Right before the server crashed it had 12 errors in the last second, all were. Source: W32Time Event ID: 22 The time provider NtpServer encountered an error while digitally signing the NTP response. NtpServer cannot provide secure (signed) time to the client and will ignore the request. The error was: The RPC server is unavailable. Then Event ID: 1074 Event Source: USER32 User: NT AUTHORITY\SYSTEM Computer: ComputerName Description: The process winlogon.exe has initiated the restart of computer ComputerName on behalf of user for the following reason: No title for this reason could be found. Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\WINDOWS\system32\lsass.exe' terminated unexpectedly with status code -1073740972. The system will now shut down and restart. In the Application Event log it read Type: Error Event ID: 1015 Source: Winlogon Description: A critical system process, C:\WINDOWS\system32\lsass.exe, failed with status code c0000354. The machine must now be restarted. Now this server is the DC. Should I first be checking into the NTP first. If so how. I am kinda new at this and alittle overwhelmed... Thanks for the help!!