You can use Event Viewer to help determine which programs or
services are causing your shutdown problem.
To make this process a little easier you can do the following.
Go to Start -> Run and enter mmc.exe in the Open box.
You should now see a window titled Console1.
Click on File and select Add/Remove Snap-in from the menu.
Hit the Add button in the Add/Remove Snap-in dialog.
In Add Standalone Snap-in, click on Event Viewer to highlight
it and hit the Add button.
Make sure the Local Computer is selected and hit the Finish
button.
Close the Add/Remove Standalone Snap-in dialog.
Hit OK in the Add/Remove Snap-in dialog.
Maximize both windows in Console1.
Click on the + sign next to Event Viewer.
Right click on Application and select Properties from the menu.
In Application Properties, click on the Filter tab.
Remove the check mark from the box next to Information.
Click OK.
Do the same for System.
Now, go up to File and select "Save as" from the menu.
Name this new console Filtered Events and save it on your
desktop.
Now, whenever you restart your computer, open this console.
You should only see errors and warnings listed.
Restart your system. Write down any error messages displayed
while the system is shutting down. If you experience the slow
or no shutdown problem, open Filtered Events and check both
Application and System logs.
Keep restarting your computer until you see a pattern emerging.
If the same
service or program keeps showing up there's a good chance that
it's the source of your problem. If it's a program you
installed try either uninstalling it or shutting it down before
restarting your computer. If it's a service, you're going to
have to determine if it's safe to disable. If it is, go to
Start -> Run and enter services.msc in the Open box. You can
right click the service in the right hand pane and select Stop
if you want to shut it down or Disable if you want to prevent
it from starting entirely.
Here are a few sites you may find helpful in determining
exactly what program or service is referenced in an event:
Tasklist programs
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm
Startup applications list
http://www.sysinfo.org/startuplist.php
Also, right click any error or warning listed in Filtered
Events and select Properties from the menu. Click on the link
in the Descriptions box to see what information Microsoft
provides for this event.
Two things to keep in mind while you're troubleshooting this
problem:
1. Document all the actions you take. That way you can reverse
any steps that don't resolve the problem.
2. If you connect to the internet through a broadband
connection, disconnect it. Since you may have to disable your
antivirus and/or firewall programs while troubleshooting, you
don't want to be connected to the internet while your
protection is down.
Unfortunately, the problem your dealing with usually does not
have a quick solution. Determining the cause often requires a
trial and error approach. Here are a few articles that you may
find helpful:
Resources to help troubleshoot shutdown problems in Windows XP
http://support.microsoft.com/?kbid=308029
Shutdown is very slow - Windows XP
http://windowsxp.mvps.org/slowshutdown.htm
Troubleshooting Windows Shutdown Problems
http://www.windowsnetworking.com/articles_tutorials/Troubleshooting-Windows-Shutdown.html
Troubleshooting Windows XP Shutdown Issues
http://www.theeldergeek.com/shutdown_issues_in_xp.htm
Windows XP Shutdown and Restart Troubleshooting
http://www.aumha.org/win5/a/shtdwnxp.php
Good luck
Nepatsfan
(e-mail address removed),