Windows server shut down unexpected

Question

Hello Support, I have two windows server 2012 datacenter deployed in my environment, but one of them always shut down unexpected and then re-start automatically, sometimes when I login the server, it shows a pop up windows to ask for the unexpectied shut down reason, I also looked the event viewer from that server, I can only find event id 6008 with shut down unexpected there, but I don't know how to resolve it.

By the way, the two windows server 2012 datacenter are the same, but only this specific one always with this issue. Any ideas or how to troubleshoot it? By the way that server I only deployed Active Directory.

Answer 1

Hi,
According to the call stack, we could find some information:
nt!MmAccessFault+0x769
nt!KiPageFault+0x12f
srv!SrvOs2FeaToNt+0x48
srv!SrvOs2FeaListToNt+0x125
srv!SrvSmbOpen2+0xc3
It seems related to your SMB protocol. You mentioned two windows server 2012 datacenter are the same. Does they also installed the same security patch, Are they the same version of the system？
I suggest that you could check for update firstly. Just like the link below:
https://judeperera.wordpress.com/tag/srv-sys/
Or try to disable smb1.0 using the command below to check:
Set-SmbServerConfiguration -EnableSMB1Protocol $false
Hope this helps and please help to accept as Answer if the response is useful.
Best Regards,
Carl

Answer 2

Please run the V2 log collector then post a share link into this thread:

https://www.windowsq.com/resources/v2-log-collector.8/
https://www.tenforums.com/bsod-crashes-debugging/2198-bsod-posting-instructions.html

.
.
.
.
.

Please remember to vote and to mark the replies as answers if they help.

On the bottom of each post there is:

Propose as answer = answered the question

On the left side of each post: Vote = a helpful post
.
.
.
.
.

Answer 3

I cannot upload the txt as attachment, so I just provide the full analysis result here, could you please help have a look?