Event: Error 1073 on shutdown

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When I try to shutdown or restart the shutdown begins then stops. Not a freeze, just no shutdown. The event generated in the log is a generic error 1073, i.e., a failure to shutdown. Clearly SOMETHING happens as on a second try the shutdown or restart is successful. There is a flash of a window on the first try but it happens so quickly that I can't catch what it says. Is there anyway to slow the shutdown sequence or log it so I can see what is happening? If I could tell what it is doing on that first try maybe I could figure out how to fix the problem.

I'm running XP Pro.
 
Enable auditing in local security policy (Control Panel, Administrative
Tools), then examine your Event Viewer for reported problems immediately
after a shutdown failure. Maybe that will provide some clues as to the
cause.

dmcquil said:
When I try to shutdown or restart the shutdown begins then stops. Not a
Click to expand...
freeze, just no shutdown. The event generated in the log is a generic error
1073, i.e., a failure to shutdown. Clearly SOMETHING happens as on a second
try the shutdown or restart is successful. There is a flash of a window on
the first try but it happens so quickly that I can't catch what it says. Is
there anyway to slow the shutdown sequence or log it so I can see what is
happening? If I could tell what it is doing on that first try maybe I could
figure out how to fix the problem.
 
I haven't had that exact problem but a lot of the time when I shut down a window comes up that says cannot shut down because something is running and the something that is running is called Message App. I click the end now button and it will shut down. Was wondering how to cure that.......Jim
 
dmcquil said:
Thank you for showing me this. I discovered that there are about 20
Click to expand...
processes that manage to close at the same time (as logged) as the shutdown
failure. I have tried closing some of the more interesting ones before
trying to shutdown but so far no luck. I will go back in and see if the
same ones close and what order on other attempts. I'm really puzzeled. The
only significant change I've made recently is an unfortunate change to
dynamic disk. I discovered too late that my backup software doesn't work
with dynamic disks and I've had no success cloning it to a non dynamic disk.
Anyway, I can't say for sure that the problem cropped up at that time. I
would be grateful for any additional suggestions and thank you, again, for
your help. I'm in way over my head here.
David
Click to expand...

For 2000 or XP Pro: Make sure your event auditing is at least logging all
failures (you can change that later to monitor just what you want). In that
local security policy snapin (Control Panel | Administrative Tools | Local
Security Policy), expand Local policies section in the left pane, and click
the Audit policy entry in the left pane to get a listing in the right pane.
Right click any entry and select Security. You can then select the option to
audit only failures, only successes, or both. I set everything to only
monitor failures, except for audit of login events for which I monitor both
success and failures. These events will then show up in Event Viewer
(Administrative Tools again, then select Event Viewer).

Then Clear out the Event Viewer logs. Then just log off instead of shutting
down and then log back in and look at the event viewer. This might allow
logging of some events you otherwise might not see in a normal shutdown
procedure (because the auditing service was stopped and could not log them).
See any yellow or red entries? If so, what are the Source, Category, and
Event ID numbers of them? You can double-click the entries to get more
information.
 
Back
Top