Link to home
Start Free TrialLog in
Avatar of NinEliAbe
NinEliAbe

asked on

Windows SBS 2003 Server Rebooting Unexpectedly (Error ID 6008)

Several days ago my server began unexpected shutdowns and rebooting.  It has restarted 5 times within the past 48 hours, and the Event Log gives this message: “The previous system shutdown at %1 on %2 was unexpected.”  The Event ID is 6008 and the Symbolic Name is EVENT_EventlogAbnormalShutdown.  I have experienced no issues with the server until now.  I have researched this problem and there seem to be any number of possible causes for the unexpected reboots, from a faulty power supply to bad RAM to antivirus or disk-cleaning software prompting a system restart.  I would like to know what my next step should be in diagnosing this issue.  Should I perform a memory dump to help determine what is causing this?  Any advice would be appreciated.
Avatar of it_saige
it_saige
Flag of United States of America image

What kind of server is it??  Manufacturer, etc. etc.

I would start looking at a hardware related issue, unless the Windows Event Log's indicate an application/system error.

With hardware it could be anything from the RAID Controller (if any) to Power Supply.  However, without knowing the manufacturer I really wouldn't be able to give any additional advice.

-saige-
Did your server loose its activation status? If for some reason it show not activated with MS it will reboot every 6 hours until you activate it? Run the activation wizard to confirm it's still activated. Just a thought.
Avatar of NinEliAbe
NinEliAbe

ASKER

it_saige,
 
System information is as follows:
 
HP ProLiant ML150
Windows SBS 2003 with Service Pack 2
Intel Xeon CPU
4 GB RAM

Adaptec Serial ATA HostRAID (RAID 10)



I would do the following
1. Run the latest hp firmware update DVD (I think is about 9.2 now)
2. Run hp diagnostics CDROM to test all hardware
Working on installing critical updates.  Some additional information:
As I work on it, the server is running extremely slowly, as in sometimes taking  seconds to respond to a mouse click, and minutes to open or close a window.  Nothing is evident in device manager - the system idle process is almost always 95% or more, there is plenty of memory, and read and writes are moderate.

I am wondering if I might have an infection -  I had Sophos until very recently, but unistalled it because I had kept having problems with it and read a suggestion to just keep the clients well protected and let the SBS run.

I am running a full scan using Malicious Software Removal tool.  If it doesn't find anything, is there some other scan I should try?  Also, any other ideas what could be causing the extreme slowness - could it be hardware?  Software?
I meant nothing is evident in task manager in my previous comment.
SOLUTION
Avatar of it_saige
it_saige
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Ran the HP diagnostics, everything came back clean.  The server hung while running a Malicious Software Removal Tool full scan  (not sure if it caused it) and after restarting the Quick scan came back clean.  

Would a memory dump help dx the restarts?  I am now wondering if the the slowness and the restarts are related - could a it hang to the point it restarts?
Apart from Event ID 6008 is the event viewer showing any other errors or warnings prior to the shutdown?
If the Offline Diagnostics came back clean then yes, the next step would be a memory dump.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Well at least it turned out to be a hardware issue.  Usually batter back-ups make a shrilling noise when their batteries have failed, however, if the onboard speaker is bad on the battery backup then that would explain why you didn't post something like.  "Server shuts down, errie shrilling noise occuring while server is shutdown and continues while the server is running..."  I'm just glad that you got it fixed.

-saige-

P.S. -->  I would recommend, though, that you install the monitoring software that is included with the replacement UPS and attatch it by way of serial or USB connection.  This will make it easier in the future to diagnose.
Happened no one came up with the answer.