|
|
Our Hot Pick: Rising Antivirus 2006 - Certified by TUV & Checkmark! Get 10% discount by entering this coupon code: ONDISCOUNT10
Hi - hope someone can help here...
I'm running SBS2003 SP2 on a 12Gb system partition with additional data
drive. Normally the system partition has about 2.5G free space. BUT...
At about 03:00 (local time) on most days (but not all!) this space suddenly
disappears, and the disk becomes full - so we have the usual mayhem which
happens when the system disk fills up - DHCP and licensing services fail,
etc etc.
Almost always, the disk space magically reappears soon afterwards (I can't
tell exactly how long, as there's no event to indicate it, but certainly by
07:00), so the server is fine by the time users need it. But today it
wasn't - the system remained at zero free space at 9am, so I deleted about
200Mb of rubbish, then rebooted. When it came back up, there was 700Mb of
space on C - not 200Mb or 2.5Gb.
Some extra info...
1: I checked the Properties of all the files and folders in C:\, and totted
up the disc space used. It's about 9.5Gb, meaning that there should be
2.5Gb free space.
2: Automatic Updates is set to Check and Notify for new updates, but not to
download them.
3: We have a scheduled backup system (Veritas Backup Exec) running at 11pm
every night, but as far as I can tell there are no processes initiated at
3am.
4: Nothing appears in the System or Application event logs to indicate what
causes the loss of space - the first indication of a problem is a system
event 2013, indicating low disk space, which happens shortly after 03:00..
So does anyone have any idea where my system disc space is disappearing to
at 3am most days, and how I can reliably get it back?
Thanks
Nik
|
|
Hello Nik,
Thank you for posting here.
According to your description, I understand that your SBS system partition
free space disappear at every 03:00. If I have misunderstood the problem,
please don't hesitate to let me know.
Based on my research, I think this issue relate to 3rd-party software or
some scheduled tasks running on SBS. I suggest we try the following steps
to see if we can resolve this issue:
1. Please check the scheduled tasks running on SBS
a. Please open control panel->Scheduled Tasks
b. Please check whether some scheduled tasks' Next Run time is nearby 03:00
c. Please move all scheduled tasks to another folder, the tasks will do not
run, then monitor the SBS at 03:00
d. If the issue persists, we can move all scheduled tasks back.
2. Please do clean boot on SBS and monitor to narrow down this issue
To clean boot the problematic computer, please use the steps below:
a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
(without the quotation marks). Click OK.
b. In the System Configuration Utility (MSConfig) window, click to select
the Selective Startup button.
c. Click to clear the check mark from the "Load startup items" below
Selective Startup.
d. Click the Services tab, click to check the "Hide All Microsoft Services"
box, and remove all the check marks from the remained Non-Microsoft
Services. Please note that the Exchange services could be marked as
non-Microsoft. Please do not disable those services.
e. Click OK to close the MSConfig window. Click Yes when you are asked to
restart your computer in order to enable the changes.
f. After restarting, please monitor and check whether this issue will
reoccur.
g. If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.
3. For SBS 2003 server, the 2.5GB free space in system partition is too
little. I suggest you move some data or folders from system partition to
additional partition or disk. This will make SBS run smooth.
This document provides step-by-step instructions for moving each of the
data folders for Windows Small Business Server 2003. The data folders
include the Users Shared Folders, SharePoint and Monitoring databases,
Exchange databases and log files, Sent Faxes folder, and ClientApps shared
folder. You can use the instructions in this document to move one or all of
the data folders.
Moving Data Folders for Windows Small Business Server 2003
http://www.microsoft.com/downloads/details.aspx?familyid=a1d0af69-1287-4225-
bd8b-59c89f44984b&displaylang=en
Hope these steps will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "nik" <nik_AT_cict.co.uk>
| Subject: Disappearing disk space?
| Date: Mon, 25 Jun 2007 11:42:00 +0100
| Lines: 38
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1807
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
| Message-ID: <eKPwf89tHHA.576[ at ]TK2MSFTNGP03.phx.gbl>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: ctmd.demon.co.uk 80.176.224.181
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:46307
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi - hope someone can help here...
|
| I'm running SBS2003 SP2 on a 12Gb system partition with additional data
| drive. Normally the system partition has about 2.5G free space. BUT...
|
| At about 03:00 (local time) on most days (but not all!) this space
suddenly
| disappears, and the disk becomes full - so we have the usual mayhem which
| happens when the system disk fills up - DHCP and licensing services fail,
| etc etc.
|
| Almost always, the disk space magically reappears soon afterwards (I can't
| tell exactly how long, as there's no event to indicate it, but certainly
by
| 07:00), so the server is fine by the time users need it. But today it
| wasn't - the system remained at zero free space at 9am, so I deleted about
| 200Mb of rubbish, then rebooted. When it came back up, there was 700Mb of
| space on C - not 200Mb or 2.5Gb.
|
| Some extra info...
|
| 1: I checked the Properties of all the files and folders in C:\, and
totted
| up the disc space used. It's about 9.5Gb, meaning that there should be
| 2.5Gb free space.
| 2: Automatic Updates is set to Check and Notify for new updates, but not
to
| download them.
| 3: We have a scheduled backup system (Veritas Backup Exec) running at 11pm
| every night, but as far as I can tell there are no processes initiated at
| 3am.
| 4: Nothing appears in the System or Application event logs to indicate
what
| causes the loss of space - the first indication of a problem is a system
| event 2013, indicating low disk space, which happens shortly after 03:00..
|
| So does anyone have any idea where my system disc space is disappearing to
| at 3am most days, and how I can reliably get it back?
|
| Thanks
| Nik
|
|
|
|
|
Hi Terence: many thanks for your detailed and informative reply.
[Quoted Text] >
> According to your description, I understand that your SBS system partition
> free space disappear at every 03:00. If I have misunderstood the problem,
> please don't hesitate to let me know.
Mostly correct, though on a small minority of days, the issue simply doesn't
happen. There seems to be no pattern to this.
What's especially strange is that the free space usually comes back again
within a couple of hours, and when it disappears, it doesn't show up in
file/folder sizes on the drive at that time.
> Based on my research, I think this issue relate to 3rd-party software or
> some scheduled tasks running on SBS.
I had suspcisions about the Backup Exec backup software we use, but I
stopped all Backup Exec services yesterday evevning, and the problem still
recurred last night. There's no other 3rd-party software running on a
schedule AFAIK - and there's certainly nothing coming up in the event logs.
>I suggest we try the following steps
> to see if we can resolve this issue:
>
> 1. Please check the scheduled tasks running on SBS
>
> a. Please open control panel->Scheduled Tasks
>
> b. Please check whether some scheduled tasks' Next Run time is nearby
03:00
Nothing is scheduled to run specifically at 03:00. The only scheduled tasks
are:
Collect Server Performance Data (every hour)
Collect Usage Data (Daily at 04:30)
File_Backup (disabled, as we have 3rd party backup software)
Small Business Server - Server Status Report - Server Performance Report
(daily at 06:00)
I guess that means that the Collect Server Performance Data will run at
03:00 though... I'll try moving the tasks tonight.
>
> c. Please move all scheduled tasks to another folder, the tasks will do
not
> run, then monitor the SBS at 03:00
>
> d. If the issue persists, we can move all scheduled tasks back.
>
> 2. Please do clean boot on SBS and monitor to narrow down this issue
I will try this option over the next couple of days, but as other folks here
have observed, SBS tends to be a single-server setup, so it can be difficult
to get maintenance time when there are problems. OK, not many people want
to work at 3am, but then again, neither do I. :-)
>
> 3. For SBS 2003 server, the 2.5GB free space in system partition is too
> little. I suggest you move some data or folders from system partition to
> additional partition or disk. This will make SBS run smooth.
Tell me about it - but when I installed this system in 2004, 12Gb was the
system partition size recommended by Microsoft for our server. It's now
hopelessly inadequate, even though I've moved all the data files which
Technet articles suggest moving. We have more drive space available on the
machine, but I know of no way to increase the system partition size - is
there a way of adding unused space to the system partition or recreating the
system partition to another drive? The server is SCSI RAID5, and I'm just
about to install an additional array of 3 drives in it, so now would be a
good time to reorganise the storage if it's possible.
Would it be sensible to try reinstalling the system from scratch on the new
drive, using a larger system partition (how big?), and restoring our data
into that new installation from backup?
Best regards
Nik
|
|
Nic,
What anti-virus application do you have installed? I've noticed similar
behaviour with Trend CSM on very tight system partitions. There may be some
relief, but it's only a temporary measure as it's really hard to keep enough
free space on a 12 gb system partition.
So in the end, you'll need to resize c: anyway. You should find lots of hits
on resizing if you do a google search of this newsgroup. A disk imaging
product is your best bet for this task.
--
Les Connor [SBS MVP]
"nik" <nik_AT_cict.co.uk> wrote in message
news:%23Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
[Quoted Text] > Hi Terence: many thanks for your detailed and informative reply.
>
>>
>> According to your description, I understand that your SBS system
>> partition
>> free space disappear at every 03:00. If I have misunderstood the problem,
>> please don't hesitate to let me know.
>
> Mostly correct, though on a small minority of days, the issue simply
> doesn't
> happen. There seems to be no pattern to this.
>
> What's especially strange is that the free space usually comes back again
> within a couple of hours, and when it disappears, it doesn't show up in
> file/folder sizes on the drive at that time.
>
>> Based on my research, I think this issue relate to 3rd-party software or
>> some scheduled tasks running on SBS.
>
> I had suspcisions about the Backup Exec backup software we use, but I
> stopped all Backup Exec services yesterday evevning, and the problem still
> recurred last night. There's no other 3rd-party software running on a
> schedule AFAIK - and there's certainly nothing coming up in the event
> logs.
