User32 1074 Reason Codes

The shutdown reason codes are used by the ExitWindowsEx and InitiateSystemSh

utdownEx functions in the dwReason parameter. A maximum of MAX\_NUM\_REASONS reason codes will be processed by the system. MAX\_NUM\_REASONS is defined in reason.h.

Event ID 1074. Source USER32. User SYSTEM. The process C:\Windows\SysWOW64\s

hutdown.exe (SERVER) has initiated the restart of computer SERVER on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found. Reason Code: 0x800000ff.

Provides a resolution for the issue that an incorrect shutdown reason code w

ritten to SEL on user initiated ... the Windows System Eventlog shows two events 1074. The first entry contains the correct reason code provided by the user, the second looks similar to: Log Name: System Source: USER32 Date: Event ID: 1074 ...

ProviderName : User32 Id : 1074 Message : The process C:\Windows\System32\Ru

ntimeBroker.exe (DESKTOP-X) has initiated the restart of ... Reason Code: 0x80020003 Shutdown Type: restart Comment ...

Log Name: System Source: User32 Date: 12/21/2016 10:10:34 PM Event ID: 1074

Task Category: None Level: Information Keywords: Classic User: SYSTEM Computer: Bigbird Description: The process C:\WINDOWS\System32\svchost.exe (BIGBIRD) has initiated the restart of computer BIGBIRD on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code ...

Event ID 1074 Reason code 0x500ff with rebooter.exe 03-17-2015, 09:48 PM. Ho

w does "rebooter.exe" execute the reboots? The process C:\Windows\system32\winlogon.exe (WIN-S1P1OUA9ROH) has initiated the restart of computer WIN-S1P1OUA9ROH on behalf of user WIN-S1P1OUA9ROH\Administrator for the following reason: No title for this reason could be ...

Determine that the server was rebooted by User32. 1. Log into the affected W

indows server and open up the Event Viewer. 2. Navigate to Windows Logs > System > Filter Current Log and search for the Event ID: 1074. 3. Results will appear as per the screen shot below. Refer to the reason code: Update the Local Computer Policy to stop the server ...

Event Id. 1074. Source. User32. Description. The process %1 has initiated th

e %5 of. computer %2 on behalf of user %7 for the following reason: %3. Reason Code: %4. Shutdown Type: %5.

Log Name:System Source: User32 EventID: 1074 The process C:\Windows\system32

\shutdown.exe (rds-sh-01) has initiated the restart of computer rds-sh-01 on behalf of user contoso.com\[email protected] for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment:

Event ID 1074: System has been shutdown by a process/user. Description. This

event is written when an application causes the system to restart, or when the user initiates a restart or shutdown by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down. Category.

Below is a list of event IDs I've found to be useful (1, 1074, 6005, 6006, 4

800, 4801) from the 'Power-Troubleshooter', 'User32', 'EventLog' and 'Microsoft Windows security auditing' sources. These are from Windows 10 (v1511) and currently Windows 10 is my only target requirement as this is what all of the client machines run.

Event ID: 1074 Source: USER32. Source. USER32. Level. Information. Descripti

on. The process has initiated the restart of for the following reason: No title for this reason could be found. Minor Reason: . Shutdown Type: .

After reboot from a manual shutdown (START->Shutdown) the Windows System Eve

ntlog shows two events 1074. The first entry contains the correct reason code provided by the user, the second looks similar to this: Log Name: System. Source: USER32. Date: 7/29/2009 12:00:26 PM. Event ID: 1074. Task Category: None. Level: Information

2 posts. Computer shuts down randomly W/O warning User32 event ID 1074. I've

got a dell DT connected to our domain thats rebooting randomly, after taking a look in the event log I found the following: The process C:\Windows\system32\winlogon.exe (BGR-PLAY-DT-06) has initiated the restart of computer BGR-PLAY-DT-06 on behalf of user NT AUTHORITY ...

The system shutdown reason codes are documented in MSDN under the devious he

ading System Shutdown Reason Codes . In this case, the value 0x84020004 is a combination of. That value for SHTDN_REASON_FLAG_CLEAN_UI is missing from the MSDN documentation for some reason, but’s listed in reason.h .

Event ID: 1074. Date: 11/24/2011. Time: 7:00:00 AM. User: NTDOMAIN\Administr

ator. Computer: EXCHHTCA. Description: The process winlogon.exe has initiated the restart of computer EXCHHTCA on behalf of user NTDOMAIN\Administrator for the following reason: No title for this reason could be found. Reason Code: 0x840000ff.

Windows Server rebooted due to Reason Code: 0x80020002. Check that the serve

r was rebooted by User32. 1. Log into the affected Windows Server and open up the Event Viewer; 2. Navigate to Windows Logs\System\Filter Current Log and search for the Event ID: 1074; 3. Results will appear as per the screen shot below:

event 1074 user32. the process explorer.exe has initiated the power off of c

omputer user-pc on behalf of user-pc/user for the following reason: other (unplanned) Reason code: 0x0. shutdown type: power off. < 1 1 >.

Windows 7 Suddenly Shutdown Reason Code: 0x500ff. The process C:\\Windows\sy

stem32\winlogon.exe (ComputerName) has initiated the power off of computer (ComputerName) on behalf of user (ComputerName)\ (UserName) for the following reason. No title for this reason could be found.

The process C:\Windows\system32\shutdown.EXE (DAVES-DESKTOP) has initiated t

he shutdown of computer DAVES-DESKTOP on behalf of user daves-desktop\Dave for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: shutdown. Log Name: System Source: USER32 Date: 09/09/2011 09:25:16

1,350 Points. text/html 1/5/2016 3:41:25 PM - vicky 0. 0. Sign in to vote. H

i Matthiji, In the same time there was one event for disconnect administrator session. Prior this reboot one of our support has logged in the server and didn't logged off. So it means administrator didn't rebooted the server. vicky.

