Windows Server 2012 R2 Data Center 上的 Microsoft-Kernel-Power 错误 ID=41。
由于发生此错误,我的服务器昨天停机了两次,导致服务器自行重启。这是 Azure VM。
我检查了设备管理器,没有发现任何异常或需要更新的情况。还发现了一些我没有安装的随机打印机的打印驱动程序。如能提供任何见解,我将不胜感激。
我目前没有更多信息。
答案1
这表明非正常关机。即使用软件电源开关从头部击中节点。需要联系 MS 处理此事。
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Event ID: 41
Level: Critical
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
An event 41 can occur in the following scenarios.
Scenario 1: The computer restarts, and there is a Stop error BugcheckCode in the event data
When a Stop error occurs, the Stop error data is written in Event ID 41 as part of the additional event data. There may be the instances in which the Stop error code information cannot be written before the computer restarts or shuts down. Such instances are covered in scenario 3.
Scenario 2: The computer is shut down By Azure (there was no outage listed in Azure Service Dashboard)
http://azure.microsoft.com/en-us/support/service-dashboard/
Scenario 3: The system randomly restarts and no Stop error BugcheckCode is listed, or the computer is completely unresponsive (hard hang)
答案2
您说您看到了随机打印机的打印驱动程序 - 如果您使用 RDP 连接并启用了打印重定向(并且远程桌面轻松打印无法映射打印机),这些驱动程序通常由服务器本身安装。
如果您是唯一使用 RDP 访问此服务器的人,并且您不认识任何打印驱动程序,那么我很确定某个您不认识的人已经登录,可能是通过使用众所周知的用户名/密码组合进行暴力攻击。
答案3
我被告知 Azure 必须更换一些硬件,然后错误就消失了。云的缺点之一...