Re: Login to Windows opens the Shutdown Event Tracker

Hi John,

Thanks for your reply.

I researched your logs and found that reboot occurred at 6:26:18 AM on
12/11/2007. Before reboot Exchange began a Online Defragmentation. It
seems the problem was not caused by Online Defragmentation, since this
finished success the next day. In addition, between 5 PM and 6:30, there is
no event recorded in the application logs.

The issue was caused by random accident, since the problem can 't be
reproduced, it more difficult to find out the root cause. Thanks for your
understanding.

Please monitor your server to see if the issue will reoccur.

For the result in the SBS Best Practices Analyzer, you can take the
instructions in the follow to fix the warning or the error. Based on my
experience, the Windows 2003 SP2 may cause network problem, but it will not
cause server reboot.

More info:

You may experience network-related problems after you install Windows
Server 2003 SP2 or the Scalable Networking Pack on a Windows Small Business
Server 2003-based computer
http://support.microsoft.com/kb/936594

So far the SBS Best Practices Analyzer is only tools designed for SBS,
which presents a list of information and errors that administrators should
review.

If you need to read the MPS Report cab file, you can double click the file
and unzip to a folder.

I am looking forward to help you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Thread-Topic: Login to Windows opens the Shutdown Event Tracker
<thread-index: Acg80VhbZ/U9FcoCRNSE4yyX6TffKw==
<X-WBNR-Posting-Host: 207.46.19.168
<From: =?Utf-8?B?SlA=?= <JP@xxxxxxxxxxxxxxxxxxxxxxxxx>
<References: <D42A08CE-C69B-47F2-BFFD-719451D70A55@xxxxxxxxxxxxx>
<uWH#gwAPIHA.4808@xxxxxxxxxxxxxxxxxxxx>
<286D0550-67B8-49AF-866C-E5F3ED32B8D3@xxxxxxxxxxxxx>
<Pk9JzoHPIHA.3644@xxxxxxxxxxxxxxxxxxxxxx>
<Subject: Re: Login to Windows opens the Shutdown Event Tracker
<Date: Wed, 12 Dec 2007 07:12:00 -0800
<Lines: 156
<Message-ID: <903A5E31-0E6C-4EE1-93E7-284DF4FF1678@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:81578
<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<*the server is a new HP ML350 G5 with all HP components - it was on the
w2003
<compatiblity list.
<*Symantic A/V has been installed since startup - this machine does no
email
<processing and light usage. Scans are clean.
<*Backup Exec 11d has about a dozen hotfixes applied. Also the SBS Best
<Practices Analyzer indicated critical issues with RSS, TCPA, TCP chimney,
<Task offloading. Apparently the NIC and some MS features don't work
together
<ok.
<
<will check out the other tool. is there a way to inspect the cab data
before
<sending it?
<
<
<"Robert Li [MSFT]" wrote:
<
<> Hi,
<>
<> Thanks for posting in our newsgroup and also for Lanwench's suggestions.
<>
<> You will see the Shutdown Event Tracker after the server reboot
unexpectly.
<> The reboot maybe caused by either hardware or software issue.
<>
<> More info:
<>
<> Description of the Shutdown Event Tracker
<> http://support.microsoft.com/?id=293814
<>
<> Based on my research, I'd like to give you the following suggestions:
<>
<> Step 1: Please check if your hardware is in the HCL list:
<>
<> Products Designed for Microsoft Windows - Windows Catalog and HCL
<> http://www.microsoft.com/whdc/hcl/default.mspx.
<>
<> Step 2: The problem may be caused by virus. Please scan you system with
the
<> AV software.
<>
<> More information:
<>
<> Windows Defender Home
<> http://www.microsoft.com/athome/security/spyware/software/default.mspx
<>
<> To find out the root cause why the reboot occurred , please help me
collect
<> the following information for deep research:
<>
<> 1. What important change did you make recently?
<>
<> 2.MPS Report
<>
<> 1) Download MPS report tool from:
<>
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
<> 15706/MPSRPT_SETUPPerf.EXE
<> 2) Run the MPSRPT_SETUPPerf.exe on the server box.
<> 3) Wait for 10~15 minutes.
<> 4) Open Windows explorer, navigate to
<> %SYSTEMROOT%\MPSReports\Setup\Reports\cab\
<> 5) Send the .cab file to v-robeli@xxxxxxxxxxxxx with subject:
<> 41115664-Login to Windows opens the Shutdown Event Tracker.
<>
<> I am looking forward to hear from you.
<>
<> If you need further assistance, please don't hesitate to let me know.
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
the
<> "Notify me of replies" box to receive e-mail notifications when there
are
<> any updates in your thread. When responding to posts via your
newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights.
<>
<> --------------------
<> <Thread-Topic: Login to Windows opens the Shutdown Event Tracker
<> <thread-index: Acg8L7cZIiSmvXgDRZyNT+g1+atcuA==
<> <X-WBNR-Posting-Host: 207.46.19.197
<> <From: =?Utf-8?B?SlA=?= <JP@xxxxxxxxxxxxxxxxxxxxxxxxx>
<> <References: <D42A08CE-C69B-47F2-BFFD-719451D70A55@xxxxxxxxxxxxx>
<> <uWH#gwAPIHA.4808@xxxxxxxxxxxxxxxxxxxx>
<> <Subject: Re: Login to Windows opens the Shutdown Event Tracker
<> <Date: Tue, 11 Dec 2007 11:55:01 -0800
<> <Lines: 24
<> <Message-ID: <286D0550-67B8-49AF-866C-E5F3ED32B8D3@xxxxxxxxxxxxx>
<> <MIME-Version: 1.0
<> <Content-Type: text/plain;
<> < charset="Utf-8"
<> <Content-Transfer-Encoding: 7bit
<> <X-Newsreader: Microsoft CDO for Windows 2000
<> <Content-Class: urn:content-classes:message
<> <Importance: normal
<> <Priority: normal
<> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <Path: TK2MSFTNGHUB02.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:81378
<> <NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <
<> <I did just that during when the few clients where closed out. The only
<> <system event log entry I found relative was the "previous system
shutdown
<> was
<> <unexpected" and the next prior one was "live update service entered the
<> <stopped state". Not a clue why yet.
<> <
<> <"Lanwench [MVP - Exchange]" wrote:
<> <
<> <> JP <JP@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
<> <> > I came in this morning and went to login on to the SBS 2003 which
has
<> <> > been running for weeks now and to which I login everday. Entered
the
<> <> > password and it opens up the 'Shutdown Event Tracker' instead of the
<> <> > Windows desktop. I even tried another admin login but same results.
<> <> > If I fill in the event id and comment the OK button is enabled.
<> <> >
<> <> > What is going on? How can I login other then shutting off power and
<> <> > seeing what happens.
<> <>
<> <> All this means is that your server went down unexpectedly sometime
since
<> you
<> <> last logged into it. The tracker isn't going to shut it down again -
it
<> just
<> <> wants info on why. As you don't know yet, enter something bogus,
click
<> OK,
<> <> and then go in to inspect it.
<> <>
<> <>
<> <>
<> <
<>
<>
<

.