Shutdown problems with script Event ID 1073

[caffrey]

We use a shutdown vbscript to shut down remote pcs (XP) using the win32shutdown method, works fine has done for a long time.

 

however some machines fail to shutdown properly leaving them hung on a light blue screen and the machines need to be physically forced to turn off.

 

EventID 1073 , USER32 is in the event log with no other info.

 

Can't pin it down to one particular pc as it happens on random machines !

[themightymrp]

I had something similar at one point when I had used a ghost image on a slightly different motherboard. I hadn't thought there would be any problem as the drivers seemed to work without changes. However the slight difference in the HAL meant the machines with the replacement boards wouldn't shut down correctly. I re-created a new image from scratch for them and problem solved.

 

Could it be the same for you?

[caffrey]

Don't think these particular machines are cloned but thanks for the suggestion, I'm currently investigating the registry on each machine remotely to see if theres any differences - e.g. anything rogue running

and I've noticed on a couple of machines that have issues they have "C:\Program Files\QuickTime\qttask.exe" -atboottime" in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

 

Just removed the entries on one machine and testing - seems to be shutting down ok now? Won't really know till the script runs properly - but fingers crossed,might have found the culprit.