Hi All
I'm asking this here after it was suggested that the Windows Server 2012 forum may not be the most appropriate.
I have a Windows 2012 Server thats hosting a number of VM's. Update policies are set via GPO from Corporate and on the face of it look ok. This particular server though has restarted on a few occasions of its own accord, typically overnight. Whilst the server will not be in use by Staff the backups are running at that time so they fail, which is hardly ideal!
Looking through the Event Viewer I can see this:-
Event ID: 1074, Source: User32
The process C:\Windows\system32\svchost.exe (UKHARHS101) has initiated the restart of computer UKHARHS101 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned)
Reason Code: 0x80020002
Shutdown Type: restart
Comment:
My update settings in the registry are below:-
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]"TargetGroupEnabled"=dword:00000001
"TargetGroup"="Global_Must_Have_Server"
"WUServer"="http://UK8006:8530"
"WUStatusServer"="http://UK8006:8530"
"ElevateNonAdmins"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000000a
"AutoInstallMinorUpdates"=dword:00000000
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000000a
"DetectionFrequencyEnabled"=dword:00000001
"DetectionFrequency"=dword:00000016
"NoAutoRebootWithLoggedOnUsers"=dword:00000000
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000001
"ScheduledInstallTime"=dword:00000004
"UseWUServer"=dword:00000001
All servers should be installing their updates on a Sunday morning and rebooting then if its required, nothing critical is running during that time slot.
Any advice on what to check next would be most appreciated.