Thursday, July 12, 2012

PCs Intermittently Lose Connection to Server

Have you had this problem with your network? Over the past 2 1/2 years at work I've had this problem. We have funding/accounting/management software installed on Server1 and users who "use" this software do so via a mapped drive on their PC to Server1. Once in a blue moon a few PCs (not the same ones each time) will lose connection to Server1 (this happened 3 times - odd) completely, i.e. PC can't ping, RD to, or access shares on Server1 and likewise with Server1 to the PCs. The communication between them is dead, over, gone...you get it. How do I solve the problem? Now, the PCs can communicate with other nodes on the network, which they're getting juice to do that from Server2 I suppose. How do I solve the problem? By restarting Server1. I don't want to do that each time though. I want to know why this is happening and if there is another way to fix it.

Keep in mind that when I troubleshot this issue the user was impatient and wanted "it" fixed right away, so I didn't have the time to explore the problem deeply. The following is what I tried in order to keep from restarting Server1.

1. Restarting the problem PC. It didn't work.
2. Rejoining the PC to the domain. I took the PC off the domain, joined it to WORKGROUP then joined it to the domain. This didn't work either.
3. Did a GPUpdate via CMD line. Don't ask...I was scratching the bottom of the idea barrel. Obviously it didn't work.

That's what I tried. By this point the user was huffing and puffing. So, I went ahead and restarted the server and then all was right with the world; at least in the users world. So, I would like to fix this problem without resorting to server restart. Further, I would like to know what causes this to happen. I jumped over to Server Fault to glean wisdom from the sages there and boy did I glean!

Since the problem arises at random times and surfaces very little (3 times over 2 1/2 years) it's going to be difficult to actually troubleshoot this problem, but the guys over at Server Fault told me I could develop an attack plan for when it rears its ugly head again. So the plan, so far, is as follows: to see what is going on during the issue run Wireshark on one of the affect machines and also on Server1; to try and fix the issue disable then re-enable the network card on Server1 or run the following cmd on Server 1: arp -d* (enter). These were just a few suggestions given to me. I thought there would be a network service I could restart under Admin tools\Services, but the guys there said this isn't a service issue.

Anyway, I plan on updating this periodically as I explore the issue. I just posted the question at Server Fault today, so I might get more answers sometime after this posting.

***UPDATE*** 7/18/2012

The problem occurred again yesterday morning and at lunch, but this time it was just one PC that wasn't in the affected group last week. During the problem I did the following:
  • Restarted the switch in her department - didn't work.
  • Enabled then disabled her network adapter and the server adapter - didn't work
  • Updated the driver on her PC this did work for the morning.
The monster reared its ugly head again at lunch.
 
Went to the server, collected wireshark packets between the affected PC and the server. Then, I restarted the server because I know that works. That fixed the issue. I was only able to read through the collected data for a few minutes because other issues came up (I'm the only IT pro - one man crew) that occupied my time for the rest of the shift. Thought about it through the night. Came in this morning, collected network traffic just to see if there were any network process hogs and couldn't find anything bloating the "pipe." Then it hit me: check the kaspersky logs on the server. I checked the network attack blocker logs and found that last week Kaspersky detected dos.generic.synflood "attacks" from the 3 affected machines last week and the affected machine yesterday. When Kaspersky detects things like that, it will cut off communication with the attacking node for 60 minutes. The logs gave the exact time of the issue and the time matched up with the time affected users called me about the issue. I tracked the logs back 30 days and noticed those logs were clean of attacks.

I set the network attack blocker to only block the attacking node for 1 minute. I'm also going to investigate what the synflood attacks could be. At least for now I know why those machines were disconnected from the server. Of course now, I need to figure out the source of those dos.generic.synflood attacks.

Tuesday, July 10, 2012

Black screen hell

Taken from Tips 4 PC (not my work, but I thought it would be useful).

Some common causes of a computer black screen in Windows:

I have to be honest, there are literally hundred’s of reasons why your computer might have a black screen. Hopefully your problem will be something relatively basic.
If you see the screen that tells you your computer had an error, do not choose to start normally, choose to start in safe mode now. See what is safe mode. This is your chance to go the safe way. Many people rush and press to start Windows normally and sometimes this causes a serious problem.

Where is your Monitor plugged in? “My computer screen is black”

The first and most obvious reason for a computer appearing to run but you cannot see the video is the monitor. A common mistake is to plug the monitor into the on-board video plug when you actually have a PCI or AGP video card installed. Trust me I have done this myself. Simply move the plug to the correct position. If you see two blue monitor plugs at the back of the computer or even a blue plug and a HDMI port then try using a different plug.
Obviously you should also check to see if the monitor plugged is actually in firmly. It could have been knocked out if it was not correctly positioned in the first place. This is the simplest computer black screen you can get.

