Shutdown on behalf of nt authority system. I wanted to know what caused it.
We have the following set: Configure automatic updating: 3 – Auto download and notify for Try as I might this process cannot be stopped. Comment: "No new components have been installed or programs past 30 days. Has any solution to this other than a complete reinstall been found? <computername> on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80020002 Shutdown Type: restart Comment: Why is winlogon rebooting our server ? It's a windows 2003 R2 server. exe Server1 has initiated the shutdown of computer Server1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: The license period for this installation of Windows has expired. Original KB number: 2001061. . May 5, 2016 · one of our finance computer (Windows 7 Pro 64 Bit) started shutdown with no user interaction. exe (MyServer) has initiated the restart of computer MyServer on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown. But when start NETLOGON Services, it still restart every 5 ~ 10 minutes. My advice, is to check your system with Malware bytes as an example, and see if an unauthorized shutdown task was created or manipulated. chkdsk sfc /scannow Nov 22, 2013 · Has anyone seen this incident where a server/computer reboot unexpectedly due to the following: The process C:\\Windows\\servicing\\TrustedInstaller. Windows must be restarted now because the DCOM server Process Launcher service terminated unexpectedly. exe (SYD-A) has initiated the shutdown of computer SYD-A on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Log Name: System. Shutdown Type: restart Jun 20, 2016 · When I looked at the logs, I noticed the event; The process C:\Windows\system32\svchost. exe (SERVER_NAME) has initiated the shutdown of computer SERVER_NAME on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: The license period for this installation of Windows has expired. Apr 4, 2016 · The process C:\Windows\system32\silsvc. Shutdown Type: restart My system rebooted last night. 2021 16:44:31 Message : The process C:\Windows\system32\svchost. Description: The process C:\Windows\SysWOW64\shutdown. SHIPPING1 - wininit. exe (Server Name) has initiated the restart of computer Server_Name on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart What I need is a solution or cause. exe (S701028A) has initiated the restart of computer S701028A on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned) Reason Code: 0x80020002 Shutdown Type: restart Comment: 11. Clicking the "Cancel Shutdown" button that appears as it tries taking out the slower-closing processes only prolongs the inevitable in this process. I had Ark Survival Evolved open with my character waiting for something to spawn on a public official server, I was in an audio call in Discord with a friend, I was watching a Twitch stream via Firefox, I had three tabs open to Terraria's Wiki, and was actively playing Terraria. Nov 16, 2022 · The process C:\WINDOWS\system32\svchost. exe (DF-02) has initiated the power off of computer DF-02 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Sep 5, 2023 · One of my servers automatically restarts every day since activation, and I found that the following event is logged。 The process wininit. exe has initiated the power off of computer XXXXXXXX on behalf of user NT AUTHORITYSYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: power off Comment: System shutdown due to a Jun 10, 2014 · 1074 is what I see when something has triggered a reboot of my system (usually a windows update). exe (MYAZUREVM) has initiated the restart of computer "MYAZUREVM" on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment: Microsoft SQL Server Automated Patching needs to Sep 18, 2023 · TERENCE on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: power off Comment: Is there any way to fix this issue or do I have to go back to Windows 10? Any help is appreciated! Thank You. exe (ServerName) has initiated the shutdown of computer ServerName on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Comment: Event Xml: The process C:\Windows\system32\wlms\wlms. exe (057-0__-M____02) has initiated the shutdown of computer 057-0__-M_____02 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found\r\n Reason Code: 0x2000c\r\n Shutdown Type: shutdown\r\n Comment The shutdown reason codes are used by the ExitWindowsEx and InitiateSystemShutdownEx functions in the dwReason parameter. The comment “A remote client is trying to shutdown this machine through Remote Desktop Services” suggests that the restart may have been triggered remotely through Remote Desktop Services. exe (TRPSSEAS08) has initiated the shutdown of computer TRPSSEAS08 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Comment: Licensing Compliance Service caused a shutdown. exe (DESKTOP-U7DHLNI) has initiated the restart of computer DESKTOP-U7DHLNI on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shut-down Type: restart Comment: It occurred at 6:02AM. exe initiated the reboot. This is the event logged. 