Serve rebooting or shutting down at random.

Posted on 2008-09-29
Last Modified: 2012-05-05
One of our customers has an HP Proliant ML350 G5 running SBS 2003 R2. Two or three times a day it will reboot or shut down. It does so in an orderly manner (ie it does not crash), and it gives an event of USER32 ID 1074 "The process explorer.exe has initiated the restart (or shutdown) of SERVER1....." The reasons it gives are various ie Reconfiguration (Planned) or Application Installation (Planned), They are always logged as "Planned". It has just run over the weekend with no problems. HP have asked me to install the latest BIOS and PSP which I will do today. I have even considered the possibility of hacking but I don't think that is the case. It may be useful to know that previously the system has been inclined to randomly restart unexpectedly (ie NOT in an orderly manner), it is these last few days where the symptoms seem to have changed to orderly reboots. Any ideas would be appreciated.
Question by:nickjbryan5
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2

Expert Comment

ID: 22594831

you might want to check under scheduled tasks whether there has been any auto restart tasks being created....

also you might want to check whether it could be any of the installed applications on the server that is causing the reboot......

Author Comment

ID: 22594890
I have checked for scheduled tasks and the only applications on the server are SBS applications ie Exchange, SQL and Veritas backup.
LVL 13

Expert Comment

ID: 22595140
Have you configured any power options properties, specifically the UPS configuration or do you have any UPS agents running on the machine? Anything connected to the COM ports?
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.


Author Comment

ID: 22596671
Rowley.  We have an APC SmartUPS 1500 feeding the system, this is configured to power the server for 15mins before shutting the system down. Therefore we have the APC agent running on this machine and it connects via COM1.
LVL 13

Accepted Solution

Rowley earned 0 total points
ID: 22596897
Then if everything else has come up blank, and you're getting *graceful* shutdowns, then that might be a good avenue to explore. By all means, update all the drivers/firmware etc, just make sure you know how to recover if things go awry, but *graceful* shutdowns? UPS connected to com port?

Investigate your power supply.

Author Comment

ID: 22596981
I'll do some investigation in that area and come back if I need more help. Thanks

Author Comment

ID: 22604092
I have made some more observations on this problem. I notice that a few seconds before the server reboots or shuts down there is a flurry of "Failure Audit" messages in the security log, these belong to various users. I am wondering whether the problem could be caused by a noisy/dirty mains supply which could affect the whole network.

Author Comment

ID: 22709710
An update on this problem. I have disconnected the UPS from the serial port and disabled the ups agent service on the server. It has now been running for 7 days without a problem, so I will leave it another 7 days and see how it goes. It used to reboot at least once a day, sometimes three or four times, so it's looking better.

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The 6120xp switches seem to have a bug when you create a fiber port channel when you have a UCS fabric interconnects talking to them.  If you follow the Cisco guide for the UCS, the FC Port channel will never come up and it will say that there are n…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question