PCs Shutting Down?

[RichCowell]

Hi All,

 

Got a problem in one suite of identical computers (got other identical computers elsewhere in the school too), shutting down if left, or as soon as users log off...

 

Looking through the event logs I can see the following:

 

The process C:\Windows\system32\winlogon.exe (T8-12) has initiated the power off of computer T8-12 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found

Reason Code: 0x500ff

Shutdown Type: power off

Comment:

 

But I can't work out what's causing it... I've Googled and seen others users with the same issue, but no resolution. MS acknowledged an issue with that Reason Code in 2010 but even having ensured these PCs have all the updates installed it still happens.

 

We've since re-imaged a few in there, with the same image they had initially, and the same as we use elsewhere, and it's still shutting them down.

 

Has anyone else had this issue? Or can anyone recommend anything to try?

 

Rick

[LukeC]

bit of a long shot but I had a similar issue to this a few years back were students would log on and then it would shutdown during the logon but this was intermittent. This was caused by a GPO hat deployed proxy settings which I recreated and issue went away.

[RichCowell]

bit of a long shot but I had a similar issue to this a few years back were students would log on and then it would shutdown during the logon but this was intermittent. This was caused by a GPO hat deployed proxy settings which I recreated and issue went away.

 

Thanks for the suggestion... There are no GPO's specific to that OU, I'll check the GPO's anyway though just in case...

 

It only happens if it's been left for a while, or sometimes as soon as they log off, it shuts down instead of logging off...

[Oaktech]

Is it WSUS? doing it? Is your classroom management doing it?

 

If you haven't specified a power policy for them via GPO, perhaps something in their default settings is doing it and creating a specific power policy might solve it.

[RichCowell]

Is it WSUS? doing it? Is your classroom management doing it?

 

If you haven't specified a power policy for them via GPO, perhaps something in their default settings is doing it and creating a specific power policy might solve it.

 

Pretty sure it's not WSUS as they're all in one group on that so it would affect more than just those...

 

As for classroom management - I've disabled all the Power Management features in Impero to rule that out...

 

We've checked the power settings on the PC and there's nothing that should be causing it, we've tried changing the power policy to high performance and making sure that's set to never shut down / standby etc.

 

I think I've checked all the usual causes, it's really got me stumped though!

[frazzlesgrant]

This is a long shot but is there nothing in the BIOS that could be doing it?

[RichCowell]

This is a long shot but is there nothing in the BIOS that could be doing it?

 

Not that I've seen... They're Dell Optiplex 390's - just on the off-chance anyone's had the same with those...

[frazzlesgrant]

We have a few here and they don't seem to do that, have you tried one as a stand alone PC to see if it still does it?

[MatthewL]

Check the scheduled tasks on the local machine to see if there is anything in there.

[Oaktech]

Check the scheduled tasks on the local machine to see if there is anything in there.

 

And your servers to make sure there isn't a scheduled shutdown task running that someone has forgotten about!