Link to home
Start Free TrialLog in
Avatar of Line One
Line One

asked on

Windows Server 2012 R2 Essantials Shutdown (Server Infrastructure Licensing)

Hello,

I am looking for help regrading the cause of this unexpected shutdown.

Going trough events log looking for the cause of the shutdown in system log in found the following:

Log Name:      System
Source:        User32
Date:          12/2/2017 11:00:09 AM
Event ID:      1074
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:    
Description:
The process C:\Windows\system32\silsvc.exe has initiated the power off of computer on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
 Reason Code: 0x2000c
 Shutdown Type: power off
 Comment: Licensing Compliance Service caused a shutdown. Please look at the events under Microsoft > Windows > Server Infrastructure Licensing > Operational for details.


I checked the the logs for the Server Infrastructure Licensing:


Log Name:      Microsoft-Windows-Server Infrastructure Licensing/Operational
Source:        Microsoft-Windows-Server Infrastructure Licensing
Date:          12/2/2017 11:00:08 AM
Event ID:      50
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:    
Description:
Root domain check did not pass because error 0x80070008 occurred in function f1980 [IAHE].
Not enough storage is available to process this command.

Make sure that the domain that this computer is joined is reachable. This server will automatically shut down if the issue cannot be corrected.

Another eventlog:

Log Name:      Microsoft-Windows-Server Infrastructure Licensing/Operational
Source:        Microsoft-Windows-Server Infrastructure Licensing
Date:          12/2/2017 11:00:08 AM
Event ID:      28
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      
Description:
Windows is going to be shutdown because your environment is out of compliance.

Log Name:      Microsoft-Windows-Server Infrastructure Licensing/Operational
Source:        Microsoft-Windows-Server Infrastructure Licensing
Date:          12/2/2017 10:30:08 AM
Event ID:      38
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      
Description:
The Root Domain Check detected a condition in your environment that is out of compliance with the licensing policy. This server will be automatically shut down if the issue is not corrected in 0 day(s) 0 hour(s) 30 minute(s). Please look for additional events for Root Domain Check to troubleshoot.


This are the main events log related this issue, please advice as necessary.

Thanks.
SOLUTION
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Line One
Line One

ASKER

Lee W,


Thank you for your fast reply
We have just one DC, Essential is holding all the FSMO roles.
Any other reasons?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Lee W,

we have 18 users and 11 devices currently using Essentials 2012 r2.
I
did Run the command NetDOM /query FSMO, the Essentials server is taking all the roles.  

I did also run DCDIAG /C /E /V  all the tests were successful, except the following:

Starting test: SystemLog

         * The System Event log test
         An error event occurred.  EventID: 0x0000272C

            Time Generated: 12/04/2017   16:03:41

            Event String:

            DCOM was unable to communicate with the computer 192.168.X.X (router) using any of the configured protocols; requested by PID     49f8 (C:\Windows\system32\dcdiag.exe).

         An error event occurred.  EventID: 0x0000272C

            Time Generated: 12/04/2017   16:04:02

            Event String:

            DCOM was unable to communicate with the computer 64.59.144.90 (DNS) using any of the configured protocols; requested by PID     49f8 (C:\Windows\system32\dcdiag.exe).

         An error event occurred.  EventID: 0x0000272C

            Time Generated: 12/04/2017   16:04:23

            Event String:

            DCOM was unable to communicate with the computer 64.59.150.136 (DNS) using any of the configured protocols; requested by PID     49f8 (C:\Windows\system32\dcdiag.exe).

Open in new window


  I don't have permission to upload the whole log file.


What log should I check to verify the "heap exhaustion"? The print spooler looks normal for now.


Thanks for the links
FSMO.png
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Sorry got waylaid with some Ransomware. Will provide further into as required.
Thanks to all and sorry for the delay. It was a printer driver that was causing the issue.