06. The message you’re seeing indicates that a restart was initiated by the svchost. Reason Code: 0x80070015. 1) has initiated the restart of computer HOSTNAME on behalf of user NT AUTHORITY\\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment: The system also logged event 26 Kernal-Boot “A one-time boot sequence Dec 30, 2021 · The process C:\Windows\System32\svchost. exe (HOSTNAME) has initiated the restart of computer HOSTNAME on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: restart Comment: Scenario B (same user as above): Feb 7, 2010 · Computer keeps shutting down after about 30 minutes with the following message: "This system is shutting down. exe (COMPUTER NAME A) has initiated the restart of computer COMPUTER NAME A on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned). exe (VIRTUALSERVER) has initiated the shutdown of computer VIRTUALSERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: The license period for this installation of Windows has expired. A maximum of MAX\\_NUM\\_REASONS reason codes will be processed by the system. Kernel-Power: 86: "The system was shut down due to a critical thermal event" Jan 11, 2022 · Message : The process msiexec. The first entry contains the correct reason code provided by the user Oct 10, 2019 · Hi David, yes, there is. exe (DC2019) has initiated the restart of computer DC2019 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Feb 14, 2018 · The process c:\windows\system32\svchost. The process C:\Windows\system32\wlms\wlms. Level: Information Keywords: Classic. You do not have to worry anything about it. Or: Sep 13, 2019 · The last three days at 16:05 one of my machines has shut down. 1) SHIPPING1 . Since then nothing seems like it’s working right, I barely have time to ask this of you guys; but what do you think happened? Sep 3, 2015 · In the event log there is the following entry The process wininit. exe (ENTWEMS14B) has initiated the restart of computer ENTWEMS14B on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart. 7/14/2021 9:06:20 AM System Information User32 <FQDN> NT AUTHORITY\SYSTEM 1074 "The process C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14. 2020 02:18:28 The process C:\WINDOWS\system32\svchost. exe (myComputer) has initiated the restart of computer myComputer on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned Jun 15, 2022 · "The process C:\Windows\SysWOW64\shutdown. I went into Event Viewer and I saw this event: Log Name: System Source: USER32 Date: 5/16/2015 8:32:02 PM Event ID: 1074 Task Category: None Jun 21, 2021 · Every 7-10 days the server is shutting down, system log: The process C:\Windows\system32\silsvc. exe (SBSOADMIN2015) has initiated the power off of computer SBSOADMIN2015 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. The process C:\WINDOWS\system32\wbem\wmiprvse. 1) has initiated the shutdown of computer <PC NAME> on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Comment: This appeared to have happened in the middle of a scheduled full system scan with avast, but this has never happened before. " May 2, 2023 · “This process C:\Windows\system32\silsvc. 1000. Source: User32 . No Windows updates were performed. When I look at the event viewer, this is what it says The process C:\\Windows\\system32\\svchost. Reason Code: 0x80070000. Event ID 1074. Shutdown Type: restart PS D:\> Get-WinEvent -Logname System | ?{$_. Event viewer: Event ID 1074, qualifiers 32768. Reason Code: 0x800000ff. exe has initiated the restart of computer “X” on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System Recovery (Planned). Once this is complete, on occassion the system will attempt to restart on its own moments after the shutdown, and will fail. Event ID: 1074 . Contoso. Same text in my event logs (except my own PC name of course). exe (TESTMACHINE01) has initiated the shutdown of computer TESTMACHINE01 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: Calling CleanShutdown by wvchelper Reason for shutdown: Stop call Sep 17, 2023 · The process C:\WINDOWS\uus\packages\preview\AMD64\MoUsoCoreWorker. From the above message it was clear that wlms. Shutdown Type: restart . h. Shutdown Type: restart. exe (PC1) has initiated the restart of computer PC1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010. exe has initiated the restart of computer YHM2016 