Source: User32 Event ID: 1074 The process C:\WINDOWS\system32\svchos t.exe (

client-name) has initiated the restart of computer client-name on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Service pack (Planned) Reason Code: 0x80020010 Shutdown Type: restart Comment:

The process winlogon.exe has initiated the power off of computer PDMSRV01 on

behalf of user NT AUTHORITY\SYSTEM for the following reason: Legacy API shutdown. Reason Code: 0x80070000. Shutdown Type: power off. Comment: Your computer will be shutted down in a few seconds!

Some reason codes may appear in messages associated with abends 13F, 23F, 33

F, 43F, and 53F. Abend codes are indicated by an 'S' in the following table.

My server is a windows server 2008 R2, it is my application server that runs

MS SQL 2008 on it. I noticed that at night by exactly 12:33:00am the server restart on its own and when this happen it disrupt operations. I did not set any task schedule in my windows. I went to event viewer to know ... · Hi SiamakFarokhzad, >>C:\Windows\system32\shutdown.exe ...

Computer Restarted, Reason Code 0x800000ff Just got home from doing some stu

ff, walked into my bedroom and walked in just in time to see my computer on the boot up screen. The PC started up normally, I wasnt prompted with a repair or "Windows was shut down incorrectly" prompt.

1074. Source: USER32. Message: The process winlogon.exe has initiated the re

start of PANTHER for the following reason: No title for this reason could be found Minor Reason: 0xff Shutdown Type: shutdown Comment: The EventSentry agent is performing a shutdown/reboot of this computer.

I have an EventID 1074 "The process C:\Windows\system32\svchos t.exe (MMUSCH

P366) has initiated the restart of computer MMUSCHP366 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned) Reason Code: 0x80020002. Shutdown Type: restart.

If you are trying to understand what caused a server to shut down while you

weren’t there, then call for the Event Viewer. Specifically, select the Windows Logs, System log. To narrow down the search I suggest you filter the Source for User32, or the Event ID for 1074. Example event:

Viewed 3k times. 2. I was using bat file to restart my windows server.. Whil

e restarting the server it is asking for restart reason, how can i give the reason through the same batch file. Command which i am using in bat file is shutdown.exe -r -t 00. windows batch-file restart shutdown logoff. Share.

I have a Sony Vaio VGN-FZ290 notebook computer. It is running Windows Vista

Ultimate A brief summary of the system specifications are as follows: 2.2GHz Intel Centrino Duo 800MHz FSB 2GB RAM 160GB ...

The second thing I could think of is that it may be a PSU problem. Your syst

em specs could be of use here. There's a plethora of reasons for stuff like this. Try the malware removal first and see if that fixes the problem, and then if it still happens you may want to use a spare PSU if you happen to have one.

Hi One of our VMs shutdown for no apparent reason (see event log entry below

). Any ideas why this happened and how to prevent it occurring again? There are some posts dating from 2013-2015 but no solutions seems to fit. Thanks Paul Watson Log Name: System Source: · It is likely that this is the result of the patch installed on Azure by Microsoft today ...

[ Name] USER32 - EventID 1074 [ Qualifiers] 32768 Level 4 Task 0 Keywords 0x

80000000000000 - TimeCreated [ SystemTime] 2012-05-11T15:58:16.000000 000Z EventRecordID 34011 Channel System Computer SERVERLUMIJOR.lumijor.loca l - Security [ UserID] S-1-5-18 - EventData wininit.exe (127.0.0.1) SERVERLUMIJOR Apagado de la API heredada

1076. Source. User32. Description. The reason supplied by user %6 for the la

st unexpected shutdown of this computer is: %1 Reason Code: %2 Bug ID: %3 Bugcheck String: %4 Comment: %5. Event Information. Explanation : This event refers to the failure indicated by the previous EventLog 6008 event.

Source: USER32 , Event ID: 1076, Type Warning. The reason supplied by user S

ERVER\Administrator for the last unexpected shutdown of this computer is: Other Failure: System Unresponsive Reason Code: 0x8000005 Bug ID: Bugcheck String: Comment: Can some one help me in this how to resolve the issue. error-msg-on-server.jpg

Dell Update caused a sudden unexpected reboot. My XPS 15 suddenly restarted

without warning while I was in the middle of using the laptop. The event log shows the entry listed below. I last ran Dell Update a number of days ago, and don't see why it needed to initiate a restart at this time.

half of user NT AUTHORITY\SYSTEM for the following reason: Operating System:

Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: Event[1]: Log Name: System Source: USER32 Date: 2012-10-04T18:55:14.000 Event ID: 1074 Task: N/A Level: Information Opcode: N/A Keyword: Classic User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM ...

1074: Source: User32: Version: 5.2: Symbolic Name: STATUS_SHUTDOWN_CLEAN: Me

ssage: The process %1 has initiated the %5 of computer %2 on behalf of user %7 for the following reason: %3 Reason Code: %4 Shutdown Type: %5 Comment: %6 : Explanation

USER32. Message: The reason supplied by user SORTRITE\Craig McWilliams for t

he last unexpected shutdown of this computer is: Other (Unplanned) Reason Code: 0xa000000 Bug ID: Bugcheck String: Comment: Do not know -- Craig. Solution by Mohammed Asifuddin iqbal 2016-08-24 12:29:34 UTC ...

In your search results "services.msc" should show up. Open it with a click.

3. A new windows will open containing all Windows services on your system. 4. Search for "Windows Update". 5. Right-click the "Windows Update" and then click Stop. We will now clean the Windows Update temporary cache folder: