Workstation shutdowns every day around 5PM!!!

Workstation shutdowns every day around 5PM!!! (Full Version)

All Forums >> [Web Development] >> Server Issues

Message

box -> Workstation shutdowns every day around 5PM!!! (1/29/2007 23:30:36)
Maybe I’m in the wrong forum, but the problem that I have is one of the Workstation in our network shutdowns every day around 5PM!!! I checked The bios and power management and even any software that can do this but Nothing! Any suggestion?

dpf -> RE: Workstation shutdowns every day around 5PM!!! (1/30/2007 11:34:42)
..perhaps the worker presses the "off" button on departure

rdouglass -> RE: Workstation shutdowns every day around 5PM!!! (1/30/2007 14:02:00)
Dan, you're a riot. [:D] Seriously, could some personal backup software or maybe other "updater" type software is scheduling the shutdown? Have you looked into any Scheduled Tasks (assuming it's Windows)? Have you studied the Event Logs? There will almost always be an entry there that tells who (or what process) issued the ShutDown command. Hope those help.

box -> RE: Workstation shutdowns every day around 5PM!!! (2/1/2007 14:47:19)
Thanks rdouglass 4 reply, I checked the event's log but there is nothing linked to shutdown!!!!!!!!!!![8\|]

rdouglass -> RE: Workstation shutdowns every day around 5PM!!! (2/1/2007 14:54:35)
What OS is it running?

box -> RE: Workstation shutdowns every day around 5PM!!! (2/1/2007 16:06:19)
OS Windows XP pro After checking logs I noticed every day around 5:00 PM there is a warning: Description: Application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by service running as a user account,try configuring the service to run in either the localService or NetworkService account. After submitting the warning to Microsoft I got this: Details Product: Windows Operating System Event ID: 1517 Source: Userenv Version: 5.2 Symbolic Name: EVENT_HIVE_SAVED Message: Windows saved user %1 registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use. This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account. Explanation Windows unloads each user's profile and user's section of the registry when the user logs off. This message indicates that Windows could not unload the user's profile because a program was referencing the user's section of the registry. This locked the profile. The registry cannot unload profiles that are locked and in use. When the program that is locking the profile is no longer referencing the registry, the profile will be unloaded.

rdouglass -> RE: Workstation shutdowns every day around 5PM!!! (2/1/2007 16:12:23)
Well, that's a clear explination, isn't it? [:'(] Have you done the standard Virus and malware checks? It looks like it could be a process that the user installed (either on purpose or inadvertantly or a piece of spyware). One thing I do sometimes is check all the processes running under that particular user account to see if there are any you're unaware or unfamiliar with. Then just Google them (the process name) to see if there is any info on those specific processes. I have been quite sucessful in nailing things down that way. Hope it helps.

Kitka -> RE: Workstation shutdowns every day around 5PM!!! (2/1/2007 16:27:48)
quote: check all the processes running under that particular user account to see if there are any you're unaware or unfamiliar with HijackThis is a very useful program to assist with identifying malware that might be running: http://www.spywareinfo.com/~merijn/programs.php

box -> RE: Workstation shutdowns every day around 5PM!!! (2/1/2007 19:26:51)
User Profile Hive Cleanup Service Thanks, I installed User Profile Hive Cleanup Service from Microsoft.com and so far No shutdown yet[:)]! "UPHClean-Setup.msi"

box -> RE: Workstation shutdowns every day around 5PM!!! (2/1/2007 23:38:54)
well it's off Again![:@]

Page: [1]

Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

0.0625