Serve rebooting or shutting down at random.

One of our customers has an HP Proliant ML350 G5 running SBS 2003 R2. Two or three times a day it will reboot or shut down. It does so in an orderly manner (ie it does not crash), and it gives an event of USER32 ID 1074 "The process explorer.exe has initiated the restart (or shutdown) of SERVER1....." The reasons it gives are various ie Reconfiguration (Planned) or Application Installation (Planned), They are always logged as "Planned". It has just run over the weekend with no problems. HP have asked me to install the latest BIOS and PSP which I will do today. I have even considered the possibility of hacking but I don't think that is the case. It may be useful to know that previously the system has been inclined to randomly restart unexpectedly (ie NOT in an orderly manner), it is these last few days where the symptoms seem to have changed to orderly reboots. Any ideas would be appreciated.
nickjbryan5Asked:
Who is Participating?
 
RowleyConnect With a Mentor Commented:
Then if everything else has come up blank, and you're getting *graceful* shutdowns, then that might be a good avenue to explore. By all means, update all the drivers/firmware etc, just make sure you know how to recover if things go awry, but *graceful* shutdowns? UPS connected to com port?

Investigate your power supply.
0
 
bdpsgCommented:
hi,

you might want to check under scheduled tasks whether there has been any auto restart tasks being created....

also you might want to check whether it could be any of the installed applications on the server that is causing the reboot......
0
 
nickjbryan5Author Commented:
I have checked for scheduled tasks and the only applications on the server are SBS applications ie Exchange, SQL and Veritas backup.
0
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

 
RowleyCommented:
Have you configured any power options properties, specifically the UPS configuration or do you have any UPS agents running on the machine? Anything connected to the COM ports?
0
 
nickjbryan5Author Commented:
Rowley.  We have an APC SmartUPS 1500 feeding the system, this is configured to power the server for 15mins before shutting the system down. Therefore we have the APC agent running on this machine and it connects via COM1.
0
 
nickjbryan5Author Commented:
I'll do some investigation in that area and come back if I need more help. Thanks
0
 
nickjbryan5Author Commented:
I have made some more observations on this problem. I notice that a few seconds before the server reboots or shuts down there is a flurry of "Failure Audit" messages in the security log, these belong to various users. I am wondering whether the problem could be caused by a noisy/dirty mains supply which could affect the whole network.
0
 
nickjbryan5Author Commented:
An update on this problem. I have disconnected the UPS from the serial port and disabled the ups agent service on the server. It has now been running for 7 days without a problem, so I will leave it another 7 days and see how it goes. It used to reboot at least once a day, sometimes three or four times, so it's looking better.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.