locked
SBS2011 server crashing daily with Event 41 Kernel-Power error RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    We have an SBS2011 server that has been humming along just fine, but last week started a cycle of daily crashes.

    No new hardware, software, updates, etc.  

    All of the critical events show the same error as below, with the only variant being the bugcheck code and parameters.

    There are no mini dump or crash dump files, and Dell OpenManage doesn't provide much info either.

    - System
  - Provider

   [ Name]  Microsoft-Windows-Kernel-Power
   [ Guid]  {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
 
   EventID 41 
   Version 2 
   Level 1 
   Task 63 
   Opcode 0
 
   Keywords 0x8000000000000002
 
  - TimeCreated
   [ SystemTime]  2020-03-05T12:34:15.827218100Z 
   EventRecordID 49526557
 
   Correlation 
  - Execution

   [ ProcessID]  4
   [ ThreadID]  8
 
   Channel System 
   Computer SBS2011.tg3.local
 
  - Security

   [ UserID]  S-1-5-18
 

- EventData

  BugcheckCode 209
  BugcheckParameter1 0x0
  BugcheckParameter2 0x2
  BugcheckParameter3 0x0
  BugcheckParameter4 0xfffff880063e9006
  SleepInProgress false
  PowerButtonTimestamp 0

    I've listed crashes here with their bugcheck code and parameters.

    I can't post images or links here, which makes it really difficult to ask for help, but here goes nothing:

    Date	        ID     Task  Keywords Bugcheck Bug Hex	Param1	Param2	Param3	Para4		
2/29/2020	41	63	2	80	50	0xfffff80000000099	0x0	0xfffff8800638af91	0x0	PAGE_FAULT_IN_NONPAGED_AREA	Read operation
3/2/2020	41	63	2	10	A	0x42	0x2	0x0	0xfffff80001e50c05	IRQL_NOT_LESS_OR_EQUAL	
3/2/2020	41	63	2	80	50	0xfffff80000000099	0x0	0xfffff8800638af91	0x0		
3/3/2020	41	63	2	59	3B	0xc0000005	0xfffff880063d6f91	0xfffff8800faa4150	0x0	SYSTEM_SERVICE_EXCEPTION	0xC0000005: STATUS_ACCESS_VIOLATION
3/5/2020	41	63	2	209	D1	0x0	0x2	0x0	0xfffff880063e9006	DRIVER_IRQL_NOT_LESS_OR_EQUAL	
3/6/2020	41	63	2	59	3B	0xc0000005	0xfffff880063d6f91	0xfffff8800faa4150	0x0		
3/7/2020	41	63	2	59	3B	0xc0000005	0xfffff88006378f91	0xfffff8800e537150	0x0		
3/9/2020	41	63	2	59	3B	0xc0000006	0xfffff8800603b006	0xfffff88010dd4150	0x0

     

    Dell OpenManage shows only a generic runtime error.

    I've tried finding help on one of the popular tech forums, but the only advice I got was basically buy a new server...

    Is there any way to determine what is really causing these crashes?

    Tuesday, March 10, 2020 1:40 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    HI
    I am researching your issue ,thanks for your waiting.

    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, March 11, 2020 4:36 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi, thank you for your efforts.
    Wednesday, March 11, 2020 1:22 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    HI
    1.if we run below command in command prompt(open as admin),will it detect system issue ?
    sfc scannow
    dism /online /cleanup-image /scanhealth   
    dism /online /cleanup-image /restorehealth 

    2."There are no mini dump or crash dump files,"
    if we set the minidump on issue sbs2011 like picture 1,when the problem happen ,will there be minidump file in below location.
    %systemroot%\minidump

    If we can collect minidump successfully, we can find the root cause.
    https://docs.microsoft.com/en-us/windows-hardware/drivers/debugger/bug-check-0xd1--driver-irql-not-less-or-equal


    3.if we can not collect minidump ,can you find which process crash in taskmanager on issue sbs2011?
    if we can find this crash process ,we can right click the crash process in "details" then select "create dump file" like picture 2

    4.what's your physical server detail mode ?
    if we download and install all the latest driver from your issue physical server official website ,will the issue also happen ?



    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.



    Thursday, March 12, 2020 6:39 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Andy,

    sfc /scannow returned no integrity violations found.

    dism /online /cleanup-image /scanhealth returned the following:

    Checking System Update Readiness.
Binary Version 6.1.7601.18741
2020-03-12 11:23

Checking Windows Servicing Packages

Checking Package Manifests and Catalogs
(f)	CBS MUM Corrupt	0x00000000	servicing\Packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum		Expected file name Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name
(f)	CBS MUM Corrupt	0x00000000	servicing\Packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum		Expected file name Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~neutral~~11.2.9412.0.mum does not match the actual file name

Checking Package Watchlist

Checking Component Watchlist

Checking Packages

Checking Component Store

Summary:
Seconds executed: 337
 Found 2 errors
  CBS MUM Corrupt Total count: 2

Unavailable repair files:
	servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum
	servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.mum
	servicing\packages\Microsoft-Windows-IE-Hyphenation-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat
	servicing\packages\Microsoft-Windows-IE-Spelling-Parent-Package-English~31bf3856ad364e35~~~11.2.9412.0.cat

    dism /online /cleanup-image /restorehealth returned an error:

    Error: 87 The restore health option is not recognized in this context.

    The server is set to (the option is checked and greyed out) to write and event log, but I think the server is crashing immediately (similar to if you plugged the plug) before any logs/dumps can be written.

    I also cannot check which process crashed for the same reason, it crashes and restarts before I even know it's happening.

    As for drivers, I didn't go too far down the list, but there hasn't been an update for chipset, firmware, or video since 2012.  There is a bios update that I can try at some point.

    Thank you.



    Thursday, March 12, 2020 6:23 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    HI
    5.how many times did your issue happen in one day?
    6.if we uninstall ie 11,ie10 then go to ie 9,will the same issue happen?
    7.Please check the symptom in a clean boot (refer to windows 7 steps) environment if it is possible. 
    https://support.microsoft.com/en-us/help/929135/how-to-perform-a-clean-boot-in-windows
    8.is "automatically restart" not select on your issue SBS2011 ?

    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Saturday, March 14, 2020 10:26 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    HI
    Is there any progress on your question?

    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, March 17, 2020 2:07 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    No progress, Andy.  I greatly appreciate the help, but based on the way this is proceeding, I don't think we are going to solve this one here.  Feel free to close/delete/etc.

    Wednesday, March 18, 2020 1:59 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    HI
    Thanks for your feedback. I hope that everything will go well.
    9.since sbs2011 is end of life ,there is no new security update for it ,do you consider migrating to server 2016 essentials or high os server version?

    https://support.microsoft.com/en-us/help/4456235/end-of-support-for-windows-server-2008-and-windows-server-2008-r2

    server 2016 essentials evaluation
    https://www.microsoft.com/en-us/evalcenter/evaluate-windows-server-2016-essentials

    If the answer is helpful for you ,can you help me to mark as answer. Microsoft values your comments, thanks for your cooperation. Thanks a lot！

    Best Regards
    Andy YOU
    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Saturday, March 21, 2020 3:33 AM