Solved

Unexpected system shutdown

Posted on 2014-04-04
8
365 Views
Last Modified: 2014-04-07
Windows 2003 WSUS, which is hosted on Windows 2012 H-V server, reboots every day at the same time.

Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/4/2014
Time:            5:17:42 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:21 AM on 4/4/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.

Any clue, suggestion, ideas..?
Thank you.
0
Comment
Question by:cohhelp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 2

Expert Comment

by:pablito70
ID: 39978630
Have you some processes or scheduled taksk that run around time server reboots ?

Did you check on Event Viewer if there are warnings or errors related to hardware failure ?

At first looks seems RAM or Mainboard not function properly but if the server reboots daily at same time may be other issues.

HTH
0
 
LVL 9

Expert Comment

by:Michael Knight
ID: 39978642
I'd like to see more than one example from event viewer just to verify the timestamp each day.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39978687
How many VMs do you have on Hyper-V physical host ?

Any other VM also getting same issue ?
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Author Comment

by:cohhelp
ID: 39978728
1. The H-V hosts 10 VMs, no one is getting same issue.

2. At 5:15:00 AM everyday on all servers runs scheduled Sophos AV am scan, a pm scan - runs at 5:15:00 PM
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39978740
You can stop AV scan at morning on affected server and check if it works

If it works then you can check AV logs what could be the wrong
0
 

Author Comment

by:cohhelp
ID: 39978743
Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/3/2014
Time:            5:17:24 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:26 AM on 4/3/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.
0
 

Author Comment

by:cohhelp
ID: 39978758
Disabled the AM scan.
0
 

Author Closing Comment

by:cohhelp
ID: 39983601
48 hours later the scan was enabled, no shutdowns so far.
Thank you
0

Featured Post

Turn Insights Into Action

You’ve already invested in ITSM tools, chat applications, automation utilities, and more. Fortify these solutions with intelligent communications so you can drive business processes forward.

With xMatters, you'll never miss a beat.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question