| Event Id | 309 |
| Source | Microsoft-Windows-TaskScheduler |
| Description | There are %1 Task Scheduler tasks orphaned during task engine "%2" shutdown. Find the process run by this task in the Task Manager and stop it manually. |
| Event Information | According to Microsoft : Cause : This event is logged when Task scheduler tasks multiple tasks in task engine. Resolution : Clean up orphaned tasks To clean up orphaned tasks, find the processes representing these tasks in Task Manager and stop them manually. To stop a task manually: 1.Open Task Manager by pressing CTL+ALT+DELETE and selectTask Manager. 2.Click theProcesses tab. 3.Select Taskengine.exe. This process is a task engine that can run multiple tasks. 4.Click End Process. Verify : To define a task and register a task: 1.Click theStart button and typeTask Scheduler in theStart Search box. 2.Select the Task Scheduler program to start Task Scheduler. 3.Click Create Task. 4.On theGeneral tab, define a name for the task. On theTriggers tab, add a trigger to the task. On theActions tab, define an action for the task. 5.ClickOK, and verify that no errors are reported when the task is created. 6.Select the new task and verify on theHistory tab that there are not any partial registration failures for the task. .To verify that events are in the Task Scheduler event log: 1.Click theStart button and typeEvent Viewer in the Start Search box. 2.Select theEvent Viewer program to start Event Viewer. 3.Locate the Microsoft-Windows-TaskScheduler/Operational event log by expanding the Applications and Services Logs folder, expanding the Microsoft folder, expading the Windows folder, expanding the TaskScheduler folder, and then clicking the Operational event log. 4.Verify that the session events are in the log. |
| Reference Links | Event ID 309 from Source Microsoft-Windows-TaskScheduler |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.