Hello Team,
I have one CAS server and 1 Mailbox server in our environment, all with 2012 r2 OS running in VMware 5.5. We are facing a frequently restart issue with our CAS server , while checking the server it is notice that the restart is with a BOSD.
Please find the mini dump analysis
System Uptime: 1 days 0:54:23.459 ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* CRITICAL_PROCESS_DIED (ef) A critical system process died Arguments: Arg1: ffffe00161d32900, Process object Arg2: 0000000000000000 Arg3: 0000000000000000 Arg4: 0000000000000000 Debugging Details: ------------------ TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2 PROCESS_OBJECT: ffffe00161d32900 CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: WIN8_DRIVER_FAULT_SERVER BUGCHECK_STR: 0xEF PROCESS_NAME: MSExchangeHMWo CURRENT_IRQL: 0 LAST_CONTROL_TRANSFER: from fffff8031f08c918 to fffff8031ebc6ca0 STACK_TEXT: ffffd000`2367f9a8 fffff803`1f08c918 : 00000000`000000ef ffffe001`61d32900 00000000`00000000 00000000`00000000 : nt!KeBugCheckEx ffffd000`2367f9b0 fffff803`1efc3cea : ffffe001`61d32900 00000000`00000000 00000000`00000000 00000000`ffffffff : nt!PspCatchCriticalBreak+0xa4 ffffd000`2367f9f0 fffff803`1ee61775 : 00000000`0487c001 00000000`00000000 ffffe001`61d32900 ffffe001`61d32900 : nt! ?? ::NNGAKEGL::`string'+0x22e3a ffffd000`2367fa50 fffff803`1ee61502 : ffffffff`ffffffff ffffe001`66d1d900 ffffe001`61d32900 ffffe001`686cb880 : nt!PspTerminateProcess+0xe5 ffffd000`2367fa90 fffff803`1ebd24b3 : ffffe001`61d32900 ffffe001`686cb880 ffffd000`2367fb80 00000000`ffffffff : nt!NtTerminateProcess+0x9e ffffd000`2367fb00 00007ffa`6dbc148a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13 00000000`2457d958 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7ffa`6dbc148a STACK_COMMAND: kb FOLLOWUP_IP: nt!PspCatchCriticalBreak+a4 fffff803`1f08c918 cc int 3 SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: nt!PspCatchCriticalBreak+a4 FOLLOWUP_NAME: MachineOwner MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe DEBUG_FLR_IMAGE_TIMESTAMP: 550f41a6 FAILURE_BUCKET_ID: X64_0xEF_nt!PspCatchCriticalBreak+a4 BUCKET_ID: X64_0xEF_nt!PspCatchCriticalBreak+a4 Followup: MachineOwner ---------
While searching the error i notice that this issue reported for cu2 ,but our version is CU 9. Any way i have disable the ActiveDirectoryConnectivityConfigDCServerReboot , but still the server is restarting with BSOD.
After the restart the servers will not start,we need to start it manually.
Any one experiencing such issue.
CAS server is in different VLAN and AD server in different VLAN, Only required ports are open for the communication.
How can we find the root cause for this issue and how to rectify this issue.