<div>
First check for memory dumps if you have those enabled. its usually in C:\Windows\Minidump. <br />
If you don't have a debugger installed to analyze You can upload them to an online service such as <a href="http://www.osronline.com/page.cfm?name=analyze" rel="ugc">http://www.osronline.com/p<wbr />age.cfm?na<wbr />me=analyze<wbr /></a> . <br />
These will help you pinpoint drivers or applications which caused a system to crash or throw a bluescreen etc.<br />
<br />
You can also follow related discussion have a look at this :<br />
<br />
<a href="https://www.experts-exchange.com/questions/23244203/Server-2003-Event-ID-6008-Unexpected-Reboot.html" rel="ugc">http://www.experts-exchang<wbr />e.com/OS/M<wbr />icrosoft_O<wbr />perating_S<wbr />ystems/Ser<wbr />ver/2003_S<wbr />erver/Q_23<wbr />244203.htm<wbr />l</a>
</div>


First check for memory dumps if you have those enabled. its usually in C:\Windows\Minidump.
If you don't have a debugger installed to analyze You can upload them to an online service such as http://www.osronline.com/page.cfm?name=analyze [http://www.osronline.com/page.cfm?name=analyze] .
These will help you pinpoint drivers or applications which caused a system to crash or throw a bluescreen etc.

You can also follow related discussion have a look at this :

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_23244203.html [https://www.experts-exchange.com/questions/23244203/Server-2003-Event-ID-6008-Unexpected-Reboot.html]

<div>
the memory dumps should be enabled or disabled? how to enable/disable those<br />
<br />
Thanks<br />
Gagandeep Singh Rawat
</div>


the memory dumps should be enabled or disabled? how to enable/disable those

Thanks
Gagandeep Singh Rawat

<div>
Hi gagandeep <br />
<br />
for enable/disable memory dump checkout Microsoft support <br />
<br />
<a href="http://support.microsoft.com/kb/315263" rel="ugc">http://support.microsoft.c<wbr />om/kb/3152<wbr />63</a>
</div>


Hi gagandeep

for enable/disable memory dump checkout Microsoft support

http://support.microsoft.com/kb/315263 [http://support.microsoft.com/kb/315263]

<div>
<div class="content wysiwyg-content">
Hi experts<br />
<br />
How do get to know that my server is restarted due to any hardware fault. There are unexpected shutdown log files in 6008 event id of server.<br />
<br />
is there ant specific log id number for detecting an unexpected shutdown over server due to hardware failure?<br />
<br />
Kindly find attachment for more detail<br />
<br />
Thanks<br />
Gagandeep Singh Rawat<br />
<a href="https://filedb.experts-exchange.com/incoming/2013/01_w04/629958/6008.JPG" target="_blank" class="file-inline" title="Unexpected Shutdown (24 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>6008.JPG</a><br />
<a href="https://filedb.experts-exchange.com/incoming/2013/01_w04/629959/1076.JPG" target="_blank" class="file-inline" title="Unexpected Server (21 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>1076.JPG</a>
</div>
</div>


1076.JPG

6008.JPG

Hi experts

How do get to know that my server is restarted due to any hardware fault. There are unexpected shutdown log files in 6008 event id of server.

is there ant specific log id number for detecting an unexpected shutdown over server due to hardware failure?

Kindly find attachment for more detail

Thanks
Gagandeep Singh Rawat

Event log id for shutdown on hardware failure

Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).