Server restart

Please help, I need to find out why my server restart (Server 2008). I have a IIS server, it restart by-itself this morning around 8:30am, I saw at the NIC property, it shows duration since it restarted from 8:30am. From event views, in system, application and security they all show events after restart, is there anyway I can find out who or why this server restarted? Thank you in advance =)
weikiiroAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
xperttechConnect With a Mentor Commented:
This looks like a crash. Perhaps the "Other" reason was provided "after the fact". When you logged in, it warned you of improper shutdown and asked for the reason.

I would check the system folder for a dump or mini-dump. Probably a bad driver could have cause a BSOD (Blue Screen of Death).

-XT
0
 
xperttechCommented:
Have you selected to apply Windows Updates automatically?
0
 
CompProbSolvCommented:
The event log should indicate if the restart was unexpected (possibly caused by power failure) or not.  That distinction will help greatly in determining the direction to look.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
weikiiroAuthor Commented:
Last windows update was on 5/11/2012.

In system log it shows unexpected shutdown, after server come back, and I put in "Other". Please see attachment.
System-Event-Logs.jpg
0
 
weikiiroAuthor Commented:
Yes, I input the "Other" reason after server come back.
This is a VM running on local storage, local storage looks ok, please see attachment.
Where I should find the dump or mini-dump file? detail path please for server 2008. Thank you =)
Local-storage.jpg
0
 
weikiiroAuthor Commented:
And what should I look for in the dump file? =)
0
 
xperttechConnect With a Mentor Commented:
Click Start, and then click Control Panel.
Click Performance and Maintenance, and then click System.
On the Advanced tab, click Settings under Startup and Recovery.

Source: http://support.microsoft.com/kb/254649?wa=wsignin1.0


You can use Dumpchk.exe to inspect the dump file:
http://support.microsoft.com/kb/156280
0
All Courses

From novice to tech pro — start learning today.