Solved

Unexpected system shutdown

Posted on 2014-04-04
8
362 Views
Last Modified: 2014-04-07
Windows 2003 WSUS, which is hosted on Windows 2012 H-V server, reboots every day at the same time.

Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/4/2014
Time:            5:17:42 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:21 AM on 4/4/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.

Any clue, suggestion, ideas..?
Thank you.
0
Comment
Question by:cohhelp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 2

Expert Comment

by:pablito70
ID: 39978630
Have you some processes or scheduled taksk that run around time server reboots ?

Did you check on Event Viewer if there are warnings or errors related to hardware failure ?

At first looks seems RAM or Mainboard not function properly but if the server reboots daily at same time may be other issues.

HTH
0
 
LVL 9

Expert Comment

by:Michael Knight
ID: 39978642
I'd like to see more than one example from event viewer just to verify the timestamp each day.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39978687
How many VMs do you have on Hyper-V physical host ?

Any other VM also getting same issue ?
0
Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

 

Author Comment

by:cohhelp
ID: 39978728
1. The H-V hosts 10 VMs, no one is getting same issue.

2. At 5:15:00 AM everyday on all servers runs scheduled Sophos AV am scan, a pm scan - runs at 5:15:00 PM
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39978740
You can stop AV scan at morning on affected server and check if it works

If it works then you can check AV logs what could be the wrong
0
 

Author Comment

by:cohhelp
ID: 39978743
Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/3/2014
Time:            5:17:24 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:26 AM on 4/3/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.
0
 

Author Comment

by:cohhelp
ID: 39978758
Disabled the AM scan.
0
 

Author Closing Comment

by:cohhelp
ID: 39983601
48 hours later the scan was enabled, no shutdowns so far.
Thank you
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The question has been asked on multiple occasions as to how best to do printing in a remote desktop or terminal services environment.   It seems that this particular question has plagued several people and most especially as Terminal Services, as…
On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question