none
The previous system shutdown at 3:03:38 AM on 8/11/2010 was unexpected. RRS feed

  • Question

  • OS - Windows Server 2008 (Standard Edition 32 bit) & Virtual Environment.
    Issue: Server goes down & when I checked the logs, I got the above mentioned error & also got error - Previous shutdown on a particular date (before that Error Date) was unexpected. Its been happening frequently. Can anyone let me know why its happening & the solution for the issue please.

    This is my Main Issue: The Terminal Server security layer detected an error in the protocol stream and has disconnected the client.

    Log Details, I have pasted below:

    Log Name:      System
    Source:        TermDD
    Date:          8/12/2010 2:11:37 PM
    Event ID:      56
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      virtualsrv.abc.corp
    Description:
    The Terminal Server security layer detected an error in the protocol stream and has disconnected the client.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="TermDD" />
        <EventID Qualifiers="49162">56</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2010-08-12T18:11:37.833Z" />
        <EventRecordID>18726</EventRecordID>
        <Channel>System</Channel>
        <Computer>virtualsrv.abc.corp</Computer>
        <Security />
      </System>
      <EventData>
        <Data>\Device\Termdd</Data>
        <Binary>00000400010000000000000038000AC00000000038000AC000000000000000000000000000000000B50000D0</Binary>
      </EventData>
    </Event>
    ----------------------------------------------------------------------------
    Log Name:      System
    Source:        EventLog
    Date:          8/12/2010 8:22:52 AM
    Event ID:      6008
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      virtualsrv.abc.corp
    Description:
    The previous system shutdown at 3:03:38 AM on 8/11/2010 was unexpected.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="EventLog" />
        <EventID Qualifiers="32768">6008</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2010-08-12T12:22:52.000Z" />
        <EventRecordID>18624</EventRecordID>
        <Channel>System</Channel>
        <Computer>virtualsrv.abc.corp</Computer>
        <Security />
      </System>
      <EventData>
        <Data>3:03:38 AM</Data>
        <Data>8/11/2010</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>657609</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Binary>DA07080003000B00030003002600FE00DA07080003000B00070003002600FE003C0000003C000000000000000000000000000000000000000100000000000000</Binary>
      </EventData>
    </Event>
    --------------------------------------------------------------------

    • Edited by mywindows Friday, August 13, 2010 12:54 PM added information
    Friday, August 13, 2010 12:50 PM

All replies

  • Hi,

    Any memory dump generated during this process. You can check %SystemRoot%\MEMORY.DMP and provide the contents here.

    Also, provide the serer model details.

    Friday, September 17, 2010 1:14 PM