Windows 10: Mystery shut downs on 1903--help me diagnose!

Discus and support Mystery shut downs on 1903--help me diagnose! in Windows 10 Support to solve the problem; Summary: My laptop sometimes mysteriously shuts down, and I have no idea why. I need advice on trouble shooting this, especially seeing if my Windows... Discussion in 'Windows 10 Support' started by up2trix, Jun 25, 2019.

  1. up2trix Win User

    Mystery shut downs on 1903--help me diagnose!


    Summary:

    My laptop sometimes mysteriously shuts down, and I have no idea why.

    I need advice on trouble shooting this, especially seeing if my Windows event logs hold any clues.

    Details:

    I have a 7 month old Dell Precision 7530 laptop. It is running Windows 10 Pro for Workstations version 1903 patched thru the latest updates. If Dell Command update is to be believed, all my hardware related software (e.g. BIOS, drivers) is also fully patched.

    Several times in the last couple of weeks I have come back to my laptop after being away for several hours only to find it shut down. And I mean, totally shut down, not in sleep or hibernation: after pressing on the power button it boots up and no programs are there, like it was a clean start.

    The last 2 times this happened were sometime early Sunday morning (1 day ago, between ~02:30 and ~10:37) and sometime later on again on Sunday (perhaps ~10:50); more on those times below.

    In the first case, I started a backup process around 02:30 before going to bed. When I came to my laptop at ~10:30, it was shut down. Had to press the power key to get it running once more. Minutes after it booted, I needed to leave the house.

    When I was next able to return to my laptop in the afternoon, around ~14:40, it was again shut down just like in the morning.I started examining my Windows event logs for clues.

    This link led to this link which had some suggestions. One way is to use Event Viewer; good tutorial for this is here. Another way is to execute the program TurnedOnTimesView. However, to get text output for this post, yet another way is to execute this in Powershell:
    Code: Get-WinEvent -FilterHashtable @{Logname='System';ID=6006,6008,1074}[/quote] The relevant part of the output for the 2 mystery shut downs on Sunday are these lines:
    Code: ProviderName: EventLog TimeCreated Id LevelDisplayName Message ----------- -- ---------------- ------- 2019-06-23 14:42:05 6008 Error The previous system shutdown at 10:36:59 AM on ?6/?23/?2019 was unexpected. 2019-06-23 10:36:59 6008 Error The previous system shutdown at 6:42:46 AM on ?6/?23/?2019 was unexpected. 2019-06-23 01:20:37 6006 Information The Event log service was stopped.[/quote] Those 2 6008 Error lines are surely the 2 mystery shut downs, but other than give me the time, they are not telling me anything! I have no idea what process caused this!

    Because I use BitLocker to fully software encrypt my SSD, I have disabled all Sleep, and only allow Hibernate; see this link.

    This may be unrelated, but I should mention that this evening my Start Menu and search bar stopped working! Clicking on them did nothing I have never experienced this before. Found a web link that suggested ctrl-alt-delete and then sign out. That cured it, altho it forcefully killed some processes that I would have preferred to manually gracefully terminate.

    I do not see either shut downs or loss of Start Menu in Brink's list of open 1903 issues.

    My symptoms are distinct from the shut down issues reported in this post.

    This post suggested to execute in an elevated cmd shell
    Code: powercfg /SYSTEMPOWERREPORT[/quote] I examined the report, but it did not tell me anything new.

    - - - Updated - - -

    As a followup to my original post, I opened Event Viewer -> Windows Logs --> System and started looking for suspects. Below are some of the things that I found. Nothing stands out as a cause to me, but maybe it will to someone more experienced.

    Critical logs:

    I see one Event ID 41 at 10:36:49 with the message
    Code: The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.[/quote]
    Error logs:

    I see bursts of Event ID 2505; i think that all have the message
    Code: The server could not bind to the transport \Device\NetBT_Tcpip_{5F182740-E841-4CF8-A439-D3F5954BA1C2} because another computer on the network has the same name. The server could not start.[/quote] I see a few Event ID 4207; I think that all have the message Code: The IPv6 TCP/IP interface with index 17 failed to bind to its provider.[/quote] I see a few Event ID 5010; I think that all have the message Code: Intel(R) Wireless-AC 9260 160MHz : The network adapter has returned an invalid value to the driver.[/quote] I see one Event ID 7000 with the message
    Code: The DellWAL service failed to start due to the following error: The system cannot find the file specified.[/quote] There may be more; I am doing this manually...

