Article ID: 326564
Article Last Modified on 2/1/2007
APPLIES TO
- Microsoft Windows 2000 Service Pack 3
- Microsoft Windows 2000 Service Pack 2
- Microsoft Windows 2000 Service Pack 1
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Service Pack 3
- Microsoft Windows 2000 Service Pack 2
- Microsoft Windows 2000 Service Pack 1
This article was previously published under Q326564
SYMPTOMS
When you restart the computer after a program that uses the InitiateSystemShutdownEx function shuts it down automatically, the following event may be logged to the System event log:
CAUSE
This problem may occur if both of the following conditions are true:
- The computer is locked or is configured with a password-protected screensaver.
- The shutdown operation is initiated automatically by a program that uses the InitiateSystemShutdownEx function with the force flag.
For example, you use the Remote Shutdown tool (Shutdown.exe) from the Microsoft Windows 2000 Resource Kit to force a shut down of the computer from a remote computer or you schedule a shutdown of the local computer by using Shutdown.exe in combination with the at command or Task Scheduler.
In this situation, the Event Log service is not notified about the shutdown event, and as a result, the shutdown operation is incorrectly considered by the Event Log service as an unexpected event.
RESOLUTION
Hotfix information
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Date Time Version Size File name -------------------------------------------------------------- 15-Aug-2002 08:34 5.0.2195.5265 42,256 Basesrv.dll 15-Aug-2002 08:34 5.0.2195.5907 222,992 Gdi32.dll 15-Aug-2002 08:34 5.0.2195.6011 708,880 Kernel32.dll 15-Aug-2002 08:34 5.0.2195.4733 332,560 Msgina.dll 15-Aug-2002 08:34 5.0.2195.6000 379,664 User32.dll 15-Aug-2002 08:34 5.0.2195.5968 369,936 Userenv.dll 08-Aug-2002 15:23 5.0.2195.6003 1,642,416 Win32k.sys 15-Aug-2002 08:30 5.0.2195.6013 179,472 Winlogon.exe 15-Aug-2002 08:34 5.0.2195.5935 243,472 Winsrv.dll
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
MORE INFORMATION
For more information about how to use the Remote Shutdown tool (Shutdown.exe) to shut down shut down and restart a local or remote Windows 2000-based computer, click the following article number to view the article in the Microsoft Knowledge Base:
317371 How to use the Remote Shutdown tool to shut down and restart a computer in Windows 2000
For more information about how to install multiple hotfixes while only restarting one time, click the following article number to view the article in the Microsoft Knowledge Base:
296861 How to install multiple Windows updates or hotfixes with only one reboot
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
883635 You may experience an abnormal shutdown of your Windows 2000 Server-based computer after the Windows logon screen saver starts
Keywords: kbbug kbfix kbwin2000presp4fix kbqfe kbwin2ksp4fix kbhotfixserver KB326564