how to check why was the machine got shut down? (win2k3)

[sirpelidor]

hi, 1 of the server kept shutting down on its own (i hope its on its own).

I'm trying to figure out why it got shut down....

could be 1: someone hacked through remote access and mischief shut down the machine.

or 2: some virus trigger the shut down process?

i like to check a: a list of remote access (including IP address)

b: what the reason was when machine got shut down (including lost of power)

thanks for help

[cluberti]

Consider auditing events via policy (gpedit.msc, or within the Group Policy object in AD being applied to that server).

[aspenjim]

If you have SBS2003 and haven't promo'd it to a DC, it'll shutdown. You'll see the error in event viewer.

[sirpelidor]

If you have SBS2003 and haven't promo'd it to a DC, it'll shutdown. You'll see the error in event viewer.

thanks for the tip aspenjim, i think u are right about the Domain controller issue. that box is meant to be a second domain controller and i didn't do anything to it yet since i installed from scartch. and yea, it is a SBS. i think i'll do it tonight and see how it will turn out. thanks

[nmX.Memnoch]

I'm pretty sure you can only have one SBS based server in a domain. You can have as many member servers as you want, but they can't be running SBS.