Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Server restart

Posted on 2013-02-01
7
Medium Priority
?
325 Views
Last Modified: 2013-02-07
Please help, I need to find out why my server restart (Server 2008). I have a IIS server, it restart by-itself this morning around 8:30am, I saw at the NIC property, it shows duration since it restarted from 8:30am. From event views, in system, application and security they all show events after restart, is there anyway I can find out who or why this server restarted? Thank you in advance =)
0
Comment
Question by:weikiiro
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 5

Expert Comment

by:xperttech
ID: 38844501
Have you selected to apply Windows Updates automatically?
0
 
LVL 22

Expert Comment

by:CompProbSolv
ID: 38844517
The event log should indicate if the restart was unexpected (possibly caused by power failure) or not.  That distinction will help greatly in determining the direction to look.
0
 

Author Comment

by:weikiiro
ID: 38844695
Last windows update was on 5/11/2012.

In system log it shows unexpected shutdown, after server come back, and I put in "Other". Please see attachment.
System-Event-Logs.jpg
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 5

Accepted Solution

by:
xperttech earned 2000 total points
ID: 38844721
This looks like a crash. Perhaps the "Other" reason was provided "after the fact". When you logged in, it warned you of improper shutdown and asked for the reason.

I would check the system folder for a dump or mini-dump. Probably a bad driver could have cause a BSOD (Blue Screen of Death).

-XT
0
 

Author Comment

by:weikiiro
ID: 38844741
Yes, I input the "Other" reason after server come back.
This is a VM running on local storage, local storage looks ok, please see attachment.
Where I should find the dump or mini-dump file? detail path please for server 2008. Thank you =)
Local-storage.jpg
0
 

Author Comment

by:weikiiro
ID: 38844742
And what should I look for in the dump file? =)
0
 
LVL 5

Assisted Solution

by:xperttech
xperttech earned 2000 total points
ID: 38844798
Click Start, and then click Control Panel.
Click Performance and Maintenance, and then click System.
On the Advanced tab, click Settings under Startup and Recovery.

Source: http://support.microsoft.com/kb/254649?wa=wsignin1.0


You can use Dumpchk.exe to inspect the dump file:
http://support.microsoft.com/kb/156280
0

Featured Post

Does Your Cloud Backup Use Blockchain Technology?

Blockchain technology has already revolutionized finance thanks to Bitcoin. Now it's disrupting other areas, including the realm of data protection. Learn how blockchain is now being used to authenticate backup files and keep them safe from hackers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question