Event id 1074 reason code 0x50006 windows 10. exe' terminated unexpectedly with status code -1073741816.

Event id 1074 reason code 0x50006 windows 10 exe' terminated unexpectedly with status code -1073741819. Feb 11, 2022 · The system process ‘C:\Windows\system32\lsass. 210. Configuring the Windows Time service to use an external time source. Reason Code: 0x50006 Symptoms. The first entry contains the correct reason code provided by the user, the second looks similar to: Log Name: System Source: USER32 Date: <DateTime> Event ID: 1074 Task Category: None Level: Information Dec 5, 2023 · January 10, 2025. exe (SPENCER-DESKTOP) param2 Jul 5, 2021 · The process wininit. exe(DINESH) has initiated the restart of Open event viewer; expand Windows Logs; click on system to view it; right-click on system and select Filter Current Log; in Event Sources: select User32; change <All Event IDs> to 1074; click OK; You'll now have a list of shutdown and reboot events. Something is forcing your computer to shutdown and it might be a remote shutdown command from the server. Sep 21, 2009 · The event viewer shows the following; Event Type: Information Event Source: USER32 Event Category: None Event ID: 1074 Date: 9/21/2009 Time: 11:56:08 AM User: NT AUTHORITY\SYSTEM Computer: <ServerName> Description: The process winlogon. exe (SERVER) has initiated the restart of computer SERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. It appens during working hours. The shutdown events with date and time can be shown using the Windows Event Viewer. exe has initiated the restart of computer <ServerName> on behalf of user for the following reason: No title Sep 27, 2024 · Server 2022 keeps sporadically rebooting, and has been doing this since fresh install in March 2024. c:\windows\system32\lsass. exe' terminated unexpectedly with status code Oct 27, 2017 · Hi i have desktop with windows 7 embedded standard OS. Cool Tip: Event Id 4625 Status Code 0xc000006a – Fix to find the source of attempt! Event Id 1074 legacy api shutdown Sep 11, 2021 · Log Name: System Source: User32 Date: 7/9/21 7:45:18 PM Event ID: 1074 Task Category: None Level: Information Keywords: Classic User: SYSTEM Computer: lap Description: The process C:\WINDOWS\system32\winlogon. Comment: The system process 'C:\Windows\system32\lsass. Comment: Jun 10, 2014 · These are the Event ID's I found helpful in tracking down a Reboot: Event ID 1074 (Source: USER32) is "has initiated the restart" Event ID 6005 (Source: EventLog) is "Event Log Service was Started". exe (PC1) has initiated the restart of computer PC1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Mar 25, 2024 · Faulting module path: C:\Windows\system32\kerberos. They suggested upgrading to Windows 10 to resolve the issue. Oct 22, 2014 · Event ID: 1074. I went into Event Viewer and I saw this event: Log Name: System Source: USER32 Date: 5/16/2015 8:32:02 PM Event ID: 1074 Task Category: None Jan 26, 2022 · In the above windows system event log id 1074, an application ssms-setup-enu. DLL . exe has initiated the restart of computer <DC> on behalf of user for the following reason: No title for this reason could be found. exe has initiated the restart of computer {SERVER} on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process ‘C:\Windows\system32\lsass. Log Name: System . Servers have KB5007247 and KB890830 updates. For more information, see: Shutdown Reasons; System Shutdown Reason Codes; Unexpected reboot examples. I went to event viewer to know what was the cause of the problem, this was what I got: How can I determine the reason for those restarts? Nov 4, 2020 · The process wininit. 1) has initiated the restart of computer HEATHER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown . Source USER32. exe (mypcname) has initiated the power off of computer (mypcname) on behalf of user (mypcname\myusername) for the following reason: Other (Unplanned) My PC: ASUS Jan 11, 2022 · I have several apps pushed out by Intune. exe (DESKTOP-3F0SA03) has initiated the shutdown of computer DESKTOP-3F0SA03 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. exe terminated unexpectly and the status code:,now system will shutdown and restart. exe 意外终止，状态码为 -1073740791。系统现在将关机，并重新启动。 When I checked online, I found that the KB5039211 patch for Windows 10 seems to fix the problem on the 21H2 version, but there is no mention of 22H2 which version I Jun 2, 2023 · Event ID: 1074 General: The process wininit. Reason Code: 0x500ff. exe' terminated unexpectedly with status code 255. By using our website, you agree to the use of cookies. Any fixes? Nov 23, 2024 · Reason Code: 0x50006. Shut-down Type: shutdown which as you can see is Jan 15, 2025 · Log Name: System Source: User32 Date: <date and time> Event ID: 1074 Level: Information User: <User> Computer: <FQDN> Description: The process C:\Windows\system32\wbem\wmiprvse. exe has initiated the restart of computer DC19** on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows After reboot from a manual shutdown (START->Shutdown), the Windows System Eventlog shows two events 1074. The question is - what could be the reason? It's well odd, feels somewhat related to the Windows button. 129:123->130. exe' terminated unexpectedly with status code -1073740767. If KERBEROS. DLL fails to load, it could cause the LSASS. exe has initiated the restart of computer SERV01 > on behalf of user for the following reason: No title for this reason > could be found > Reason Code: 0x50006 > Shutdown Type: restart > Comment: The system process 'C:\WINDOWS\system32\lsass. Description This event is written when an application causes the system to restart, or when the user initiates a restart or shutdown by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down. With an unexpected reboot, there usually isn't an Event ID 1074 log entry. User: SYSTEM . h. exe (LAP) has initiated the restart of computer LAP on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Oct 30, 2021 · The exception information is the data. This is the event log. The system will shut down and restart. exe has initiated the restart of computer <computer name> on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. Reason Code: 0x80070000 . For a while now, I have been experiencing random shutdowns on my PC with Reason Code: 0x500ff. Event viewer for the same event said source is User32 and Event ID is 1074. Results Jan 7, 2021 · The shutdown reason codes are used by the ExitWindowsEx and InitiateSystemShutdownEx functions in the dwReason parameter. Note 1: It seems that your domain controller is unable to syncronize with external resource. DLL at boot time. exe has initiated the restart of computer <logged on username> on behalf of user for the following reason: No title for this reason could be found. Event ID 6006 (Source: EventLog) is "Event Log Service was Stopped". exe has initiated the restart of computer S2K3DC001 (S2K3DC002) on behalf of user for the following reason: No Dec 29, 2024 · Event ID 6008 - my computer randomly restarts seemingly without reason I'm running windows 10. exe has initiated the restart of "My computer" on behalf of user for the following reason: No title for this reason could be found. I get random restarts, with the event: Log Name: System Source: User32 Date: 7/9/21 7:45:18 PM Event ID: 1074 Task Category: None Level: Feb 18, 2024 · Windows Server rebooted due to Reason Code: By using this site, Navigate to Windows Logs\System\Filter Current Log and search for the Event ID: 1074; 3. Mar 16, 2022 · Reason Code: 0x50006 Shutdown Type: restart Comment: The system process ‘C:\WINDOWS\system32\lsass. 2. Mar 25, 2019 · The process C:\Windows\system32\winlogon. Dec 14, 2021 · Hi, I try to understand why restart causes problems on all vm's with windows servers 2012 R2. exe (127. Jan 12, 2009 · Few days ago servers restarted together at few hours between them, due to this error: (on both servers) Event ID: 1074 Event Source: USER32 User: NT AUTHORITY\SYSTEM Computer: S2K3DC001 (S2K3DC002) Description: The process winlogon. 1. No Windows updates were performed. Source: User32 Event ID: 1074 General: The process wininit. We received the following event 1074 in the System log: The process wininit. Event ID 6006: Logged as a clean shutdown. Got onto my desktop and everything was running correctly after booting up. I recently built a new PC and the only 2 pieces that I transferred from the old PC are my GPU and the M. exe has initiated the restart of computer {computername} on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\WINDOWS\system32\lsass. I did not set any task schedule in my windows. On event viewer I find event id 1074: The process C:\Windows\System32\RuntimeBroker. Dec 1, 2023 · Good day. Mar 25, 2024 · Faulting module path: C:\Windows\system32\kerberos. exe causes reboot of SQL Server. 24. exe (SPENCER-DESKTOP) has initiated the power off of computer SPENCER-DESKTOP on behalf of user NT_AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: power off Comment: param1 C:\Windows\system32\winlogon. Event ID: 1074. Jul 22, 2020 · Event ID 6008 is for a forced shutdown. Apr 12, 2023 · The reason code, which they never told him what it meant, is 0x800000ff. 126. exe' terminated unexpectedly with status code -1073740791. Instead, we have to harvest the Windows Event Log. exe has initiated the restart of computer DC2 on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. exe crashes with event id 1000 in application log as below: Faulting application name: lsass. edu (ntp. Shutdown Type: power off. exe or lsass. Thank you very much for answering me, it's strange because in my case, I have DCs in different geographical locations, and they all have the same problem. exe has initiated the restart of computer CG-SBS on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Apr 19, 2023 · The process wininit. These are all newly created accounts, all copied from the same account. Event ID: 37 The time provider NtpClient is currently receiving valid time data from ntp. shut down type: restart. Reason Code: 0x50006. I need to support Windows Vista and Windows 7. exe and then the domain controllers ip address initiated the power off of the computer (a notebook) on behalf of user DOMAIN\Administrator for the following reasons: Security issue (Unplanned) Nov 17, 2020 · Combing through the Event Viewer, all I can come up with is a single entry in the System log by User32 for what appears to be a graceful shutdown with code 1074. It was working just fine with our Windows 10 version 1709 workstations but Windows 10 version 1909 workstations are getting authentication failure. System reboot information is located in Event Viewer/Windows Logs Information Event ID 1074. 5b. Jul 11, 2024 · The process wininit. Jan 29, 2025 · windows event logs cheat sheet. Shutdown Type: reboot. Jan 13, 2022 · The process wininit. Why not disable synchronizing with an external resource? Jul 19, 2021 · We're using Clearpass to authenticate. Run the command gpedit. exe is forced to terminate? Well, it will result in restart of the machine. An unexpected restart or shutdown is one that the system cannot anticipate, such as when the user pushes the computer's reset button or unplugs the power cord. exe 意外终止，状态码为 -1073740791。系统现在将关机，并重新启动。 When I checked online, I found that the KB5039211 patch for Windows 10 seems to fix the problem on the 21H2 version, but there is no mention of 22H2 which version I Mar 5, 2014 · -----Event ID 1074 Source: User32-----The process wininit. 19061. exe (<computer name>) has initiated the shutdown of computer <computer name> on behalf of user <user> for the following reason: No title for this reason could be found Event #1 **USER32** (ID 1074) The process wininit. But when start NETLOGON Services, it still restart every 5 ~ 10 minutes. I found an article that stated there was a work around but that it's no longer available. exe restarted by user sylsad1. Jul 4, 2021 · Microsoft Support is still working on this issue to figure out the exact reason why KB5009624 causes a continuous restart/reboot on all Windows Servers with any Role. MAX\\_NUM\\_REASONS is defined in reason. If so, package these files, upload them to OneDrive, and share them, and then include a link to share them in the next reply. Event ID 1074 captures details like the user account responsible for the shutdown, the process that triggered it, and the reason code indicating whether the shutdown was scheduled or unplanned. I dont understand what I am reading here, cause I'm pretty illiterate when it comes to this stuff, I had to have a friend help me locate this text: Log Name: System Source: USER32 Date: 3/25/18 10:35:57 AM Event ID: 1074 Task Category: None Dec 21, 2021 · The process C:\Windows\system32\shutdown. A maximum of MAX\\_NUM\\_REASONS reason codes will be processed by the system. The notebook just shuts down. Answer: It seems that there is no direct API to get that information. In “SAFE MODE” basically uninstall KB5009624 over “Programs and Features” and restart the Windows Servers again. The clients are running Win10 Enterprise 21H2, and we have a two node ISE 3. The reason code is 0x800000ff and no reason nor comment are provided. Level: Information Jul 11, 2024 · The process wininit. exe (DESKTOP-0G9VTAA) has initiated the Apagar of computer DESKTOP-0G9VTAA on behalf of user NT AUTHORITY\SYSTEM for the following reason: No se encontraron títulos para este motivo. I can normally immediately turn the computer on again, and log into Windows. Restart process causes three event id. However, I need to know at least which reason it is from the main ones. We checked the event, shows: It said that wininit. msc. reason code: 0x50006. 2 SSD. Shutdown Type: restart . scroll through them and you should be able to see what process caused which reboot. exe has initiated the restart of computer Domain Controller 2019 on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. "The process C:\Windows\system32\winlogon. exe’ terminated unexpectedly with status code 255. According the event manager the restart was triggered by: The process C:\Windows\system32\svchost. 1, I've tried a lot of things to fix this and I'm completely out of ideas. And, that is what I mean here, lsaas. Apr 23, 2023 · Message : The process wininit. If the state server isn't running when you increase the time-out values on the Web server, the client request times out after n seconds, where n equals a new timeout value, instead of the default 10 seconds. Comment: Details ----- Log Name: System . Description: The process C:\Windows\System32\RuntimeBroker. Problem is my desktop restarts of its own. Event viewer gives me this - event id: 1073. I was gentle and it was simply to a new room. The process C:\WINDOWS\system32\winlogon. The process C:\Windows\system32\winlogon. You Jan 23, 2024 · Dears, Greetings, I have a problem with my Windows server 2022 with active directory, the server frequently restarts due to lsass. Jan 15, 2025 · The process wininit. Results will appear as per the screen shot below. Event ID 7001 (Source: WinLogon) is "User Logon". They all have the same rights. It gives the message, “The Event log service was stopped. exe ( SQL Server installer) has initiated the restart of the computer and this event reason code is 0x80040002. no additional logs . exe, failed with status code c0000005. When I look through Event Viewer, this is the only event that I can find that seems relevant (Event ID 1074). dmp files in the C:\Windows\Minidump and C:\WINDOWS\ directory. EventID : 1074 MachineName : DC19** Data : {} Index : 544467 Category : (0) EntryType : Information Message : The process wininit. I have googled this two event and reason code's and can't find anything. 12. Hi, each time I must force to restart/shutdown my PC. 0, time stamp: 0x00000000 Faulting module name: unknown, version: 0. DLL, which attempts to load KERBEROS. exe has initiated the restart of computer SERVERNAME on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. I looked inside windows update logs. Here are the events from Microsoft\Windows\Wired-AutoConfig: Issue starts with Event ID 14003 Source LanGPA not being able to apply the NAC client GPO: A previously existing Wired Group Policy couldn't be applied to your computer. Description: reason:The process C:\Windows\system32\wbem\wmiprvse. The system will now shut down and Jun 30, 2022 · This is the error: The process wininit. exe (DESKTOP-SKQF2RI) has initiated the shutdown of computer DESKTOP-SKQF2RI on behalf of user NT AUTHORITY\LOCAL SERVICE for the following reason: No title for this reason could be found Nov 6, 2022 · The process wininit. exe has initiated the restart of computer DC19RP on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. exe (MQNDT19866) has initiated the shutdown of computer MQNDT19866 on behalf of user domain\\jmatter for the following reason: No title for this reason could be found Reason Code:0x80070015 Shutdown Type: shutdown comment: MQNDT19866 is my computer, domain\\jmatter is not me but someone in my department. Microsoft writes a wealth of information to the system event log about different events related to shut-down and restart operations. and. I have noticed in system event logs that there are event id 1074 sometime initiated by. This does not affect all users. This is affecting Production servers sitting on different OUs in Active Directory. User SYSTEM. Cookies help us deliver the best experience on our website. 