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment: (Edited OP, too) -- Thanks. exe (USER) has initiated the shutdown of computer USER on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be Mar 25, 2019 · The process C:\Windows\system32\winlogon. exe (AZUREVMComputerName) has initiated the shutdown of computer AZUREVMComputerName on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: Calling CleanShutdown by wvchelper Reason for shutdown: Stop call Nov 25, 2019 · Since the user/service responsible for the shutdown was a System account, it means that the shutdown was most likely planned or done as a scheduled task. domain. exe (COMPUTER) has initiated the restart of computer COMPUTER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Jun 6, 2012 · User: SYSTEM Computer: Computer. exe ("ServerName") has initiated the restart of computer "ServerName" on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Sep 11, 2021 · Log Name: System Source: User32 Date: 7/9/21 7:45:18 PM Event ID: 1074 Task Category: None Level: Information Keywords: Classic User: SYSTEM Computer: lap Description: The process C:\WINDOWS\system32\winlogon. Shutdown Type: power off Sep 17, 2023 · Date : 17/09/2023 01:30:14 Computer : localhost EventID : 1074 Action : restart Reason : Operating System: Service pack (Planned) Message : The process C:\windows\uus\packages\preview\AMD64\MoUsoCoreWorker. exe (EC2AMAZ-*****) has initiated the shutdown of computer EC2AMAZ-***** on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x8000000c Shutdown Type: shutdown Comment: Oct 29, 2014 · Shutdown Type: restart. com Mar 15, 2024 · The process C:\Program Files\VMware\VMware Tools\vmtoolsd. Event Id 1074 Source USER32. "The process C:\WINDOWS\system32\svchost. exe had initiated a shutdown on behalf of NTAUTHORITY\SYSTEM. Thus, we see that for some reason the server received the shutdown command more than a minute later than it was generated by PowerChute. Reason Code: 0x80020002. Since it was on behalf of NT AUTHORITY\SYSTEM, then a process running under the user “NT AUTHORITY\SYSTEM” should be the guilty process. Reason Code: 0x2000c. System: Service Control Manager: 7038: The <Service Name> service was unable to log on as NT AUTHORITY\SYSTEM with the currently configured password due to the following error: The RPC server is unavailable. System: Service Control Manager: 7000 Mar 16, 2021 · I copied the system log: The process C:\Windows\system32\silsvc. Dec 17, 2019 · The process msiexec. Feb 7, 2024 · The process wininit. See comment from Heinzi below. Cheers! Farah Dec 26, 2023 · The system will now shut down and restart. Id -eq 1074} | Format-List TimeCreated,Message TimeCreated : 22. Reason Code: 0x80030002. exe (TESTMACHINE01) has initiated the shutdown of computer TESTMACHINE01 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: Calling CleanShutdown by wvchelper Reason for shutdown: Stop call Jul 5, 2021 · Shutdown Type: restart Comment: The system process 'C:\Windows\system32\lsass. Comment: Jan 28, 2010 · The process C:\WINDOWS\system32\winlogon. exe (VM26) has initiated the restart of computer VM26 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment: The process C:\Windows\system32\winlogon. I found event ID 1074 in the Windows System event log might report the license has expired. The process C:\Windows\SysWOW64\shutdown. exe (88YLR52) has initiated the restart of computer 88YLR52 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80070015 Shutdown Type: restart Comment: Any thoughts on what might be causing or initiating this reboot? Oct 10, 2022 · The process C:\Windows\system32\svchost. The process C:\WINDOWS\system32\shutdown. exe (AVL19092533) has initiated the power off of computer AVL19092533 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: power off Comment: The kernel power manager has initiated a shutdown transition. Jun 8, 2023 · In this case, Windows shutdown is also initiated by NT AUTHORITY\SYSTEM, since VMware Tools integration services are run on behalf of the System. exe (DESKTOP-SKQF2RI) has initiated the shutdown of computer DESKTOP-SKQF2RI on behalf of user NT AUTHORITY\LOCAL SERVICE for the following reason: No title for this reason could be found. Dec 21, 2021 · The eventlog is stating that shutdown. Oct 10, 2016 · I have a Windows 10 Enterprise pc that recently rebooted for some kind of update. exe (XXXXXXXXXXXXXX) has initiated the restart of computer XXXXXXXXXXXXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Reconfiguration (Planned) Reason Code: 0x80020004 Shutdown Type: restart Comment: Jan 6, 2019 · The process C:\WINDOWS\system32\svchost. exe (TEST2) has initiated the shutdown of computer TEST2 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000. exe (servername) has initiated the shutdown of computer Servername on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x2000c Shutdown Type: shutdown Comment: Licensing Compliance Service caused a shutdown. exe (SRVWI086) has initiated the restart of computer SRVWI086 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment: Jun 15, 2011 · User: SYSTEM Computer: ServerName. It took me a while to trace in the System Log. exe (Computer) has initiated the shutdown of computer Computer on behalf of user NT AUTHORITY\SYSTEM for the following No title for this reason could be found Reason Code: 0x80070015 Shutdown Type: shutdown May 17, 2015 · The PC started up normally, I wasnt prompted with a repair or "Windows was shut down incorrectly" prompt. exe (DESKTOP-61C3S6T) has initiated the power off of computer DESKTOP-61C3S6T on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. exe (EC2AMAZ-8D2NOGJ) has initiated the power off of computer EC2AMAZ-8D2NOGJ on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: power off Comment: 8/24/2023 2:07:45 PM May 2, 2021 · The process C:\WINDOWS\system32\winlogon. exe (DESKTOP-442H1OG) has initiated the restart of computer DESKTOP-442H1OG on behalf of user DESKTOP-442H1OG\light for the following reason: No title for this reason could be found Sep 16, 2022 · Checking EventViewer, I see the restarts are caused by The process msiexec. Feb 26, 2023 · The system randomly shuts down. exe (DESKTOP-TVG9C2T) has initiated the shutdown of computer DESKTOP-TVG9C2T on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. Shutdown Type: power off. exe (ADM-CMA-001) has initiated the restart of computer ADM-CMA-001 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80070015 Shutdown Type: restart Jun 24, 2020 · 11. NT AUTHORITY\SYSTEM - The process wininit. Sep 20, 2023 · The process C:\Windows\servicing\TrustedInstaller. Sep 24, 2013 · The process C:\\Windows\\system32\\wbem\\wmiprvse. exe (127. exe process on behalf of the NT AUTHORITY\SYSTEM user. exe (COMPUTER1) has initiated the restart of computer COMPUTER1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment: Jan 18, 2023 · Windows 2016 Standard VM running on VMware. Example: The process C:\Windows\CCM\CcmExec. 1) has initiated the restart of computer JOSEVALA-46FHLH on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown 8/24/2023 2:07:44 PM 1074 NT AUTHORITY\SYSTEM The process C:\Windows\system32\winlogon. 1) has initiated the restart of computer ZTZN on behalf of user NT AUTHORITY\\SYSTEM for the following… Aug 1, 2022 · The process C:\WINDOWS\system32\svchost. exe XXXX has initiated the restart of computer XXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment. I wanted to know what caused it. exe (servername) has initiated the restart of computer servername on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. 105\Bin\ccSvcHst. – Feb 27, 2018 · I have the same issue. Check the May 22, 2018 · The process C:\Program Files\Amazon\XenTools\LiteAgent. exe (win10ent) has initiated the restart of computer win10ent on behalf of user NT AUTHORITY\\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart I Jun 5, 2024 · This article provides a resolution for the issue that an incorrect shutdown reason code written to SEL on user initiated shutdown. EXE (DAVES-DESKTOP) has initiated the shutdown of computer DAVES-DESKTOP on behalf of user daves-desktop\Dave for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: shutdown. exe (DESKTOP-XXXXX) has initiated the shutdown of computer DESKTOP-XXXXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: shutdown Comment: Id : 6006 LevelDisplayName : Information Dec 5, 2023 · my system has rebooted today . These are built-in May 4, 2021 · The process C:\WINDOWS\system32\winlogon. The process C:\Windows\system32\svchost. exe (Computer) has initiated the restart of computer Computer on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment: Jan 17, 2024 · The event log entry you provided indicates that the restart of the computer was initiated by the wmiprvse. " 2. I detected that when I stop NETLOGON Services, server 2019 doesn't restart unexpectedly. Looking at the events, I found this is caused by user32. 