Windows Server 2016 shut down for unknown reason

Question

Hello All,&nbsp;We're experiencing some strange behavior with some of our Windows servers. For unknown reason they seem to shut down.This occurred while we were executing tests via Azure DevOps pipelines. (not sure if related)&nbsp;EventID: 1074The process C:\windows\System32\svchost.exe (sp-na-re-m80-1) has initiated the shutdown of computer sp-na-re-m80-1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Reason Code: 0x80000000 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Shutdown Type: shutdown &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Comment: C&nbsp;I've done a little investigation, see the screenshots attached.&nbsp;I'm hoping someone can shine a light on this and guide me towards the root cause of the shutdown.

dieterds · Answer

DieterDSAdding two more screenshots.

hotcakex · Answer

DieterDS&nbsp;&nbsp;Hi there,seeing your screenshot, I went here&nbsp;https://docs.microsoft.com/en-us/windows/win32/shutdown/system-shutdown-reason-codes&nbsp;and checked for shutdown codes again and found this:&nbsp;SHTDN_REASON_FLAG_PLANNED
0x80000000The shutdown was planned. The system generates a System State Data (SSD) file. This file contains system state information such as the processes, threads, memory usage, and configuration.If this flag is not present, the shutdown was unplanned. Notification and reporting options are controlled by a set of policies. For example, after logging in, the system displays a dialog box reporting the unplanned shutdown if the policy has been enabled. An SSD file is created only if the SSD policy is enabled on the system. The administrator can use Windows Error Reporting to send the SSD data to a central location, or to Microsoft.&nbsp;also found this that might help

dieterds · Answer

I'm not sure what to do with this information.It does indeed say that it's a Planned shutdown, but we can't find the reason as to why it occurred.

hotcakex · Answer

Yes, sorry about that, hope someone else can help you further with it (:

erwin75 · Answer

Hi&nbsp;DieterDS&nbsp;&nbsp;Did you ever found out what the cause was?, I have 2 servers which gave the same event but cant found out why they rebooted.

Forum Discussion

Windows Server 2016 shut down for unknown reason

8 Replies

Resources