>
>>I suggest we try the following steps
>> to see if we can resolve this issue:
>>
>> 1. Please check the scheduled tasks running on SBS
>>
>> a. Please open control panel->Scheduled Tasks
>>
>> b. Please check whether some scheduled tasks' Next Run time is nearby
> 03:00
>
> Nothing is scheduled to run specifically at 03:00. The only scheduled
> tasks
> are:
>
> Collect Server Performance Data (every hour)
> Collect Usage Data (Daily at 04:30)
> File_Backup (disabled, as we have 3rd party backup software)
> Small Business Server - Server Status Report - Server Performance Report
> (daily at 06:00)
>
> I guess that means that the Collect Server Performance Data will run at
> 03:00 though... I'll try moving the tasks tonight.
>
>>
>> c. Please move all scheduled tasks to another folder, the tasks will do
> not
>> run, then monitor the SBS at 03:00
>>
>> d. If the issue persists, we can move all scheduled tasks back.
>>
>> 2. Please do clean boot on SBS and monitor to narrow down this issue
>
> I will try this option over the next couple of days, but as other folks
> here
> have observed, SBS tends to be a single-server setup, so it can be
> difficult
> to get maintenance time when there are problems. OK, not many people want
> to work at 3am, but then again, neither do I. :-)
>
>>
>> 3. For SBS 2003 server, the 2.5GB free space in system partition is too
>> little. I suggest you move some data or folders from system partition to
>> additional partition or disk. This will make SBS run smooth.
>
> Tell me about it - but when I installed this system in 2004, 12Gb was the
> system partition size recommended by Microsoft for our server. It's now
> hopelessly inadequate, even though I've moved all the data files which
> Technet articles suggest moving. We have more drive space available on
> the
> machine, but I know of no way to increase the system partition size - is
> there a way of adding unused space to the system partition or recreating
> the
> system partition to another drive? The server is SCSI RAID5, and I'm just
> about to install an additional array of 3 drives in it, so now would be a
> good time to reorganise the storage if it's possible.
>
> Would it be sensible to try reinstalling the system from scratch on the
> new
> drive, using a larger system partition (how big?), and restoring our data
> into that new installation from backup?
>
> Best regards
> Nik
>
>
|
|
Hi Les:
[Quoted Text] > What anti-virus application do you have installed?
Sophos.
>I've noticed similar
> behaviour with Trend CSM on very tight system partitions.
>There may be some
> relief, but it's only a temporary measure as it's really hard to keep
enough
> free space on a 12 gb system partition.
Last night, after moving the scheduled tasks as Terence suggested, the
problem recurred - but more severely. I suspect that one of the scheduled
tasks which I moved was limiting the damage, not causing it!
But I have nailed down where the disc space is going - it's filling up with
this SQL logfile:
C:\Program Files\Microsoft SQL
Server\MSSQL$SBSMONITORING\Data\SBSMonitoring_log.LDF
Once I shrink that dB, I get my 2.5Gb of space back - until tomorrow.
Any idea why this might be happening? Both our backup and our AV software
use SQL dBs - but does the fact that this is the SBSMonitoring dB still
suggest that a 3rd-party app is responsible? Is there any tool in SBS which
I can use to look at this logfile?
> So in the end, you'll need to resize c: anyway. You should find lots of
hits
> on resizing if you do a google search of this newsgroup. A disk imaging
> product is your best bet for this task.
Thanks, I'll check it out.
Regards
Nik
>
> --
> Les Connor [SBS MVP]
>
>
> "nik" <nik_AT_cict.co.uk> wrote in message
> news:%23Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
> > Hi Terence: many thanks for your detailed and informative reply.
> >
> >>
> >> According to your description, I understand that your SBS system
> >> partition
> >> free space disappear at every 03:00. If I have misunderstood the
problem,
> >> please don't hesitate to let me know.
> >
> > Mostly correct, though on a small minority of days, the issue simply
> > doesn't
> > happen. There seems to be no pattern to this.
> >
> > What's especially strange is that the free space usually comes back
again
> > within a couple of hours, and when it disappears, it doesn't show up in
> > file/folder sizes on the drive at that time.
> >
> >> Based on my research, I think this issue relate to 3rd-party software
or
> >> some scheduled tasks running on SBS.
> >
> > I had suspcisions about the Backup Exec backup software we use, but I
> > stopped all Backup Exec services yesterday evevning, and the problem
still
> > recurred last night. There's no other 3rd-party software running on a
> > schedule AFAIK - and there's certainly nothing coming up in the event
> > logs.
> >
> >>I suggest we try the following steps
> >> to see if we can resolve this issue:
> >>
> >> 1. Please check the scheduled tasks running on SBS
> >>
> >> a. Please open control panel->Scheduled Tasks
> >>
> >> b. Please check whether some scheduled tasks' Next Run time is nearby
> > 03:00
> >
> > Nothing is scheduled to run specifically at 03:00. The only scheduled
> > tasks
> > are:
> >
> > Collect Server Performance Data (every hour)
> > Collect Usage Data (Daily at 04:30)
> > File_Backup (disabled, as we have 3rd party backup software)
> > Small Business Server - Server Status Report - Server Performance Report
> > (daily at 06:00)
> >
> > I guess that means that the Collect Server Performance Data will run at
> > 03:00 though... I'll try moving the tasks tonight.
> >
> >>
> >> c. Please move all scheduled tasks to another folder, the tasks will do
> > not
> >> run, then monitor the SBS at 03:00
> >>
> >> d. If the issue persists, we can move all scheduled tasks back.
> >>
> >> 2. Please do clean boot on SBS and monitor to narrow down this issue
> >
> > I will try this option over the next couple of days, but as other folks
> > here
> > have observed, SBS tends to be a single-server setup, so it can be
> > difficult
> > to get maintenance time when there are problems. OK, not many people
want
> > to work at 3am, but then again, neither do I. :-)
> >
> >>
> >> 3. For SBS 2003 server, the 2.5GB free space in system partition is too
> >> little. I suggest you move some data or folders from system partition
to
> >> additional partition or disk. This will make SBS run smooth.
> >
> > Tell me about it - but when I installed this system in 2004, 12Gb was
the
> > system partition size recommended by Microsoft for our server. It's now
> > hopelessly inadequate, even though I've moved all the data files which
> > Technet articles suggest moving. We have more drive space available on
> > the
> > machine, but I know of no way to increase the system partition size - is
> > there a way of adding unused space to the system partition or recreating
> > the
> > system partition to another drive? The server is SCSI RAID5, and I'm
just
> > about to install an additional array of 3 drives in it, so now would be
a
> > good time to reorganise the storage if it's possible.
> >
> > Would it be sensible to try reinstalling the system from scratch on the
> > new
> > drive, using a larger system partition (how big?), and restoring our
data
> > into that new installation from backup?
> >
> > Best regards
> > Nik
> >
> >
>
|
|
Hello Nik,
Thank you for your kind update.
Part 1: Per my knowledge, we have several methods to migrate SBS 2003
Server on a new hardware.
1. To move an SBS 2003 installation to a new hardware, you can refer to the
following article that you founded:
Migrating from Small Business Server 2000 or Windows 2000 Server to Windows
Small Business Server 2003
(http://download.microsoft.com/download/6/d/c/6dccf9b4-d915-4c95-b5af-100b89
e02add/SBS_MigratingSBS2k.doc)
Note: Although this white paper is described to migrate from w2k or SBS
2000 to SBS 2003, you can use it in your scenario.
2. You could also try a disaster recovery. You would manually backup the
data, reinstall the server with original domain and server name. Restore
the data and then rejoin the workstations into the domain. If you go with
this method, you should do a lot of stuff manually.
3. Although KB884453 does not intend to provide a migration solution, you
may try the method that described in the KB to migrate SBS Server:
884453 How to install Small Business Server 2003 in an existing Active
Directory domain
http://support.microsoft.com/?id=884453
4. Also we can swing the SBS Server to achieve your goal.
The steps on http:/ www.swingmigration.com/ are detailed; however, we still
recommend you do a backup prior to beginning. In case the procedure fails,
we can restore the System to the original status. Since it is a third-party
method, the suggestions on it are not officially supported. As my personal
experience, it is easy to follow and efficient.
NOTE: This response contains a reference to a third party World Wide Web
site. Microsoft is providing this information as a convenience to you.
Microsoft does not control these sites and has not tested any software or
information found on these sites; therefore, Microsoft cannot make any
representations regarding the quality, safety, or suitability of any
software or information found there. There are inherent dangers in the use
of any software found on the Internet, and Microsoft cautions you to make
sure that you completely understand the risk before retrieving any software
from the Internet.
Part 2: Since you find the C:\Program Files\Microsoft SQL
Server\MSSQL$SBSMONITORING\Data\SBSMonitoring_log.LDF fill the free space,
I suggest:
1. Please except this folder from the antivirus real-time scan list.
2. The SBS monitoring component may corrupted, we can try to reinstall it
to see if we can resolve this issue:
Reinstall monitoring component
================
Note: Please make a full backup of the SBS 2003 server before the following
steps.
I. Uninstall Monitoring
a. Click Start, click Control Panel, and then click Add or Remove
Programs.
b. Select Windows Small Business Server 2003 and then click
Change/Remove. The Setup Wizard appears.
c. Click Next to start the wizard.
d. On the Windows Configuration page, click Next.
e. On the Component Selection page, in the Action column, change
Server Tools to Maintenance, change Monitoring component to Remove, and
then click Next.
f. On the Component Summary page, click Next.
g. Click Finish.
II. Uninstall Microsoft SQL Server Desktop Engine (SBSMONITORING)
In Add or Remove Programs, select Microsoft SQL Server Desktop Engine
(SBSMONITORING) and then click Remove. A dialog box appears. To confirm
that you want to remove, click Yes.
