Server Shuts down each night / The process winlogon.exe has initia
in [Windows Servers]
|
Prev: RIS Client Install "inf file txtsetup.sif missing or corrupt"
Next: Server refuses to logon to the domain
From: Marc on 20 Feb 2006 09:46 I am having a probelm with one of my servers... it is my DHCP server so it effects everything on my network. For the 4 days this server has shut down between 12:03 and 12:05 AM. Before this it shut down twice at the same time in the week before. The only new additions to my network are a SonicWall Firewall and a New server at a remote location. I do not think these are causing the probelm. The Even Log is listed below. I ca not find any information on this event. Event Type: Information Event Source: USER32 Event Category: None Event ID: 1074 Date: 2/19/2006 Time: 12:03:32 AM User: LTS\administrator Computer: LTS-S01 Description: The process winlogon.exe has initiated the power off of computer LTS-S01 on behalf of user LTS\Administrator for the following reason: No title for this reason could be found Reason Code: 0x80070015 Shutdown Type: power off Comment: For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 15 00 07 80 ...€
From: Jabez Gan [MVP] on 21 Feb 2006 08:14
I would say that another program is using winlogon.exe as a disguise to shut down the machine. Have you tried running a full system scan (using your anti virus software)? -- Jabez Gan [MVP] Microsoft MVP: Windows Server http://www.blizhosting.com MSBLOG: http://msblog.resdev.net "Marc" <Marc(a)discussions.microsoft.com> wrote in message news:5CC9925D-B839-4F24-AEFF-E8982F1BD032(a)microsoft.com... >I am having a probelm with one of my servers... it is my DHCP server so it > effects everything on my network. For the 4 days this server has shut down > between 12:03 and 12:05 AM. Before this it shut down twice at the same > time > in the week before. The only new additions to my network are a SonicWall > Firewall and a New server at a remote location. I do not think these are > causing the probelm. > The Even Log is listed below. > I ca not find any information on this event. > > Event Type: Information > Event Source: USER32 > Event Category: None > Event ID: 1074 > Date: 2/19/2006 > Time: 12:03:32 AM > User: LTS\administrator > Computer: LTS-S01 > Description: > The process winlogon.exe has initiated the power off of computer LTS-S01 > on > behalf of user LTS\Administrator for the following reason: No title for > this > reason could be found > Reason Code: 0x80070015 > Shutdown Type: power off > Comment: > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 15 00 07 80 ...? > |