3. Terence Chauvet Jan 23, 2023 · The temperatures are all showing fine in iDRAC, no errors logged there, just the ‘Graceful Shutdown’ which is fine. exe (E2R2S49IAPP0001) has initiated the shutdown of computer server_name on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: Calling CleanShutdown by wvchelper Reason for shutdown: Stop call Jun 22, 2023 · no changes done from our side and system is getting reboot every Wednesday night 2:30 AM. The process wininit. has initiated the restart of computer DELLXPS13 on behalf of user NT AUTHORITY\SYSTEM for the following reason We would like to show you a description here but the site won’t allow us. Any unsaved changes will be lost. 3385. exe (DESKTOP-0G9VTAA) has initiated the Apagar of computer DESKTOP-0G9VTAA on behalf of user NT AUTHORITY\SYSTEM for the following reason: No se encontraron títulos para este motivo. exe was initiated, so the task is to find out what program called shutdown. exe (COMPUTER1) has initiated the restart of computer COMPUTER1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment: Jul 19, 2018 · The process C:\WINDOWS\SysWOW64\shutdown. 1) has initiated the shutdown of computer xxxxxxxx on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown" Oct 14, 2020 · In the System log I can see. Jun 29, 2021 · The process D:\Program Files (x86)\APC\PowerChute Business Edition\APC\PowerChute Business Edition\agent\bin\shutdown. exe (Computername)has initiated the power off of computer computername on behalf of user Oct 4, 2023 · Process requested shutdown – If a process issued a shutdown request using the older of the two API functions available to request a shutdown, you could see this message. exe (VIRTUALSERVER) has initiated the shutdown of computer VIRTUALSERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: The license period for this Nov 5, 2020 · The process C:\windows\system32\svchost. exe (XXXXX) has initiated the power off of computer XXXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: Jun 21, 2022 · User: SYSTEM Computer: COMPUTER1. The process C:\Windows\system32\winlogon. 1) has initiated the restart of computer HEATHER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown . exe (LAP) has initiated the restart of computer LAP on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown May 4, 2022 · The process C:\Windows\System32\svchost. Oct 3, 2023 · Unknown reboot occurring on the servers or workstations. exe (MUN-BAK1) has initiated the shutdown of computer MUN-BAK1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Comment: Apr 10, 2019 · The process C:\Windows\system32\winlogon. This security permission can be modified using the Component Services administrative tool. User: NT AUTHORITY\SYSTEM Mar 14, 2022 · In the server System log, it shows this: The process C:\Windows\system32\svchost. MAX\\_NUM\\_REASONS is defined in reason. exe has initiated the restart of computer GEORGIE-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80030002 Shutdown Type: restart Comment: The Windows Installer initiated a system restart to Feb 3, 2022 · 8:47:44 The process wininit. Nov 14, 2023 · Hello. ElevateNonAdmins : 0 Mar 2, 2020 · The process C:\Windows\System32\usocoreworker. exe (DESKTOP-K3HBRDS) has Jun 21, 2022 · User: SYSTEM Computer: COMPUTER1. exe (<COMPUTER>) has initiated the restart of computer <COMPUTER> on behalf of It is part of NT Authority\SYSTEM. restart . exe (DESKTOP-XXX) has initiated the shutdown of computer DESKTOP-XXX on behalf of user NT AUTHORITY\LOCAL SERVICE for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: shutdown Comment: The wininit. 11. I am using Windows 7 Ultimate. Reason Code: 0x80020001. We've considered and theoretically ruled out the following: The process C:\WINDOWS\system32\SlideToShutDown. 0x80070000 . exe (hostname) has initiated the restart of computer hostname on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned) Reason Code: 0x80020002 Shutdown Type: restart Comment: " The process C:\Windows\system32\wbem\wmiprvse. May 9, 2014 · Checked on the system log. Comment: Details ----- Log Name: System . exe (DESKTOP-0G9VTAA) has initiated the Apagar of computer DESKTOP-0G9VTAA on behalf of user NT AUTHORITY\SYSTEM for the following reason: No se encontraron títulos para este motivo Reason Code: 0x500ff Shutdown Type: Apagar Comment: May 30, 2019 · The previous system shutdown at 6:50:46 AM on 5/30/2019 was unexpected. You can get information about restart events using PowerShell. exe has initiated the restart of computer machine-name-here on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80030002 Shutdown Type: restart Comment: The Windows Installer initiated a system restart to complete or continue the configuration of 'Dell Update Randomly, when I watch youtube or a movie in VLC, Windows will shut down on its own. Terence Chauvet Apr 7, 2023 · All of a sudden, the system initiated a shutdown, with this in the event log "The process C:\Windows\system32\silsvc. In addition to LocalSystem, there are two more widely used system accounts: LocalService and NetworkService. exe (DESKTOP-2AB16JF) has initiated the restart of computer DESKTOP-2AB16JF