Windows 10: Display Shutdown Event Tracker? Where is it?

My currently up to date windows 10 pro machine has been restarting very very frequently after I've left it for a goodly while, including nearly every night, and in trying to figger out why this is happening, I learned about this option, Display Shutdown Event Tracker. It's supposed to be in the Local Group Policy editor, but I do NOT see an option named that. I'm an admin on my machine, so I'm not sure why I can't see it, unless it's not there any longer? Moved? Who knows? I did locate the .msc for GP, and ran it explicitly as an admin, but nada. *Sad Someone had mentioned looking at the user32 events in the regular event viewer, but this is all I see there:

"The process C:\Windows\System32\RuntimeBroker.exe (LAPTOPNAME) has initiated the restart of computer LAPTOPNAME on behalf of user LAPTOPNAME\MyUserName for the following reason: Other (Unplanned) Reason Code: 0x0 Shutdown Type: restart Comment:"

Any thoughts anyone?

TIA
elaine

:)

 

N85: Where is the "Active Standby" menu?

Thx.kingpin..but in "Standby Theme" there are 3 theme: "Horisontal icon bar", "Basic" and "Vertical Hr. Bar". And I tried all of them, found exactly "Basic Theme" turn off the Active Standby (means there are no shortcuts and events in the standby display) but
the other 2 are not giving any "Active Standby" menu turned on in the Tools > Settings >General > Personalisation > Standby mode > Active
standby. I used to have E71 before and I found "Active Standby" menu there where I can customise my events. I'm still confused now.....or N85 doesn't have "Active Standby"...but then where can I customise my events to showup in the display?

 

Windows 10 suddenly shutting down

Does it shutdown when you are working with any specific program?

Does it displays the shutdown message or it just turn off?

Open start and search for Event Viewer and open it and see logs during the time of shutdown and see whether you see any related message.

 

Hello Elaine, *Smile

The tutorial below can help show you how to enable the shutdown event tracker, and provide some more details that I hope will help.

*Arrow Enable or Disable Shutdown Event Tracker in Windows 10 Performance Maintenance Tutorials

 

"Reliability" is not an option in my registry (although I can easily add it if that won't mess anything up). All I see under ".../WindowsNT" are "Terminal Services" which has "Client/UsbBlockDeviceBySetupClasses" and "Client/UsbSelectDeviceByInterfaces" under it, and "Windows File Protection" which just has a dword. The site has a .reg file to download, but it may or may not create that Reliability entry, not sure. (I'm very comfortable adding entries, btw, but not so comfy that I'll try something that might mess something ELSE up *Smile

elaine

 

Although that said, I did find just one reference of "Reliability", but I expect it's not the right one *Smile It's here:

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Reliability

All it has under it is "UserDefined" and "WinRE".

elaine

 

The registry key is not there by default. It gets added when you have the group policy configured to enable shutdown event tracker.

If you like, you can use the downloadable .reg files in Option Two to enable this.

 

I don't have that option in Group Policy either. This is the version of Windows 10 Pro I have:

10.0.16299 Build 16299

It's pretty much the latest and greatest, AFAIK.

elaine

 

Interesting. I went ahead and added the reg key, and when I went to reboot, often a good idea after adding keys and such, I got a new popup asking me to give a reason why I wanted to reboot, including various reasons with both planned and unplanned. I selected Other (Planned), then when it came up again, it threw up another new popup for "Shutdown Event Tracker". All the choices were unplanned, and I had to add a reason before I could continue, even tho it was a planned shutdown/restart. Did so and all was well, but this was unexpected.

But I still don't see the option to view the shutdown reasons in GP. Or anywhere else for that matter other than these popups. If it DOES have an unplanned restart, obviously I won't have a reason why, if this appears then too, which presumably it will.

elaine

 

It sounds like you now have shutdown event tracker enabled.

You can tell when users have to select a reason when trying to restart or shut down the computer.

You have to look in Event Viewer to see whom and the reason for a restart or shutdown instead. See the blue note box at the top of the tutorial below to see if this is what you're seeing.

*Arrow Enable or Disable Shutdown Event Tracker in Windows 10 Performance Maintenance Tutorials

 

Even more interesting. Before I did all of the above, I DID see a notification about "Other (unplanned)" in my regular Event log a day or two ago. It was actually the reason I started looking for this because it didn't tell me squat, ya know? So am I understanding this correctly? Regardless of what I just said (that was the first time I'd seen that, btw), the next time it crashes and reboots, I should see one of those options show up? Hopefully with a bit more info *Smile I had already set up a custom view in my event viewer for major errors, so hopefully all this will help. Gotta love microsoft and its cryptic error handling *Sad

elaine

 

Event shutdown tracker is basically just a way to force users to select a reason why they are restarting or shutting down the computer that gets added to the shutdown event log.

What is causing the PC to crash wouldn't be related to this setting.

 

Ah, got it. Didn't realize that. I'm going to disable it then, because what I need is the true WHY it restarts so frequently. If *I* am restarting it on purpose, I don't need to see that.

But this has been an excellent exercise, thanks so much for that!

elaine

 

If you're getting a BSOD, then you could follow the instructions at the link below to collect data...

*Arrow BSOD - Posting Instructions - Windows 10 Forums

.... and then post the info and issue in the forum area below to see if we may be able to find out the cause.

*Arrow BSOD Crashes and Debugging - Windows 10 Forums

 

I'm not getting a BSOD, or at least from what I can tell. Basically if I go away from my laptop for an extended period, overnight, for example, the next morning it's back at the login screen. This is NOT normal for me, and I don't see anything obvious in the events, but most of those are not easy to interpret. Right now, I just came back after several hours off it and logged in, and the last "error" in the log is this:

The server {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} did not register with DCOM within the required timeout.

I have NO idea what that means nor if it's even a bootable "offense" *Sad I logged back in around 6:55 PM my time, but there's nothing obvious in the log before then, and as best as I can tell it may have rebooted around 4:30ish.

Everything seems fine otherwise, it works normally, etc etc. It would even be helpful if it DID throw a BSOD while I was on it, but so far it hasn't.

elaine