Server restart

Please help, I need to find out why my server restart (Server 2008). I have a IIS server, it restart by-itself this morning around 8:30am, I saw at the NIC property, it shows duration since it restarted from 8:30am. From event views, in system, application and security they all show events after restart, is there anyway I can find out who or why this server restarted? Thank you in advance =)
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

xperttechConnect With a Mentor Commented:
This looks like a crash. Perhaps the "Other" reason was provided "after the fact". When you logged in, it warned you of improper shutdown and asked for the reason.

I would check the system folder for a dump or mini-dump. Probably a bad driver could have cause a BSOD (Blue Screen of Death).

Have you selected to apply Windows Updates automatically?
The event log should indicate if the restart was unexpected (possibly caused by power failure) or not.  That distinction will help greatly in determining the direction to look.
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

weikiiroAuthor Commented:
Last windows update was on 5/11/2012.

In system log it shows unexpected shutdown, after server come back, and I put in "Other". Please see attachment.
weikiiroAuthor Commented:
Yes, I input the "Other" reason after server come back.
This is a VM running on local storage, local storage looks ok, please see attachment.
Where I should find the dump or mini-dump file? detail path please for server 2008. Thank you =)
weikiiroAuthor Commented:
And what should I look for in the dump file? =)
xperttechConnect With a Mentor Commented:
Click Start, and then click Control Panel.
Click Performance and Maintenance, and then click System.
On the Advanced tab, click Settings under Startup and Recovery.


You can use Dumpchk.exe to inspect the dump file:
All Courses

From novice to tech pro — start learning today.