on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Reconfiguration (Unplanned) Reason Code: 0x20004 Shutdown Type: restart Comment: May 16, 2021 · The process C:\WINDOWS\system32\winlogon. exe (SomeComputerName) has initiated the restart of computer SomeComputerName on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80020001 The process C:\Program Files (x86)\LANDesk\LDClient\vulScan. exe (server name) has initiated the restart of computer servername on behalf of user NT AUTHORITY\\SYSTEM for the following reason: Operating System: Upgrade (Planned) @Microsoft Aug 5, 2020 · The process C:\Windows\system32\wlms\wlms. exe (MQNDT19866) has initiated the shutdown of computer MQNDT19866 on behalf of user domain\\jmatter for the following reason: No title for this reason could be found Reason Code:0x80070015 Shutdown Type: shutdown comment: MQNDT19866 is my computer, domain\\jmatter is not me but someone in my department. exe (REDACTED) has initiated the power off of computer REDACTED on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. exe (MYSERVER) has initiated the restart of computer MYSERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating Mar 6, 2013 · The process C:\Windows\system32\wbem\wmiprvse. The process C:\Windows\System32\CloudExperienceHostBroker. exe ([computername]) has initiated the power off of computer [computername] on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. Feb 22, 2016 · I checked the event viewer and it said around 3:37am that winlogon. Comment: Licensing Compliance Service caused a shutdown. Got onto my desktop and everything was running correctly after booting up. Jun 30, 2014 · The process C:\Windows\system32\wlms\wlms. So, automatic update did restart it despite the enable no-automatic restart policy and a stopped automatic update service. exe (SERVER) has initiated the shutdown of computer SERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Comment: Sep 30, 2021 · Message : The process C:\WINDOWS\SysWOW64\shutdown. Service. exe has initiated the power off of computer XXXXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: power off Comment: I can't say for sure, but although it's reminiscent of a "sleep" due to inactivity, my impression is it's not related to activity. This shutdown was initiated by NT AUTHORITY/SYSTEM. exe (DESKTOP-0G9VTAA) has initiated the Apagar of computer DESKTOP-0G9VTAA on behalf of user NT AUTHORITY\SYSTEM for the following reason: No se encontraron títulos para este motivo Reason Code: 0x500ff Shutdown Type: Apagar Comment: "The process C:\Windows\system32\svchost. Most of the System level (Windows Services) services and some other 3rd party services run in the account. This is done in Control Panel > System > Advanced system settings > Advanced > Startup and Recovery > Settings, uncheck "Automatically restart", click OK. Reason Code: 0x500ff. Please save all work in progess and log off. exe (SPENCER-DESKTOP) May 16, 2021 · The process C:\WINDOWS\system32\winlogon. At 12:06:45am there is a 1074: The process C:Windows\system32\svchost. exe process (127. no additional logs . Shutdown Type: Apagar. Let me k ow if it helps. exe. exe (DMAREHAB1) has initiated the restart of computer DMAREHAB1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. The operating system is shutting down. exe (SPENCER-DESKTOP) has initiated the power off of computer SPENCER-DESKTOP on behalf of user NT_AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. May 17, 2021 · The process C:\Windows\system32\svchost. exe (HFSVR1) has initiated the shutdown of computer HFSVR1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Comment: Licensing Compliance Service caused a shutdown. Event ID: 1074 Task Category: None. Reason Code: 0x80070000 . exe has initiated the shutdown of computer on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found" it turned out to be kind of a license violation, thought barely 6-7 users Jan 6, 2019 · The process C:\WINDOWS\system32\svchost. Log Name: System Source: USER32 Date: 09/09/2011 09:25:16 Sep 8, 2021 · The process C:\Windows\system32\winlogon. exe (DESKTOP-61C3S6T) has initiated the power off of computer DESKTOP-61C3S6T on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: power off Comment: It produces no Memory. Aug 27, 2021 · We have a hybrid environment utilizing Intune and today the entire org got a forced reboot, event log shows: The process C:\\WINDOWS\\system32\\omadmclient. Means, even the user working on word, excel or their finance software the PC will start logoff and shutdown randomly. Task is scheduled – Your device might randomly shut down if a task is scheduled to restart your system. Franc. Comment: A remote client is trying to