My question is:
How can I verify that the timer did or did not start?
Is there a specific event log entry...in system which indicates?
If so, what is it?
Happy Holidays!
Thanks for your post and Susan's input.
In addition, you can find the below KB article for more information about "sbcore" event :
Windows 2003 Small Business Server Shuts Down Unexpectedly; Events 1001, 1013 and 1014 are Logged
http://support.microsoft.com/kb/555087
Hope this helps and Happy Holidays!
Best regards,
Robbin Meng(MSFT)
Microsoft Online Newsgroup Support
==================================================================
Please post your SBS 2008 related questions to the SBS newsgroup on Connect website:
https://connect.microsoft.com/sbs08/community/discussion/richui/default.aspx
Please post your EBS related questions to the EBS newsgroup on Connect website:
https://connect.microsoft.com/ebs08/community/discussion/richui/default.aspx
If you want to use a newsreader other than a web forum to access these newsgroups,
please refer to the following blog to apply NNTP password and configure a newsreader:
http://msmvps.com/blogs/bradley/archive/2008/11/02/signing-up-for-the-sbs-2008-newsgroups.aspx
==================================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
==================================================================
Thanks for that info. So the log entries besides 1001 are caused by someone
stopping the installation and 1001 is from the server re-starting when the
timer expired with two SBS domain controllers, correct?
Are there any indicators that the timer has started?
- Bill
""Robbin Meng [MSFT]"" wrote:
> .
>
Generally, you are right. The entries besides 1001 are warnings which tell you currently the SBS server in NOT DC or doesn't hold all FSMO roles for the domain. Actually, I think the four entries
(1013,1014,1014,1001) are in the sequence of events. 1013 occurs as the first warning signal, then 1014(60 minutes), then 1014(30 minutes), then 1001 and server shuts down.
So as Susan previously indicated, the first 1013 event is the start of the timer.