none
Microsoft-Windows-Kernel-Power 内核电源管理器已启动关机转换 RRS feed

  • 问题

  • 硬件平台 IBM 3850X5
    操作系统 Windows 2008 R2 标准版
    该系统在2015-9-15早上6:42自动关机,经检测硬件无异常。
    该系统启用自动更新,不定时会自动更新补丁包并重新启动。

    内核电源管理器已启动关机转换。
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
      <EventID>109</EventID>
      <Version>0</Version>
      <Level>4</Level>
      <Task>103</Task>
      <Opcode>0</Opcode>
      <Keywords>0x8000000000000004</Keywords>
      <TimeCreated SystemTime="2015-09-14T22:43:28.285898200Z" />
      <EventRecordID>56789</EventRecordID>
      <Correlation />
      <Execution ProcessID="964" ThreadID="968" />
      <Channel>System</Channel>
      <Computer>WINDOWS-61G81D4</Computer>
      <Security />
      </System>
    - <EventData>
      <Data Name="ShutdownActionType">6</Data>
      <Data Name="ShutdownEventCode">0</Data>
      <Data Name="ShutdownReason">0</Data>
      </EventData>
     </Event>
    进程 C:\Windows\system32\winlogon.exe (WINDOWS-61G81D4) 为用户 WINDOWS-61G81D4\Administrator 开始计算机 WINDOWS-61G81D4 的 关闭电源,原因如下: No title for this reason could be found
     原因代码: 0x500ff
     关机类型: 关闭电源
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="USER32" />
      <EventID Qualifiers="32768">1074</EventID>
      <Level>4</Level>
      <Task>0</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2015-09-14T22:42:50.000000000Z" />
      <EventRecordID>56733</EventRecordID>
      <Channel>System</Channel>
      <Computer>WINDOWS-61G81D4</Computer>
      <Security UserID="S-1-5-21-1799148020-3524495771-2708215868-500" />
      </System>
    - <EventData>
      <Data>C:\Windows\system32\winlogon.exe (WINDOWS-61G81D4)</Data>
      <Data>WINDOWS-61G81D4</Data>
      <Data>No title for this reason could be found</Data>
      <Data>0x500ff</Data>
      <Data>关闭电源</Data>
      <Data />
      <Data>WINDOWS-61G81D4\Administrator</Data>
     <Binary>FF000500000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
      </EventData>
      </Event>
    进程 Explorer.EXE 为用户 WINDOWS-61G81D4\Administrator 开始计算机 WINDOWS-61G81D4 的 关机,原因如下: Hardware: Maintenance (Planned)
     原因代码: 0x84010001
     关机类型: 关机
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="USER32" />
      <EventID Qualifiers="32768">1074</EventID>
      <Level>4</Level>
      <Task>0</Task>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2015-09-14T22:42:35.000000000Z" />
      <EventRecordID>56731</EventRecordID>
      <Channel>System</Channel>
      <Computer>WINDOWS-61G81D4</Computer>
      <Security UserID="S-1-5-21-1799148020-3524495771-2708215868-500" />
      </System>
    - <EventData>
      <Data>Explorer.EXE</Data>
      <Data>WINDOWS-61G81D4</Data>
      <Data>Hardware: Maintenance (Planned)</Data>
      <Data>0x84010001</Data>
      <Data>关机</Data>
      <Data />
      <Data>WINDOWS-61G81D4\Administrator</Data>
     <Binary>01000184000000000000000000000000000000000000000000000000000000000000000000000000</Binary>
      </EventData>
      </Event>

    2015年9月22日 1:38

答案