Server 2003 Shutdown Event ID 1074

We are running Server 2003 Enterprise Edition SP2. Yesterday afternoon the server shutdown on its own. The event log shows the following.

Date: 9/16/2010          Source: USER32
Time: 3:49:17 PM       Category: None
Type Information         Event ID: 1074
User: NT Authority\system
Computer: <removed>

Description:
The process svchost.exe has initiated the power off of computer <removed> on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x80070020
Shutdown Type: power off
Comment:

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

There have been no recent changes to the server. No scripts running. Automatic updates are set to notify before installing.

Any help would be great. Thanks in advance
TommyCasanovaJanitorAsked:
Who is Participating?
 
astevens_ITCommented:
http://www.experts-exchange.com/OS/Miscellaneous/Q_21759388.html

Seems like someone initiated the shut down. Might be time to tighten security...
0
 
TommyCasanovaJanitorAuthor Commented:
Upon further investigation following your comment. I have found the culprit. Thank you astevens.
0
 
TommyCasanovaJanitorAuthor Commented:
problem resolved.
0
 
davorinCommented:
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.