Win 2k Server logging itís self out
Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Win 2k Server logging itís self out

  1. #1
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897

    Win 2k Server logging itís self out

    Ok, someone I know has a Win 2k server that he likes to leave logged in at all times as admin, but for some reason it seems to be logging itís self out (I know this is a good thing, but itís not the way he wants it). The last time I looked at the logs not much was logged, so I changed the policy to log more information. What all things should I look for that may be causing a logout or reboot?

  2. #2
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    How about firing up ProcessExplorer or something like it to see if there is a rogue process running? I'd be checking what the last processes that occur before the logout/reboot? (is it a reboot or a log out?)
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  3. #3
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    I'm not sure yet, by default Win 2k does not seem to log all the info I need. I've since changed the audit policy and now it should log more system info.

  4. #4
    Right turn Clyde Nokia's Avatar
    Join Date
    Aug 2003
    Location
    Button Moon
    Posts
    1,696
    There is a local policy option to that can be enabled to logout an account after a period of time if there is no activity.

    I can't remember exactly where it is but you should be able to search around the policy options for it.

    A long shot but is autoupdates configured? It could be rebooting itself after updating.
    Drugs have taught an entire generation of kids the metric system.

    http://tazforum.**********.com/

  5. #5
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,403
    IIRC there used to be a logout.scr (screensaver) in the resource kit.

    Reboots would show up in the system eventlog as Eventlog service stopped; ID 6006, (system started) ID 6009 and Eventlog service started; ID 6005.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  6. #6
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,192
    Hmmmm,

    Is this happening frequently and at regular intervals or does it appear to be random?

    I would check the fans and ventilation.

    I would also turn off all power saving options and the screensaver, if applicable.

    Also turn of the restart on error options so we can see if it is a crash or a reboot. It might even display a message.

    I am not sure if it is in Win 2000 Server, but if he has drwatson.exe he could try running it, as it may give information not in his system logs?


    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  7. #7
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    Thanks. I checked the power options the last time I was there and it does not seem to be that, and as I recall no screen saver was enabled. I hope to find something in the even log when I look tonight.

  8. #8
    AO Guinness Monster MURACU's Avatar
    Join Date
    Jan 2004
    Location
    paris
    Posts
    1,003
    I would really check the domain options to see if the forced log off is activated. You could also leave the admin account active on an other machine to see if it is the machine or the account.

    Also if he is using the server as a supervision station you can get some strange behavoir with things like compaq insight manager and other network supervision tools especially if you have more than one running on the server.

    Another thing that maybe happening is if he running scripts on the machine to collect data one of his scripts might be causing the logoff.

    Anyway best of luck and if you still find nothing try Technet
    \"America is the only country that went from barbarism to decadence without civilization in between.\"
    \"The reason we are so pleased to find other people\'s secrets is that it distracts public attention from our own.\"
    Oscar Wilde(1854-1900)

  9. #9
    It's a gas!
    Join Date
    Jul 2002
    Posts
    699
    This might help

  10. #10
    King Tutorial-ankhamun
    Join Date
    Jul 2004
    Posts
    897
    I did some more looking into it, looks like it was a restart instead of a log off. Right now, it looks like the UPS is to blame.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides