I am stumped here.
We have a Windows Server 2016 Datacenter Host, Hyper-V role, 8 Virtual Machines (all same OS as host).
One of these Virtual Machines is a Terminal Server for a number of users inside and outside the LAN. I'll call it TS-SERVER. TS-SERVER randomly reboots a number of times a week. It always logs Event 41, Kernel-Power, but I cannot find the underlying reason.
Obviously this is a critical issue for us since 5-10 users can be logged into this VM at any given time, all of them losing any unsaved work every time it happens.
I've browsed the event logs surrounding the times of the reboots, but I can't seem to pinpoint any related events. No Bugcheck logged either.
Any suggestions are appreciated. Thank you
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2/27/2018 11:05:20 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: TS-SERVER.domain.local
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
<EventID>41</EventID>
<Version>4</Version>
<Level>1</Level>
<Task>63</Task>
<Opcode>0</Opcode>
<Keywords>0x8000400000000002</Keywords>
<TimeCreated SystemTime="2018-02-27T19:05:20.244601800Z" />
<EventRecordID>42356</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="8" />
<Channel>System</Channel>
<Computer>TS-SERVER.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="BugcheckCode">0</Data>
<Data Name="BugcheckParameter1">0x0</Data>
<Data Name="BugcheckParameter2">0x0</Data>
<Data Name="BugcheckParameter3">0x0</Data>
<Data Name="BugcheckParameter4">0x0</Data>
<Data Name="SleepInProgress">0</Data>
<Data Name="PowerButtonTimestamp">0</Data>
<Data Name="BootAppStatus">0</Data>
<Data Name="Checkpoint">0</Data>
<Data Name="ConnectedStandbyInProgress">false</Data>
<Data Name="SystemSleepTransitionsToOn">0</Data>
<Data Name="CsEntryScenarioInstanceId">0</Data>
</EventData>
</Event>