| Event Id | 6008 |
| Source | Eventlog |
| Description | The previous system shutdown at %1 on %2 was unexpected. |
| Event Information | According to Microsoft Cause 1: This event is written during startup following an unexpected restart or shutdown. An unexpected restart or shutdown is one that the system cannot anticipate, such as when the user pushes the computers reset button or unplugs the power cord. If the Persistent Time Stamp group policy setting is either enabled or not configured, system information is written to the data section of this event. This information includes a timestamp that indicates the computers uptime in seconds before the unexpected shutdown occurred. Resolution: One or more of the following actions might help to determine the cause of the unexpected shutdown: * Check the system event log for other events that occurred around the same time as the unexpected shutdown. * Find out whether the computers reset button was pressed, the power cord was unplugged, or a general power failure occurred. * Configure Windows to perform a memory dump of system failures and submit that data to Microsoft for debugging through Windows Error Reporting. For more information about Windows Error Reporting, see Help and Support. Cause 2: A remote shutdown problem using the InitiateSystemShutdown function was fixed in Windows NT 4.0, Terminal Server Edition, Service Pack 4 (SP4). This fix caused this problem. RESOLUTION : To resolve this problem, obtain the latest service pack for Windows NT Server version 4.0, Terminal Server Edition. For additional information, click the following article number 152734 . |
| Reference Links | Event ID 6008 Is Unexpectedly Logged to the System Event Log After You Shut Down and Restart Your Computer Improper Shutdown Occurrence Is Reported in the Event Viewer System Log Improper Shutdown Occurrence Is Reported in Event Viewer Windows NT Server 4.0 Terminal Server Edition Restarts Unexpectedly You may experience an abnormal shutdown of your Windows 2000 Server-based computer after the Windows logon screen saver starts Windows Operating System (EventLog) event id:6008 source:Event log Article:152734 How to Obtain the Latest Windows NT 4.0 Service Pack |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.