User32 ..EVENTID 1074 winlogon initiated restart of server
one of server hosting hub , client access having restart on everyday 7 am. event viewer details follows:-
please send me reason kind of restart. need avoid restart exchange down , sometime restart not proper , cannot rdp server pinging fine server ip.
event type: information
event source: user32
event category: none
event id: 1074
date: 11/24/2011
time: 7:00:00 am
user: ntdomain\administrator
computer: exchhtca
description:
the process winlogon.exe has initiated restart of computer exchhtca on behalf of user ntdomain\administrator following reason: no title reason found
reason code: 0x840000ff
shutdown type: restart
comment:
for more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.
data:
0000: ff 00 00 84 ÿ..„
the restart being initiated ntdomain\administrator account credentials. security log may provide details. if don't know or script doing i'd change password stop it.
regards, dave patrick ....
microsoft certified professional
microsoft mvp [windows]
Windows Server > Windows Server General Forum
Comments
Post a Comment