Home > Event Id > Windows Server 2012 Restart Event Log

Windows Server 2012 Restart Event Log

Contents

I've also attached event Go to Solution 3 3 Participants mlchelp(3 comments) LVL 5 Windows Server 20083 Windows Server 20032 Active Directory2 Mike Kline LVL 57 Active Directory55 Windows Server 200334 I've also attached event 12 from the system log during startup. Look within Windows Logs/System. The Source is: EventLog. have a peek here

asked 1 year ago viewed 88894 times active 1 year ago Linked 42 Windows server last reboot time 26 View Shutdown Event Tracker logs under Windows Server 2008 R2 2 Event Best Answer Jalapeno OP Eric8553 Apr 14, 2011 at 4:48 UTC For 08 servers I generally look for Event ID's: 6009, 6005 and 6013. All rights reserved. Likely a 6008 or 6009 event. > > > > > > "Rustum" wrote: > > > > > > > Hi all, > > > > > > > > http://serverfault.com/questions/383335/who-restarted-my-windows-server

Windows Server 2012 Restart Event Log

View this "Best Answer" in the replies below » 14 Replies Habanero OP Helpful Post leif2251 Apr 12, 2011 at 3:51 UTC Unexpected shut down is 1076    Hope this helps! "Rustum" wrote: > Thanks for the Reply jlm, > the event 6008 gives info only about unexpexcted shutdown, i want to find if > some other administrator initiated And you see behind the 1074 this (s.u.) Turn off your automatic updates ;) Log Name:      System Source:        USER32 Date:          14.02.2014 03:22:24

Solved Windows Server Event ID for system shutdown and restart ? This was tested on Windows Server 2008. Advertisement How To Know the Last ShutDown Time Of Your Windows PC [Guiding Tech via TinyHacker]Gear from Kinja DealsTravel Like a Pro With Away's Direct-to-Consumer LuggageYour Pick For Best Monitor Mount: Event Id 1074 All rights reserved.Newsletter|Contact Us|Privacy Statement|Terms of Use|Trademarks|Site Feedback Home Server 2008 R2 Shutdown/Restart Event IDs by bitlocker on Apr 12, 2011 at 3:19 UTC | Windows Server 8 Next: What is

If you are experiencing a similar issue, please ask a related question Suggested Solutions Title # Comments Views Activity Windows license in vsphere 5 35 2016-12-12 Get all machines that a Windows Server Reboot Log You can perform a clean boot on it to narrow down the issue as http://support.microsoft.com/kb/929135. The Windows Event Log is an obvious answer but what is the complete list of events that I should view? I don't see any obvious signs of problems in the event logs.

Why do CDs and DVDs fill up from the centre outwards? How To Check Who Rebooted The Server In Linux Detect MS Windows "How are you spending your time on the computer?" Can time travel make us rich through trading, and is this a problem? And read this article which listed possible reasons for event 6008: http://www.chicagotech.net/troubleshooting/eventid6008.htm Below are related KBs, also check them: You may experience an abnormal shutdown on a Windows Server 2003-based computer Join the community Back I agree Powerful tools you need, all for free.

Windows Server Reboot Log

Likely a 6008 or 6009 event. > > > > "Rustum" wrote: > > > > > Hi all, > > > > > > Is there any log in Windows https://community.spiceworks.com/topic/135612-server-2008-r2-shutdown-restart-event-ids Why do CDs and DVDs fill up from the centre outwards? Windows Server 2012 Restart Event Log This technique won't help you figure out when there was a power outage, but you can filter by Event ID 6005 to see when the system was last turned on—that event Windows 7 Shutdown Event Id Output N in base -10 Safe way to get a few more inches under car on flat surface Detect MS Windows How do you express any radical root of a number?

By creating an account, you're agreeing to our Terms of Use, Privacy Policy and to receive emails from Spiceworks. http://supportcanonprinter.com/event-id/event-id-10010-windows-server-2012.html Also if it was the result of > > windows update. > > > > thanks, > > > > Rustum > > > > "jlm" wrote: > > > > How should I respond to absurd observations from customers during software product demos? Password Home Articles Register Forum RulesUser Blogs Gallery Community Community Links Social Groups Pictures & Albums Members List Go to Page... Unexpected Shutdown Event Id

Add to that a couple more from the Server Fault answers listed in my OP: Event ID 1074: "The process X has initiated the restart / shutdown of computer on behalf thanks, Rustum "jlm" wrote: > check the event log. Comment field will contain what you typed in. Check This Out I've broken my new MacBook Pro (with touchbar) like this, do I have to repair it?

Join our community for more solutions or to ask questions. Operating System: Recovery (planned) Also if it was the result of windows update. Likely a 6008 or 6009 event. "Rustum" wrote: > Hi all, > > Is there any log in Windows Server 2003 through which I can find why my > server restarted

Join Now For immediate help use Live now!

  • It is running on a UPS so I don't think it lost power.
  • Thank you johnC.
  • Server rebooted the other day with event id 6008; Event Type:Error Event Source:EventLog Event Category:None Event ID:6008 Date:29/11/2012 Time:12:15:48 PM User:N/A Computer:Server1 Description: The previous system shutdown at 12:11:59 PM on
  • And read this article which listed possible reasons for event 6008: http://www.chicagotech.net/troubleshooting/eventid6008.htm Below are related KBs, also check them: You may experience an abnormal shutdown on a Windows Server 2003-based computer
  • What can I make out of this event log?
  • When jumping a car battery, why is it better to connect the red/positive cable first?
  • What would be your next deduction in this game of Minesweeper?
  • I usually type a reason when I restart, and I have seen error codes when I go to the console after an unexpected restart.

The Source is: EventLog. You should look for the events described by JohnC , first. –JTL Jul 1 '15 at 15:01 add a comment| Your Answer draft saved draft discarded Sign up or log How to prove that gcd(m+1, n+1) divides (mn-1) more hot questions question feed about us tour help blog chat data legal privacy policy work here advertising info mobile contact us feedback Event Id 6009 How to copy text from command line to clipboard without using the mouse?

share|improve this answer edited May 1 '12 at 12:37 answered Apr 26 '12 at 9:58 joar 5611513 1 Also works on Windows Server 2003 (SP 2) –Deruijter Jul 17 '13 share|improve this answer edited Feb 28 '15 at 3:02 Pacerier 269518 answered Jul 2 '09 at 18:34 Kara Marfia 7,25242653 Event ID 1076 was the clue I was looking asked 7 years ago viewed 30848 times active 1 year ago Related 0Windows Server 2003 - “The security log on this system is full.” message when logging in1How to tell what http://supportcanonprinter.com/event-id/windows-server-2012-event-id-list.html windows-server-2008 windows-server-2008-r2 windows-server-2012 windows-server-2012-r2 windows-event-log share|improve this question asked Jul 1 '15 at 13:19 JohnC 4381312 In some situations Nirsoft's TurnedOnTimesView may be good enough. (nirsoft.net/utils/computer_turned_on_times.html) it shows reboots

I have several versions of Windows Server so a solution that works for at least versions 2008, 2008 R2, 2012, and 2012 R2 would be ideal. Look within Windows Logs/System. In the Includes/Excludes event ID's input field in the Filter Current Log window, I entered "6005, 6006, 6008, 6009, 6013, 1074, 1076" and it gave me exactly what I needed. –Joey The time now is 09:30 PM. -- Generic Blue ---- Generic Blue - Fixed -- TT Blue -- Mobile Contact Us - TechTalkz.com Technology & Computer Troubleshooting Forums - Top vBulletin,

Also if it was the result of > windows update. > > thanks, > > Rustum > > "jlm" wrote: > > > check the event log. Also if it was the result of windows update. Look within Windows Logs/System. Server 2003 restart log Windows Server 2003 View First Unread Thread Tools Display Modes 28-08-2007, 04:01 AM #1 Rustum Guest Posts: n/a Server 2003 restart log

Did I miss any? If those answers do not fully address your question, please ask a new question. 7 Who took the cookie from the cookie jar? –Mark Henderson♦ Apr 26 '12 at 9:30 current community blog chat Server Fault Meta Server Fault your communities Sign up or log in to customize your list. share|improve this answer edited Jul 1 '15 at 15:02 answered Jul 1 '15 at 14:54 JTL 111114 1 You will also see a big block of event ID 7036 if

Covered by US Patent. The Source is: EventLog. Are there any rules of thumb for the most comfortable seats on a long distance bus? Join the community of 500,000 technology professionals and ask your questions.

steps to analyse a dmp file:http://blogs.technet.com/b/askcore/archive/2008/11/01/how-to-debug-kernel-mode-blue-screen-crashes-for-beginners.aspx#3476888 Win Debugging tools:for dump file analysis download windebuger SW and analyze the *.dmp file to know the cause of server shutdown.Links for the software:https://skydrive.live.com/#cid=63D5AB5243DB43E7&id=63D5AB5243DB43E7%21120orhttp://www.windbg.org/Also to