III. Rename the folder
Start Windows Explorer, and then locate and rename the following folder:
C:\Program Files\Microsoft SQL Server\MSSQL$SBSMONITORING
to C:\Program Files\Microsoft SQL Server\Old.MSSQL$SBSMONITORING
IV. Use Registry Editor to delete the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\SmallBusinessServer\Monitoring
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\SBSMonitoring
V. Install the Monitoring component
a. In Add or Remove Programs, select Windows Small Business Server
2003 and then click Change/Remove. The Setup Wizard appears.
b. Click Next.
c. On the Windows Configuration page, click Next.
d. On the Component Selection page, in the Action column, change
Server Tools to Maintenance, change Monitoring component to Install, and
then click Next.
e. On the Logon Information page, click Next.
f. On the Component Summary page, click Next.
g. Click Finish.
Hope these steps will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "nik" <nik_AT_cict.co.uk>
| References: <eKPwf89tHHA.576[ at ]TK2MSFTNGP03.phx.gbl>
<bTr#urGuHHA.3972[ at ]TK2MSFTNGHUB02.phx.gbl>
<#Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl>
<E7F94CEE-09CA-4D88-A5CE-C3589C49587F[ at ]microsoft.com>
| Subject: Re: Disappearing disk space?
| Date: Thu, 28 Jun 2007 10:33:04 +0100
| Lines: 148
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1807
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
| Message-ID: <#BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: ctmd.demon.co.uk 80.176.224.181
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:46879
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Les:
|
| > What anti-virus application do you have installed?
|
| Sophos.
|
| >I've noticed similar
| > behaviour with Trend CSM on very tight system partitions.
| >There may be some
| > relief, but it's only a temporary measure as it's really hard to keep
| enough
| > free space on a 12 gb system partition.
|
| Last night, after moving the scheduled tasks as Terence suggested, the
| problem recurred - but more severely. I suspect that one of the scheduled
| tasks which I moved was limiting the damage, not causing it!
|
| But I have nailed down where the disc space is going - it's filling up
with
| this SQL logfile:
| C:\Program Files\Microsoft SQL
| Server\MSSQL$SBSMONITORING\Data\SBSMonitoring_log.LDF
| Once I shrink that dB, I get my 2.5Gb of space back - until tomorrow.
|
| Any idea why this might be happening? Both our backup and our AV software
| use SQL dBs - but does the fact that this is the SBSMonitoring dB still
| suggest that a 3rd-party app is responsible? Is there any tool in SBS
which
| I can use to look at this logfile?
|
| > So in the end, you'll need to resize c: anyway. You should find lots of
| hits
| > on resizing if you do a google search of this newsgroup. A disk imaging
| > product is your best bet for this task.
|
| Thanks, I'll check it out.
|
| Regards
| Nik
|
| >
| > --
| > Les Connor [SBS MVP]
| >
| >
| > "nik" <nik_AT_cict.co.uk> wrote in message
| > news:%23Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
| > > Hi Terence: many thanks for your detailed and informative reply.
| > >
| > >>
| > >> According to your description, I understand that your SBS system
| > >> partition
| > >> free space disappear at every 03:00. If I have misunderstood the
| problem,
| > >> please don't hesitate to let me know.
| > >
| > > Mostly correct, though on a small minority of days, the issue simply
| > > doesn't
| > > happen. There seems to be no pattern to this.
| > >
| > > What's especially strange is that the free space usually comes back
| again
| > > within a couple of hours, and when it disappears, it doesn't show up
in
| > > file/folder sizes on the drive at that time.
| > >
| > >> Based on my research, I think this issue relate to 3rd-party software
| or
| > >> some scheduled tasks running on SBS.
| > >
| > > I had suspcisions about the Backup Exec backup software we use, but I
| > > stopped all Backup Exec services yesterday evevning, and the problem
| still
| > > recurred last night. There's no other 3rd-party software running on a
| > > schedule AFAIK - and there's certainly nothing coming up in the event
| > > logs.
| > >
| > >>I suggest we try the following steps
| > >> to see if we can resolve this issue:
| > >>
| > >> 1. Please check the scheduled tasks running on SBS
| > >>
| > >> a. Please open control panel->Scheduled Tasks
| > >>
| > >> b. Please check whether some scheduled tasks' Next Run time is nearby
| > > 03:00
| > >
| > > Nothing is scheduled to run specifically at 03:00. The only scheduled
| > > tasks
| > > are:
| > >
| > > Collect Server Performance Data (every hour)
| > > Collect Usage Data (Daily at 04:30)
| > > File_Backup (disabled, as we have 3rd party backup software)
| > > Small Business Server - Server Status Report - Server Performance
Report
| > > (daily at 06:00)
| > >
| > > I guess that means that the Collect Server Performance Data will run
at
| > > 03:00 though... I'll try moving the tasks tonight.
| > >
| > >>
| > >> c. Please move all scheduled tasks to another folder, the tasks will
do
| > > not
| > >> run, then monitor the SBS at 03:00
| > >>
| > >> d. If the issue persists, we can move all scheduled tasks back.
| > >>
| > >> 2. Please do clean boot on SBS and monitor to narrow down this issue
| > >
| > > I will try this option over the next couple of days, but as other
folks
| > > here
| > > have observed, SBS tends to be a single-server setup, so it can be
| > > difficult
| > > to get maintenance time when there are problems. OK, not many people
| want
| > > to work at 3am, but then again, neither do I. :-)
| > >
| > >>
| > >> 3. For SBS 2003 server, the 2.5GB free space in system partition is
too
| > >> little. I suggest you move some data or folders from system partition
| to
| > >> additional partition or disk. This will make SBS run smooth.
| > >
| > > Tell me about it - but when I installed this system in 2004, 12Gb was
| the
| > > system partition size recommended by Microsoft for our server. It's
now
| > > hopelessly inadequate, even though I've moved all the data files which
| > > Technet articles suggest moving. We have more drive space available
on
| > > the
| > > machine, but I know of no way to increase the system partition size -
is
| > > there a way of adding unused space to the system partition or
recreating
| > > the
| > > system partition to another drive? The server is SCSI RAID5, and I'm
| just
| > > about to install an additional array of 3 drives in it, so now would
be
| a
| > > good time to reorganise the storage if it's possible.
| > >
| > > Would it be sensible to try reinstalling the system from scratch on
the
| > > new
| > > drive, using a larger system partition (how big?), and restoring our
| data
| > > into that new installation from backup?
| > >
| > > Best regards
| > > Nik
| > >
| > >
| >
|
|
|
|
|
As a test, temporarily disable A/V file space scanning on the system drive.
There are a number of files, file types, and folders that should be excluded
from A/V scanning. Because SBS does lots of things, the list is longer than
on any other system.
SQL (or any database, for that example) should not be scanned, same for
Exchange, and some of the folders pertaining to the DC function.
--
Les Connor [SBS MVP]
"nik" <nik_AT_cict.co.uk> wrote in message
news:%23BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl...
[Quoted Text] > Hi Les:
>
>> What anti-virus application do you have installed?
>
> Sophos.
>
>>I've noticed similar
>> behaviour with Trend CSM on very tight system partitions.
>>There may be some
>> relief, but it's only a temporary measure as it's really hard to keep
> enough
>> free space on a 12 gb system partition.
>
> Last night, after moving the scheduled tasks as Terence suggested, the
> problem recurred - but more severely. I suspect that one of the scheduled
> tasks which I moved was limiting the damage, not causing it!
>
> But I have nailed down where the disc space is going - it's filling up
> with
> this SQL logfile:
> C:\Program Files\Microsoft SQL
> Server\MSSQL$SBSMONITORING\Data\SBSMonitoring_log.LDF
> Once I shrink that dB, I get my 2.5Gb of space back - until tomorrow.
>
> Any idea why this might be happening? Both our backup and our AV software
> use SQL dBs - but does the fact that this is the SBSMonitoring dB still
> suggest that a 3rd-party app is responsible? Is there any tool in SBS
> which
> I can use to look at this logfile?
>
>> So in the end, you'll need to resize c: anyway. You should find lots of
> hits
>> on resizing if you do a google search of this newsgroup. A disk imaging
>> product is your best bet for this task.
>
> Thanks, I'll check it out.
>
> Regards
> Nik
>
>>
>> --
>> Les Connor [SBS MVP]
>>
>>
>> "nik" <nik_AT_cict.co.uk> wrote in message
>> news:%23Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
>> > Hi Terence: many thanks for your detailed and informative reply.
>> >
>> >>
>> >> According to your description, I understand that your SBS system
>> >> partition
>> >> free space disappear at every 03:00. If I have misunderstood the
> problem,
>> >> please don't hesitate to let me know.
>> >
>> > Mostly correct, though on a small minority of days, the issue simply
>> > doesn't
>> > happen. There seems to be no pattern to this.
>> >
>> > What's especially strange is that the free space usually comes back
> again
>> > within a couple of hours, and when it disappears, it doesn't show up in
>> > file/folder sizes on the drive at that time.
>> >
>> >> Based on my research, I think this issue relate to 3rd-party software
> or
>> >> some scheduled tasks running on SBS.
>> >
>> > I had suspcisions about the Backup Exec backup software we use, but I
>> > stopped all Backup Exec services yesterday evevning, and the problem
> still
>> > recurred last night. There's no other 3rd-party software running on a
>> > schedule AFAIK - and there's certainly nothing coming up in the event
>> > logs.
>> >
>> >>I suggest we try the following steps
>> >> to see if we can resolve this issue:
>> >>
>> >> 1. Please check the scheduled tasks running on SBS
>> >>
>> >> a. Please open control panel->Scheduled Tasks
>> >>
>> >> b. Please check whether some scheduled tasks' Next Run time is nearby
>> > 03:00
>> >
>> > Nothing is scheduled to run specifically at 03:00. The only scheduled
>> > tasks
>> > are:
>> >
>> > Collect Server Performance Data (every hour)
>> > Collect Usage Data (Daily at 04:30)
>> > File_Backup (disabled, as we have 3rd party backup software)
>> > Small Business Server - Server Status Report - Server Performance
>> > Report
>> > (daily at 06:00)
>> >
>> > I guess that means that the Collect Server Performance Data will run at
>> > 03:00 though... I'll try moving the tasks tonight.
