Automatic System Recovery (ASR) action was performed, several times per day

Hopefully I am not re asking something that has already been answered but I was unable to find any postings about it. We have a client whose server is locking up server times per day and dropping all connections (Server runs AD, File Shares, and Printer Management.) Right about the same time each lockup occurs I am see the following error:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Server Administrator" />
  <EventID Qualifiers="0">1006</EventID>
  <Level>2</Level>
  <Task>2</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2014-12-15T20:39:48.000000000Z" />
  <EventRecordID>1797803</EventRecordID>
  <Channel>System</Channel>
  <Computer>GSSNFS1.gssn.local</Computer>
  <Security />
  </System>
- <EventData>
  <Data>Automatic System Recovery (ASR) action was performed Action performed was: Unknown Date and time of action: Mon Dec 15 12:37:31 2014</Data>
  </EventData>
  </Event>

If anyone has any advice or knows how I can determine what is causing these please let me know
LVL 1
Leverage IT ConsultingAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

noxchoGlobal Support CoordinatorCommented:
It sounds as BSOD or system crash for me. After the crash the automatic system recovery takes place. Does it restart itself?
Can you enable in System Advanced Settings - minidump creation?
0
Lionel MMSmall Business IT ConsultantCommented:
What virus/security software are you using and is it checking your server daily and at what time? Also suggest you run malwarebytes to check the system
0
Leverage IT ConsultingAuthor Commented:
It sounds as BSOD or system crash for me. After the crash the automatic system recovery takes place. Does it restart itself?  Can you enable in System Advanced Settings - minidump creation?

Yes it does restart itself but interestingly enough when I check the last boot time (through LogMeIn) it does not count it as boot. I will try your suggestion on the minidumps to see if that sheds any more light on it

What virus/security software are you using and is it checking your server daily and at what time? Also suggest you run malwarebytes to check the system

The system is running on VIPRE from GFI/Threat Track, scans run several times through out the day, sometimes around when it occurs but not majority of the time. Unfortunately Malwarebytes did not detect anything as that was my first guess as well.

Thanks for your replies.
0
noxchoGlobal Support CoordinatorCommented:
Ok, try to get at least one minidump file. It will shapow what was the reason of this unexpected restart (crash) of the system. Usually a malfunctioning driver or bad hardware is the reason.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Leverage IT ConsultingAuthor Commented:
Looks like it was a malfunctioning driver
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.