Link to home
Start Free TrialLog in
Avatar of LukeHarrison
LukeHarrison

asked on

Why is my Windows 2008 R2 Server restarting at same time every night?

At my place of work we have two Windows 2008 R2 servers, and one of them has started to restart itself every night at 12:13:14 AM. There are no scheduled tasks that could be causing this, nor is it a Windows Update restart.

The machine is virus free (although it has previously been infected with Conficker and FTP.bat), and so I can't see what it would be that is causing it.

It seems to be a very clean shutdown, so it's not doing any harm, but it's been causing me such grief over the past couple of weeks.

This is what I found in Event Viewer.

GENERAL TAB:
The process C:\Windows\system32\shutdown.exe (**name**) has initiated the restart of computer **name** on behalf of user NT AUTHORITYNETWORK SERVICE for the following reason: No title for this reason could be found
 Reason Code: 0x800000ff
 Shutdown Type: restart
 Comment:
Avatar of DcpKing
DcpKing
Flag of United States of America image

Check out MS' info about shutdowns here. There should be a file in the %windir%\system32\LogFiles\Shutdown\ directory with info about the shutdown, telling what's running at the time.

hth

Mike
Avatar of Thierry Hulsebosch
Have you checked your taskmanager ?
Whats recorded in the event log for the shutdown? It should record what requested the shutdown and from where.
Avatar of LukeHarrison
LukeHarrison

ASKER

I don't seem to have the %windir%\system32\LogFiles\Shutdown\ directory. Goes as far as LogFiles but there's no Shutdown folder in there.

The only thing I can see that requested the shutdown is NT AUTHORITY\SYSTEM from C:\Windows\system32\shutdown.exe or C:\Windows\SysWOW64\shutdown.exe.
Have you checked that you don't have some program scheduled in the task scheduler at about the time that the computer shuts down? If you do, change its scheduling and see if the shutdown time changes ...
Do you run WSUS?
when are windows updates applied?
How are they applied?
What is running on this server?


"Taken from Microsoft"

""Method 1:

 

It might be some third party application is causing this issue. Put the system in clean boot. Follow the steps mentioned in the article given below to configure the system in clean boot and check.

 

How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

http://support.microsoft.com/kb/929135     

 

Note: After you have finished installing, follow step 7 in the article to boot to normal startup.

 

 

Method 2:

 

Also check the power options if your computer is configured to shut down in case of inactivity.

a. Open Power Options by clicking the Start button , clicking Control Panel, clicking System and Maintenance, and then clicking Power Options.
b. On the Select a power plan page, click Change plan settings under the selected plan.
c. On the Change settings for the plan page, click Change advanced power settings.
d. On the Advanced settings tab, expand Power buttons and lid, expand Start menu power button, and then do one of the following:

click On battery or Plugged in (or both), click the arrow, and then click Sleep, Hibernate, or Shut Down.

If you are using a desktop computer, click Setting, click the arrow, and then click Sleep, Hibernate, or Shut Down.
e. Click OK, and then click Save changes.

Here are the articles that should give you more information about this:

http://windows.microsoft.com/en-us/windows7/Turn-off-a-computer-frequently-asked-questions

http://windows.microsoft.com/en-us/windows7/Change-create-or-delete-a-power-plan-scheme
""
Thank you all for your assistance. I have now got this sorted thanks to a private message.

Thanks all.
Luke,
What was the solution?
Curiosity..
Great to hear that you found the problem.

Rob is right. Please explain what it was that fixed it.
Many people come here looking for answers and only ask questions when they can't find their problem already answered. Explaining the fix will help others.

Mike
ASKER CERTIFIED SOLUTION
Avatar of LukeHarrison
LukeHarrison

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks for explaining! Now others will have another clue about what to look for!
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.