Re: SBS2003 Server keeps restarting



Look in the System log for events with the source USER32. These will be the
1074 and 1076 messages about shutdown. See if those provide any insight as
to the source of the shutdown. It's easy to miss these because they are
informational messages and warnings rather than actual errors.

If you want to be the guinea pig for something I've seen documented but
never tried myself, you can enable something called the Shutdown Event
Tracker System State Data feature. I'd create a new GPO for this for your
Domain Controllers OU. Under Computer Settings -> Administrative
Templates -> System, enable "Activate Shutdown Event Tracker System State
Data feature." It'll create a log in windows\system32\logfiles\shutdown.

Obviously if Cris is right that the cause is RAM, the system won't be able
to create the log. This is only going to help if the cause is in software,
and as I say, I've never tried it, so YMMV.

<mtrayne@xxxxxxxxx> wrote in message
news:1145292157.027377.113940@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
This started on Friday afternoon and has happened around 6 times since.
The server is rebooting without anything unusual in any of the event
logs. I turned off "Automatically restart" for problems, but that
hasn't helped since it's not bluescreening -- it still reboots.

The only warnings I get on start are:

Event Type: Warning
Event Source: Perflib
Event Category: None
Event ID: 1016
Date: 4/17/2006
Time: 11:20:42 AM
User: N/A
Computer: NEWMAN
Description:
The data buffer created for the "MSExchangeIS" service in the
"C:\Program Files\Exchsrvr\bin\mdbperf.dll" library is not aligned on
an 8-byte boundary. This may cause problems for applications that are
trying to read the performance data buffer. Contact the manufacturer of
this library or service to have this problem corrected or to get a
newer version of this library.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: a0 a9 7f 00 dc 24 00 00 ©.Ü$..

Event Type: Warning
Event Source: Perflib
Event Category: None
Event ID: 1016
Date: 4/17/2006
Time: 11:20:42 AM
User: N/A
Computer: NEWMAN
Description:
The data buffer created for the "EXOLEDB" service in the "C:\Program
Files\Exchsrvr\bin\exodbpc.dll" library is not aligned on an 8-byte
boundary. This may cause problems for applications that are trying to
read the performance data buffer. Contact the manufacturer of this
library or service to have this problem corrected or to get a newer
version of this library.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: bc 48 7f 00 04 15 00 00 ¼H.....

Event Type: Warning
Event Source: Perflib
Event Category: None
Event ID: 2003
Date: 4/17/2006
Time: 11:20:32 AM
User: N/A
Computer: NEWMAN
Description:
The configuration information of the performance library
"C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not match
the trusted performance library information stored in the registry. The
functions in this library will not be treated as trusted.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

The server restarted itself twice on Friday. On Saturday I came in and
it happened a few more times. I uninstalled all recent security patches
because I thought they might be causing the issue and the server was
stable until this morning. Any ideas?


.



Relevant Pages

  • Re: SBS2003 Server keeps restarting
    ... How long has the server been up? ... Event Type: Warning ... The data buffer created for the "MSExchangeIS" service in the ... trying to read the performance data buffer. ...
    (microsoft.public.windows.server.sbs)
  • Re: XP Box shutting down randomly
    ... which didn't fix the problem. ... the computer will just completly shut off - no warning, no shutdown dialog ... Check your BIOS settings for temperature alarms and shutdowns values. ... Some BIOS versions have an overheat warning setting which can be set ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Need Windows Support Professional - Application Warning Message in Event Viewer
    ... I do not get this warning message at every instance of bootup, so I can't seem to isolate the problem. ... Could be a service that refuses to stop when Windows is shutdown so you need to manually shutdown the non-critical services to see if any become unresponsive. ... Samsung's MagicTune utility doesn't shutdown properly and this is how I found out why Windows shutdown was taking so damn long (plus there was a dwwin.exe warning, also part of error reporting, that appeared momentarily during shutdown). ...
    (microsoft.public.windowsxp.general)
  • warning messages from root mount until login, also my rc.conf file
    ... Sep 7 22:00:56 lm741n shutdown: shutdown by rob: ... Sep 9 13:14:01 lm741n kernel: The Regents of the University of California. ... Sep 9 13:14:01 lm741n kernel: WARNING: WITNESS option enabled, ...
    (freebsd-current)
  • warning messages from root mount until login, also my rc.conf file
    ... Sep 7 22:00:56 lm741n shutdown: shutdown by rob: ... Sep 9 13:14:01 lm741n kernel: The Regents of the University of California. ... Sep 9 13:14:01 lm741n kernel: WARNING: WITNESS option enabled, ...
    (freebsd-current)