| Posted by: Lemonde - 04 October 2018 10:46:15 |
|---|
| The following 2012R2 RDS VM has been running normally for some time and then all users were thrown out and machine rebooted with the following: Log Name: System Source: Microsoft-Windows-WER-SystemErrorReporting Date: 04/10/2018 09:16:36 Event ID: 1001 Task Category: None Level: Error Keywords: Classic User: N/A Computer: %computername% Description: The computer has rebooted from a bugcheck. The bugcheck was: 0x000000fc (0xffffe0016a6e21c0, 0x80000006a7c009e3, 0xffffd0002f3868d0, 0x0000000000000004). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 100418-57718-01. Event Xml: [code=markup]<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-WER-SystemErrorReporting" Guid="{ABCE23E7-DE45-4366-8631-84FA6C525952}" EventSourceName="BugCheck" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2018-10-04T08:16:36.000000000Z" /> <EventRecordID>265096</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>System</Channel> <Computer>DESKTOP</Computer> <Security /> </System> <EventData> <Data Name="param1">0x000000fc (0xffffe0016a6e21c0, 0x80000006a7c009e3, 0xffffd0002f3868d0, 0x0000000000000004)</Data> <Data Name="param2">%systemdrive%\Windows\MEMORY.DMP</Data> <Data Name="param3">100418-57718-01</Data> </EventData> </Event>[/code] We are currently analysing the memory dump and will report back... |