Question PC shuts down

[noob25002]

Hello,

Can't remember when this started, but the PC shuts down randomly. Power does not cut off, Windows behaves as if it was told to shut down. Happens once a month/two mounts.

Don't believe there is a overheating issue. Sleep/hibernate are disabled.

I've noted the time and date and looked in Event Viewer, but didn't find anything for that time. Not sure where to look though.

It's a desktop. The PSU is more than enough for the hardware's requirements.

Any ideas?

 

[piokos]

Check all warning/error events from the shutdown period (Application and System). Filters can help.

You can also try searching all events for "shutdown" or "boot" (limit the time window first).

If Windows goes into shutdown mode, you'll find the source there.

 

[noob25002]

Check all warning/error events from the shutdown period (Application and System). Filters can help.

You can also try searching all events for "shutdown" or "boot" (limit the time window first).

If Windows goes into shutdown mode, you'll find the source there.

Win10x64 Pro 1909 18363.778.

I've noted the time and date and looked in Event Viewer. There are multiple entries at the time when this happened, but I think this is the one (?):

There are a few threads on this topic but no solution:


- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="User32" Guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" EventSourceName="User32" />
<EventID Qualifiers="32768">1074</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2020-05-18T12:43:50.910592000Z" />
<EventRecordID>81091</EventRecordID>
<Correlation />
<Execution ProcessID="680" ThreadID="5996" />
<Channel>System</Channel>
<Computer>DESKTOP-</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="param1">C:\WINDOWS\system32\winlogon.exe (DESKTOP-)</Data>
<Data Name="param2">DESKTOP-</Data>
<Data Name="param3">No title for this reason could be found</Data>
<Data Name="param4">0x500ff</Data>
<Data Name="param5">power off</Data>
<Data Name="param6" />
<Data Name="param7">NT AUTHORITY\SYSTEM</Data>
</EventData>
</Event>

 

[noob25002]

Happened again, with the same code. Is there something different from last time that stands out?



The process C:\WINDOWS\system32\winlogon.exe (DESKTOP-) has initiated the power off of computer DESKTOP- on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found
Reason Code: 0x500ff
Shutdown Type: power off
Comment:



- <Event xmlns="

http://schemas.microsoft.com/win/2004/08/events/event

">
- <System>
<Provider Name="User32" Guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" EventSourceName="User32" />
<EventID Qualifiers="32768">1074</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2020-06-30T18:48:14.986117200Z" />
<EventRecordID>101057</EventRecordID>
<Correlation />
<Execution ProcessID="720" ThreadID="736" />
<Channel>System</Channel>
<Computer>DESKTOP-</Computer>
<Security UserID="S-1-5-18" />
</System>
- <EventData>
<Data Name="param1">C:\WINDOWS\system32\winlogon.exe (DESKTOP-)</Data>
<Data Name="param2">DESKTOP-</Data>
<Data Name="param3">No title for this reason could be found</Data>
<Data Name="param4">0x500ff</Data>
<Data Name="param5">power off</Data>
<Data Name="param6" />
<Data Name="param7">NT AUTHORITY\SYSTEM</Data>
</EventData>
</Event>