We help IT Professionals succeed at work.

DC rebooted twice in 12 hours with no apparent reason

I've got a 2008 R2 DC that rebooted twice in almost exactly twelve hours apart.  It did this morning at 4:02 am and today a 4:08 pm.  Don't really see anything in the logs.  Just a lot of warnings.  See below.  However those aren't new.  I've never been able to solve it.

The only other error is a disk error, but that is caused by the external disks I have attached to a USB hub.  This also is not a new error.

The driver detected a controller error on \Device\Harddisk3\DR3.

Any ideas on where to start looking?

Windows could not record  the Resultant Set of Policy (RSoP) information for the Group Policy extension <Security>. Group Policy settings successfully applied to the computer or user; however, management tools may not report accurately.
Comment
Watch Question

Commented:
Any Windows Updates that may have done it? I've seen this quite often where it ran an update & just rebooted. I only noticed this as it was "Applying Updates" on reboot while I was on it.
J.R. SitmanIT Director

Author

Commented:
You may be correct.  I had the settings to Auto install.  I just changed them to Download and notify.
I'll post tomorrow.

Commented:
Ok. Do you have any Group Policies in place as well for auto reboot times or is this individually managed?
CERTIFIED EXPERT
Top Expert 2012

Commented:
Hello

Even I will suggest primarily to check the windows update settings

If that doesn't work you may check if it was rebooted after giving BSOD you may check the DMP files located in C:\Windows\MEMORY.DMP or C:\Windows\Minidump

Use below article and a utility called dumpchk to verify those dump files
http://support.microsoft.com/kb/315271
Just check event id 6008 1074 in event viewer ----> System for what reason server rebooted.

Then troubleshoot according.
J.R. SitmanIT Director

Author

Commented:
Starting to get worried.  It did it again.  I'll try the debugging tools.
No there is not a GPO for rebooting
The event id 6008 tells me nothing.  Just the system shut down unexpectedly.
J.R. SitmanIT Director

Author

Commented:
I can't get the debugging tools installed.  It rebooted at 8:08 and again at 8:24.  I'm accessing it remotely.  I'll be in the office tomorrow.  Do you think a recent Microsoft update could be causing this?

Commented:
Not sure, there was a heck of a lot of new "Patch Tuesday" updates released this week it seems.
J.R. SitmanIT Director

Author

Commented:
can they be uninstalled?
CERTIFIED EXPERT
Top Expert 2013

Commented:
Yes you can uninstall

The only patch that I heard that caused any issues this month was 2657753  http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_update/microsoft-update-kb2647753-is-being-repeatedly/547647dc-245e-4a0d-91ca-2e84506bbe2d


You could also look for the windowsupdate.log file.   Hopefully this was an isolated incident.

Thanks

Mike
check page file setting configer properly and if memory dump create or not??

If it's not created then you can't guess which process or .exe cause the machine reboot.

Please configure memory dump setting then you can analysis the issue why machine reboot.

For configure memery dump please refer following Microsoft KB article. (http://support.microsoft.com/kb/307973).
J.R. SitmanIT Director

Author

Commented:
The memory dump locations do not exist.
On the display of the server was E171F PCIE Fatal Error, B0 D4 F0.
I removed all the external drives and so far it's been 7 hours with no reboot.
I'll post later
IT Director
Commented:
The server completely crashed this morning.  So I won't be able to continue with this post.
Thanks for helping.
J.R. SitmanIT Director

Author

Commented:
Server crashed

Explore More ContentExplore courses, solutions, and other research materials related to this topic.