Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My server did a reboot today in the middle of the day, where should I look to see what may have caused this to happen?

It is a Windows Server 2008 machine

share|improve this question
up vote 4 down vote accepted

Definitely check the event log, but also depending on what brand of server it is, it may have its own internal logging system which is well worth checking.

For example, my HP servers have an inbuilt logging system that once told me a server rebooted in the middle of the night, and immediately before it did that there was a hard disk went bad and the RAID controller just was not happy and blue screened Windows. All I got from the Windows event log was "The last shutdown at 02:28 was unexpected".

share|improve this answer
+1 for proper server kit that tells you things like that. One more reason I facepalm when people say "Can't we just run this on an XP machine and save some money?" – Wesley Feb 24 '10 at 22:41
Also worth checking that Windows Updates Settings are not set to automatically restart the server. – Luke99 Feb 24 '10 at 22:49
If you get an "unexpected restart" be srue to check the minidump folder, it may be worth running the debugger to see what caused the BSoD. – Chris S Feb 25 '10 at 1:45

The Event Log - particularly the System log around the time the reboot happened.

You might find it was a BSOD (blue screen of death) - more information should have been logged to the event log.

share|improve this answer

I ran across a tool called "WhoCrashed" located at

From the website:

Comprehensible crash dump analysis tool for Windows 7/Vista/XP/2008/2003/2000 (x86 and x64)

This thing looks at your crash dump file to determine what might have caused the crash.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.