1x on Widnows 10 workstations is configured via GPO and set to do Computer only authentication with Microsoft: Protected EAP (PEAP) (Secured password (EAP-MSCHAP v2). It is alwasy the same users. Michael-Thanks for sending me the log file. Navigate to Windows Logs > System > Filter Current Log and search for the Event ID: 1074. Refer to the reason code: Update the Local Computer Policy to stop the server from rebooting. 1) initiated restart of the WBVM-MJLOG computer by the NT\SYSTEM AUTHORITY user for this reason: Legacy API shutdown Reason code: 0x80070000 Shutdown type: restart Comment: I've been investigating for hours and haven't found anything. EXE process to terminate unexpectedly. Description: The process wininit. Feb 27, 2018 · I have Windows Updates disabled, so that shouldn't be it. Apr 12, 2021 · Make sure you have the latest BIOS or UEFI firmware, Chipset, Display (Video), Sound, USB3, Bluetooth, Network and all other drivers, or else download and install the latest now. The process C:\Windows\System32\RuntimeBroker. exe initiated shutdown on behalf of NT AUTHORITY/system with reason code 0x800000ff. There is no apparent application, scheduled task, or update-related reason for this to have happened. exe terminated unexpectedly. Feb 7, 2024 · In the event viewer I find this The process wininit. No any installed windows update. The system will now shut down and Aug 18, 2012 · original title: Shutdown event id 1074. The process wininit. Sep 2, 2021 · The event viewer system log shows this message (latest to date) - ID 1074 : Le processus C:\WINDOWS\SysWOW64\shutdown. exe 意外终止，状态码为 -1073740791。系统现在将关机，并重新启动。 When I checked online, I found that the KB5039211 patch for Windows 10 seems to fix the problem on the 21H2 version, but there is no mention of 22H2 which version I The more details I can get the better. Event ID 1074: Logged when an app (such as Windows Update) causes the system to restart, or when a user initiates a restart or shutdown. Comment: This just recently started to happen. exe has initiated the restart of computer XXXXXX on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process ‘C:\WINDOWS\system32\lsass. . 0, time stamp: 0x00000000 The wininit. exe has initiated the restart of computer <COMPUTERNAME> on behalf of user for the following reason: No title for this reason could be found . Source: User32 . exe (SBSOADMIN2015) has initiated the power off of computer SBSOADMIN2015 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. Start the Event Viewer and search for events related to the system shutdowns: Press the ⊞ Win keybutton, search for the eventvwr and start the Event Viewer; Expand Windows Logs on the left panel and go to System Jan 15, 2020 · Using PowerShell to Query Windows Event Logs. exe' terminated > unexpectedly > with status code -1073740972. exe Reason code: My server is a windows server 2012 R2, it is my application server that runs PostreSQL on it. The only other “significant” event was: May 17, 2021 · But still it restarted automatically. Wired Group Policy Name: - Reason Code: 2147943606 Jun 30, 2024 · Event ID 41: This event indicates that Windows rebooted without a complete shutdown. exe (TAQUITO) has initiated the power off of computer TAQUITO on behalf of user Taquito\MasterDXL for the following reason: No title for this reason could be found. exe (pcname) has initiated a poweroff of computer (pcname) on behalf of user (pcname\\xyz) for the following reason : no title for this reason can be found. exe process (127. Log into the affected Windows server and open up the Event Viewer. exe' terminated unexpectedly with status The process wininit. The message in Event Viewer reads The process C:\Windows\system32\shutdown. exe has initiated the restart of computer PRCSRV01 on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. exe has initiated the restart of computer on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. Jun 19, 2019 · I have a pc that randomly reboots or shuts down with the event viewer showing: process c:\\windows\\system32\\winlogon. Sep 25, 2022 · Firstly, please check if there are. Comment: 系统进程 C:\WINDOWS\system32\lsass. Sep 10, 2021 · Dell G7 7590 laptop, win10 edu. EntryType : Information. Reason Code: 0x50006 Jul 6, 2021 · I detected that when I stop NETLOGON Services, server 2019 doesn't restart unexpectedly. exe 意外终止，状态码为 -1073740791。