Link to home
Start Free TrialLog in
Avatar of isdd2000
isdd2000

asked on

Random Restart

Hi Experts,

I logged into my server this morning only to find it recovered from an unexpected shutdown. We are running an SBS 2008 system, and all the usual services - WSUS, File, Mail, Print, DHCP, DNS, AV, IIS & Backup.

I have looked through the event logs and all I can find is the below. There was no power failures and no other events that raise serious alarm bells.

Log Name:      System
Source:        Microsoft-Windows-WHEA-Logger
Date:          4/09/2013 3:40:03 AM
Event ID:      1
Task Category: None
Level:         Error
Keywords:      WHEA Error Event Logs
User:          LOCAL SERVICE
Computer:      SBS2008.domain.local
Description:
An uncorrected hardware error occurred. A record describing the condition is contained in the data section of this event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WHEA-Logger" Guid="{c26c4f3c-3f66-4e99-8f8a-39405cfed220}" />
    <EventID>1</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000002</Keywords>
    <TimeCreated SystemTime="2013-09-03T17:40:03.048Z" />
    <EventRecordID>3172895</EventRecordID>
    <Correlation ActivityID="{05F7EF24-FE0B-4B0E-8287-FE7ABD0E4B75}" />
    <Execution ProcessID="1476" ThreadID="2640" />
    <Channel>System</Channel>
    <Computer>SBS2008.domain.local</Computer>
    <Security UserID="S-1-5-19" />
  </System>
  <EventData>
    <Data Name="Length">224</Data>
    <Data Name="RawData">435045520102FFFFFFFF01000100000002000000E00000000E27110003090D140000000000000000000000000000000000000000000000000000000000000000BDC407CF89B7184EB3C41F732CB57131FE6FF5E89C91C54CBA8865ABE14913BB5548AC76CCA8CE01020000000000000000000000000000000000000000000000C8000000180000000102000001000000E85412E7B9C14049AB76909703A4320F0000000000000000000000000000000001000000000000000000000000000000000000000000000089C20201327E2020000423036FC104FF0000000000000000</Data>
  </EventData>
</Event>

There is no memory.dmp's or minidumps.dmp.

Look forward to reading your expert responses!
Avatar of N-W
N-W
Flag of Australia image

What hardware are you running here? HP, Dell, IBM, whitebox, etc.?

Depending on what the hardware is, you may be able to run diagnostics to confirm all of your hardware is functioning correctly (HDDs, RAM, CPUs, everything).
Avatar of isdd2000
isdd2000

ASKER

Hi N-W,

Its an IBM server!
ASKER CERTIFIED SOLUTION
Avatar of Sanjay Santoki
Sanjay Santoki
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi Guys,

I will go with you recommendation on performing hardware updates.

mnkhawaja,

How do I access these diagnostics?
Hello,

You can download the diagnostic tools from the IBM website.  

http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=tool-center

Type in your serial number if you know it.
(You can find it by typing the following into cmd:     wmic bios get serialnumber)

Have you made any hardware changes recently?  Any new USB Drives etc?
Hi Scorpeo,

No hardware changes at all!
Have you found and installed the diagnostic tools?

Do you have warranty on the server?
Hi Scorpeo,

I could not find the right diagnostic tool, the server is about 6 months out of warranty.
What is the model number of your server?  I will see if I can find it for you.

Any more restarts since then?
IBM servers have a little panel (usually it is above the CD-ROM and in some models, you have to remove the cover).  The panel has LEDs and you press the test button.  Under the cover, there is instructions on how to interpret the results.
Hi Scorpeo,
It is an IBM system x3650, strangely has not happened again..

Mnkhawaia,

Does the server have to be off for this?
I don't believe so but you should refer to IBM documentations.  I have run it only when the server was off.