Re: Unexpected shutdown



Phill,

I installed a new network adapter firmware and the error has gone.
Thanks for you cooperation.

Best Regards,

Marco

"Phill" <ps22@xxxxxxxxxxxxxxxxxx> wrote in message
news:DMCdnQ7RQvmkDxvZRVnysw@xxxxxxxxxxxx
From the list of events your system is rebooting. what happens in the
event logs prior to "previous sysytem shutdown..."

Are any dumps written?
Any stop codes? With these you can check on Technet for causes.
Do a search for files written around that time this may give a clue to
what the system was doing prior to the reboot.

Do you have any manufacturer diagnostics for the server? If the server is
HP or IBM etc then you will be able to download idag programs that will
test memory, processor etc.




"Marco Roberto Gonçalves Junior" <marco.roberto@xxxxxxxxxx> wrote in
message news:OTmW%23aLhGHA.3296@xxxxxxxxxxxxxxxxxxxxxxx
Phill,

first of all tks for your fast reply.
There is nothing running at this time (scheduled tasks) and the
problem does not happen everyday. Today, for instance, did not occur.

The list of event is the following

1 - The previous system shutdown at 6:57:16 AM on 5/30/2006 was
unexpected.
2 - Microsoft (R) Windows (R) 5.02. 3790 Service Pack 1 Multiprocessor
Free.
3 - The Event log service was started.
4 - The COM sub system is suppressing duplicate event log entries for
a duration of 86400 seconds. The suppression timeout can be controlled
by a REG_DWORD value named SuppressDuplicateDuration under the following
registry key: HKLM\Software\Microsoft\Ole\EventLog.
5 - HP NC7761 Gigabit Server: Driver initialized successfully.
6 - HP NC7761 Gigabit Server: Network controller configured for 1Gb
full-duplex link.
7 - The IPSec Driver is starting in Bypass mode. No IPSec security is
being applied while this computer starts up. IPSec policies, if they have
been assigned, will be applied to this computer after the IPSec
services start.
8 - The Exchange IFS driver loaded successfully.
9 - The Application Experience Lookup service started successfully.
10 - DFS has finished building all namespaces.
11 - DFS server has finished initializing.
12 - The IPSec driver has entered Secure mode. IPSec policies, if they
have been configured, are now being applied to this computer.
13 - The Server Agents service version 7.20.0.0 has started.
14 - The Storage Agents service version 7.20.0.0 has started.

Best Regards,

Marco


"Phill" <ps22@xxxxxxxxxxxxxxxxxx> wrote in message
news:2c2dnQKujNr2CeDZRVnyrA@xxxxxxxxxxxx
Your system is rebooting and you should have additional messages after
this about restarting windows (similar but not the same as this is from
my XP pc)

Microsoft (R) Windows (R) 5.01. 2600 Service Pack 2 Uniprocessor Free.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.


and about services starting.
the first one is usually the event log.service.

If it is the same time each day that your system is rebooting then what
are you running at 6:50 onwards.
Backups?
Exchange utils?
Is anything scheduled at that time within scheduler?


"Marco Roberto Gonçalves Junior" <marco.roberto@xxxxxxxxxx> wrote in
message news:OI%23ZQd%23gGHA.4080@xxxxxxxxxxxxxxxxxxxxxxx
Hi everyone,

a few days ago I started receiving in the event log the following
message:
======================================================
Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6008
Date: 5/30/2006
Time: 7:00:37 AM
User: N/A
Computer: PATSRVEX01
Description:
The previous system shutdown at 6:57:16 AM on 5/30/2006 was unexpected.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d6 07 05 00 02 00 1e 00 Ö.......
0008: 06 00 39 00 10 00 e4 01 ..9...ä.
0010: d6 07 05 00 02 00 1e 00 Ö.......
0018: 09 00 39 00 10 00 e4 01 ..9...ä.
======================================================

It always happens at the same time, but I cannot figure out what is
going on.
This is a DC with Windows 2003 SE, Exchange 2003 and Norman Antivirus.
I configured the server to perform a complete memory dump, but the file
was not written.
I fact, I noticed that it could be a false message because it is an
Exchange Server (installed in a DC) and if I restart this server it
takes more than 10 minutes to be ready again.
I have some events in the security event log at 6:59 AM, 7:00 AM, and
so on. If you see the message above it was written at 7:00:37 AM and it
says that the shutdown was at 6:57:16. It sounds strange!!!
Does anybody know what could be the problem?


Best Regards,


Marco









.



Relevant Pages

  • Re: Unexpected shutdown
    ... - HP NC7761 Gigabit Server: ... - The IPSec Driver is starting in Bypass mode. ... - The Exchange IFS driver loaded successfully. ... Is anything scheduled at that time within scheduler? ...
    (microsoft.public.windows.server.general)
  • Re: exchange 2003 problem
    ... Anything relevant in App Event log on the server? ... The problem starts after moving the exchange database from one drive ...
    (microsoft.public.exchange.admin)
  • RE: Exchange and Outlook 2003 on SBS
    ... Please open the Application Event Log and note whether there are many Event 8331s, ... You should completely disable all Anti-Virus Software services and devices, disconnect the server from the Internet and restart the ... server to ensure no AV services or filter drivers are running BEFORE installing Exchange SP1. ... apply the SBS 2003 patch referred to above. ...
    (microsoft.public.windows.server.sbs)
  • RE: Event ID 7024
    ... Information Store Service terminated with server specific error 0 Event ID ... Exchange data and this may cause the issue. ... Please check if there are other issues in the Application event log ...
    (microsoft.public.windows.server.sbs)
  • Re: SceCli 1202 Not enough storage
    ... ISA 2004 was installed and then the Exchange ... was migrated to a new server having Exchange Server 2000. ... 2GB allocated to Virtual Memory with 512MB RAM. ... We can duplicate the following two Event Log entries by running "secedit ...
    (microsoft.public.win2000.security)

Loading