- Servers keep rebooting
- Posted by BRZRaiderfan on February 11th, 2004
I have many servers running windows 2000 server in my company,
all of them are rebooting once in a while and the only thing I got
from event viewer is:
"The previous system shutdown at Time on Date was unexpected. "
I went to microsoft.com and found this:
http://support.microsoft.com/default.aspx?kbid=326564
but according to this article the problem has been solved in
SP4.... which I have in every server.
The servers don't have the same hardware, the only thing in common
is the OS. I think it's not a power issue since it only happens
with those servers, the other machines (some identical servers
running linux for instance) do not reboot.
As I said, every server has rebooted and has this event log I
mentioned in their event viewer, but my primary domain controller
reboots quite often, at least 2 or 3 times a day, the other 2
domain controlers also have more reboots than the others.
Have any of you guys ever experienced this?
Thanks for any help.
- Posted by Dave Patrick on February 11th, 2004
To be able to see the blue screen stop message; Control
Panel|System|Advanced|Startup and Recovery, I usually like to uncheck
"Automatically reboot" this way you get a chance to read the stop error.
Windows 2000 Stop Messages
http://www.microsoft.com/TechNet/win...it/sopch16.asp
Bug Check Codes
http://msdn.microsoft.com/library/de...intro_3dkj.asp
If no BSOD's occur (Event ID: 1001 Source: Save Dump), then it may be a
power problem. I would look at a possible faulty (or undersized) pc power
supply, UPS, bad battery, or the circuit feeding the outlet that the pc is
plugged into.
--
Regards,
Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft MVP [Windows NT/2000 Operating Systems]
Microsoft Certified Professional [Windows 2000]
http://www.microsoft.com/protect
"BRZRaiderfan" wrote:
| I have many servers running windows 2000 server in my company,
|
| all of them are rebooting once in a while and the only thing I got
|
| from event viewer is:
| "The previous system shutdown at Time on Date was unexpected. "
|
| I went to microsoft.com and found this:
| http://support.microsoft.com/default.aspx?kbid=326564
|
| but according to this article the problem has been solved in
|
| SP4.... which I have in every server.
|
| The servers don't have the same hardware, the only thing in common
|
| is the OS. I think it's not a power issue since it only happens
|
| with those servers, the other machines (some identical servers
|
| running linux for instance) do not reboot.
|
| As I said, every server has rebooted and has this event log I
|
| mentioned in their event viewer, but my primary domain controller
|
| reboots quite often, at least 2 or 3 times a day, the other 2
|
| domain controlers also have more reboots than the others.
|
| Have any of you guys ever experienced this?
|
| Thanks for any help.
- Posted by Lanwench [MVP - Exchange] on February 11th, 2004
Are these servers connected to a UPS that will initiate a graceful shutdown
in the event of power loss?
BRZRaiderfan wrote:
- Posted by BRZRaiderfan on February 12th, 2004
Guys, thanks a lot, but the problem was related to this:
http://support.microsoft.com/default...b;en-us;824226
"This problem may occur if you have installed Windows 2000 Service
Pack 4."
When you have Win2K SP4 installed on your DC's and suddenly the server
restarts you should check your "Directory service" log. When you find
two warning messages id 1173 a few minutes before your server posts
the "Previous shutdown was unexpected" message in your system log, it
means that one of your clients requested information from AD which
crashed the Lsass process that in turn crashed your machine. And yeah,
I've got those messages 5 minutes before every single reboot.
Great, huh? then the hotfix to...huh.."fix" this problem causes memory
leak so yes, you'll need a fix for the hotfix.
Namely *KB824226* to stop the reboots and 1173s, and *KB828297* to
stop the memory leaking.
MS amazes me...
Thanks again!
Ismael
Brazil
"Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmail.aty ahoo.com> wrote in message news:<eqcvlFM8DHA.1636@TK2MSFTNGP12.phx.gbl>...