| Event Id | 1074 |
| Source | User32 |
| Description | The process %1 has initiated the %5 of computer %2 on behalf of user %7 for the following reason: %3 Reason Code: %4 Shutdown Type: %5 Comment: %6 |
| Event Information | Explanation : This event is written when an application causes the system to restart, or when the user initiates a restart or shutdown by clicking Start or pressing CTRL+ALT+DELETE, and then clicking Shut Down. This event is written to the system log only when the Shutdown Event Tracker group policy setting is enabled or not configured on a computer running a Windows Server 2003 operating system. A system state data file is written during every unplanned restart or shutdown. This file contains information about programs that were running just before the shutdown and information about the system and hardware. It might be useful to IT professionals in determining the cause for frequent, unplanned shutdowns. To enable this feature on a computer running a Windows Server 2003 operating system, you can leave the System State Data group policy setting not configured, or you can enable it. This feature is not included in Windows XP Professional. The system state data file is stored in the %windir%\system32\LogFiles\Shutdown\ directory, and only members of the Administrators security group can view it. The first such user who logs on to the computer after an unplanned shutdown might see a dialog notification reading "The system has been restarted after an unplanned shutdown. A log of this event has been created." From this dialog box, the user can navigate to a more detailed description of the data file, its contents, and Microsofts privacy policy for data collection on the Web. The administrator can choose whether to send the system state data file to Microsoft by clicking either the Send Error Report button or the Dont Send button. If you have the appropriate group memberships or privileges, you can enable Corporate Error Reporting by setting a path for uploading data to a central location on your network. You can also customize the error reporting dialogs. To learn more about Corporate Error Reporting, see Help and S |
| Reference Links | Windows 2003 Ent Edition giving problems after recovery
Information systems service. Description of the Shutdown Event Tracker W32.Blaster.Worm Removal Tool W32.Sasser.D |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.