Solved

Automatic System Recovery (ASR) action was performed, several times per day

Posted on 2014-12-15
5
1,529 Views
Last Modified: 2014-12-31
Hopefully I am not re asking something that has already been answered but I was unable to find any postings about it. We have a client whose server is locking up server times per day and dropping all connections (Server runs AD, File Shares, and Printer Management.) Right about the same time each lockup occurs I am see the following error:

- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Server Administrator" />
  <EventID Qualifiers="0">1006</EventID>
  <Level>2</Level>
  <Task>2</Task>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2014-12-15T20:39:48.000000000Z" />
  <EventRecordID>1797803</EventRecordID>
  <Channel>System</Channel>
  <Computer>GSSNFS1.gssn.local</Computer>
  <Security />
  </System>
- <EventData>
  <Data>Automatic System Recovery (ASR) action was performed Action performed was: Unknown Date and time of action: Mon Dec 15 12:37:31 2014</Data>
  </EventData>
  </Event>

If anyone has any advice or knows how I can determine what is causing these please let me know
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 47

Expert Comment

by:noxcho
ID: 40502314
It sounds as BSOD or system crash for me. After the crash the automatic system recovery takes place. Does it restart itself?
Can you enable in System Advanced Settings - minidump creation?
0
 
LVL 25

Expert Comment

by:Lionel MM
ID: 40502408
What virus/security software are you using and is it checking your server daily and at what time? Also suggest you run malwarebytes to check the system
0
 
LVL 1

Author Comment

by:Leverage IT Consulting
ID: 40503685
It sounds as BSOD or system crash for me. After the crash the automatic system recovery takes place. Does it restart itself?  Can you enable in System Advanced Settings - minidump creation?

Yes it does restart itself but interestingly enough when I check the last boot time (through LogMeIn) it does not count it as boot. I will try your suggestion on the minidumps to see if that sheds any more light on it

What virus/security software are you using and is it checking your server daily and at what time? Also suggest you run malwarebytes to check the system

The system is running on VIPRE from GFI/Threat Track, scans run several times through out the day, sometimes around when it occurs but not majority of the time. Unfortunately Malwarebytes did not detect anything as that was my first guess as well.

Thanks for your replies.
0
 
LVL 47

Accepted Solution

by:
noxcho earned 500 total points
ID: 40503779
Ok, try to get at least one minidump file. It will shapow what was the reason of this unexpected restart (crash) of the system. Usually a malfunctioning driver or bad hardware is the reason.
0
 
LVL 1

Author Closing Comment

by:Leverage IT Consulting
ID: 40525890
Looks like it was a malfunctioning driver
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question