2003 Server shuts down after logon

[kkingston]

I am running a win23k server, relatively new machine, couple of months. It is the dhcp server, dns server, and holds gc. It replicates with 2 other servers that are in other locations. We had a power spike the other day and I thought my ups politely shut down the server but upon reboot it just hung on detecting network connections. It would boot into safe mode but not normal. In the event viewer I had some scecli errors which pointed to the security database. I thought I would do a restore of the c drive and system state. Did that, all came back but then what probably happened is that my other dc's replicated the bad AD back. I decided to reboot to test if it would still work and it got past the detecting network connections phase but as soon as I logged in as admin, the machine shut down! This occurred even when I booted into recovery console... it runs fine if I boot into safe mode or run msconfig and boot into diagnostic mode.
I can't find anything on the internet with regard to this weird behavior....
Thanks.

 

[justin42279]

After restoring, does event viewer show any errors?

Justin

 

[kkingston]

There were 4 events 486,1202,413 and 1005 which I could only find out that it may involve security account database and a abrupt power outage. I got so flustered that I didn't see a ups service notification that it was shutting down my system...
Anyway, started a clean boot seqence and it indeed pointed to a service shutting me down. My dhcp also disappeared..
Anyway, disabled the ups service from safe mode and that took care of the shutdown. Don't have a clue how that happened. Reinstalled dhcp and configured it. The above four events stemmed from a rogue edb00009.log file in c:\windows\security\database which wouldn't allow the security accounts manager to write to the log. Once that was renamed all events disappeared.

 

[58sniper]

Pull the serial cable for the UPS and see if the problem goes away. I've seen that twice in the last two months.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[kkingston]

Thanks, I have gotten rid of the old ups and replaced with new. Interesting that you've seen this problem before. Was the machine acting the same as mine?

 

[58sniper]

In both cases, it was the UPS config. Disconnecting the cable allowed me to get in and check the UPS config. Otherwise, the server kept thinking it was on the battery and would shut down.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[kkingston]

It was funny. It wasn't until today that I could think calmly enough to figure out that it was the ups. Was too much of a wreck when it happened and was only clear enough to boot into safe mode and start my internet services and email services manually so that everyone didn't lose their ability to communicate.