Hi,
Our server hangs (Hard hang) randomly once or twice a month. Its Server 2008R2 SP1 with all latest patches, Its Virtual machine on VSphere 5.5, Virtual machine version 10.
I notice around the time of hang we have NETLOGON error 5719 and Group Policy error 1054
Log Name: System
Source: NETLOGON
Date: 26.06.2014 09:49:54
Event ID: 5719
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: xxx.domain.no
Description:
This computer was not able to set up a secure session with a domain controller in domain DOMAIN due to the following:
The RPC server is unavailable.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="NETLOGON" />
<EventID Qualifiers="0">5719</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-06-26T07:49:54.000000000Z" />
<EventRecordID>91928</EventRecordID>
<Channel>System</Channel>
<Computer>xxx.domain.no</Computer>
<Security />
</System>
<EventData>
<Data>DOMAIN</Data>
<Data>%%1722</Data>
<Binary>170002C0</Binary>
</Even
Log Name: System
Source: Microsoft-Windows-GroupPolicy
Date: 26.06.2014 08:11:49
Event ID: 1054
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: xxx.domain.no
Description:
The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-GroupPolicy" Guid="{AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9}" />
<EventID>1054</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>1</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2014-06-26T06:11:49.361463400Z" />
<EventRecordID>91916</EventRecordID>
<Correlation ActivityID="{A79795FE-5CB2-4051-83F7-FA6F9BC566E1}" />
<Execution ProcessID="872" ThreadID="1148" />
<Channel>System</Channel>
<Computer>xxx.domain.no</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SupportInfo1">1</Data>
<Data Name="SupportInfo2">1903</Data>
<Data Name="ProcessingMode">0</Data>
<Data Name="ProcessingTimeInMilliseconds">1139</Data>
<Data Name="ErrorCode">58</Data>
<Data Name="ErrorDescription">The specified server cannot perform the requested operation. </Data>
</EventData>
</Event>tData>
</Event>
I have checked all settings such as domain and DNS connectivity, Sysvol access, Ping check (NetBIOS\FQDN), deleted the computer account and rejoined the server to domain and all other basic steps but nothing has helped.
What shall be the next step to figure out the cause?
Regards
Prabhash