We have had two recent random reboots of a production Windows 2003 SP2 server. The server hosts Exchange 2003, SP2.
Event Viewer shows nothing except:
The previous system shutdown at 12:11:29 PM on 11/18/2010 was unexpected.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp
Further inspection of the minidump files shows that it may be caused by netbt.sys.
See embedded screenshot
The below MS article states that it may be caused by a leak occurs in the Netbt.sys file some Terminal Server environments, however we are running Windows 2003 SP2:
Has anyone else come across this, and if so have any recommendations towards resolution?