shutdown this machine through Remote Desktop Services May 22, 2012 · The process wininit. Does this mean that this user remotely Aug 30, 2022 · The process C:\Windows\system32\wlms\wlms. Event ID 1074 Jun 19, 2019 · I have a pc that randomly reboots or shuts down with the event viewer showing: process c:\\windows\\system32\\winlogon. System Event: Event 1074, Source: USER32 "The process C:\\windows\\system32\\winlogon. exe has initiated the restart of computer SPARE01-X1 on behalf of user NT . dmp file nor are there any Minidump files. exe (ComputerName) has initiated the restart of computer ComputerName on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80020001 Mar 19, 2022 · Event[481] Log Name: System Source: User32 Date: 2022-03-18T17:05:48. 1) has initiated the restart of computer TS89 on behalf of user NT AUTHORITY\\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment: Any ideas? Dec 9, 2020 · 2020-12-09 17:29:00 The process C:\Windows\system32\svchost. After reboot from a manual shutdown (START->Shutdown), the Windows System Eventlog shows two events 1074. 1) has initiated the power off of computer HSERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown. We would like to show you a description here but the site won’t allow us. Comment: Jun 28, 2015 · The process wlms. Description: The process C:\Program Files\VMware\VMware Tools\VMwareService. Comment: param1 C:\Windows\system32\winlogon. exe has initiated the shutdown of computer OMEN875 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Unplanned) Reason Code: 0x0. 0. Comment: This is what my sleep power options are: Mar 18, 2024 · Event viewer\System: The process C:\Windows\CCM\CcmExec. exe (COMPNAME) has initiated the restart of computer COMPNAME on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned) Feb 29, 2020 · Check the license. Symptoms. Process Explorer can be used to see all processes running under that user. 2020 02:20:11 The XYZ Service service entered the stopped Jan 26, 2022 · The process C:\Program Files (x86)\temp\vulscan. The system will now shut down and restart. exe process on behalf of the NT AUTHORITY\SYSTEM user, and the reason code is 0x80070015. exe (CCBHOST) has initiated the shutdown of computer CCBHOST on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x2000c Shutdown Type: shutdown Comment: Licensing Compliance Service caused a shutdown. Legacy API shutdown . 6720000Z Event ID: 1074 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-21-2810344996-103229178-2558991402-1001 User Name: DESKTOP-K3HBRDS\craig Computer: DESKTOP-K3HBRDS Description: The process C:\Windows\System32\RuntimeBroker. exe (srv01) has initiated the restart of computer srv01 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this Nov 17, 2020 · @Swisstone The process C:\Windows\System32\svchost. exe (C1795985) has initiated the restart of computer <Computer> on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart : Shutdown Type: restart . Dec 21, 2020 · The process C:\Windows\system32\svchost. com Description: The process C:\Windows\uus\AMD64\MoUsoCoreWorker. exe (XXXXXXX) has initiated the restart of computer XXXXXXXX on behalf of user NT AUTHORITY\\SYSTEM… Sep 18, 2023 · TERENCE on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x500ff Shutdown Type: power off Comment: Is there any way to fix this issue or do I have to go back to Windows 10? Any help is appreciated! Thank You. We received the following event 1074 in the System log: The process wininit. Comment: May 18, 2015 · Had a hard reboot occur last Friday and here is the reason:-----The process C:\Program Files\VMware\VMware Tools\vmtoolsd. Shutdown Type: shutdown. The process C:\Windows\system32\wbem\wmiprvse. exe ("ServerName") has initiated the restart of computer "ServerName" on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart May 9, 2017 · System . The Windows System logs show the following Reboot events by ccSvcHst. exe (USER-PC) has initiated the restart of computer USER-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment: " Nov 1, 2016 · This doesn’t tell you the username as the restarted was initiated by system account (NT AUTHORITY\SYSTEM) The process C:\Windows\CCM\CcmExec. exe (SERVER) has initiated the restart of computer SERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment: The process C:\Program Files\Microsoft SQL Server IaaS Agent\Bin\SqlIaaSExtension. how do we identify what caused the reboot exactly Oct 22, 2014 · I find the following event log: Event ID: 1074. Source: User32 Logged: 30/06/2014. Description: reason:The process C:\Windows\system32\wbem\wmiprvse. Level: Information . Jun 26, 2022 · This is what I see each time in the Windows System