Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Event ID 6008 is unexpectedly logged to the System event log after you shut down and restart your computer

Event ID 6008 is unexpectedly logged to the System event log after you shut down and restart your computer

This article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy.

↑ Back to the top

Symptoms

When you restart the computer after a program that uses the InitiateSystemShutdownEx function shuts it down automatically, the following event may be logged to the System event log:
Event ID: 6008

Source: Event Log
Type: Error
Description:
The previous system shutdown at Time on
Date was unexpected.

↑ Back to the top

Cause

This problem may occur if both of the following conditions are true:
  • The computer is locked or is configured with a password-protected screensaver.
  • The shutdown operation is initiated automatically by a program that uses the InitiateSystemShutdownEx function with the force flag.

    For example, you use the Remote Shutdown tool (Shutdown.exe) from the Microsoft Windows 2000 Resource Kit to force a shut down of the computer from a remote computer or you schedule a shutdown of the local computer by using Shutdown.exe in combination with the at command or Task Scheduler.
In this situation, the Event Log service is not notified about the shutdown event, and as a result, the shutdown operation is incorrectly considered by the Event Log service as an unexpected event.

↑ Back to the top

Resolution

Hotfix information

A supported feature that modifies the default behavior of the product is available from Microsoft. However, this feature is intended to modify only the behavior that this article describes. Apply this feature only to systems that specifically require it.

If the feature is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the feature.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific feature. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the feature is available. If you do not see your language, it is because the feature is not available for that language.The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

   Date         Time   Version             Size   File name
   --------------------------------------------------------------
   15-Aug-2002  08:34  5.0.2195.5265      42,256  Basesrv.dll
   15-Aug-2002  08:34  5.0.2195.5907     222,992  Gdi32.dll
   15-Aug-2002  08:34  5.0.2195.6011     708,880  Kernel32.dll
   15-Aug-2002  08:34  5.0.2195.4733     332,560  Msgina.dll
   15-Aug-2002  08:34  5.0.2195.6000     379,664  User32.dll
   15-Aug-2002  08:34  5.0.2195.5968     369,936  Userenv.dll
   08-Aug-2002  15:23  5.0.2195.6003   1,642,416  Win32k.sys
   15-Aug-2002  08:30  5.0.2195.6013     179,472  Winlogon.exe
   15-Aug-2002  08:34  5.0.2195.5935     243,472  Winsrv.dll

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

More Information

For more information about how to use the Remote Shutdown tool (Shutdown.exe) to shut down shut down and restart a local or remote Windows 2000-based computer, click the following article number to view the article in the Microsoft Knowledge Base:

317371 How to use the Remote Shutdown tool to shut down and restart a computer in Windows 2000

For more information about how to install multiple hotfixes while only restarting one time, click the following article number to view the article in the Microsoft Knowledge Base:

296861 How to install multiple Windows updates or hotfixes with only one reboot

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

883635 You may experience an abnormal shutdown of your Windows 2000 Server-based computer after the Windows logon screen saver starts

↑ Back to the top

Keywords: qfekb, kbwin2000sp4fix, kbwin2000presp4fix, kbfix, kbqfe, kbwin2ksp4fix, kb, kbhotfixserver, kbautohotfix, kbbug

↑ Back to the top

Article Info
Article ID : 326564
Revision : 3
Created on : 4/17/2018
Published on : 4/17/2018
Exists online : False
Views : 137