"Workstation" and "Server" Services Keep Stopping

On one (or more) of our Windows Server 2003 R2 servers the "Server" and "Workstation" services keep stopping. There's nothing in the event viewer that would indicate why (no errors). I recall seeing it once on one server but after I started the services it hasn't had any problems since. However, on one of the other servers they stop all the time.

They are in a remote data center (with a 2008 DC on-site) that is a replication site (the primary DCs are over here). The server has quad NIC's with 2 disabled, one plugged into the switch (static IP, Windows Networking enabled) and one plugged into another server (static IP, windows networking enabled, no DNS, etc.).

What sort of troubleshooting can I do to diagnose this? Any other ideas why these services would keep stopping?

Edit: All the servers are completely patched (Autoupdate is turned ON) and two separate on-demand virus scanners reported no issues. They are servers and firewalled off from the general internet so generally not much is run on them.

What does 'all the time' mean? If it happens once a day or so I would write I small script to test the services for their running state to find out whether they stop at a specific time. Then try to find out what else is happening at the same time.

If it happens every few minutes, I would monitor the processes with SysInternal's 'Process Monitor' to find out which files/threads are accessed last before they crashed.

Wow, I would scan the system right away. There are some attacks to windows servers/clients that cause this kind of behavior. Of course, this would be less of a problem if:

• You have AV running on the box
• The server/client is well patched (windows updates)

Might want to specifically look for good'ol conflicker!

Good Luck!