The Windows SBS Manager service hung on starting

[Hmmm]

I'm currently experiencing the following issue on two SBS 2008
servers. Both servers have identical hardware (HP ML350 G6). One was a
swing migration from SBS 2003, the other a swing migration from SBS
2000.

When booting into Windows and before the logon prompt, there is a long
delay at the "Applying computer settings" stage.

The following events are logged:-

Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 23/02/2010 3:36:37 p.m.
Event ID: 6005
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: myserver.mydomain.local
Description:
The winlogon notification subscriber <GPClient> is taking long time to
handle the notification event (CreateSession).

Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 23/02/2010 3:45:05 p.m.
Event ID: 6006
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: myserver.mydomain.local
Description:
The winlogon notification subscriber <GPClient> took 567 second(s) to
handle the notification event (CreateSession).

The first event logged after the long delay is the following. I
suspect this may be the cause of the problem (I also realise it could
be a symptom rather than the cause):-

Log Name: System
Source: Service Control Manager
Date: 23/02/2010 3:45:01 p.m.
Event ID: 7022
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: myserver.mydomain.local
Description:
The Windows SBS Manager service hung on starting.

Can anyone tell me how I'd go about troubleshooting this problem?

--
Simon

[Larry Struckmeyer[SBS-MVP]]

Before I do so, have you run these events through www.eventid.net?

Usually some clues there.

Also, run the sbs bpa: www.sbsbpa.com
and fix anything it finds.

dcdiag (native to Windows 2K8) and netdiag (from 2K3 server tools) is also
a good place to start.

-
Larry
Please post the resolution to your
issue so others may benefit
-
Get Your SBS Health Check at
www.sbsbpa.com

[Hmmm]

There's nothing on eventid.net.

All is well as far as the SBS BPA is concerned.

One of the servers was missing SQL Server 2005 SP3. After installing
this service pack and rebooting, the start-up delay dropped to 120
seconds and the Windows SBS Manager service didn't hang on starting.
Interesting.

The other server is already fully patched.

When I run dcdiag, everything passes except for the SystemLog test,
which has a long list of errors that all look the same.

Starting test: SystemLog

An Error Event occurred. EventID: 0xC0002719

Time Generated: 02/25/2010 14:31:41

EvtFormatMessage failed, error 15100 Win32 Error 15100.
(Event String (event log = System) could not be retrieved,
error
0x3afc)

On Feb 25, 12:19 pm, Larry Struckmeyer[SBS-MVP] <lstruckme...@mis-

[Larry Struckmeyer[SBS-MVP]]

Is the SBS the source for DHCP and DNS?

One of the usual causes for slow startups is DNS. In the case of SBS every
NIC in the SBS network should point to the SBS for DNS, and there should
be no public or router DNS settings anywhere. The Wizards take care of setting
the forwarders.

If you are in doubt, post up the results of "ipconfig /all > c:\iptest.txt".

"An Error Event occurred. EventID: 0xC0002719"

That one has lots of references in an internet search. Too many for me to
run through, but you might want to take a look.

Does the BPA suggest updating the NIC drivers, or are there any updates available?

[Hmmm]

Yes, the SBS server is the DHCP and DNS server.

All the drivers are up to date, as the server was only built three
weeks ago with the latest HP ProLiant Support Pack.

Here are the results of ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : LODGE
Primary Dns Suffix . . . . . . . : beva.local
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : beva.local

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC326i PCIe Dual Port
Gigabit Server Adapter
Physical Address. . . . . . . . . : 18-A9-05-6F-78-86
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . :
fe80::69f6:86bf:de35:d612%10(Preferred)
Link-local IPv6 Address . . . . . :
fe80::c824:1f8:cb7:ee91%10(Preferred)
IPv4 Address. . . . . . . . . . . : 10.10.0.2(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.10.0.1
DHCPv6 IAID . . . . . . . . . . . : 253274373
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-FB-D1-7A-18-
A9-05-6F-78-86
DNS Servers . . . . . . . . . . . : fe80::69f6:86bf:de35:d612%10
10.10.0.2
NetBIOS over Tcpip. . . . . . . . : Enabled

PPP adapter RAS (Dial In) Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : RAS (Dial In) Interface
Physical Address. . . . . . . . . :
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.10.0.43(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 8:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.
{9B2CC134-1D56-40C7-98A6-5FEB13E96AFE}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 9:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

On Feb 26, 2:10 am, Larry Struckmeyer[SBS-MVP] <lstruckme...@mis-

[Robbin Meng [MSFT]]

Hello Simon,

Thanks for your post and Larry's suggestions.

In addition, since the issue happens on both SBS servers, and both two servers have identical hardware (HP ML350 G6), I suspect this issue may be caused by the 3rd party
hardware/software collision on the server. Based on my research, this issue sometimes occurs if there is any improer HP printer drivers or registry keys that loading during
the Winlogon process and caused certain collision.

On the basis of the above analysis, I'd suggest you try a Clean Boot on the problematic server:

Clean boot
=================
Let's disable all startup items and third party services when booting. This method will help us determine if this issue is caused by a loading program or service. Please
perform the following steps:

1. Click the Start Button type "msconfig" (without quotation marks) in the Start Search box, and then press Enter.
Note: If prompted, please click Continue on the User Account Control (UAC) window.

2. Click the "Services" tab, check the "Hide All Microsoft Services" box and click "Disable All" (if it is not gray).
3. Click the "Startup" tab, click "Disable All" and click "OK".

Then, restart the computer. When the "System Configuration Utility" window appears, please check the "Don't show this message or launch the System Configuration Utility
when Windows starts" box and click OK.

Please test this issue in the Clean Boot environment, if the issue disappears in the Clean Boot environment, we can use a 50/50 approach to quickly narrow down which entry
is causing the issue.

For more information about this step, please refer to the following KB article:

How to troubleshoot a problem by performing a clean boot in Windows Vista
http://support.microsoft.com//kb/929135

BTW, have you tried to use the Automatic (Delayed Start) startup type instead of the Automatic type for the "Windows SBS Manager service"? Please have a try to see if it
changes.

Hope this helps.

Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support

==================================================================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/community/discussion/richui/default.aspx

Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx

If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-2008-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================