WARNING_EW_SHUTDOWN_CANCELLED

[Curt]

I am getting this Warning in the System area of the Event Viewer in XP
Home SP2 also. (To others who are getting the same.) I am NOT having
any problems shutting down or rebooting Windows at all. It creates
this error everytime I restart my PC (at the moment I am clicking
"Restart." Maybe an update or program is causing this. I don't think
it's enough to format your PC. Here are the details:

************************

Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 10/23/2004
Time: 7:41:20 AM
User: NT AUTHORITY\SYSTEM
Computer: *******
Description:
The attempt to reboot ******* failed

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....

*************************************************
The link to Help and Support above opens up this:
*************************************************

Details
Product: Windows Operating System
ID: 1073
Source: USER32
Version: 5.2
Symbolic Name: WARNING_EW_SHUTDOWN_CANCELLED
Message: The attempt by user %2 to restart/shutdown computer %1 failed

Explanation
This event is written when a user or application attempts, but fails,
to restart or shut down the computer by using either the graphical
user interface (GUI) or the shutdown command.


User Action
If you still want to restart or shut down the computer, save any open
files, close any applications that are running, and then you can:

Use either the graphical user interface (GUI) or the shutdown command
again.
Press CTRL+ALT+DELETE, and then while pressing CTRL, click Shut Down
to force a shutdown.
Press the reset or power button on the computer.

 

[Curt]

Now I am worried about this error message. While trouble-shooting
this problem I renamed my PC and when asked to "restart my computer"
(the default box that shows up after you change the name of your PC) I
clicked "Yes" and the PC shutdown instead. I still am getting this
error message above. I am sure there are no virus' onboard (there's a
first for everything.) I wish I knew what to do or look for besides
reinstall XP!!

 

[Ronnie Vernon MVP]

I am getting this Warning in the System area of the Event Viewer in XP
Home SP2 also. (To others who are getting the same.) I am NOT having
any problems shutting down or rebooting Windows at all. It creates
this error everytime I restart my PC (at the moment I am clicking
"Restart." Maybe an update or program is causing this. I don't think
it's enough to format your PC. Here are the details:

************************

Event Type: Warning
Event Source: USER32
Event Category: None
Event ID: 1073
Date: 10/23/2004
Time: 7:41:20 AM
User: NT AUTHORITY\SYSTEM
Computer: *******
Description:
The attempt to reboot ******* failed

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 ....

*************************************************
The link to Help and Support above opens up this:
*************************************************

Details
Product: Windows Operating System
ID: 1073
Source: USER32
Version: 5.2
Symbolic Name: WARNING_EW_SHUTDOWN_CANCELLED
Message: The attempt by user %2 to restart/shutdown computer %1 failed

Explanation
This event is written when a user or application attempts, but fails,
to restart or shut down the computer by using either the graphical
user interface (GUI) or the shutdown command.


User Action
If you still want to restart or shut down the computer, save any open
files, close any applications that are running, and then you can:

Use either the graphical user interface (GUI) or the shutdown command
again.
Press CTRL+ALT+DELETE, and then while pressing CTRL, click Shut Down
to force a shutdown.
Press the reset or power button on the computer.

One thing to consider.
Warning = An event that is not necessarily significant, but may indicate a
possible future problem.

This is not an error, which would signify a real problem with the system. It
could simply be an application like an anti-virus program, third party
firewall or other program or process that is closing slowly when the
shutdown commences.

You might want to check all of your programs and applications to make sure
they are using the latest updates.

 

[Curt]

Thanks Ronie for the quick reply. Yes, I do believe it's a program
that is running as a Microsoft service. (It's the most recent
release.) I can always uninstall it to be sure. The software company
was notified.

 

[Curt]

I also also noticed that one program I just mentioned is just starting
up with Windows (and is not running as a service) and also I am
thinking this Warning occured around the time I disabled the Welcome
screen in logon and logoff options in the User Accounts area of the
Control Panel. (After this I then typed in "control userpasswords2"
in the Run box to make sure I did see the logon screen. The other
thing I did right around the time I started getting this warning was
install the "Cumulative Security Update for Internet Explorer for
Windows XP Service Pack 2 (KB834707)" on October 12, 2004. I am not
sure which of these things I did first or in what order.