Improper Shutdown Occurrence Is Reported in Event Viewer

ID: Q241840

The information in this article applies to:

Microsoft Windows NT Server version 4.0 SP4, Terminal Server Edition

SYMPTOMS

When you restart a Windows NT-based computer after it is improperly shut down, the following error message may appear in the system log in Event Viewer:

Event ID: 6008
Source: Event Log
Description: The previous system shutdown at time on date was unexpected.

CAUSE

A remote shutdown problem using the InitiateSystemShutdown function was fixed in Windows NT 4.0, Terminal Server Edition, Service Pack 4 (SP4). This fix caused this problem.

RESOLUTION

A supported fix that corrects this problem is now available from Microsoft, but it has not been fully regression tested and should be applied only to systems experiencing this specific problem. If you are not severely affected by this specific problem, Microsoft recommends that you wait for the next Windows NT 4.0, Terminal Server Edition, service pack that contains this fix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please go to the following address on the World Wide Web:

http://www.microsoft.com/support/supportnet/overview/overview.asp

The English-version of this fix should have the following file attributes or later:


   Date      Time                 Size      File name      Platform
   ----------------------------------------------------------------
   09/16/99  02:47p               223,504   Winlogon.exe   Intel
   09/16/99  02:52p               328,464   Winlogon.exe   Alpha

STATUS

Microsoft has confirmed this to be a problem in the Microsoft products listed at the beginning of this article.

MORE INFORMATION

This fix was created from a similar fix made in Windows NT 4.0. For additional information about Winlogon.exe, please see the following article in the Microsoft Knowledge Base:

Q236949 Improper Shutdown Occurrence Is Reported in the Event Viewer

Additional query words:

Keywords : kbbug4.00 kbfix4.00
Version : winnt:4.0 SP4
Platform : winnt
Issue type : kbbug