Mike,
From
www.eventid.net:
HTH
Sunshine
Ionut Marin (Last update 10/6/2003):
Check Q196452 to see why WinNT Reports 6005, 6006, 6008,
and 6009 event log entries.
This error could be also caused by Hardware issues.
Several users reported that their problems were fixed
after replacing a hardware component (mostly the power
supply).
Frank Derooij (Last update 9/17/2003):
If you have Win2K SP4 installed on your DC's and your
server suddenly restarts you should check your "Directory
service" log. When you find two warning messages id 1173 a
few minutes before your server posts the "Previous
shutdown was unexpected" message in your system log, it
means that one of your clients requested information from
AD which crashed the Lsass process that in turn crashed
your machine. Microsoft has a not yet published the hotfix
for this problem. If you experience this problem you
should contact Microsoft in your country and ask them for
this hotfix. See Q824226.
Lynne Williams (Last update 4/21/2003):
See Microsoft article Q326564. "A supported fix is now
available from Microsoft, but it is only intended to
correct the problem that is described in this article.
Apply it only to computers that are experiencing this
specific problem. This fix may receive additional testing.
Therefore, if you are not severely affected by this
problem, Microsoft recommends that you wait for the next
Windows 2000 service pack that contains this fix. To
resolve this problem immediately, contact Microsoft
Product Support Services to obtain the fix."