Failing Display adapter or video card can cause a black screen in windows:

Most of the time you can tell if your computer video card is deteriorating by seeing little tell tale signs. Lines appearing or flashing can sometimes occur, however sometimes nothing happens at all. You might turn your computer on and have the dreaded black screen. You can try removing your video card and using onboard video, or replacing the video card to see if that is the problem.
People often also see a computer black screen when they have plugged their computer into a different monitor or even a TV where the screen resolution is not compatible. If it is a simple black screen on your computer it can also be a simple problem to fix, but unfortunately people do not realize this problem and start troubleshooting, which actually gives the computer are serious black screen. When I know that my computer is showing a black screen on my Windows computer and I know that I have just connected it to a different monitor, I immediately restart and press F8. This will take me to the the menu where I will choose enable VGA mode or something similar.

The next reason the computer will not boot up is RAM…or memory:

This can be the cause when your computer has a black screen in Windows.
If your memory is not seated properly (not in), is damaged, or even absent altogether, this can cause a black screen.
  1. If you have no memory installed at all, some computers make no sounds and just show a black screen on startup. Other computers go crazy and beep their head off. I am an expert at this one, as I build so my computers.
  2. When your computer gets a black screen only sometimes, it usually means your ram is on the way out..For example if you boot your computer and it doesn’t work, then go back an hour later, and it does work, your memory is playing up. You can try taking the ram out, gently cleaning it with an antistatic cloth, and replacing it. This may solve your problem. If it does not, then you should try running your computer with another compatible stick of ram installed.
If you plan to open your computer case and remove the ram please read these articles on how to open computer cases safely and Upgrade Memory

Black screen on startup with an amber flashing light

A flashing amber light along with your black screen on startup can be a few things.
  1. Not enough power getting to the motherboard.
  2. A dead power supply.
  3. A bent pin or shorted out USB port causing a problem.

Computer black screen after installing new hardware

Often when computer users install hardware in order to upgrade their own computers they run into problems. If you have just performed an upgrade and then get a black screen, the answer is obvious. Some hardware components may not be compatible with the others in your system. And of course there is always the risk of static electricity damaging your components when you are not an experienced computer repair person.
You might just be installing a new piece of RAM but the best way to troubleshoot this is to go back to where you started from. Always start from the beginning. If your computer was working and you installed something, then take it back out. Think about what you are doing and try again.
This has nothing to with getting a black screen in Windows, as sometimes you have not even installed Windows yet. The hardware must be compatible together and also must be installed correctly.

Leaving a bootable usb flash drive connected to your computer

Yes this can confuse your computer and it won’t know where to boot up. When your computer has a black screen on startup from doing this and you realize this is the problem and remove the USB, the computer just continues to boot normally..this sometimes happens because a computer sometimes recognizes a USB as a CD drive and tries to boot to it. This is the easiest cause of a black screen in Windows as you can simply just take it out and restart your computer.

Corrupting the Boot Sector

A black screen on startup can be so many things! I have learned this lesson the hard way. Never turn off the computer when it is half way through the boot procedure. Even when it is taking forever, or having a major problem you must let it run through if possible. Interrupting it once may be ok, but twice or three times is a no no. After you have carelessly restarted and shutdown a few times the black screen may appear. But this time it may be beyond repair for the average computer user. How to repair a damaged boot sector by replacing the master boot record (MBR) in Windows XP

Black screen on startup – Your CPU is not correctly seated

If your computer has a black screen after transporting one place to another, this is the first place I look. Transporting a working computer, and then not working with a black screen = dislodging the CPU. You can fix this easily by removing the CPU fan and carefully replacing it back in its spot. You may also have to replace some thermal paste between the cpu and heat sink as it stops the cpu from overheating. Be very careful not to bend any pins when dealing with your computer CPU.

Keyboard Faulty

This one surprised me because when there is a problem with the keyboard the computer still boots and says that there is no keyboard detected on the screen. Well this didn’t happen for me. I had a keyboard with a bent pin on the cable, so when it was plugged into the computer, it just plugged in normally. Then the computer black screen on startup appeared, you could here it starting up but no posting beeps, no display, nothing. I even swapped monitors around until finally I tested the keyboard and found the bent pin. I never thought to look there because of the usual default message that appears on the screen when there is something wrong with your keyboard. This is why having a black screen in Windows as a crazy amount of causes and solutions. I really did not expect this one to come out of the woodwork.

Corrupted User Account – Computer Boots to Black Screen

If you have logged into Windows, so you actually saw the login screen, then logged into Windows, this can mean a few different things. One is that it can be a corrupted user account. In this case it would be handy to have another user account to login to. Then you would be able to tell straight away if that was the problem or not. If you can log into another account you will be able to access the corrupted user account through the main hard drive which is usually called C: drive. You will see a folder called “users” and then there will be another folder for the actual username.
If you are using windows XP than the files are in the Document and Settings section.

Notes relating to your computer black screen in Windows:

More options when dealing with a black screen:

Buy the Ebook “Recover Your Computer From a Black Screen” only $7..


We also have a Tips4pc forum where you can chat with others that have the same problem.

If your computer has a black screen, please research your possible problem and be patient as fixing this error is usually left to the experts.
I really hope that your computer black screen has been caused by something simple and is a problem that you can fix quickly without too much stress.

Related Posts