Results 1 to 5 of 5
  1. #1
    Join Date
    Jul 2004
    Posts
    191

    Unanswered: who shut down this server? (was "General question (I think)")

    Is there a way to tell who the guilty person is:

    The process winlogon.exe has initiated the shutdown of computer DOCSITE01FDK on behalf of user NT AUTHORITY\SYSTEM for the following reason: Application: Maintenance (Planned)
    Reason Code: 0x84040001
    Shutdown Type: shutdown
    Comment:

    It tell you that the source is user23. Is there a way to determine who shut down this server?

    Thanks

  2. #2
    Join Date
    Jul 2003
    Location
    San Antonio, TX
    Posts
    3,662
    Check Security section of eventlog. Try to correlate logons times with EVENTLOG Started entry in Application section.
    "The data in a record depends on the Key to the record, the Whole Key, and
    nothing but the Key, so help me Codd."

  3. #3
    Join Date
    Feb 2004
    Location
    In front of the computer
    Posts
    15,579
    Provided Answers: 54
    Someone that can log on to the console of your SQL Server (in other words that can log in at the keyboard) issue a SHUTDOWN command after doing a three-fingered salute (Ctrl-Alt-Del). Hopefully, this means that one of the administrators wasn't thinking too clearly, and they "kicked the ground out from under the SQL Server" by accidentally shutting down the machine. take them out back and beat them soundly so that they remember (or at least think) next time.

    If an Administrator left the keyboard unlocked and a stray user shut the machine down, then you need to beat the user and replace the administrator.

    If a user found a way to log into your server without an administrator, you need to find a place to hide their remains. Do NOT, under any circumstances get soft hearted and allow them to live. Users like this are bad anywhere, but allowing them to escape so they can afflict another administrator (or worse yet, reproduce) borders on the criminal.

    Happy hunting, and good luck!
    -PatP

  4. #4
    Join Date
    Jun 2003
    Location
    Ohio
    Posts
    12,592
    Provided Answers: 1
    It was me. I did it. I just cannot live with the guilt any longer.
    If it's not practically useful, then it's practically useless.

    blindman
    www.chess.com: "sqlblindman"
    www.LobsterShot.blogspot.com

  5. #5
    Join Date
    Feb 2004
    Location
    In front of the computer
    Posts
    15,579
    Provided Answers: 54
    Quote Originally Posted by blindman
    It was me. I did it. I just cannot live with the guilt any longer.
    So, which of the categories do you come under, or did I miss one?

    -PatP

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •