Hi,i am having a problem with one of my windows 2003 SP2 serversrandomly rebooting. it has been doing this for a couple of months now. i have replaced the RAM and the issue remains. Iused poolmon to see if there are any memory leaks (there is a small leak intcpsvcs.exe - DHCP), but the server restarted today with well over 1gb of memory available.iran windows update a couple of weeks ago and installed all updates found but the problem seems to be occuring even more frequentlysince (used to be once an month and now once every couple of days). the issue first occured 4 days after installing KB958644 patch(conficker worm security vulnerability), but this timing could be purely coincidental.i have upgraded the Firmware, BIOS, and RAID Drivers, but the issue remains.there is nothing in the event logs anywhere near the time the server restarts to give any clues towards the problem.today i removed the Intel proset NIC Teaming and upgraded the NIC drivers, hopefully this fixes my problem, but apart from this i am all out of ideas.this is a mission critical server as it is a DC, roles master, WINS, DNS, and DHCP.any help/suggestionswould be greatly appreciated.thanksshazz

Hi, Please understand that to troubleshoot the random reboot issue, we usually need to perform debugging. However, in this forum, we do not provide debugging support. If you would like to perform debugging, please contact Microsoft Customer Support Service (CSS). To obtain the phone numbers for specific technology request, please refer to the website listed below: http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS If you are outside the US, please refer to http://support.microsoft.com for regional support phone numbers. I hope your issue can be resolved soon. Tim Quan - MSFT

Shazz, I know this has been some time since your server reboot problem but I am having the same problem with a server now. Did you figure out a solution to your problem? The server that is randomly rebooting is also a DC, Roles Master, WSUS, WINS, DNS, and DHCP. Any help is appreciated... The message I am getting is as follows (verbatim): The process winlogon.exe has initiated the restart of computer on behalf of user for the following reason: No title for this reason could be found Reason code: 0x5006 Shutdown type: restart Comment: They system process "c:\windows\system32\lsass.exe" terminated unexpectedly with status code -1073741819. The system will not shut down and restart. Note: I have already tried the following items to attempt to fix the problem. Article ID: 938482- To work around this problem, make sure that the Authenticated Users group has the Read permission and the Apply Policy permission to access at least one GPO that is applied to domain computers. To do this, grant the Authenticated Users group the Read permission and the Apply Policy permission to the default domain policy. I have ran sasser worm removal tools from Symantec and Microsoft malicious removal tool. updated to SP2 Thanks, Bryan