
>
>
>
>


Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
crazysupratt[ at ]gmail.com 08.07.2007 04:27:42

We use ISA Server as a firewall so the IP address are NAT to our
webserver and to our HP-UX server. I don't believe it has anything to
do with the public IP address. When I open up task manager and display
both nonpage memory, i notice spoolsv.exe is climbing higher and
higher. When I first rebooted the machine, it was at around 5mb and
since about 3 hours has pass and it has gone up to 23mb. After my
research, I was advise to pay attention to the nonpage memory and see
what process is taking up the most. The one that is using the most
nonpage memory is the memory leak? is that not correct? anyways, any
help with this lead or am I going through the wrong path. THanks for
your help.

Re: Problems After Windows Update: Rolling Back Help/Advise : Getting Event ID 2019
"Marina Roos [SBS-MVP]" <marina[ at ]roos.nodontwantspam.nl.com> 08.07.2007 15:15:18
Hi,

You are using the wrong method by assigning 2 public IP's to the external
nic. Again, SBS will choke on that.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

<crazysupratt[ at ]gmail.com> schreef in bericht
news:1183868862.849592.7840[ at ]m37g2000prh.googlegroups.com...
[Quoted Text]
>
> We use ISA Server as a firewall so the IP address are NAT to our
> webserver and to our HP-UX server. I don't believe it has anything to
> do with the public IP address. When I open up task manager and display
> both nonpage memory, i notice spoolsv.exe is climbing higher and
> higher. When I first rebooted the machine, it was at around 5mb and
> since about 3 hours has pass and it has gone up to 23mb. After my
> research, I was advise to pay attention to the nonpage memory and see
> what process is taking up the most. The one that is using the most
> nonpage memory is the memory leak? is that not correct? anyways, any
> help with this lead or am I going through the wrong path. THanks for
> your help.
>


Home | Search | Terms | Imprint | Contact
Newsgroups Reader - provided by WiredBox.Net