Solved

Unexpected system shutdown

Posted on 2014-04-04
8
360 Views
Last Modified: 2014-04-07
Windows 2003 WSUS, which is hosted on Windows 2012 H-V server, reboots every day at the same time.

Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/4/2014
Time:            5:17:42 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:21 AM on 4/4/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.

Any clue, suggestion, ideas..?
Thank you.
0
Comment
Question by:cohhelp
8 Comments
 
LVL 2

Expert Comment

by:pablito70
ID: 39978630
Have you some processes or scheduled taksk that run around time server reboots ?

Did you check on Event Viewer if there are warnings or errors related to hardware failure ?

At first looks seems RAM or Mainboard not function properly but if the server reboots daily at same time may be other issues.

HTH
0
 
LVL 9

Expert Comment

by:Michael Knight
ID: 39978642
I'd like to see more than one example from event viewer just to verify the timestamp each day.
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39978687
How many VMs do you have on Hyper-V physical host ?

Any other VM also getting same issue ?
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:cohhelp
ID: 39978728
1. The H-V hosts 10 VMs, no one is getting same issue.

2. At 5:15:00 AM everyday on all servers runs scheduled Sophos AV am scan, a pm scan - runs at 5:15:00 PM
0
 
LVL 36

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39978740
You can stop AV scan at morning on affected server and check if it works

If it works then you can check AV logs what could be the wrong
0
 

Author Comment

by:cohhelp
ID: 39978743
Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/3/2014
Time:            5:17:24 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:26 AM on 4/3/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.
0
 

Author Comment

by:cohhelp
ID: 39978758
Disabled the AM scan.
0
 

Author Closing Comment

by:cohhelp
ID: 39983601
48 hours later the scan was enabled, no shutdowns so far.
Thank you
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
can i use dropbox on a server used as a local share 8 128
deploying a service to production environment 13 108
MS Endpoint Protection 2 43
Rdp printing 5 23
Every system administrator encounters once in while in a problem where the solution seems to be a needle in haystack.  My needle was an anti-virus version causing problems with my Exchange server. I have an HP DL350 with Windows Server 2008 Stand…
After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question