Microsoft KB Archive/241840

= Improper Shutdown Occurrence Is Reported in Event Viewer =

Article ID: 241840

Article Last Modified on 3/2/2007

-

APPLIES TO


 * Microsoft Windows NT Server 4.0, Terminal Server Edition Service Pack 4

-



This article was previously published under Q241840



SYMPTOMS
When you restart a Windows NT-based computer after it is improperly shut down, the following error message may appear in the system log in Event Viewer:

Event ID: 6008

Source: Event Log

Description: The previous system shutdown at time on date was unexpected.



CAUSE
A remote shutdown problem using the InitiateSystemShutdown function was fixed in Windows NT 4.0, Terminal Server Edition, Service Pack 4 (SP4). This fix caused this problem.



RESOLUTION
To resolve this problem, obtain the latest service pack for Windows NT Server version 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

152734 How to Obtain the Latest Windows NT 4.0 Service Pack



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows NT Server version 4.0, Terminal Server Edition Service Pack 6.



MORE INFORMATION
This fix was created from a similar fix made in Windows NT 4.0. For additional information about Winlogon.exe, please see the following article in the Microsoft Knowledge Base:

236949 Improper Shutdown Occurrence Is Reported in the Event Viewer

Keywords: kbhotfixserver kbqfe kbbug kbfix kbqfe KB241840

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.