Unexpected Restart Without Memory Dump On Lenovo Workstation

A newer windows 7 64 bit system (M91p) is shutting down unexpectedly without memory dump.  
Power source has been verified
Hard Drive was replaced
System Protection was turned off
Storage Craft Shadow Protect was turned off
Machine is on a workgroup


Is this software related?  Or hardware?  
Not sure what to look at next.  Any advise is appreciated.  I can provide more info as needed.
CompexTwoAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pradeep DubeyConsultantCommented:
First of all configure your machine for a memory dump as given in below link :

http://www.sophos.com/en-us/support/knowledgebase/111474.aspx

also,

setup your machine to start with the only required startup services/application. as given below link:
support.microsoft.com/kb/331796
0
JohnBusiness Consultant (Owner)Commented:
In addition, go to System Properties (Control Panel or right click on My Computer) and to the Advance Tab. Click on Startup and Recovery Settings and uncheck (deselect) Automatically Restart. That will leave the Blue Screen on the monitor and you can let us know what it says.

... Thinkpads_User
0
Skyler KincaidNetwork/Systems EngineerCommented:
We worked with an HP tech on a similar issue and they had to replace the motherboard. If the computer is under warranty you need to open a case with them and they will go through the following:

1)Hard drive (you already have tried this)
2) Power supply (you already tried this)
3) Memory (you can run test on this to verify it)
4) CPU and Motherboard (this was the case for the last machine that we had, it would bluescreen randomly with almost no information)
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

AshleySPMCommented:
Do the Windows System or Application event logs suggest anything?
0
CompexTwoAuthor Commented:
We will need to setup a full memory dump, as for now.  the even log shows:
6008 Message:       
The previous system shutdown at 6:07:29 PM on ¿10/¿12/¿2013 was unexpected.

and then if you look right before that the last entry is
7036 The Volume Shadow Copy service entered the stopped state.
and
8224 The VSS service is shutting down due to idle timeout.

We will also see if it happens again and we can get a full dump.

thanks
0
CompexTwoAuthor Commented:
We will need to setup a full memory dump, as for now. the even log shows:
6008 Message:
The previous system shutdown at 6:07:29 PM on ¿10/¿12/¿2013 was unexpected.

and then if you look right before that the last entry is
7036 The Volume Shadow Copy service entered the stopped state.
and
8224 The VSS service is shutting down due to idle timeout.

We will also see if it happens again and we can get a full dump.
0
Pradeep DubeyConsultantCommented:
Mean while check for VSS errors and VSS writers/providers status.
use below command to check vss writers / providers status :
VSSADMIN list writers

and

VSSADMIN list providers


Along with this try to take backup of the machine (system state). It uses VSS writers / providers. If unexpected shutdown cause by these things machine will restart again when VSS backup starts.
0
Skyler KincaidNetwork/Systems EngineerCommented:
You guys always make me laugh when you take these rather simple issues and dig so deep.

I have seen these a hundred times. It is a hardware error that is most likely related to something overheating or shorting out. If the machine is under warranty Lenovo will send a take to replace anything and everything until the problem is fixed.

RAM
MOTHERBOARD
PROCESSOR

The couple of times I have seen random shut downs like you described they replaced the motherboard and the processor. Problem solved. Don't waste a bunch of time troubleshooting the OS when it is a hardware issue.
0
CompexTwoAuthor Commented:
additional info: the last event log message before the shutdown alert is this:

Event ID: 10 Source: Microsoft-Windows-WMI
Message: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
0
AshleySPMCommented:
CompexTwo,

That error is unrelated and a FixIt has been provided by Microsoft http://support.microsoft.com/default.aspx?scid=kb;en-US;2545227 

I think xKinCaidx is right in looking for a hardware error. Do you know how to run hardware diagnostics on your machine?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Desktops

From novice to tech pro — start learning today.