event log: The process id_service. Date : 5/6/2022 8:16:17 PM Computer : localhost EventID : 1074 Action : restart User : NT AUTHORITY\SYSTEM Reason : No title for this reason could be found Message : The process C:\Windows\system32\shutdown. Event log says "The process wininit. You need to check the Event Viewer to understand more. Here are some steps you can take to investigate and troubleshoot this issue: Oct 10, 2022 · The process C:\Windows\system32\svchost. exe' terminated unexpectedly with status code -1073740767. Apr 12, 2023 · The process C:\Windows\system32\shutdown. exe has initiated the restart of computer on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: GPO applied: Any help would be appreciated, thanks in advance! Apr 12, 2021 · My computer restarts randomly. configuration of Nov 21, 2022 · The process C:\WINDOWS\system32\omadmclient. exe (Corp-Eu-S17) has initiated the restart of computer Corp-EU-S17 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment: Close applications Dec 4, 2018 · The process C:\Windows\System32\svchost. Jun 13, 2020 · Hi Guys, I noticed a 2019 server rebooted itself after checking the event viewer I saw the shutdown reason as:-The process C:\Windows\system32\svchost. 1) has initiated the shutdown of computer XXXXX on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: shutdown Apr 18, 2006 · User: SYSTEM Computer: XXXXXXXX Description: The process winlogon. exe (DESKTOP-0G9VTAA) has initiated the Apagar of computer DESKTOP-0G9VTAA on behalf of user NT AUTHORITY\SYSTEM for the following reason: No se encontraron títulos para este motivo Reason Code: 0x500ff Shutdown Type: Apagar Comment: May 12, 2018 · The original shutdown, caused my testing a power fail condition is here: 11:40pm 12/5/2018. 1) has initiated the restart of computer SHIPPING1 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown Reason Code: 0x80070000 Shutdown Type: restart Comment Jan 11, 2022 · Message : The process msiexec. exe (HOSTNAME) has initiated the restart of computer HOSTNAME on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80070015 Shutdown Type: restart Comment: Microsoft could have added a reason so it would be easier to identify why Aug 25, 2018 · to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). Jul 25, 2017 · The process C:\Windows\system32\silsvc. exe (pcname) has initiated a poweroff of computer (pcname) on behalf of user (pcname\\xyz) for the following reason : no title for this reason can be found. exe (Prod-Win20) has initiated the shutdown of computer Prod-Win20 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: Calling CleanShutdown by wvchelper Reason for shutdown: Stop call Sep 10, 2021 · Tour Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Jul 14, 2020 · The process C:\Windows\system32\silsvc. 1) initiated restart of the WBVM-MJLOG computer by the NT\SYSTEM AUTHORITY user for this reason: Legacy API shutdown Reason code: 0x80070000 Shutdown type: restart Comment: I've been investigating for hours and haven't found anything. exe (Hostname) has initiated the restart of computer Hostname on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Unplanned) Reason Code: 0x0. That could be as “simple” as a reboot initiated after Windows Updates were installed. Comment: The Windows Installer initiated a system restart to complete or continue the . AUTHORITY\SYSTEM for the following reason: No title for this reason could be found Reason Code: 0x80030002 Shutdown Type: restart Comment: The Windows Installer initiated a system restart to complete or continue the configuration of 'Zoom'. The event viewer gives the following error: The process C:\WINDOWS\system32\winlogon. exe has initiated the restart of computer FEI-18-0390 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found" Reason Code: 0x80070015. Apr 27, 2022 · The process C:\Windows\system32\svchost. exe (DESKTOP-3F0SA03) has initiated the shutdown of computer DESKTOP-3F0SA03 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could Sep 13, 2011 · The process C:\Windows\system32\shutdown. exe (JIN-PC) has initiated the restart of computer JIN-PC on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010. User: SYSTEM Computer SYD-A. reason code:0x500ff I have searched the web and found persons with this problem as far back as 2011 with no clear Aug 12, 2021 · The process C:\windows\system32\wbem\wmiprvse. exe (THESQLSERVER) has initiated the shutdown of computer THESQLSERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: Other (Planned) Reason Code: 0x80000000 Shutdown Type: shutdown Comment: I will add this to the thread - thought I forgot something. cxk tvckw vnveu ruthci hpklj fbeftsfj catvrvo xovwk eaddb mvoao