Solved

Unexpected system shutdown

Posted on 2014-04-04
8
352 Views
Last Modified: 2014-04-07
Windows 2003 WSUS, which is hosted on Windows 2012 H-V server, reboots every day at the same time.

Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/4/2014
Time:            5:17:42 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:21 AM on 4/4/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.

Any clue, suggestion, ideas..?
Thank you.
0
Comment
Question by:cohhelp
8 Comments
 
LVL 2

Expert Comment

by:pablito70
Comment Utility
Have you some processes or scheduled taksk that run around time server reboots ?

Did you check on Event Viewer if there are warnings or errors related to hardware failure ?

At first looks seems RAM or Mainboard not function properly but if the server reboots daily at same time may be other issues.

HTH
0
 
LVL 9

Expert Comment

by:michaelaknight
Comment Utility
I'd like to see more than one example from event viewer just to verify the timestamp each day.
0
 
LVL 35

Expert Comment

by:Mahesh
Comment Utility
How many VMs do you have on Hyper-V physical host ?

Any other VM also getting same issue ?
0
 

Author Comment

by:cohhelp
Comment Utility
1. The H-V hosts 10 VMs, no one is getting same issue.

2. At 5:15:00 AM everyday on all servers runs scheduled Sophos AV am scan, a pm scan - runs at 5:15:00 PM
0
Are your corporate email signatures appalling?

Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
Comment Utility
You can stop AV scan at morning on affected server and check if it works

If it works then you can check AV logs what could be the wrong
0
 

Author Comment

by:cohhelp
Comment Utility
Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            4/3/2014
Time:            5:17:24 AM
User:            N/A
Computer:      WSUS
Description:
The previous system shutdown at 5:14:26 AM on 4/3/2014 was unexpected.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: de 07 04 00 05 00 04 00   Þ.......
0008: 05 00 0e 00 15 00 56 01   ......V.
0010: de 07 04 00 05 00 04 00   Þ.......
0018: 0c 00 0e 00 15 00 56 01   ......V.
0
 

Author Comment

by:cohhelp
Comment Utility
Disabled the AM scan.
0
 

Author Closing Comment

by:cohhelp
Comment Utility
48 hours later the scan was enabled, no shutdowns so far.
Thank you
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Problem Description: Actually I found the below issue with some customers after migration from SMS 2003 to SCCM 2007 and epically if they change site code, some clients may appear in the console with old site code, plus old sites still appearing …
Know what services you can and cannot, should and should not combine on your server.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now