Windows Server 2012 R2
Windows Server 2012
Windows Server 2008 R2
Windows Server 2008
Event ID: 6008
Source: Event Log
The previous system shutdown at Time on Date was unexpected.
Hardware going bad
Hardware firmware or driver is misbehaving
Mini filter drivers (i.e. antivirus and other security software) is/are misbehaving
Reactive action plan (To try capturing the problem):
Step 1) Setup the machine for a manual memory dump
Coming soon: How to generate a kernel or a complete memory dump file in Windows Server 2012 and Windows Server 2012 R2
Note: I would like to suggest to set this up in your base image.
Step 3) Setup for a remote kernel debug
Here are the different methods to setup the remote kernel debugger: