Windows Server 2019 Freezes randomly in VMware Exsi 7.0

Question

Hi Team,

I would like to ask if you have encountered this error on Windows Server 2019. We are using SR530 Thinksystem server under a VMWare Exsi 7.0. The server freezes on this particular time and not responding. I found this on its event viewer.

Thanks!

• <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
• <System> <Provider Name="ESENT" /><EventID Qualifiers="0">508</EventID><Level>3</Level><Task>7</Task><Keywords>0x80000000000000</Keywords><TimeCreated SystemTime="2023-12-14T09:30:43.410722300Z" /><EventRecordID>4779255</EventRecordID><Channel>Application</Channel><Computer>FRI-DC01</Computer><Security /></System>
• <EventData> <Data>wuaueng.dll</Data><Data>6436,D,0</Data><Data>SUS20ClientDataStore:</Data><Data>C:\Windows\SoftwareDistribution\DataStore\Logs\edb.log</Data><Data>299008 (0x0000000000049000)</Data><Data>12288 (0x00003000)</Data><Data>255</Data></EventData> </Event>

Answer 1

Hello,

Thank you for posting in Microsoft Community forum.

To narrow down the issue, please filter and list the event logs of event id 1000/1074/6008/41, if you cannot find the system event logs with system crash or hang, it may cause by the remote session, you need to contact with VMWare Exsi 7.0 Team to narrow down the issue.

Best Regard

Zack Lu

Answer 2

Here you go sir,

Answer 3

• <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
• <System> <Provider Name="User32" Guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" EventSourceName="User32" /><EventID Qualifiers="32768">1074</EventID><Version>0</Version><Level>4</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8080000000000000</Keywords><TimeCreated SystemTime="2023-12-12T09:12:42.865230600Z" /><EventRecordID>42442734</EventRecordID><Correlation /><Execution ProcessID="364" ThreadID="2904" /><Channel>System</Channel><Computer>FRI-DC01</Computer><Security UserID="S-1-5-21-3326145087-1481218017-3780322493-500" /></System>
• <EventData> <Data Name="param1">C:\Windows\System32\RuntimeBroker.exe (FRI-DC01)</Data><Data Name="param2">FRI-DC01</Data><Data Name="param3">Other (Planned)</Data><Data Name="param4">0x85000000</Data><Data Name="param5">restart</Data><Data Name="param6" /><Data Name="param7">FRI-DC01\Administrator</Data></EventData> </Event>

Answer 4

Hi Lemuel

From the information you provided, I just find that this restart was ran as planned. But I was noticed that there is an event 41 was also logged. Would you please provide the detail of the event ID 41?

Best Regard

Zack Lu

Answer 5

Hi Zack,

Event log 41. The server was forced to be restarted because it is not responding anymore. I can't even RDP or access the server in the VMware itself. Upon checking the task manager CPU and Memory are working fine no spike on both hardware.

• <Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">
• <System> <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331c3b3a-2005-44c2-ac5e-77220c37d6b4}" /><EventID>41</EventID><Version>6</Version><Level>1</Level><Task>63</Task><Opcode>0</Opcode><Keywords>0x8000400000000002</Keywords><TimeCreated SystemTime="2023-12-14T09:55:15.351617900Z" /><EventRecordID>42443704</EventRecordID><Correlation /><Execution ProcessID="4" ThreadID="8" /><Channel>System</Channel><Computer>FRI-DC01</Computer><Security UserID="S-1-5-18" /></System>
• <EventData> <Data Name="BugcheckCode">0</Data><Data Name="BugcheckParameter1">0x0</Data><Data Name="BugcheckParameter2">0x0</Data><Data Name="BugcheckParameter3">0x0</Data><Data Name="BugcheckParameter4">0x0</Data><Data Name="SleepInProgress">0</Data><Data Name="PowerButtonTimestamp">0</Data><Data Name="BootAppStatus">0</Data><Data Name="Checkpoint">0</Data><Data Name="ConnectedStandbyInProgress">false</Data><Data Name="SystemSleepTransitionsToOn">0</Data><Data Name="CsEntryScenarioInstanceId">0</Data><Data Name="BugcheckInfoFromEFI">false</Data><Data Name="CheckpointStatus">0</Data></EventData> </Event>