>> >
>> >>
>> >> c. Please move all scheduled tasks to another folder, the tasks will
>> >> do
>> > not
>> >> run, then monitor the SBS at 03:00
>> >>
>> >> d. If the issue persists, we can move all scheduled tasks back.
>> >>
>> >> 2. Please do clean boot on SBS and monitor to narrow down this issue
>> >
>> > I will try this option over the next couple of days, but as other folks
>> > here
>> > have observed, SBS tends to be a single-server setup, so it can be
>> > difficult
>> > to get maintenance time when there are problems. OK, not many people
> want
>> > to work at 3am, but then again, neither do I. :-)
>> >
>> >>
>> >> 3. For SBS 2003 server, the 2.5GB free space in system partition is
>> >> too
>> >> little. I suggest you move some data or folders from system partition
> to
>> >> additional partition or disk. This will make SBS run smooth.
>> >
>> > Tell me about it - but when I installed this system in 2004, 12Gb was
> the
>> > system partition size recommended by Microsoft for our server. It's
>> > now
>> > hopelessly inadequate, even though I've moved all the data files which
>> > Technet articles suggest moving. We have more drive space available on
>> > the
>> > machine, but I know of no way to increase the system partition size -
>> > is
>> > there a way of adding unused space to the system partition or
>> > recreating
>> > the
>> > system partition to another drive? The server is SCSI RAID5, and I'm
> just
>> > about to install an additional array of 3 drives in it, so now would be
> a
>> > good time to reorganise the storage if it's possible.
>> >
>> > Would it be sensible to try reinstalling the system from scratch on the
>> > new
>> > drive, using a larger system partition (how big?), and restoring our
> data
>> > into that new installation from backup?
>> >
>> > Best regards
>> > Nik
>> >
>> >
>>
>
>
|
|
Hi Les: thanks for this response.
"Les Connor [SBS MVP]" <les.connor[ at ]DEL.cfive.ca> wrote in message
news:9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com...
[Quoted Text] > As a test, temporarily disable A/V file space scanning on the system
drive.
I noted this when I was looking at the docs for moving data folders, and
most of the 3 years that the server has been running happily, it's run
without any AV - it's NATted and isn't used for client email or by users,
so I used to feel OK about leaving out the AV. But I lost my nerve a few
months ago and installed it. :-) So it sounds like the AV is the problem -
though I would be interested to understand more about why.
>
> There are a number of files, file types, and folders that should be
excluded
> from A/V scanning. Because SBS does lots of things, the list is longer
than
> on any other system.
>
> SQL (or any database, for that example) should not be scanned, same for
> Exchange, and some of the folders pertaining to the DC function.
Is there anywhere I can obtain a complete list of folders to exclude? I
assume that you mean data folders for the db and Exchange, rather than
binaries?
I already excluded the particular folder with the problem logfile in it, but
I'll try suspending the AV overnight and see if that cures it.
Thanks
Nik
>
> --
> Les Connor [SBS MVP]
>
>
> "nik" <nik_AT_cict.co.uk> wrote in message
> news:%23BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl...
> > Hi Les:
> >
> >> What anti-virus application do you have installed?
> >
> > Sophos.
> >
> >>I've noticed similar
> >> behaviour with Trend CSM on very tight system partitions.
> >>There may be some
> >> relief, but it's only a temporary measure as it's really hard to keep
> > enough
> >> free space on a 12 gb system partition.
> >
> > Last night, after moving the scheduled tasks as Terence suggested, the
> > problem recurred - but more severely. I suspect that one of the
scheduled
> > tasks which I moved was limiting the damage, not causing it!
> >
> > But I have nailed down where the disc space is going - it's filling up
> > with
> > this SQL logfile:
> > C:\Program Files\Microsoft SQL
> > Server\MSSQL$SBSMONITORING\Data\SBSMonitoring_log.LDF
> > Once I shrink that dB, I get my 2.5Gb of space back - until tomorrow.
> >
> > Any idea why this might be happening? Both our backup and our AV
software
> > use SQL dBs - but does the fact that this is the SBSMonitoring dB still
> > suggest that a 3rd-party app is responsible? Is there any tool in SBS
> > which
> > I can use to look at this logfile?
> >
> >> So in the end, you'll need to resize c: anyway. You should find lots of
> > hits
> >> on resizing if you do a google search of this newsgroup. A disk imaging
> >> product is your best bet for this task.
> >
> > Thanks, I'll check it out.
> >
> > Regards
> > Nik
> >
> >>
> >> --
> >> Les Connor [SBS MVP]
> >>
> >>
> >> "nik" <nik_AT_cict.co.uk> wrote in message
> >> news:%23Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
> >> > Hi Terence: many thanks for your detailed and informative reply.
> >> >
> >> >>
> >> >> According to your description, I understand that your SBS system
> >> >> partition
> >> >> free space disappear at every 03:00. If I have misunderstood the
> > problem,
> >> >> please don't hesitate to let me know.
> >> >
> >> > Mostly correct, though on a small minority of days, the issue simply
> >> > doesn't
> >> > happen. There seems to be no pattern to this.
> >> >
> >> > What's especially strange is that the free space usually comes back
> > again
> >> > within a couple of hours, and when it disappears, it doesn't show up
in
> >> > file/folder sizes on the drive at that time.
> >> >
> >> >> Based on my research, I think this issue relate to 3rd-party
software
> > or
> >> >> some scheduled tasks running on SBS.
> >> >
> >> > I had suspcisions about the Backup Exec backup software we use, but I
> >> > stopped all Backup Exec services yesterday evevning, and the problem
> > still
> >> > recurred last night. There's no other 3rd-party software running on
a
> >> > schedule AFAIK - and there's certainly nothing coming up in the event
> >> > logs.
> >> >
> >> >>I suggest we try the following steps
> >> >> to see if we can resolve this issue:
> >> >>
> >> >> 1. Please check the scheduled tasks running on SBS
> >> >>
> >> >> a. Please open control panel->Scheduled Tasks
> >> >>
> >> >> b. Please check whether some scheduled tasks' Next Run time is
nearby
> >> > 03:00
> >> >
> >> > Nothing is scheduled to run specifically at 03:00. The only
scheduled
> >> > tasks
> >> > are:
> >> >
> >> > Collect Server Performance Data (every hour)
> >> > Collect Usage Data (Daily at 04:30)
> >> > File_Backup (disabled, as we have 3rd party backup software)
> >> > Small Business Server - Server Status Report - Server Performance
> >> > Report
> >> > (daily at 06:00)
> >> >
> >> > I guess that means that the Collect Server Performance Data will run
at
> >> > 03:00 though... I'll try moving the tasks tonight.
> >> >
> >> >>
> >> >> c. Please move all scheduled tasks to another folder, the tasks will
> >> >> do
> >> > not
> >> >> run, then monitor the SBS at 03:00
> >> >>
> >> >> d. If the issue persists, we can move all scheduled tasks back.
> >> >>
> >> >> 2. Please do clean boot on SBS and monitor to narrow down this issue
> >> >
> >> > I will try this option over the next couple of days, but as other
folks
> >> > here
> >> > have observed, SBS tends to be a single-server setup, so it can be
> >> > difficult
> >> > to get maintenance time when there are problems. OK, not many people
> > want
> >> > to work at 3am, but then again, neither do I. :-)
> >> >
> >> >>
> >> >> 3. For SBS 2003 server, the 2.5GB free space in system partition is
> >> >> too
> >> >> little. I suggest you move some data or folders from system
partition
> > to
> >> >> additional partition or disk. This will make SBS run smooth.
> >> >
> >> > Tell me about it - but when I installed this system in 2004, 12Gb was
> > the
> >> > system partition size recommended by Microsoft for our server. It's
> >> > now
> >> > hopelessly inadequate, even though I've moved all the data files
which
> >> > Technet articles suggest moving. We have more drive space available
on
> >> > the
> >> > machine, but I know of no way to increase the system partition size -
> >> > is
> >> > there a way of adding unused space to the system partition or
> >> > recreating
> >> > the
> >> > system partition to another drive? The server is SCSI RAID5, and I'm
> > just
> >> > about to install an additional array of 3 drives in it, so now would
be
> > a
> >> > good time to reorganise the storage if it's possible.
> >> >
> >> > Would it be sensible to try reinstalling the system from scratch on
the
> >> > new
> >> > drive, using a larger system partition (how big?), and restoring our
> > data
> >> > into that new installation from backup?
> >> >
> >> > Best regards
> >> > Nik
> >> >
> >> >
> >>
> >
> >
>
|
|
Hello Nik,
For your concern about: Is there anywhere I can obtain a complete list of
folders to exclude?
We do not have a complete list of the exceptions folders, however, you can
refer to the following lists:
Consider the following file scanning exceptions for your Anti-Virus
software where applicable:
NOTE: The %systemroot% is normally the C:\WINDOWS or C:\WINNT directory
depending on your OS.
1.) %systemroot%\System32\Spool (and all the sub-folders and files)
2.) %systemroot%\SoftwareDistribution\Datastore
Refer to the following article for information:
KB822158 - Virus scanning recommendations for computers that are running
Windows Server 2003, Windows 2000, or Windows XP
http://support.microsoft.com/kb/822158
3.) Any Network Drives that are mapped.
