User32 ..EVENTID 1074 winlogon initiated restart of server


one of server hosting hub , client access having restart on everyday 7 am. event viewer details follows:-
please send me reason kind of restart. need avoid restart exchange down , sometime restart not proper , cannot rdp server pinging fine server ip.

 

event type:       information
event source:    user32
event category: none
event id:          1074
date:                11/24/2011
time:                7:00:00 am
user:                ntdomain\administrator
computer:         exchhtca

description:

the process winlogon.exe has initiated restart of computer exchhtca on behalf of user ntdomain\administrator following reason: no title reason found

 reason code: 0x840000ff
 shutdown type: restart
 comment:

for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.

data:
0000: ff 00 00 84               ÿ..   

the restart being initiated ntdomain\administrator account credentials. security log may provide details. if don't know or script doing i'd change password stop it.

 

 

 


regards, dave patrick ....
microsoft certified professional
microsoft mvp [windows]


Windows Server  >  Windows Server General Forum



Comments

Popular posts from this blog

Round Robin is killing performance on our network

WMI Repository 4GB limit - Win 2003 Ent Question

Change home folder default permission?