Server restart

Posted on 2013-02-01
Last Modified: 2013-02-07
Please help, I need to find out why my server restart (Server 2008). I have a IIS server, it restart by-itself this morning around 8:30am, I saw at the NIC property, it shows duration since it restarted from 8:30am. From event views, in system, application and security they all show events after restart, is there anyway I can find out who or why this server restarted? Thank you in advance =)
Question by:weikiiro
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3

Expert Comment

ID: 38844501
Have you selected to apply Windows Updates automatically?
LVL 21

Expert Comment

ID: 38844517
The event log should indicate if the restart was unexpected (possibly caused by power failure) or not.  That distinction will help greatly in determining the direction to look.

Author Comment

ID: 38844695
Last windows update was on 5/11/2012.

In system log it shows unexpected shutdown, after server come back, and I put in "Other". Please see attachment.
SharePoint Admin?

Enable Your Employees To Focus On The Core With Intuitive Onscreen Guidance That is With You At The Moment of Need.


Accepted Solution

xperttech earned 500 total points
ID: 38844721
This looks like a crash. Perhaps the "Other" reason was provided "after the fact". When you logged in, it warned you of improper shutdown and asked for the reason.

I would check the system folder for a dump or mini-dump. Probably a bad driver could have cause a BSOD (Blue Screen of Death).


Author Comment

ID: 38844741
Yes, I input the "Other" reason after server come back.
This is a VM running on local storage, local storage looks ok, please see attachment.
Where I should find the dump or mini-dump file? detail path please for server 2008. Thank you =)

Author Comment

ID: 38844742
And what should I look for in the dump file? =)

Assisted Solution

xperttech earned 500 total points
ID: 38844798
Click Start, and then click Control Panel.
Click Performance and Maintenance, and then click System.
On the Advanced tab, click Settings under Startup and Recovery.


You can use Dumpchk.exe to inspect the dump file:

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question