系统现在将关机，并重新启动。 When I checked online, I found that the KB5039211 patch for Windows 10 seems to fix the problem on the 21H2 version, but there is no mention of 22H2 which version I The 802. Updating drivers from the Device Manager or Windows Update is rarely enough. exe has initiated the restart of computer AHLPRNETAD02 on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. First reason code: 0x80020002 and next two: 0x500ff. exe' terminated unexpectedly with status code -1073740940. exe (PC NAME HERE) has initiated the restart of computer PCNAMEHERE on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment: the source shows user32 Feb 16, 2011 · Some of the users gets the message that Windows will shut down in 1 minute when they log onto a machine after which the machine will reboot. Threats include any threat of violence, or harm to another. Comment: "I'll also quote my hardware configuration from my post in the motherboard Sep 24, 2013 · The process C:\\Windows\\system32\\wbem\\wmiprvse. exe, version: 0. Windows Server 2012 R2-based server restarts unexpectedly, and you may find the following events in Event Viewer: Event ID 1015: A critical system process, C:\Windows\system32\lsass. Is this… Event ID 1074: System has been shutdown by a process/user. May 9, 2014 · Event Id 1074 Source USER32. Reason Code: 0x80070000 Event Viewer Dec 11, 2022 · 每次关机都是不定时，无征兆的突然关机，关机时仍会出现windows正常关机时的关机画面，关机后再手动开机系统也没有任何提示。windows系统已经重装并升级到22H2 22621. Feb 12, 2020 · Windows 10 unexpected shutdown with Event ID 1001,41, and 6008 I physically moved my computer to a new location where other electronics have had no prior issues. 24:123). Event ID 6008: Logged as a dirty shutdown. The system will now shut down and restart. exe has initiated the restart of computer Server on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. Event viewer: Event ID 1074, qualifiers 32768. All other servers, in the same OUs, are… Jan 18, 2023 · Windows 2016 Standard VM running on VMware. Event ID 1074 is logged which states: I find the event log that : The process wininit. InstanceId : 2147484722 HI. Here's an example: Jan 18, 2023 · On Windows 11 (or 10), the "Event Log" system tracks everything that happens, including when and why the computer restarts or shuts down correctly or incorrectly due to a problem. Jan 21, 2022 · The process wininit. I have also successfully synchronized other hosts to the DC as well. Nov 14, 2022 · The Windows 10 clients are using the native supplicant are a combination of Lenovo small form factor desktops and X1 Carbon laptops (G6 - G9) with docking stations. Shutdown Type: power off Oct 17, 2020 · Some Windows Servers 2016 are restarting out of schedule despite the Group Policy specifying Download and Notify to Install. exe has initiated the power off of computer SERVER on behalf of user Domain\user for the following reason: Other (Unplanned) Reason Code: 0x500000. 900版本，且杀毒软件已经全盘扫描 Apr 3, 2018 · 1. Shutdown Type: Apagar. Jan 4, 2021 · Date: 1/3/2025 10:56:06 AM. 1 cluster with patch update 3, and the access layer switches are 3850s running IOS XE 16. Examining the event(s), they all look like the following. 230. Sep 5, 2022 · 本記事はマイクロソフト社員によって公開されております。 こんにちは、Windows サポートチームの栗木です。本記事では、意図しないシャットダウン・再起動が発生した際に、状況を把握するために確認すべきシステムのイベントログをご紹介いたします。イベントログは、OS にデフォルトで Apr 4, 2023 · Recently we meet a problem that t windows server restart unexpectly everyday. reason code:0x500ff I have searched the web and found persons with this problem as far back as 2011 with no clear The PowerShell logs told me that shutdown. Feb 20, 2020 · Of the multiple 1074 events, I see a few that are related to the software updates, but many that are related to the spontaneous shutdowns. I set this up according to Article ID : 816042. exe (PC) a lancé l'arrêt de l’ordinateur PC pour l’utilisateur AUTORITE NT\Système pour la raison suivante : Aucun titre à cette raison n’a pu être trouvé Code : 0x800000ff Type d’extinction : s’arrêter. The process C:\Windows\SysWOW64\shutdown. exe has initiated the restart of computer XXXXXX on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart The process wininit. One overlooked spot for restart information is the Windows Event Logs. Event ID 1074. Jul 11, 2024 · One possible cause for this issue could be related to the Kerberos authentication protocol, LSASS. Does this mean that this