Filed Under (power, support) by Dave Mast on May-17-2007

Last night around 6:00 we had a small power outage in our building.  This is the first time that we’ve lost power at all since the building was under construction, and it lasted for less than a second.  I wasn’t worried at all about our servers or phone system because everything network-related (servers, switches, both firewalls, cable modem, etc) is on a UPS.  I knew our desktops would receive a hard reboot, but just this once… shouldn’t hurt them, right? ;-)

Well, I came in this morning to find that 3 of those desktops weren’t doing too well.  All 3 of them were EXTREMELY sluggish once their respective users logged in.  I took a look at the processes running, and saw that svchost.exe was using +90% of the CPU.  Very odd.  I let the machines sit for a bit, and much to my relief they calmed down after awhile.  The event logs haven’t turned up anything definite

After looking through MS’s support site, I’ve got an few things to check out, although I do have reservations about trying to replicate the incident.  Was this incident related to the power loss?  It would seem so, given the order of events.  Intentionally cutting power on PCs is not my cup o’ tea though…perhaps we’ll try it on one of the cold spares. :-)  If the incident WAS power-related, it really raises the case for setting a “UPS for every PC (or Mac)” policy.  Under the right circumstances, dirty power could bring about a support nightmare for me and K.  I’ve been hoping to avoid the UPS issue until next year, as we’re trying to run lean in 2007.  Hopefully it can stay that way until 2008.



Comments
Ed Buford on May 17th, 2007 at 6:19 pm #

I would like to know more about that stinking svchost.exe thing… we have some machines that have that process sucking the life out of them.

We don’t run UPS on the desktop computers… I know there is a bit of a risk in that, but when you way the cost it’s pretty hard to justify buying a hundred UPS units.

Dave Mast on May 17th, 2007 at 6:59 pm #

Here’s something that caught my interest, except that I can’t find any access violations in the Event Log (although they say you MAY see it).

http://support.microsoft.com/kb/916089/en-us

This caught my eye because we run WSUS on our network, and since the PCs check the WSUS server at startup, it would make sense for it to happen right after a reboot/login….maybe. I’m going to give it a try none-the-less and see what happens.

Todd C. on May 17th, 2007 at 9:56 pm #

Dave,

Nice Job. Keep up the great work!

Post a comment
Name: 
Email: 
URL: 
Comments: 

FireStats iconPowered by FireStats