chrisgreenwood Posted November 20, 2023 Posted November 20, 2023 Hi, Our external provider made a shutdown script and it reboots after 10 mins of logging on but only once in the morning. They have removed the script yet it still does it (script cant be found anywhere on the pc) Do any of you lot know what may be causing it?
Davit2005 Posted November 20, 2023 Posted November 20, 2023 Task Scheduler not showing anything? Any ideas how they deployed?
chrisgreenwood Posted November 20, 2023 Author Posted November 20, 2023 nope, he even did a command in powershell that shows all the scheduled tasks and it wasn't there and they did it via a powershell script i think originally
Davit2005 Posted November 21, 2023 Posted November 21, 2023 Disconnect a PC from network after startup and see if it does it. If it does then disconnect from network before you start it up and see what happens. Does it specifically reboot after log in or jus PC starting up, if it only does it when logged on not sure why it would be set up like that.
Koldov Posted November 21, 2023 Posted November 21, 2023 (edited) Is the reason for the removal of the task the 10 minute reboot? I'm not sure a shutdown task would do that (reboot).... what makes you think it is the culprit (no other changes and started doing it directly after the task was applied etc.)? Probably not much help (possibly not even the issue you have), but for future reference the only reason I've known a shutdown scheduled task to do something similar (although it was actually shutdown, not reboot) is because 'Run task as soon as possible after a scheduled start is missed' was ticked... If the computer is not on when the scheduled task is supposed to run (and you don't have it set to wake before the task runs), it will run 'as soon as possible' after it is turned on again. Ask me how I know... EDIT: Just as an extra thing to look at, I just ran the Powershell command 'Get-ScheduledTask' on my server and it didn't even list all the manually/GPO added tasks, only the Windows/Microsoft ones. Edited November 21, 2023 by Koldov
chrisgreenwood Posted November 21, 2023 Author Posted November 21, 2023 What i did, i logged onto a pc that was off and looked at running tasks in task scheduler and we have a CSP Reboot one and then it rebooted but no one knows where it came from so i've asked for it to be removed Is the reason for the removal of the task the 10 minute reboot? I'm not sure a shutdown task would do that (reboot).... what makes you think it is the culprit (no other changes and started doing it directly after the task was applied etc.)? Probably not much help (possibly not even the issue you have), but for future reference the only reason I've known a shutdown scheduled task to do something similar (although it was actually shutdown, not reboot) is because 'Run task as soon as possible after a scheduled start is missed' was ticked... If the computer is not on when the scheduled task is supposed to run (and you don't have it set to wake before the task runs), it will run 'as soon as possible' after it is turned on again. Ask me how I know... EDIT: Just as an extra thing to look at, I just ran the Powershell command 'Get-ScheduledTask' on my server and it didn't even list all the manually/GPO added tasks, only the Windows/Microsoft ones. - - - Updated - - - What i did, i logged onto a pc that was off and looked at running tasks in task scheduler and we have a CSP Reboot one and then it rebooted but no one knows where it came from so i've asked for it to be removed Is the reason for the removal of the task the 10 minute reboot? I'm not sure a shutdown task would do that (reboot).... what makes you think it is the culprit (no other changes and started doing it directly after the task was applied etc.)? Probably not much help (possibly not even the issue you have), but for future reference the only reason I've known a shutdown scheduled task to do something similar (although it was actually shutdown, not reboot) is because 'Run task as soon as possible after a scheduled start is missed' was ticked... If the computer is not on when the scheduled task is supposed to run (and you don't have it set to wake before the task runs), it will run 'as soon as possible' after it is turned on again. Ask me how I know... EDIT: Just as an extra thing to look at, I just ran the Powershell command 'Get-ScheduledTask' on my server and it didn't even list all the manually/GPO added tasks, only the Windows/Microsoft ones.
Davit2005 Posted November 21, 2023 Posted November 21, 2023 It might be worth checking where the file it ran (if it ran one). We set up something similar but the file would be replaced nightly for those users that did not want their PCs rebooted and removed the schedule.
chrisgreenwood Posted November 21, 2023 Author Posted November 21, 2023 I can't remember top of my head where it ran but our IT Support company is looking into removing it but its weird as it says it hasn't run when i saw it running i've posted a screenshot below
Koldov Posted November 22, 2023 Posted November 22, 2023 Quite a bit on CSP Reboot when doing a quick internet search, but as you mentioned InTune, this one stood out (don't have time to read it thought, so might not be the issue): https://www.reddit.com/r/Intune/comments/149dwd2/intune_daily_recurrent_reboot_via_device/
brainchest Posted December 14, 2023 Posted December 14, 2023 You can check the Task Scheduler for any scheduled tasks related to the reboot. You can also review Group Policy settings that might affect system reboots. Additionally, ensure that there are no lingering remnants of the shutdown script in the registry or other system files.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now