Announcement

Collapse
No announcement yet.

System event viewer clearing after crash

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • System event viewer clearing after crash

    Hello,

    Almost twice a day my server (windows 2003 sbs) crash.


    I can't find why he crash, because the System section in the event viewer are blank every time the server going up. The application & security remain with their logs.

    Why it happen? What I can do to stop the clearing of the system log so i can find what the problem that cause the server crash...

    Someone have idea?

    Regards

  • #2
    Re: System event viewer clearing after crash

    problably you're eventviewer has been corrupted.
    Try clearing the eventviewer manually.
    If that doesn't work see
    http://support.microsoft.com/?kbid=172156
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: System event viewer clearing after crash

      When you say "crash", what exactly do you mean? Does it lock up or does it reboot?
      1 1 was a racehorse.
      2 2 was 1 2.
      1 1 1 1 race 1 day,
      2 2 1 1 2

      Comment


      • #4
        Re: System event viewer clearing after crash

        crash = reboot. i try to cancel the reboot in case of windows error and one of the worker saw a blue screen with a messege like
        "ntfs.sts addrss F72a... base at f727..., DateStamp 42435dfd"

        I try to do what explain in Q172156 to fix the event viewer. but don't work..

        Comment


        • #5
          Re: System event viewer clearing after crash

          Remove the tick from the Automatically resart option and see if that helps.

          Click image for larger version

Name:	AutoRestart.JPG
Views:	1
Size:	35.7 KB
ID:	462568
          1 1 was a racehorse.
          2 2 was 1 2.
          1 1 1 1 race 1 day,
          2 2 1 1 2

          Comment


          • #6
            Re: System event viewer clearing after crash

            I do it already. 2 hours after it I find the server with a blue screen and error about ntds.sys.

            Comment


            • #7
              Re: System event viewer clearing after crash

              ntds.sys?
              doesn't sound good. Which error code?
              Marcel
              Technical Consultant
              Netherlands
              http://www.phetios.com
              http://blog.nessus.nl

              MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
              "No matter how secure, there is always the human factor."

              "Enjoy life today, tomorrow may never come."
              "If you're going through hell, keep going. ~Winston Churchill"

              Comment


              • #8
                Re: System event viewer clearing after crash

                This the error screen that one of the worker picture:

                Comment


                • #9
                  Re: System event viewer clearing after crash

                  Check that the heatsink is actually in contact with the CPU. You may have an overheating processor.
                  1 1 was a racehorse.
                  2 2 was 1 2.
                  1 1 1 1 race 1 day,
                  2 2 1 1 2

                  Comment


                  • #10
                    Re: System event viewer clearing after crash

                    Have a looky here

                    http://support.microsoft.com/default...;en-us;Q228888

                    Comment

                    Working...
                    X