none
USER32 Restart without useful information

    问题

  • Hi Team,

    We have several servers. recently i found some of the servers restart it self with CODE 1074. and this was send by some of the system exe.

    The process wininit.exe (127.0.0.1) has initiated the shutdown of computer SFJIN-AV on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown
     Reason Code: 0x80070000
     Shutdown Type: shutdown
     Comment: 

    Do we have any way to check more detailed information why this exe start the shutdown and without any warning but just information.


    2016年8月5日 5:29

答案

  • Hi,

    Have a full disk scan. Check the power configuration to undo the change.

    Check to see if any Windows Update has been installed before this restarting, system reboot is necessary to complete the installation/configuration of Windows Update.

    Disable protection/anti-virus software if any temporarily, and check the result.

    Check the Event Viewer and try to find events which has been logged just before the shutdown event. It could be helpful for further identify this problem.

    Best Regards,
    Eve Wang

    Please remember to mark the replies as an answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2016年8月5日 8:58
    版主