Solved

SBS 2000 Server shuts down intermittently - not a hardware issue

Posted on 2006-06-26
11
324 Views
Last Modified: 2010-04-19
I have a client with a Dell PowerEdge 2500SC Windows 2000 Small Business Server that for the past couple weeks has been shutting itself down for no apparent reason.  The logs show only two things before shutting down:

Information type log entry - event ID 26 - Application popup: java.exe - DLL Initialization Failed : The application failed to initialize because the window station is shutting down.  (this repeats 6 times)

then 20-30 seconds later it shows the typical:

Information type log entry - event ID 6006 - The Event log service was stopped.

When you boot it back up all the log entries are normal and nothing mentions an unexpected shutdown.

Here are some steps I have taken:

- I ran a full virus scan (Symantec AV Corp. 10.0) which came up with only a rather benign trojan which after it was removed made no diffence in it shutting down.  
- It being a Dell, it has a diagnostics utility partition you can boot into and after running the full hardware tests it came back with no errors or warnings.  

A server rebuild does not sound appealling to me or my client so I'm throwing this out there to see if anyone has any thoughts or suggestions.  Thanks.
0
Comment
Question by:jtgerdes
  • 5
  • 4
11 Comments
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17009028
What are the errors immediately PRECEDING the event 26 errors?  These are already recognizing that windows is shutting down... you need to find out what's happening prior to that.

Jeff
TechSoEasy
0
 

Author Comment

by:jtgerdes
ID: 17009614
Well that's the thing, it's nothing out of the ordinary, and nothing consistent that is right before it.  In fact there's no errors at all - just information events.  It might be a print job sent 10 minutes earlier or some other normal everyday event that may have been 1 minute or 30 minutes prior to the event 26 errors.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17010390
Are you looking in both the application AND system event logs?

Jeff
TechSoEasy
0
 

Author Comment

by:jtgerdes
ID: 17010950
yes - I was looking in all the logs for some kind of clues.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17016595
Why do you think that this is not a hardware issue?

Jeff
TechSoEasy
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:jtgerdes
ID: 17018763
Two reasons:

A. It passed all hardware diagnostic tests with no problems.
B. As I mentioned earlier, it is aware of itself shutting down according to the logs, and upon reboot gives no "unexpected shut down" type error log.

In fact, I rebooted it on purpose to compare the log entries from an unwanted shut down with the log entries of a purposeful reboot and they are identical.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17027547
Do you have any Event 5000's in your logs?

What service pack do you have applied?

Jeff
TechSoEasy
0
 

Author Comment

by:jtgerdes
ID: 17031952
Without looking at it again to double check, I'm fairly certain that there are no event 5000's.

However, interestingly enough, I uninstalled Exchange from it several days ago and it has not shut down since.  It had not been used for a number of months and was not going to be used again.  The services had all been disabled, but I thought I'd give it a shot anyway.  So far so good.  I'll update this if in a week or so if it doesn't shut down again, but so far this is the longest we've gone in a few weeks without it spontaneously shutting down.

Thanks for the suggestions so far though.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17033054
ok, good luck!
0
 

Accepted Solution

by:
CetusMOD earned 0 total points
ID: 17612564
PAQed with points refunded (500)

CetusMOD
Community Support Moderator
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now