Windows Server 2008 R2 Closing running Apps forcefully

%3CLINGO-SUB%20id%3D%22lingo-sub-1548243%22%20slang%3D%22en-US%22%3EWindows%20Server%202008%20R2%20Closing%20running%20Apps%20forcefully%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1548243%22%20slang%3D%22en-US%22%3E%3CP%3EOne%20of%20our%20servers%20running%20on%20Windows%20Server%202008%20R2%2064bit%20closing%20randomly%20all%20open%2Frunning%20apps%20forcefully%3F%20Any%20idea%20or%20you%20experienced%20this%20issue%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1548243%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

One of our servers running on Windows Server 2008 R2 64bit closing randomly all open/running apps forcefully? Any idea or you experienced this issue?

4 Replies

Sounds like some sort of crash has occurred. I'd check the event logs for clues.

 

 

1.
WMI - Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.


2.
The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following:
a) Name Resolution failure on the current domain controller.
b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).

3.
This computer was not able to set up a secure session with a domain controller in domain GLOBAL due to the following:
There are currently no logon servers available to service the logon request.
This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator.

ADDITIONAL INFO
If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain.

4.

The Quest KACE One Agent service terminated with service-specific error The system cannot find the file specified..


5.
The event logging service encountered an error while processing an incoming event published from Microsoft-Windows-Security-Auditing.

Currently monitoring after stopped the KACE services.

Sounds like a badly broken server.

I'd verify system and servicing health by running;

sfc /scannow

also system update readiness tool

https://support.microsoft.com/en-us/kb/947821

Then check for errors in;
%SYSTEMROOT%\Logs\CBS\CheckSUR.log