Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Friday, June 23, 2017 12:45 PM | 1 vote
Hi all,
we have a production server during the day rebooted for no reason, the only thing we can find in the event logs are:
The process C:\Windows\system32\svchost.exe (**HOSTNAME**) has initiated the restart of computer **HOSTNAME** on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
Any idea what could have cased this or where to look further:
OS: Server 2012 R2
thnx!
All replies (3)
Tuesday, July 4, 2017 9:07 AM | 1 vote
Hi Ray________,
>>The process C:\Windows\system32\svchost.exe (**HOSTNAME**) has initiated the restart of computer **HOSTNAME** on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned)
Sorry for the delayed response.
It is possibly caused by updating, please check your windows update history to see whether it has installed the patch at the time of rebooting.
Best Regards,
Candy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Tuesday, July 11, 2017 8:12 AM
Hi Ray________，
Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.
Best Regards,
Candy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Wednesday, October 10, 2018 11:06 AM | 2 votes
This is an annoyance of Windows Server 2012R2 and happens when someone has created an RDP session to the server and has not logged out during the maintenance windows of windows updates. If a user is logged in the windows updates cannot reboot inside the maintenance window because a user is logged on.
What happens then is during the day an Admin will logon to the server via RDP (mstsc) Re-connect to the disconnected session perform his admin tasks and log off.
Now no sessions exist on the server the windows update can continue with its tasks, so performs the following
The process C:\Windows\system32\svchost.exe (**HOSTNAME**) has initiated the restart of computer **HOSTNAME** on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
and restarts the server. (During the Day BAD......)
To get around this Set the following Local Policy GPEDIT.MSC
Computer Configuration / Administrative Templates / Windows Components / Windows Update
Always automatically restart at the scheduled time
or via Group Policy
This settings was introduced on Windows Server 2012
Also make sure that the No auto-restart with logged on users for scheduled automatic updates installations is not set as if this is set then the Always automatically restart at the scheduled time is ignored.