spontaneous reboot/shutdown on sbs2003

Hello,

I have two completely separate SBS2003 domains and on both of them I have
some problems which seems related.
Ones every 14 days (give of take a day) the server spontaneous reboots (one
location) and on the other it’s even a complete shutdown.
There isn’t any heat problem on both locations, one is on an UPS so power
problems are also not likely.

I heard something about a reason off these reboots could be related with not
“good†registration of the domain/license with the SBS installation. Could
this be true? There isn’t anything in any eventlog.

On one off the servers I did run memtest86 to check the memory and after 2
days there where still no problems reported by memtest.

Does somebody knows if the problems are related to registration errors? And
how to correct these.

With kind regards,
Maurice Lucas

 

Hi Maurice,

It those shutdowns were due to Licensing problems, you would definitely see
events in the logs.
And those kind of problems will cause a complete shutdown, not a reboot.
There has to be something in the logs.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

 

The reboot frequency is increasing. One of the servers did reboot this
morning and 10 hours later again. Nothing is noted in the logfiles. (from
this morning the last time I still haven't checked).

Could it be a problem with the making of the AD FQDN?

With kind regards,
Maurice Lucas

 

Making the AD FQDN?

What exactly have you done lately?

Matt Gibson - GSEC

 

I mean during the install you have to setup your AD with some name.
Is it possible that there went something wrong? I hearded that as a possbile
cause but they coudn't tell me more without paying them for at least 3 hour
service.

Both domains are only some months old with allmost no software installed.

The server with the reboot is a sbs premium with only backup exec as addition.
The server with the poweroff is a sbs standard with nothing extra..

With kind regards
Maurice Lucas

 

Hi Maurice,

Both domains? Where are these servers physically? On the same network? Can
you post the ipconfig/all from both servers please?
Check out the USER32 events in the logs.

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

 

*Phew*

No, no matter what you named your domain, it wouldn't have an effect like
this.

So, just to be totally clear, when you look in the system or application
event logs, you don't see anything like "The last system shutdown was
unexpected"?

Matt Gibson - GSEC

 

Both are on completly separated networks. They aren't even in the same
building and there ain't any connection (trust/vpn/ nothing) between them

I only get in my system log the error 6008/6009 from the source eventlog
with the message:

The previous system shutdown at 3:07:39 PM on 9/8/2005 was unexpected.
Microsoft (R) Windows (R) 5.02. 3790 Service Pack 1 Multiprocessor Free.

But before the reboot I don't see any strange message in any eventlog

MUNGLED1 is not the same name as MUNGLED2

Server 1
C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : mailserver
Primary Dns Suffix . . . . . . . : MUNGLED1.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : MUNGLED1.local

PPP adapter RAS Server (Dial In) Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.30.59
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : HP NC7761 Gigabit Server Adapter
Physical Address. . . . . . . . . : 00-13-21-FD-23-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.30.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.30.2
Primary WINS Server . . . . . . . : 192.168.30.2

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DGE-528T Gigabit Ethernet
Adapter
Physical Address. . . . . . . . . : 00-11-95-5D-2D-FD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.150
Subnet Mask . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : 10.0.0.138
DNS Servers . . . . . . . . . . . : 192.168.30.2
NetBIOS over Tcpip. . . . . . . . : Disabled

server 2

C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : web
Primary Dns Suffix . . . . . . . : MUNGLED2.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : MUNGLED2.local

PPP adapter RAS Server (Dial In) Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.21
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-0F-20-3B-66-6C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.0.200
DNS Servers . . . . . . . . . . . : 10.0.0.1
Primary WINS Server . . . . . . . : 10.0.0.1

 

Hi Maurice,

Do they have the same hardware? What mobo? Got UPS'es hanging on them?

--
Regards,

Marina Roos
Microsoft SBS-MVP
One of the Magical M&M's
www.smallbizserver.net
Take part in SBS forum:
http://www.smallbizserver.net/Default.aspx?tabid=53

 

That looks like the incident I had a few weeks ago. Nothing in the logs,
just that mysterious entry about an unexpected shutdown. It was never
explained. It never showed up as an email alert or in the daily automatic
server status report sent via email. It restarted on its own, but for a
while after that it was partly responding to things like ping and remote
directory browsing, but it took two reboots to get it back to "normal"--some
stuff apparently did not restart or restarted in an incorrect configuration,
including the logging service and who knows what else. No log entries until
the next reboot. I'm just glad it was behind a NAT/router, not connected
directly to the public Internet. As far as I know, it has not happened again
since.

C_O

 

Hi Marina,

Sorry for the delay. More work and sleep

They have different hardware
server1:
- HP DL350
- HP 641 raid controller
- SCSI u320 harddisks
- 512 MB memory
- No UPS (but no history of power spikes/problems in the past)

server2
- HP XS4100 (hp workstation)
- no raid
- IDE harddisk
- 1.5GB memory
- no name UPS

With kind regards,

Maurice Lucas