0x800000ff The process C:\Windows\system32\shutdown.exe (srv01) has initiated the restart of computer

[selahattin şadoğlu]

Hi,

My server is a windows server 2012 R2, it is my application server that runs PostreSQL on it.

I did not set any task schedule in my windows.

I looked inside windows update logs. No any installed windows update.

I went to event viewer to know what was the cause of the problem, this was what I got:

How can I determine the reason for those restarts?

Date : 5/6/2022 8:16:17 PM

Computer : localhost

EventID : 1074

Action : restart

User : NT AUTHORITY\SYSTEM

Reason : No title for this reason could be found

Message : The process C:\Windows\system32\shutdown.exe (srv01) has initiated the restart of computer

srv01 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could

be found

Reason Code: 0x800000ff

Shutdown Type: restart

Comment:

[Michael B. Smith]

Well, the proximate cause is exactly as shown – the SYSTEM user executed shutdown.exe.

 

As to why shutdown.exe was executed – I’d look first in Task Scheduler and in the Security event logs to see where the shutdown.exe was initiated from.

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ntsysadmin/95a6d7d9-2387-4b1d-9205-b9ff5d02326en%40googlegroups.com.