The following steps are Server Role specific:
==========================================================
1.) If your system is also a Domain Controller (DC) / DNS / DHCP also
exclude the following from Anti-Virus Scanning:
a.) %systemroot%\Sysvol folder (include all the sub-folders and files)
b.) %systemroot%\system32\dhcp folder (include all the sub-folders and
files)
c.) %systemroot%\system32\dns folder (include all the sub-folders and
files)
d.) %systemroot%\ntds
Refer to the following article for information:
KB822158 - Virus scanning recommendations for computers that are running
Windows Server 2003, Windows 2000, or Windows XP
http://support.microsoft.com/kb/822158
2.) If File Replication (NTFR) service is running on your system, make sure
your Anti-Virus software is compatible:
KB815263 - Antivirus, backup, and disk optimization programs that are
compatible with the File Replication Service
http://support.microsoft.com/kb/815263
And exclude:
a.) %systemroot%\ntfrs folder (include all the sub-folders and files)
b.) Files that have the .log and .dit extension
3.) If you have IIS installed, exclude:
a.) The IIS compression directory (default compression directory is
%systemroot%\IIS Temporary Compressed Files)
b.) %systemroot%\system32\inetsrv folder
c.) Files that have the .log extension
Refer to the following knowledge base articles for reference:
KB817442 - IIS 6.0: Antivirus Scanning of IIS Compression Directory May
Result in 0-Byte File
http://support.microsoft.com/kb/817442
KB821749 - Antivirus software may cause IIS to stop unexpectedly
http://support.microsoft.com/kb/821749
4.) If you have SQL installed, you may want to exclude the SQL folder and
databases files (or database file types) from scanning for performance
reasons:
KB309422 - Guidelines for choosing antivirus software to run on the
computers that are running SQL Server
http://support.microsoft.com/kb/309422
5.) If you have Exchange installed, perform the relevant file-based
scanning exclusions listed in Knowledge Base articles:
KB328841 - Exchange and antivirus software
http://support.microsoft.com/kb/328841
KB823166 - Overview of Exchange Server 2003 and antivirus software
http://support.microsoft.com/kb/823166
KB245822 - Recommendations for troubleshooting an Exchange Server computer
with antivirus software installed
http://support.microsoft.com/kb/245822
6.) If you have Cluster services, make sure your Anti-Virus software is
compatible:
KB250355 - Antivirus Software May Cause Problems with Cluster Services
http://support.microsoft.com/kb/250355
NOTE: If you have a SQL cluster, make sure that you exclude these locations
from virus scanning:
a.) Q:\ (Quorum drive)
b.) %systemroot%\Cluster
c.) SQL Server data files that have the .mdf extension, the .ldf extension,
and the .ndf extension
7.) If you have Sharepoint installed, you should exclude:
a.) Drive:\Program Files\SharePoint Portal Server
b.) Drive:\Program Files\Common Files\Microsoft Shared\Web Storage System
c.) Drive:\MSDEDatabases (particularly on SBS)
(where Drive: is the drive letter where you installed SharePoint Portal
Server)
Refer to the following knowledge base articles for reference:
KB320111 - Random Errors May Occur When Antivirus Software Scans Microsoft
Web Storage System
http://support.microsoft.com/kb/320111
KB322941 - Microsoft's Position on Antivirus Solutions for Microsoft
SharePoint Portal Server
http://support.microsoft.com/kb/322941
8.) If you have a Systems Management Server (SMS), you should exclude
folders:
a.) SMS\Inboxes
b.) SMS_CCM\ServiceData
Refer to the following knowledge base articles for reference:
KB327453 - Antivirus programs may contribute to file backlogs in SMS 2.0
and in SMS 2003
http://support.microsoft.com/kb/327453
NOTE: If you exclude the SMS\Inboxes directory from virus scanning or
remove the antivirus software, you may make the site server and all clients
vulnerable to potential virus risks. The client base component files reside
in the SMS\Inboxes directory.
9.) If you have a MOM (Microsoft Operations Manager) Server, you consider
excluding:
a.) Drive:\Documents and Settings\All Users\Application
Data\Microsoft\Microsoft Operations Manager
b.) Drive:\Program Files\Microsoft Operations Manager 2005
(where Drive: is the drive letter where profiles are located)
10.) If you have an Internet Security and Acceleration Server (ISA) Server,
you should exclude:
a.) The ISALogs folder. By default, the ISALogs folder is located in the
folder where you installed ISA Server. Typically, this location is
Drive:\Program Files\Microsoft ISA Server.
Refer to the following knowledge base articles for reference:
KB887311 - Event ID 5, event ID 14079, and event ID 14176 are logged in the
Application log on your Internet Security and Acceleration Server 2000
computer
http://support.microsoft.com/kb/887311
11.) If you have a Windows Software Update Services (WSUS) Server role, you
consider excluding:
a.) Drive:\MSSQL$WSUS
b.) Drive:\WSUS
(where Drive: is the drive letter where you installed Windows Software
Update Services)
Also refer to the following knowledge base articles for reference:
KB900638 - Multiple symptoms occur if an antivirus scan occurs while the
Wsusscan.cab file is copied
http://support.microsoft.com/kb/900638
MORE INFORMATION:
KB49500 - List of antivirus software vendors
http://support.microsoft.com/kb/49500
KB129972 - Computer viruses: description, prevention, and recovery
http://support.microsoft.com/kb/129972
Hope the info will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "nik" <nik_AT_cict.co.uk>
| References: <eKPwf89tHHA.576[ at ]TK2MSFTNGP03.phx.gbl>
<bTr#urGuHHA.3972[ at ]TK2MSFTNGHUB02.phx.gbl>
<#Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl>
<E7F94CEE-09CA-4D88-A5CE-C3589C49587F[ at ]microsoft.com>
<#BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl>
<9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com>
| Subject: Re: Disappearing disk space?
| Date: Thu, 28 Jun 2007 21:29:31 +0100
| Lines: 214
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1807
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
| Message-ID: <eQUbMMcuHHA.3660[ at ]TK2MSFTNGP06.phx.gbl>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: ctmd.demon.co.uk 80.176.224.181
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:47044
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Les: thanks for this response.
|
| "Les Connor [SBS MVP]" <les.connor[ at ]DEL.cfive.ca> wrote in message
| news:9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com...
| > As a test, temporarily disable A/V file space scanning on the system
| drive.
|
| I noted this when I was looking at the docs for moving data folders, and
| most of the 3 years that the server has been running happily, it's run
| without any AV - it's NATted and isn't used for client email or by users,
| so I used to feel OK about leaving out the AV. But I lost my nerve a few
| months ago and installed it. :-) So it sounds like the AV is the
problem -
| though I would be interested to understand more about why.
|
| >
| > There are a number of files, file types, and folders that should be
| excluded
| > from A/V scanning. Because SBS does lots of things, the list is longer
| than
| > on any other system.
| >
| > SQL (or any database, for that example) should not be scanned, same for
| > Exchange, and some of the folders pertaining to the DC function.
|
| Is there anywhere I can obtain a complete list of folders to exclude? I
| assume that you mean data folders for the db and Exchange, rather than
| binaries?
|
| I already excluded the particular folder with the problem logfile in it,
but
| I'll try suspending the AV overnight and see if that cures it.
|
| Thanks
| Nik
|
| >
| > --
| > Les Connor [SBS MVP]
| >
| >
| > "nik" <nik_AT_cict.co.uk> wrote in message
| > news:%23BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl...
| > > Hi Les:
| > >
| > >> What anti-virus application do you have installed?
| > >
| > > Sophos.
| > >
| > >>I've noticed similar
| > >> behaviour with Trend CSM on very tight system partitions.
| > >>There may be some
| > >> relief, but it's only a temporary measure as it's really hard to keep
| > > enough
| > >> free space on a 12 gb system partition.
| > >
| > > Last night, after moving the scheduled tasks as Terence suggested, the
| > > problem recurred - but more severely. I suspect that one of the
| scheduled
| > > tasks which I moved was limiting the damage, not causing it!
| > >
| > > But I have nailed down where the disc space is going - it's filling up
| > > with
| > > this SQL logfile:
| > > C:\Program Files\Microsoft SQL
| > > Server\MSSQL$SBSMONITORING\Data\SBSMonitoring_log.LDF
| > > Once I shrink that dB, I get my 2.5Gb of space back - until tomorrow.
| > >
| > > Any idea why this might be happening? Both our backup and our AV
| software
| > > use SQL dBs - but does the fact that this is the SBSMonitoring dB
still
| > > suggest that a 3rd-party app is responsible? Is there any tool in SBS
| > > which
| > > I can use to look at this logfile?
| > >
| > >> So in the end, you'll need to resize c: anyway. You should find lots
of
| > > hits
| > >> on resizing if you do a google search of this newsgroup. A disk
imaging
| > >> product is your best bet for this task.
| > >
| > > Thanks, I'll check it out.
| > >
| > > Regards
| > > Nik
| > >
| > >>
| > >> --
| > >> Les Connor [SBS MVP]
| > >>
| > >>
| > >> "nik" <nik_AT_cict.co.uk> wrote in message
| > >> news:%23Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
| > >> > Hi Terence: many thanks for your detailed and informative reply.
| > >> >
| > >> >>
| > >> >> According to your description, I understand that your SBS system
| > >> >> partition
| > >> >> free space disappear at every 03:00. If I have misunderstood the
| > > problem,
| > >> >> please don't hesitate to let me know.
| > >> >
| > >> > Mostly correct, though on a small minority of days, the issue
simply
| > >> > doesn't
| > >> > happen. There seems to be no pattern to this.
| > >> >
| > >> > What's especially strange is that the free space usually comes back
| > > again
| > >> > within a couple of hours, and when it disappears, it doesn't show
up
| in
| > >> > file/folder sizes on the drive at that time.
| > >> >
| > >> >> Based on my research, I think this issue relate to 3rd-party
| software
| > > or
| > >> >> some scheduled tasks running on SBS.
| > >> >
| > >> > I had suspcisions about the Backup Exec backup software we use,
but I
| > >> > stopped all Backup Exec services yesterday evevning, and the
problem
| > > still
| > >> > recurred last night. There's no other 3rd-party software running
on
| a
| > >> > schedule AFAIK - and there's certainly nothing coming up in the
event
| > >> > logs.
| > >> >
| > >> >>I suggest we try the following steps
| > >> >> to see if we can resolve this issue:
| > >> >>
| > >> >> 1. Please check the scheduled tasks running on SBS
| > >> >>
| > >> >> a. Please open control panel->Scheduled Tasks
| > >> >>
| > >> >> b. Please check whether some scheduled tasks' Next Run time is
| nearby
| > >> > 03:00
| > >> >
| > >> > Nothing is scheduled to run specifically at 03:00. The only
| scheduled
| > >> > tasks
| > >> > are:
| > >> >
| > >> > Collect Server Performance Data (every hour)
| > >> > Collect Usage Data (Daily at 04:30)
| > >> > File_Backup (disabled, as we have 3rd party backup software)
| > >> > Small Business Server - Server Status Report - Server Performance
| > >> > Report
| > >> > (daily at 06:00)
| > >> >
| > >> > I guess that means that the Collect Server Performance Data will
run
| at
| > >> > 03:00 though... I'll try moving the tasks tonight.
| > >> >
| > >> >>
| > >> >> c. Please move all scheduled tasks to another folder, the tasks
will
| > >> >> do
| > >> > not
| > >> >> run, then monitor the SBS at 03:00
| > >> >>
| > >> >> d. If the issue persists, we can move all scheduled tasks back.
| > >> >>
| > >> >> 2. Please do clean boot on SBS and monitor to narrow down this
issue
| > >> >
| > >> > I will try this option over the next couple of days, but as other
| folks
| > >> > here
| > >> > have observed, SBS tends to be a single-server setup, so it can be
| > >> > difficult
| > >> > to get maintenance time when there are problems. OK, not many
people
| > > want
| > >> > to work at 3am, but then again, neither do I. :-)
| > >> >
| > >> >>
| > >> >> 3. For SBS 2003 server, the 2.5GB free space in system partition
is
| > >> >> too
| > >> >> little. I suggest you move some data or folders from system
| partition
| > > to
| > >> >> additional partition or disk. This will make SBS run smooth.
| > >> >
| > >> > Tell me about it - but when I installed this system in 2004, 12Gb
was
| > > the
| > >> > system partition size recommended by Microsoft for our server.
It's
| > >> > now
| > >> > hopelessly inadequate, even though I've moved all the data files
| which
| > >> > Technet articles suggest moving. We have more drive space
available
| on
| > >> > the
| > >> > machine, but I know of no way to increase the system partition
size -
| > >> > is
| > >> > there a way of adding unused space to the system partition or
| > >> > recreating
| > >> > the
| > >> > system partition to another drive? The server is SCSI RAID5, and
I'm
| > > just
| > >> > about to install an additional array of 3 drives in it, so now
would
| be
| > > a
| > >> > good time to reorganise the storage if it's possible.
| > >> >
| > >> > Would it be sensible to try reinstalling the system from scratch on
| the
| > >> > new
| > >> > drive, using a larger system partition (how big?), and restoring
our
| > > data
| > >> > into that new installation from backup?
| > >> >
| > >> > Best regards
| > >> > Nik
| > >> >
| > >> >
| > >>
| > >
| > >
| >
|
|
|
|
|
Hi Terence - thankyou for posting this list, it's very useful information.
However, I switched off the AV scanning completely last night and the
problem recurred, so although I'll reconfigure the scanning according to
your advice, it's now clear that AV activity wasn't causing the huge
SMSMonitoring log. I watched the log build up last night, and it happens
very quickly - 2Gb in about 5 minutes - and I stopped it by rebooting the
server. I have one more experiment to try tonight, and if that doesn't
solve the problem, I'll try reinstalling the monitoring component as you
suggest.
Thanks again for all your suggestions.
Regards
Nik
"Terence Liu [MSFT]" <v-terliu[ at ]online.microsoft.com> wrote in message
news:EnDd%232fuHHA.360[ at ]TK2MSFTNGHUB02.phx.gbl...
[Quoted Text] > Hello Nik, > > For your concern about: Is there anywhere I can obtain a complete list of > folders to exclude? > > We do not have a complete list of the exceptions folders, however, you can > refer to the following lists: > > Consider the following file scanning exceptions for your Anti-Virus > software where applicable: > > NOTE: The %systemroot% is normally the C:\WINDOWS or C:\WINNT directory > depending on your OS. > > 1.) %systemroot%\System32\Spool (and all the sub-folders and files) > 2.) %systemroot%\SoftwareDistribution\Datastore > Refer to the following article for information: > KB822158 - Virus scanning recommendations for computers that are running > Windows Server 2003, Windows 2000, or Windows XP > http://support.microsoft.com/kb/822158> 3.) Any Network Drives that are mapped. > > The following steps are Server Role specific: > ========================================================== > 1.) If your system is also a Domain Controller (DC) / DNS / DHCP also > exclude the following from Anti-Virus Scanning: > a.) %systemroot%\Sysvol folder (include all the sub-folders and files) > b.) %systemroot%\system32\dhcp folder (include all the sub-folders and > files) > c.) %systemroot%\system32\dns folder (include all the sub-folders and > files) > d.) %systemroot%\ntds > Refer to the following article for information: > KB822158 - Virus scanning recommendations for computers that are running > Windows Server 2003, Windows 2000, or Windows XP > http://support.microsoft.com/kb/822158> > 2.) If File Replication (NTFR) service is running on your system, make
> your Anti-Virus software is compatible:
> KB815263 - Antivirus, backup, and disk optimization programs that are
> compatible with the File Replication Service
> http://support.microsoft.com/kb/815263
> And exclude:
> a.) %systemroot%\ntfrs folder (include all the sub-folders and files)
> b.) Files that have the .log and .dit extension
>
> 3.) If you have IIS installed, exclude:
> a.) The IIS compression directory (default compression directory is
> %systemroot%\IIS Temporary Compressed Files)
> b.) %systemroot%\system32\inetsrv folder
> c.) Files that have the .log extension
> Refer to the following knowledge base articles for reference:
> KB817442 - IIS 6.0: Antivirus Scanning of IIS Compression Directory May
> Result in 0-Byte File
> http://support.microsoft.com/kb/817442
> KB821749 - Antivirus software may cause IIS to stop unexpectedly
> http://support.microsoft.com/kb/821749
>
> 4.) If you have SQL installed, you may want to exclude the SQL folder and
> databases files (or database file types) from scanning for performance
> reasons:
> KB309422 - Guidelines for choosing antivirus software to run on the
> computers that are running SQL Server
> http://support.microsoft.com/kb/309422
>
> 5.) If you have Exchange installed, perform the relevant file-based
> scanning exclusions listed in Knowledge Base articles:
> KB328841 - Exchange and antivirus software
> http://support.microsoft.com/kb/328841
> KB823166 - Overview of Exchange Server 2003 and antivirus software
> http://support.microsoft.com/kb/823166
> KB245822 - Recommendations for troubleshooting an Exchange Server computer
> with antivirus software installed
> http://support.microsoft.com/kb/245822
>
> 6.) If you have Cluster services, make sure your Anti-Virus software is
> compatible:
>
> KB250355 - Antivirus Software May Cause Problems with Cluster Services
> http://support.microsoft.com/kb/250355
> NOTE: If you have a SQL cluster, make sure that you exclude these
locations
> from virus scanning:
> a.) Q:\ (Quorum drive)
> b.) %systemroot%\Cluster
> c.) SQL Server data files that have the .mdf extension, the .ldf
extension,
> and the .ndf extension
>
> 7.) If you have Sharepoint installed, you should exclude:
> a.) Drive:\Program Files\SharePoint Portal Server
> b.) Drive:\Program Files\Common Files\Microsoft Shared\Web Storage System
> c.) Drive:\MSDEDatabases (particularly on SBS)
> (where Drive: is the drive letter where you installed SharePoint Portal
> Server)
> Refer to the following knowledge base articles for reference:
> KB320111 - Random Errors May Occur When Antivirus Software Scans Microsoft
> Web Storage System
> http://support.microsoft.com/kb/320111
> KB322941 - Microsoft's Position on Antivirus Solutions for Microsoft
> SharePoint Portal Server
> http://support.microsoft.com/kb/322941
>
> 8.) If you have a Systems Management Server (SMS), you should exclude
> folders:
> a.) SMS\Inboxes
> b.) SMS_CCM\ServiceData
> Refer to the following knowledge base articles for reference:
> KB327453 - Antivirus programs may contribute to file backlogs in SMS 2.0
> and in SMS 2003
> http://support.microsoft.com/kb/327453
> NOTE: If you exclude the SMS\Inboxes directory from virus scanning or
> remove the antivirus software, you may make the site server and all
clients
> vulnerable to potential virus risks. The client base component files
reside
> in the SMS\Inboxes directory.
>
> 9.) If you have a MOM (Microsoft Operations Manager) Server, you consider
> excluding:
> a.) Drive:\Documents and Settings\All Users\Application
> Data\Microsoft\Microsoft Operations Manager
> b.) Drive:\Program Files\Microsoft Operations Manager 2005
> (where Drive: is the drive letter where profiles are located)
>
> 10.) If you have an Internet Security and Acceleration Server (ISA)
Server,
> you should exclude:
> a.) The ISALogs folder. By default, the ISALogs folder is located in the
> folder where you installed ISA Server. Typically, this location is
> Drive:\Program Files\Microsoft ISA Server.
> Refer to the following knowledge base articles for reference:
> KB887311 - Event ID 5, event ID 14079, and event ID 14176 are logged in
the
> Application log on your Internet Security and Acceleration Server 2000
> computer
> http://support.microsoft.com/kb/887311
>
> 11.) If you have a Windows Software Update Services (WSUS) Server role,
you
> consider excluding:
> a.) Drive:\MSSQL$WSUS
> b.) Drive:\WSUS
> (where Drive: is the drive letter where you installed Windows Software
> Update Services)
> Also refer to the following knowledge base articles for reference:
> KB900638 - Multiple symptoms occur if an antivirus scan occurs while the
> Wsusscan.cab file is copied
> http://support.microsoft.com/kb/900638
>
> MORE INFORMATION:
> KB49500 - List of antivirus software vendors
> http://support.microsoft.com/kb/49500
> KB129972 - Computer viruses: description, prevention, and recovery
> http://support.microsoft.com/kb/129972
>
> Hope the info will give you some help.
>
> Thanks and have a nice day!