    Warning logs:

    I see a few Event ID 219; they have different messages, for example
    Code: The driver \Driver\WudfRd failed to load for the device ACPI\INT3400\2&daba3ff&0.[/quote] or
    Code: The driver \Driver\WudfRd failed to load for the device USB\VID_0A5C&PID_5832&MI_01\6&528937a&0&0001.[/quote]
    I see a few Event ID 10016; they have different messages, for example
    Code: The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} and APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} to the user NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.[/quote] or
    Code: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID Windows.SecurityCenter.SecurityAppBroker and APPID Unavailable to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.[/quote]

    :)
     
    up2trix, Jun 25, 2019
    #1
  2. BUG
    bug Win User

    My pc takes for ever to shut down when i restart

    You can always browse the event viewer for errors.

    Do what @kastriot suggested, if that shuts down fine, you have a rogue driver somewhere (can be further diagnosed by uninstalling drivers one by one).
     
  3. Won't shut down or restart -- error X0X

    Hi,

    Thank you for posting your query in Microsoft Community.

    To assist you better, I would like to ask what are the methods that you have tried to solve the issue.

    The issue might occur if the computer is not shut down properly. so, I suggest you to perform a power drain by follow the steps below and check if it helps.

    • Shut down the Computer.
    • Remove all power source (including battery if it is a laptop).
    • Press and hold the power button for 15-20 seconds.
    • Connect the power source and start the computer.
    • After the computer boots to the desktop, suggest you to install all the pending updates.

    Hope this helps. Keep us posted on the status for further assistance.
     
    Eeshwar Kumar, Jun 25, 2019
    #3
  4. Mystery shut downs on 1903--help me diagnose!

    Mail and 1903

    Dear Greg,

    Thanks for suggestions, started last night, after work today I will move on to the reinstall step. Except for this odd hiccup the new 1903 is great. When I reset Mail, the Mail program would not allow me to "add account," shutting down instantly, suggesting
    that the problem is with the app as it resides on my computer. Will follow up after reinstalling.
     
    Ragnar Danneskjold, Jun 25, 2019
    #4
Thema:

Mystery shut downs on 1903--help me diagnose!

Loading...
  1. Mystery shut downs on 1903--help me diagnose! - Similar Threads - Mystery shut downs

  2. Help on Computer Shutting Down

    in Windows 10 Performance & Maintenance
    Help on Computer Shutting Down: Hello -I am looking for help on fixing unwanted shut down on my computer. I asked the same question a few weeks ago and which was kindly answered ( thank you ) . That has helped but the problem seems to have returned today. ( I couldn't return to thank those that replied as...
  3. shutting down

    in Windows 10 BSOD Crashes and Debugging
    shutting down: hi there i'm having a trouble with shutting down my system when i press shut down, the shutting down screen appears then screen goes off but my hdd and power lights remain on this takes 10 minuets then restart happens please help...
  4. Shut down

    in Windows 10 Support
    Shut down: Since i received the updates this week when i go to shut down the system it will not close all programs that were running. I start with W10 msn homepage and close with the window in upper left corner of pc with a click and then click the shut off button. 121789
  5. Diagnosing random shut downs

    in Windows 10 Drivers and Hardware
    Diagnosing random shut downs: My in-laws PC, which I built for them, has recently started to shut down on it's own. They also claim that sometimes it will not boot up. I have it back at my house, and it seems to be running fine. I let it run overnight, ran it through some benchmarks to stress it, and it...
  6. shut down

    in Windows 10 Support
    shut down: My laptop is not shutting down nor the cursor is moving from its place. Task manager is also not opening now how should I shut down 69273
  7. Help need this for remotely shutting down computers...

    in Windows 10 Network and Sharing
    Help need this for remotely shutting down computers...: Need help for remotely shutting down pc from another desktop I need your help, shutting down other computer is "access is Denied" pls. help... 24965
  8. Shut down

    in Windows 10 Support
    Shut down: When I shut down Windows 8.1 the connect light on the Router stays lite.On windows 10 preview when shut down the connect goes out. Is this normal ? Does windows 10 shut down more of the computer then Windows 8.1 ? 3890
  9. Shut down

    in Windows 10 Support
    Shut down: Why is there only 1 place to shut down??????????????? 33605
  10. Shut Down

    in Windows 10 Support
    Shut Down: When I boot win 10 it runs for a few minutes then shuts down. No BOSD. Reboot & everything is OK! I can press & hold the start button until the light goes out & reboot again & again, but if a shut for a long period it happens again! One of the fixes is to run a command...