Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 882
  • Last Modified:

Serve rebooting or shutting down at random.

One of our customers has an HP Proliant ML350 G5 running SBS 2003 R2. Two or three times a day it will reboot or shut down. It does so in an orderly manner (ie it does not crash), and it gives an event of USER32 ID 1074 "The process explorer.exe has initiated the restart (or shutdown) of SERVER1....." The reasons it gives are various ie Reconfiguration (Planned) or Application Installation (Planned), They are always logged as "Planned". It has just run over the weekend with no problems. HP have asked me to install the latest BIOS and PSP which I will do today. I have even considered the possibility of hacking but I don't think that is the case. It may be useful to know that previously the system has been inclined to randomly restart unexpectedly (ie NOT in an orderly manner), it is these last few days where the symptoms seem to have changed to orderly reboots. Any ideas would be appreciated.
0
nickjbryan5
Asked:
nickjbryan5
  • 5
  • 2
1 Solution
 
bdpsgCommented:
hi,

you might want to check under scheduled tasks whether there has been any auto restart tasks being created....

also you might want to check whether it could be any of the installed applications on the server that is causing the reboot......
0
 
nickjbryan5Author Commented:
I have checked for scheduled tasks and the only applications on the server are SBS applications ie Exchange, SQL and Veritas backup.
0
 
RowleyCommented:
Have you configured any power options properties, specifically the UPS configuration or do you have any UPS agents running on the machine? Anything connected to the COM ports?
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
nickjbryan5Author Commented:
Rowley.  We have an APC SmartUPS 1500 feeding the system, this is configured to power the server for 15mins before shutting the system down. Therefore we have the APC agent running on this machine and it connects via COM1.
0
 
RowleyCommented:
Then if everything else has come up blank, and you're getting *graceful* shutdowns, then that might be a good avenue to explore. By all means, update all the drivers/firmware etc, just make sure you know how to recover if things go awry, but *graceful* shutdowns? UPS connected to com port?

Investigate your power supply.
0
 
nickjbryan5Author Commented:
I'll do some investigation in that area and come back if I need more help. Thanks
0
 
nickjbryan5Author Commented:
I have made some more observations on this problem. I notice that a few seconds before the server reboots or shuts down there is a flurry of "Failure Audit" messages in the security log, these belong to various users. I am wondering whether the problem could be caused by a noisy/dirty mains supply which could affect the whole network.
0
 
nickjbryan5Author Commented:
An update on this problem. I have disconnected the UPS from the serial port and disabled the ups agent service on the server. It has now been running for 7 days without a problem, so I will leave it another 7 days and see how it goes. It used to reboot at least once a day, sometimes three or four times, so it's looking better.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 5
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now