>
> Best regards,
>
> Terence Liu(MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> --------------------
> | From: "nik" <nik_AT_cict.co.uk>
> | References: <eKPwf89tHHA.576[ at ]TK2MSFTNGP03.phx.gbl>
> <bTr#urGuHHA.3972[ at ]TK2MSFTNGHUB02.phx.gbl>
> <#Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl>
> <E7F94CEE-09CA-4D88-A5CE-C3589C49587F[ at ]microsoft.com>
> <#BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl>
> <9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com>
> | Subject: Re: Disappearing disk space?
> | Date: Thu, 28 Jun 2007 21:29:31 +0100
> | Lines: 214
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2800.1807
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
> | Message-ID: <eQUbMMcuHHA.3660[ at ]TK2MSFTNGP06.phx.gbl>
> | Newsgroups: microsoft.public.windows.server.sbs
> | NNTP-Posting-Host: ctmd.demon.co.uk 80.176.224.181
> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
> | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:47044
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | Hi Les: thanks for this response.
> |
> | "Les Connor [SBS MVP]" <les.connor[ at ]DEL.cfive.ca> wrote in message
> | news:9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com...
> | > As a test, temporarily disable A/V file space scanning on the system
> | drive.
> |
> | I noted this when I was looking at the docs for moving data folders, and
> | most of the 3 years that the server has been running happily, it's run
> | without any AV - it's NATted and isn't used for client email or by
users,
> | so I used to feel OK about leaving out the AV. But I lost my nerve a
few
> | months ago and installed it. :-) So it sounds like the AV is the
> problem -
> | though I would be interested to understand more about why.
> |
> | >
> | > There are a number of files, file types, and folders that should be
> | excluded
> | > from A/V scanning. Because SBS does lots of things, the list is longer
> | than
> | > on any other system.
> | >
> | > SQL (or any database, for that example) should not be scanned, same
for
> | > Exchange, and some of the folders pertaining to the DC function.
> |
> | Is there anywhere I can obtain a complete list of folders to exclude? I
> | assume that you mean data folders for the db and Exchange, rather than
> | binaries?
> |
> | I already excluded the particular folder with the problem logfile in it,
> but
> | I'll try suspending the AV overnight and see if that cures it.
> |
> | Thanks
> | Nik
> |
> | >
> | > --
> | > Les Connor [SBS MVP]
> | >
> | >
> | > "nik" <nik_AT_cict.co.uk> wrote in message
> | > news:%23BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl...
> | > > Hi Les:
> | > >
> | > >> What anti-virus application do you have installed?
> | > >
> | > > Sophos.
> | > >
> | > >>I've noticed similar
> | > >> behaviour with Trend CSM on very tight system partitions.
> | > >>There may be some
> | > >> relief, but it's only a temporary measure as it's really hard to
keep
> | > > enough
> | > >> free space on a 12 gb system partition.
> | > >
> | > > Last night, after moving the scheduled tasks as Terence suggested,
the
> | > > problem recurred - but more severely. I suspect that one of the
> | scheduled
> | > > tasks which I moved was limiting the damage, not causing it!
> | > >
> | > > But I have nailed down where the disc space is going - it's filling
up
> | > > with
> | > > this SQL logfile:
> | > > C:\Program Files\Microsoft SQL
> | > > Server\MSSQL$SBSMONITORING\Data\SBSMonitoring_log.LDF
> | > > Once I shrink that dB, I get my 2.5Gb of space back - until
tomorrow.
> | > >
> | > > Any idea why this might be happening? Both our backup and our AV
> | software
> | > > use SQL dBs - but does the fact that this is the SBSMonitoring dB
> still
> | > > suggest that a 3rd-party app is responsible? Is there any tool in
SBS
> | > > which
> | > > I can use to look at this logfile?
> | > >
> | > >> So in the end, you'll need to resize c: anyway. You should find
lots
> of
> | > > hits
> | > >> on resizing if you do a google search of this newsgroup. A disk
> imaging
> | > >> product is your best bet for this task.
> | > >
> | > > Thanks, I'll check it out.
> | > >
> | > > Regards
> | > > Nik
> | > >
> | > >>
> | > >> --
> | > >> Les Connor [SBS MVP]
> | > >>
> | > >>
> | > >> "nik" <nik_AT_cict.co.uk> wrote in message
> | > >> news:%23Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl...
> | > >> > Hi Terence: many thanks for your detailed and informative reply.
> | > >> >
> | > >> >>
> | > >> >> According to your description, I understand that your SBS system
> | > >> >> partition
> | > >> >> free space disappear at every 03:00. If I have misunderstood the
> | > > problem,
> | > >> >> please don't hesitate to let me know.
> | > >> >
> | > >> > Mostly correct, though on a small minority of days, the issue
> simply
> | > >> > doesn't
> | > >> > happen. There seems to be no pattern to this.
> | > >> >
> | > >> > What's especially strange is that the free space usually comes
back
> | > > again
> | > >> > within a couple of hours, and when it disappears, it doesn't show
> up
> | in
> | > >> > file/folder sizes on the drive at that time.
> | > >> >
> | > >> >> Based on my research, I think this issue relate to 3rd-party
> | software
> | > > or
> | > >> >> some scheduled tasks running on SBS.
> | > >> >
> | > >> > I had suspcisions about the Backup Exec backup software we use,
> but I
> | > >> > stopped all Backup Exec services yesterday evevning, and the
> problem
> | > > still
> | > >> > recurred last night. There's no other 3rd-party software running
> on
> | a
> | > >> > schedule AFAIK - and there's certainly nothing coming up in the
> event
> | > >> > logs.
> | > >> >
> | > >> >>I suggest we try the following steps
> | > >> >> to see if we can resolve this issue:
> | > >> >>
> | > >> >> 1. Please check the scheduled tasks running on SBS
> | > >> >>
> | > >> >> a. Please open control panel->Scheduled Tasks
> | > >> >>
> | > >> >> b. Please check whether some scheduled tasks' Next Run time is
> | nearby
> | > >> > 03:00
> | > >> >
> | > >> > Nothing is scheduled to run specifically at 03:00. The only
> | scheduled
> | > >> > tasks
> | > >> > are:
> | > >> >
> | > >> > Collect Server Performance Data (every hour)
> | > >> > Collect Usage Data (Daily at 04:30)
> | > >> > File_Backup (disabled, as we have 3rd party backup software)
> | > >> > Small Business Server - Server Status Report - Server Performance
> | > >> > Report
> | > >> > (daily at 06:00)
> | > >> >
> | > >> > I guess that means that the Collect Server Performance Data will
> run
> | at
> | > >> > 03:00 though... I'll try moving the tasks tonight.
> | > >> >
> | > >> >>
> | > >> >> c. Please move all scheduled tasks to another folder, the tasks
> will
> | > >> >> do
> | > >> > not
> | > >> >> run, then monitor the SBS at 03:00
> | > >> >>
> | > >> >> d. If the issue persists, we can move all scheduled tasks back.
> | > >> >>
> | > >> >> 2. Please do clean boot on SBS and monitor to narrow down this
> issue
> | > >> >
> | > >> > I will try this option over the next couple of days, but as other
> | folks
> | > >> > here
> | > >> > have observed, SBS tends to be a single-server setup, so it can
be
> | > >> > difficult
> | > >> > to get maintenance time when there are problems. OK, not many
> people
> | > > want
> | > >> > to work at 3am, but then again, neither do I. :-)
> | > >> >
> | > >> >>
> | > >> >> 3. For SBS 2003 server, the 2.5GB free space in system partition
> is
> | > >> >> too
> | > >> >> little. I suggest you move some data or folders from system
> | partition
> | > > to
> | > >> >> additional partition or disk. This will make SBS run smooth.
> | > >> >
> | > >> > Tell me about it - but when I installed this system in 2004, 12Gb
> was
> | > > the
> | > >> > system partition size recommended by Microsoft for our server.
> It's
> | > >> > now
> | > >> > hopelessly inadequate, even though I've moved all the data files
> | which
> | > >> > Technet articles suggest moving. We have more drive space
> available
> | on
> | > >> > the
> | > >> > machine, but I know of no way to increase the system partition
> size -
> | > >> > is
> | > >> > there a way of adding unused space to the system partition or
> | > >> > recreating
> | > >> > the
> | > >> > system partition to another drive? The server is SCSI RAID5, and
> I'm
> | > > just
> | > >> > about to install an additional array of 3 drives in it, so now
> would
> | be
> | > > a
> | > >> > good time to reorganise the storage if it's possible.
> | > >> >
> | > >> > Would it be sensible to try reinstalling the system from scratch
on
> | the
> | > >> > new
> | > >> > drive, using a larger system partition (how big?), and restoring
> our
> | > > data
> | > >> > into that new installation from backup?
> | > >> >
> | > >> > Best regards
> | > >> > Nik
> | > >> >
> | > >> >
> | > >>
> | > >
> | > >
> | >
> |
> |
> |
>
|
|
Hello Nik,
Thank you for kind reply.
I was just writing to say that I hope everything is going well.
If there's anything else I can do for you, please do not hesitate to let me
know.
