Server 2003 restarting on it's own

Posted on 2007-08-09
Last Modified: 2012-08-13
we are using server 2003...........
we have not installed any ew software for months.... but now realize that it is constantly restarting...we get a system failure - stop error... and there are codes for it..  0x0000008e ( 0xc 0000005, 0x8081bbd5 , 0xf2bcec 98, 0x00000000 )... this usually leads me to a MS error messge thelling me that i have a device prolem... but not which one...
how do you begin to break this down and out?
looking for an interesting discusion....
Question by:intelogent
    LVL 23

    Expert Comment

    by:Malli Boppe
    did you try last known good configuration.
    LVL 13

    Expert Comment

    do you have automatic updates set to install on their own or did you install any device driver updates recently?  Is there any hardware plugged directly into the server (ie; printer, tape drive, USB drive)?  Unplug these and see if the problem continues.  
    LVL 8

    Expert Comment

    Is there a file C:\DEBUGLOG.TXT. If so, please post the contents.

    Check the event logs, specifically System and Application logs. Look for the red errors or yellow warnings that occur just prior to the reboots.

    Is the server a terminal server? If so, maybe a user has tried to install something.

    Have you added any printer drivers? These can sometimes cause problems.

    Author Comment

    Interesting thoughts....and i am not the Tech...which is usually found here... but i do like to learn..

    it is a terminal server.. However, i do not think TS Users can install programs .. can they.. would it not have to be in " install mode "
    "Check the event logs, specifically System and Application logs"    where are these logs visible...   I would like to check them.
    we have installed new disk back up unit....         i guess if the above does not work i could disable the device....and pull the ribon cable
    the server has restarted late a night when no one is printing... would that rule out a " printer driver"

    Last night, my Tech updATED EVERY DRIVER  in the system.....
    we will wait a deay or two to see it's effect...
    LVL 1

    Assisted Solution

    search for ms debugging tool, then find in c:\ a folder called minidumps, which are small dumps after each irrgular reboot. Analyse this minidumps, and youll get clues of what's going wrong. I had a network card driver error which was corrected once the new driver was installed. If the server is still in the warranty period, you could call their 800- and send them the minidump. They'll analise it for you.
    LVL 23

    Accepted Solution

    To go log CLICK start  CLICK RUn and type eventvwr and click okay. That should show the event viewer which would have application and system log.

    Author Comment

    thanks mboppe,

    I now found the event viewer... and the logs... They do show red and yellow..
    I see the certain things... like printer driver errors.. but they do not make sense....

    for instance....

    Event Type:      Error
    Event Source:      TermServDevices
    Event Category:      None
    Event ID:      1111
    Date:            8/13/2007
    Time:            7:15:32 AM
    User:            N/A
    Computer:      HICKSVILLE
    Driver HP Deskjet 6800 Series required for printer HP Deskjet 6800 Series is unknown. Contact the administrator to install the driver before you log in again.

    For more information, see Help and Support Center at
    0000: 00 00 00 00 12 0d 00 00   ........

    what does this tell you..surely, i use the printer all day long.

    any help appreciated
    LVL 8

    Assisted Solution

    That looks like a user connecting from a workstation that has a local HP Deskjet 6800. The MSTSC client attempts to connect the terminal server session to the local printer at the workstation, but cannot find a printer driver for it. I would not expect this to cause server reboots. Do those entries coincide with reboots?

    Did you look for the C:\DEBUGLOG.TXT file?

    Author Comment

    I have alerted every on  the server... terminal and local users to e mail every time there is a that should help us pinpoint......
    i can not find that file.....
    also, jsonnenvzla:   suggest i view the minidump... but that too.. i cannot find.
    i did a search on "my computer"
    should i not be able to find both...?
    LVL 8

    Expert Comment

    Do not trust the Explorer search function. You may also need to tweak the Explorer settings so that you are able to see hidden and system files...

    1 - From any Explorer window (eg My Computer), open the Tools menu and select Folder Options
    2 - Select the View tab and then make sure the following options are selected;
      - Select: Show hidden files & folders
      - Untick: Hide extensions for known filetypes
      - Untick: Hide protected operating system files

    You should now be able to locate the C:\DEBUGLOG.TXT file (if it exists) or the minidumps.

    It is quite easy to find out when a server has been restarted. Look in the System log for entries from the 'eventlog' source with event number 6009. This event is always logged at server boot up.

    You can 'filter' the event log so that only particular events are displayed if you like...

    1 - In the Event Viewer, right click on the System entry in the left hand pane and click on Properties
    2 - Select the Filter tab
    3 - Open the Event Source drop down list and select the event you are interested in (eg 'eventlog')
    4 - In the Event ID box, type an event ID number (eg 6009)
    5 - Click OK. All the events which match the filter will be displayed

    To clear the filter, either go back to the Filter tab, click Restore Defaults then OK, or, close and re-open the event viewer.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now