[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 6327
  • Last Modified:

Win 2008 R2 keeps turning Off Automatically

Hi All,


I have test server which is holding Xenapp roles and it's Vm server hosted in VMWARE.
Since last week friday ,My server is being turned off automatically...
While analyzing the log i found the following events..can some please help me on this.

Also,am using a trail version of Win 2008 R2 server..


Events:

This is the showing repeatedly whenver the turn off occurs

Log Name:      System
Source:        USER32
Date:          11/11/2013 6:01:10 PM
Event ID:      1074
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:      TestXen.federated.fds
Description:
The process wininit.exe (127.0.0.1) has initiated the power off of computer TESTXEN on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown
 Reason Code: 0x80070000
 Shutdown Type: power off
 Comment:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="USER32" />
    <EventID Qualifiers="32768">1074</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-11-12T02:01:10.000000000Z" />
    <EventRecordID>6213</EventRecordID>
    <Channel>System</Channel>
    <Computer>TestXen.federated.fds</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>wininit.exe (127.0.0.1)</Data>
    <Data>TESTXEN</Data>
    <Data>Legacy API shutdown</Data>
    <Data>0x80070000</Data>
    <Data>power off</Data>
    <Data>
    </Data>
    <Data>NT AUTHORITY\SYSTEM</Data>
    <Binary>00000780000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
  </EventData>
</Event>



Second :

Log Name:      System
Source:        Microsoft-Windows-Wininit
Date:          11/12/2013 9:44:56 AM
Event ID:      11
Task Category: None
Level:         Warning
Keywords:      
User:          SYSTEM
Computer:      TestXen.federated.fds
Description:
Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206F6DEA-D3C5-4D10-BC72-989F03C8B84B}" />
    <EventID>11</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2013-11-12T17:44:56.510040400Z" />
    <EventRecordID>6317</EventRecordID>
    <Correlation />
    <Execution ProcessID="756" ThreadID="812" />
    <Channel>System</Channel>
    <Computer>TestXen.federated.fds</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="StringCount">1</Data>
    <Data Name="String">C:\PROGRA~2\Citrix\System32\mfaphook64.dll</Data>
  </EventData>
</Event>
0
Kamalasekar Parthasarathy
Asked:
Kamalasekar Parthasarathy
  • 2
2 Solutions
 
Emmanuel AdebayoCommented:
Is your server attached to UPS?

Did you check to see if there is any task schedule?

Did you do any security patches of recent?

Also, check the power management settings
0
 
Tony JLead Technical ArchitectCommented:
Unfortunately all that event tells us is that something initiated a programmatical shutdown using what is actually an old mechanism.

Around the same time in the event logs should be someting else that tells you what actually initiated it.

Also things to check include that VMwareisn't set up to perform either a scheduled or smart shutdown - depending on the version, it can power down machines that aren't in use so I would check your tasks and events in VMware.
0
 
Kamalasekar ParthasarathyExchange SpecialistAuthor Commented:
Hi guys,


Thanks for you participation..I found out the answer by myself....As mentioned above My trail version got expired which is intiating the shutdown every one hr...

Once i ran a command slmmgr to extend the trail and it worked and no more the server is rebooting ...thank you again..
0
 
Kamalasekar ParthasarathyExchange SpecialistAuthor Commented:
Hi guys,


Thanks for you participation..I found out the answer by myself....As mentioned above My trail version got expired which is intiating the shutdown every one hr...

Once i ran a command slmmgr to extend the trail and it worked and no more the server is rebooting ...thank you again..
0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now