server 2003 STD and SBS problems; RPC and network

TSCrv

Senior member
Jul 11, 2005
568
0
0
I dont build as many highend servers as i do desktop systems, but i am fairly competent with install and config. That being said, i have been working on this same problem for about 6 months or so, and i cant find a way around it.

situation: Client orders a server, i build and load it, and minor config stuff. intel entry level server boards, mirrored os drives (hardware when possible) and raid 5 data drives...

i load the OS, using floppy made from the intel disk for the F6 screen, basic stuff, this is 2k3 server std R2, and when everything is fine and loaded, i plug it into my companies network, and the whole network tanks, nobody can get out on the net, and every1 comes to me saying 'why the hll is the internet down'

from looking at my networking equipment and the activity on my switches when this problem is going on its only the port that the server and router is on that is experiencing heavy traffic.

specifics: ping www.google.com /t i get around 20-30ms responce, i plug the server in everything is fine, network usage on the server is between 0% and 0.01%, seconds later usage is constantly at 0.05% and ping is still getting 20-30 on test machine. about a minute later pings vary between 20 and 250, and a few minutes after that im getting 2000+ and im starting to drop packets. after about 10 minutes i have 100% packet loss (including pinging a raw ip to eliminate dns)

heres a twist: this is true on 3 completly different networks, my company's, my homes, and the other techs home, work has generic cisco equip and win 2000 servers, home has 2k3 servers and linksys router (dont ask) and everything is completly static, other guy idk what he has. heres another twist: same thing happens with SBS SP1, STD R2, and srv 2k3 enterprise (company VLP)

i have found an inconsistancy tho, (only applies to my enterprise vlp), everything works fine untill i get an RPC error with reminds me of the blaster worm, after it restarts is when everything goes to hll. to continue with this inconsistancy, i only get the RPC error when i install something like IIS or make it a DC.

im comparing services from all servers i have remote access to right now, ive allready disabled EVERYTHING except the 4 or 5 needed services and restarted with no luck

any ideas? maybe this is because its INTEL nic cards and mainboard? "seems" my tyan tiger 100 with a 3com nic worked fine.... because intel nic/mainboard is the only common link between all of these

pullin my hair out here, so is this y all the sys admins that i know are bald?
 

TSCrv

Senior member
Jul 11, 2005
568
0
0
heres a list of services from when it worked to when it doesnt...

before = worked, after = my net is dead

remote access control was enabled, now disabled
ssl didnt exist, now enabled
iis didnt exist, now enabled
telephony was enabled, now disabled
windows installer was enabled, now disabled
windows taskmgr didnt exist, now enabled
workstation didnt exist, now enabled

priming drivers and changing mobo right after i eliminate intel nic's

edit: dhcp server never installed on any of these systems, disabled in house dhcp (unplugged)
 

stash

Diamond Member
Jun 22, 2000
5,468
0
0
i have found an inconsistancy tho, (only applies to my enterprise vlp), everything works fine untill i get an RPC error with reminds me of the blaster worm, after it restarts is when everything goes to hll. to continue with this inconsistancy, i only get the RPC error when i install something like IIS or make it a DC.
Are you building these machines behind a firewall? If you make a server a DC or install IIS without a firewall, it could get owned.
 

TSCrv

Senior member
Jul 11, 2005
568
0
0
private network, router isnt forwarding anything to the server, same with work network, just beefyer security and proxy in the mix

tried intel gigabit card, RPC gets terminated upon connection, tried intel 100 card, same thing, tried old as dirt rusted metal 3com 10/100, works like a charm and its not spamming my network, except i cant ping anything, even internal, time for a realtek test...

im almost (bout 2 days away) about to get an opty and a nice mobo to run this stuff, this crap is startin to pss me off...

what are some easy to get utils, sniffers and the such to tell me whats goin on? pokin around winternals now
 
Dec 5, 2005
247
0
0
I've done some installs of server 2003... be sure you put SP1 on the server after install, and BEFORE hooking it up to the internet. I had what sounds like a similar situation, lots of security fixes on SP1 for server 2003 for RPC.
 

TSCrv

Senior member
Jul 11, 2005
568
0
0
will do, reloadin now neways

that 3com actually does work, but it tanks my network like the intel also, so scratch the card...