This system is running Win2K with SP4 and has current virus software installed. I don't believe this issue is being caused by a virus like Sasser. The system from time to time will shut down with a screen on the monitor saying it is safe to shutdown the system. Oddly enough though when the system is restarted an event will be logged stating that the previous shutdown was unexpected. Terminal services is active and some people do have access to this system, so I am not ruling out the possibility of someone inadvertantly shutting the system down or doing on purpose. This system has no UPS and power schemes are disabled.
Has anyone had experience dealing with this kind of problem? How do I prove or resolve the cause? Is there a way in W2K server to log when and who requested a shutdown like what is available in W2003 or XP?
Any help would be appreciated.
Has anyone had experience dealing with this kind of problem? How do I prove or resolve the cause? Is there a way in W2K server to log when and who requested a shutdown like what is available in W2003 or XP?
Any help would be appreciated.