System Shut down with no errors

[Guest]

I have a W2K server (SP4) that unexpectantly shut down last night at 9:24.48.
The only event I see in the event log is "The previous shut down at 9:24.48
was unexpected."

I don't see any other events in the system log or the App log at that time
to show what happened. The log files are not full.

What else can I look at to see what is causing this? We are on a massive
UPS so I don't think it is power spikes, otherwise all the servers would have
the same problem.

I don't know if it is a possible hardware issue. (It has happened in the
past...but not frequently)

 

[S.J.Haribabu]

Hi,

Thanks for the posting. I did some reserach and found the following KB
article.

CAUSE
==========
This problem may occur if both of the following conditions are true: • The
computer is locked or is configured with a password-protected screensaver.
• The shutdown operation is initiated automatically by a program that uses
the InitiateSystemShutdownEx function with the force flag.

For example, you use the Remote Shutdown tool (Shutdown.exe) from the
Microsoft Windows 2000 Resource Kit to force a shut down of the computer
from a remote computer or you schedule a shutdown of the local computer by
using Shutdown.exe in combination with the at command or Task Scheduler.
In this situation, the Event Log service is not notified about the shutdown
event, and as a result, the shutdown operation is incorrectly considered by
the Event Log service as an unexpected event

RESOLUTION
=================
Service Pack Information
To resolve this problem, obtain the latest service pack for Microsoft
Windows 2000. For additional information, click the following article
number to view the article in the Microsoft Knowledge Base:
260910 How to Obtain the Latest Windows 2000 Service Pack

For more information go to http://support.microsoft.com/kb/326564

Thanks,

(e-mail address removed)

This posting is provided "AS IS" with no warranties, and confers no rights.