Domain controller has been shutting down once or twice a week

Recently the domain controller in office had been shutting down maybe once or twice a week so wanted to know which event log to look at to possibly isolate cause of shutdowns.  Its a 2012 server and what i did notice on the system event log was that an error was generating referencing group policy failed to replicate from one domain controller to another.  I cant give the exact error right now since the server is down and nobody can turn it on till tomorrow morning.  I also checked the the raid5 using dell open manage server manager to make sure there were no issues with the drives and all reported healthy.
dankyle67Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Wayne88Commented:
If nothing can be found in the event log then I would check:

1.  If there is nothing in the event log, then check the bios log.  If bios log is not turned on you may use this as another tool for future shutdown problem in hope something will pop up there.

2.  Open up the case and check the internals.  If dusty, I suggest vacuuming it or use an air can to blow off the dust.  Especially in between the heatsink fins.  Excessive dust build up there can shut down a machine when it overheat.
0
dankyle67Author Commented:
ok how do i turn on bios log?
0
Wayne88Commented:
It depends on the BIOS.  Some BIOS doesn't have that feature (if you built the server using generic motherboard for example) but if you have DELL server then you will check the Lifecycle/iDrac log.
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

dankyle67Author Commented:
If i were to look for shutdown events or if anyone turned off server doesnt it usually request that the user enter a reason such as application maintenance, hardware maintenance etc.? Which event log section would this be in?  And the Lifecycle/Idrac log on dell server is that within a certain folder in windows?
0
Wayne88Commented:
"If i were to look for shutdown events or if anyone turned off server doesnt it usually request that the user enter a reason such as application maintenance, hardware maintenance etc.?"

Not always.  For example, if the user did a hard shutdown by hitting the power button or use command prompt to shutdown the computer then no explanation is required.

"Which event log section would this be in?"

Windows Logs\System.  Filter system Event ID 1074 to track down its shutdown/restart event, date and time, and who did it.

"And the Lifecycle/Idrac log on dell server is that within a certain folder in windows? Report Comment"

No this is at the bios level.  If you have iDRAC then you can remote into the iDRAC controller at any time to check this event.  If your server do not have the iDRAC card installed then you will need to either install DELL OpenManage or reboot the computer then hit F12 to access the System menu > Log tab.  Have a look around the menu because there are slight variation depending on the iDRAC version.

idrac1.jpg
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dankyle67Author Commented:
sounds good thanks for the explanations
0
Wayne88Commented:
You're welcome and let me know what you find.
0
dankyle67Author Commented:
There was a 2nd nic adapter on the server which was not connected and the existing one was configured as a virtual switch adapter which i dont know why they did that whomever installed and configured the server originally but once we connected and enabled the 2nd nic adapter for the entire week now the server has not had any issues.  Strange but i dont know for sure if this was coincidence or really the effect of enabling the 2nd nic adapter that seemingly had resolved the random shutdown issues.  Anyway, thanks again.
0
Wayne88Commented:
That's odd, I can't see why the second NIC will cause the shutdown but glad you solved the problem. thanks for the points and cheers!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Dell

From novice to tech pro — start learning today.