Solved

SBS 2008 spontaneous shutdown

Posted on 2013-10-28
3
647 Views
Last Modified: 2013-10-28
I've got a client with sbs 2008 running exchange and AD/DC onsite. This afternoon, the server spontaneously shut itself down, cleanly i might add, twice. 53 mins apart. I've reviewed the event logs and both times:

The process Explorer.EXE has initiated the shutdown of computer SRASERVER09 on behalf of user srafoods\Administrator for the following reason: Other (Planned)
 Reason Code: 0x85000000
 Shutdown Type: shutdown
 Comment: jake

I've changed the administrator password and a third shutdown, 53 mins later or somewhere there abouts, has not occurred, which I would expect were this a service or application related error. I hesitate to make this accusation, because it has large implications in this case, but in the absence of other errors in the event log, does this error not point to the fact that someone intentionally shut this server down by way of the administrator account? I need to entertain all other possibilities.
0
Comment
Question by:sdholden28
  • 2
3 Comments
 
LVL 3

Expert Comment

by:ltechsolutions
ID: 39607531
Reason code 0x85000000 usually indicates someone has manually requested the shutdown.

When you select Shutdown, you're required to enter a 'comment' as a reason for the shutdown. In your example, whoever shut the server down entered "jake" as the comment before clicking OK.

Based on what I'm seeing, I find it highly unlikely that this was caused by any sort of program or script - it's fairly clear that this was done manually.
0
 

Author Comment

by:sdholden28
ID: 39607539
My thoughts exactly. Just wanted some other opinions. If I report my findings as "user initiated shutdown" then it's needs to be more than accurate.
0
 
LVL 3

Accepted Solution

by:
ltechsolutions earned 500 total points
ID: 39607544
Based on your post, I see no evidence to the contrary.

My official diagnosis is that the shutdown was manually initiated by the Administrator account.
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now