user remotely Jun 5, 2023 · Event ID: 2 General: Secure Trustlet Id 0 and Pid 0 stopped with status STATUS_SUCCESS. The last time it restarted it gave this log Jan 15, 2025 · Reason codes can be further decoded. The issue was resolved by following the steps indicated in this link – Server 2019 Event ID 1074, Reason Code: 0x50006 Lsass. exe has initiated the restart of computer DC on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process ‘C:\Windows\system32\lsass. Reason Code: 0x50006 Aug 8, 2021 · This behavior It is not linked to windows updates or something else. exe’ terminated unexpectedly with status code -1073741819. However, several of my users (WIndows 10) is experiencing random reboots. exe (NEAL-PC) has initiated the power off of computer NEAL-PC on behalf of user Neal-PC\Neal for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: It is that same set of Event IDs for each time the computer restarts. Unexpected reboots are denoted by Event IDs 41, 1001, and 6008. exe has initiated the restart of computer xxx on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. exe 意外终止，状态码为 -1073740791。系统现在将关机，并重新启动。 When I checked online, I found that the KB5039211 patch for Windows 10 seems to fix the problem on the 21H2 version, but there is no mention of 22H2 which version I May 17, 2015 · The PC started up normally, I wasnt prompted with a repair or "Windows was shut down incorrectly" prompt. Windows 11 Top Contributors: NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown. May 23, 2018 · Harassment is any behavior intended to disturb or upset a person or group of people. exe’ terminated unexpectedly with status code -1073740791. exe' terminated unexpectedly with status code -1073741816. m|0x1|131. Event ID 1074 : This event is written down when an application is responsible for the system shutdown or restart. Reason Code: 0x800000ff. Jul 4, 2021 · The process wininit. Nov 5, 2020 · Reason Code: 0x50006 The system process 'C:\WINDOWS\system32\lsass. What will happen if there is a fault in lsaas. Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\\WINDOWS\\system32\\lsass. Nov 30, 2015 · The User32 1076 event is written when the first user with shutdown privileges logs on to the computer after an unexpected restart or shutdown and supplies a reason for the occurrence. EXE process loads its extension LSASRV. Nov 30, 2024 · Reason Code: 0x50006. Feb 10, 2008 · > event id: 1074 > > The process winlogon. With both tied together. Checked in event viewer and found below details: Event id: 6008 Enent id:1074 wininit. uiuc. May 4, 2021 · Event ID: 1074. In the System Event log is say that winit. exe (Computer) has initiated the shutdown of computer Computer on behalf of user NT AUTHORITY\SYSTEM for the following No title for this reason could be found Reason Code: 0x80070015 Shutdown Type: shutdown Jan 24, 2022 · Note. exe has initiated the restart of computer Domain Controller 2019 on behalf of user for the following reason: No title for this reason could. exe has initiated the restart of computer SERVER on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. An app is preventing it to restart/shutdown. 3. Shutdown Type: restart. Event ID: 1074 . exe has initiated the restart of computer C4-PROD-DC on behalf of user for the following reason: No title for this reason could be found Reason Code: 0x50006 Shutdown Type: restart Comment: The system process ‘C:\Windows\system32\lsass. You must log in to answer this question. 0. Sep 1, 2020 · Display Shutdown Logs in Event Viewer. Has anyone else experienced this in their environment? Any resolution? Index : 66953. GitHub Gist: instantly share code, notes, and snippets. ”, and an User32 event id 1074: “The process wininit. Dec 10, 2024 · This event ID logs information about shutdowns initiated by users, updates, or applications. I am facing an issue like this not regularly once in a week my pc showing like this. Hi, I have enable shutdown event tracker in my Windows 7 HP x86 machine. Event ID 1074 shows the following down below. 1) has initiated the restart of computer HOSTNAME on behalf of user NT AUTHORITY\\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment: The system also logged event 26 Kernal-Boot “A one-time boot sequence Jul 6, 2016 · The process wininit. jhbxj khvl iwj usifkjg ianftq xjarlx gsh iuqum sshtzk hno koqgp wpgc xjlbn ckpeb zoz