Thank you and have a nice day,
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "nik" <nik_AT_cict.co.uk>
| References: <eKPwf89tHHA.576[ at ]TK2MSFTNGP03.phx.gbl>
<bTr#urGuHHA.3972[ at ]TK2MSFTNGHUB02.phx.gbl>
<#Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl>
<E7F94CEE-09CA-4D88-A5CE-C3589C49587F[ at ]microsoft.com>
<#BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl>
<9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com>
<eQUbMMcuHHA.3660[ at ]TK2MSFTNGP06.phx.gbl>
<EnDd#2fuHHA.360[ at ]TK2MSFTNGHUB02.phx.gbl>
| Subject: Re: Disappearing disk space?
| Date: Fri, 29 Jun 2007 12:14:19 +0100
| Lines: 491
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1807
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
| Message-ID: <uFz#m6juHHA.3588[ at ]TK2MSFTNGP06.phx.gbl>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: ctmd.demon.co.uk 80.176.224.181
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:47151
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Terence - thankyou for posting this list, it's very useful information.
|
| However, I switched off the AV scanning completely last night and the
| problem recurred, so although I'll reconfigure the scanning according to
| your advice, it's now clear that AV activity wasn't causing the huge
| SMSMonitoring log. I watched the log build up last night, and it happens
| very quickly - 2Gb in about 5 minutes - and I stopped it by rebooting the
| server. I have one more experiment to try tonight, and if that doesn't
| solve the problem, I'll try reinstalling the monitoring component as you
| suggest.
|
| Thanks again for all your suggestions.
| Regards
| Nik
|
|
| "Terence Liu [MSFT]" <v-terliu[ at ]online.microsoft.com> wrote in message
| news:EnDd%232fuHHA.360[ at ]TK2MSFTNGHUB02.phx.gbl...
| > Hello Nik,
| >
| > For your concern about: Is there anywhere I can obtain a complete list
of
| > folders to exclude?
| >
| > We do not have a complete list of the exceptions folders, however, you
can
| > refer to the following lists:
| >
| > Consider the following file scanning exceptions for your Anti-Virus
| > software where applicable:
| >
| > NOTE: The %systemroot% is normally the C:\WINDOWS or C:\WINNT directory
| > depending on your OS.
| >
| > 1.) %systemroot%\System32\Spool (and all the sub-folders and files)
| > 2.) %systemroot%\SoftwareDistribution\Datastore
| > Refer to the following article for information:
| > KB822158 - Virus scanning recommendations for computers that are running
| > Windows Server 2003, Windows 2000, or Windows XP
| > http://support.microsoft.com/kb/822158
| > 3.) Any Network Drives that are mapped.
| >
| > The following steps are Server Role specific:
| > ==========================================================
| > 1.) If your system is also a Domain Controller (DC) / DNS / DHCP also
| > exclude the following from Anti-Virus Scanning:
| > a.) %systemroot%\Sysvol folder (include all the sub-folders and files)
| > b.) %systemroot%\system32\dhcp folder (include all the sub-folders and
| > files)
| > c.) %systemroot%\system32\dns folder (include all the sub-folders and
| > files)
| > d.) %systemroot%\ntds
| > Refer to the following article for information:
| > KB822158 - Virus scanning recommendations for computers that are running
| > Windows Server 2003, Windows 2000, or Windows XP
| > http://support.microsoft.com/kb/822158
| >
| > 2.) If File Replication (NTFR) service is running on your system, make
| sure
| > your Anti-Virus software is compatible:
| > KB815263 - Antivirus, backup, and disk optimization programs that are
| > compatible with the File Replication Service
| > http://support.microsoft.com/kb/815263
| > And exclude:
| > a.) %systemroot%\ntfrs folder (include all the sub-folders and files)
| > b.) Files that have the .log and .dit extension
| >
| > 3.) If you have IIS installed, exclude:
| > a.) The IIS compression directory (default compression directory is
| > %systemroot%\IIS Temporary Compressed Files)
| > b.) %systemroot%\system32\inetsrv folder
| > c.) Files that have the .log extension
| > Refer to the following knowledge base articles for reference:
| > KB817442 - IIS 6.0: Antivirus Scanning of IIS Compression Directory May
| > Result in 0-Byte File
| > http://support.microsoft.com/kb/817442
| > KB821749 - Antivirus software may cause IIS to stop unexpectedly
| > http://support.microsoft.com/kb/821749
| >
| > 4.) If you have SQL installed, you may want to exclude the SQL folder
and
| > databases files (or database file types) from scanning for performance
| > reasons:
| > KB309422 - Guidelines for choosing antivirus software to run on the
| > computers that are running SQL Server
| > http://support.microsoft.com/kb/309422
| >
| > 5.) If you have Exchange installed, perform the relevant file-based
| > scanning exclusions listed in Knowledge Base articles:
| > KB328841 - Exchange and antivirus software
| > http://support.microsoft.com/kb/328841
| > KB823166 - Overview of Exchange Server 2003 and antivirus software
| > http://support.microsoft.com/kb/823166
| > KB245822 - Recommendations for troubleshooting an Exchange Server
computer
| > with antivirus software installed
| > http://support.microsoft.com/kb/245822
| >
| > 6.) If you have Cluster services, make sure your Anti-Virus software is
| > compatible:
| >
| > KB250355 - Antivirus Software May Cause Problems with Cluster Services
| > http://support.microsoft.com/kb/250355
| > NOTE: If you have a SQL cluster, make sure that you exclude these
| locations
| > from virus scanning:
| > a.) Q:\ (Quorum drive)
| > b.) %systemroot%\Cluster
| > c.) SQL Server data files that have the .mdf extension, the .ldf
| extension,
| > and the .ndf extension
| >
| > 7.) If you have Sharepoint installed, you should exclude:
| > a.) Drive:\Program Files\SharePoint Portal Server
| > b.) Drive:\Program Files\Common Files\Microsoft Shared\Web Storage
System
| > c.) Drive:\MSDEDatabases (particularly on SBS)
| > (where Drive: is the drive letter where you installed SharePoint Portal
| > Server)
| > Refer to the following knowledge base articles for reference:
| > KB320111 - Random Errors May Occur When Antivirus Software Scans
Microsoft
| > Web Storage System
| > http://support.microsoft.com/kb/320111
| > KB322941 - Microsoft's Position on Antivirus Solutions for Microsoft
| > SharePoint Portal Server
| > http://support.microsoft.com/kb/322941
| >
| > 8.) If you have a Systems Management Server (SMS), you should exclude
| > folders:
| > a.) SMS\Inboxes
| > b.) SMS_CCM\ServiceData
| > Refer to the following knowledge base articles for reference:
| > KB327453 - Antivirus programs may contribute to file backlogs in SMS 2.0
| > and in SMS 2003
| > http://support.microsoft.com/kb/327453
| > NOTE: If you exclude the SMS\Inboxes directory from virus scanning or
| > remove the antivirus software, you may make the site server and all
| clients
| > vulnerable to potential virus risks. The client base component files
| reside
| > in the SMS\Inboxes directory.
| >
| > 9.) If you have a MOM (Microsoft Operations Manager) Server, you
consider
| > excluding:
| > a.) Drive:\Documents and Settings\All Users\Application
| > Data\Microsoft\Microsoft Operations Manager
| > b.) Drive:\Program Files\Microsoft Operations Manager 2005
| > (where Drive: is the drive letter where profiles are located)
| >
| > 10.) If you have an Internet Security and Acceleration Server (ISA)
| Server,
| > you should exclude:
| > a.) The ISALogs folder. By default, the ISALogs folder is located in the
| > folder where you installed ISA Server. Typically, this location is
| > Drive:\Program Files\Microsoft ISA Server.
| > Refer to the following knowledge base articles for reference:
| > KB887311 - Event ID 5, event ID 14079, and event ID 14176 are logged in
| the
| > Application log on your Internet Security and Acceleration Server 2000
| > computer
| > http://support.microsoft.com/kb/887311
| >
| > 11.) If you have a Windows Software Update Services (WSUS) Server role,
| you
| > consider excluding:
| > a.) Drive:\MSSQL$WSUS
| > b.) Drive:\WSUS
| > (where Drive: is the drive letter where you installed Windows Software
| > Update Services)
| > Also refer to the following knowledge base articles for reference:
| > KB900638 - Multiple symptoms occur if an antivirus scan occurs while the
| > Wsusscan.cab file is copied
| > http://support.microsoft.com/kb/900638
| >
| > MORE INFORMATION:
| > KB49500 - List of antivirus software vendors
| > http://support.microsoft.com/kb/49500
| > KB129972 - Computer viruses: description, prevention, and recovery
| > http://support.microsoft.com/kb/129972
| >
| > Hope the info will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
| the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
| doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| >
| > --------------------
| > | From: "nik" <nik_AT_cict.co.uk>
| > | References: <eKPwf89tHHA.576[ at ]TK2MSFTNGP03.phx.gbl>
| > <bTr#urGuHHA.3972[ at ]TK2MSFTNGHUB02.phx.gbl>
| > <#Ka4mFKuHHA.3796[ at ]TK2MSFTNGP02.phx.gbl>
| > <E7F94CEE-09CA-4D88-A5CE-C3589C49587F[ at ]microsoft.com>
| > <#BTMYdWuHHA.1672[ at ]TK2MSFTNGP06.phx.gbl>
| > <9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com>
| > | Subject: Re: Disappearing disk space?
| > | Date: Thu, 28 Jun 2007 21:29:31 +0100
| > | Lines: 214
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2800.1807
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
| > | Message-ID: <eQUbMMcuHHA.3660[ at ]TK2MSFTNGP06.phx.gbl>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: ctmd.demon.co.uk 80.176.224.181
| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:47044
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hi Les: thanks for this response.
| > |
| > | "Les Connor [SBS MVP]" <les.connor[ at ]DEL.cfive.ca> wrote in message
| > | news:9A0F9CF9-FC92-481D-8AC8-DE361EC73724[ at ]microsoft.com...
| > | > As a test, temporarily disable A/V file space scanning on the system
| > | drive.
| > |
| > | I noted this when I was looking at the docs for moving data folders,
and
| > | most of the 3 years that the server has been running happily, it's run
| > | without any AV - it's NATted and isn't used for client email or by
| users,
| > | so I used to feel OK about leaving out the AV. But I lost my nerve a
| few
| > | months ago and installed it. :-) So it sounds like the AV is the
| > problem -
| > | though I would be interested to understand more about why.
| > |
| > | >
| > | > There are a number of files, file types, and folders that should be
| > | excluded
| > | > from A/V scanning. Because SBS does lots of things, the list is
longer
| > | than
| > | > on any other system.
| > | >
| > | > SQL (or any database, for that example) should not be scanned, same
| for
| > | > Exchange, and some of the folders pertaining to the DC function.
| > |
| > | Is there anywhere I can obtain a complete list of folders to exclude?
I
| > | assume that you mean data folders | | |