How to troubleshoot dirty shutdown cause as seen by Shutdown Event Tracker at first logon after startup
I am looking for suggestions on troubleshooting a dirty shutdown situation. After boot up, at first logon the Shutdown Event Tracker pops up asking why the computer shut down unexpectedly. In the System event log, EventID 6008 is logged.
It is being caused by something installed on my systems. The issue is OS independent, happening on both 2003 and 2008 OS versions. Instead of turning off third party services & apps one at a time, it would be ideal to gather some information
similar to the steps for resolving an application hang or from a crash dump; I'm stumped on how to collect any info since this occurs only at shutdown so any monitoring tools would also be terminated at the same time.
March 28th, 2011 11:32pm
Any chance you have BES installed (Blackberry Enterprise Server). It is known to cause this problem, and currently no known fix.Rob Williams
Free Windows Admin Tool Kit Click here and download it now
March 29th, 2011 5:33am
Nope, it's not BES.
March 29th, 2011 9:25am
Hi,
Though you mentioned you do not would like to try the "turn off one at a time" steps, I still consider that Clean Boot is a good way to troubleshoot this issue especially if it is caused by third party program.
First you need to check whether issue still exists after turn off the computer in Clean Boot Mode. If not, then it is caused by the items we disabled in MSCONFIG. Then instead of turn on one item at a time, you can turn on half of items at a time. This can
help you speed up the narrow down process.Shaon Shan |TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tngfb@microsoft.com
Free Windows Admin Tool Kit Click here and download it now
March 29th, 2011 9:03pm
Right - I'm familiar with these steps, which is not what I'm looking for.
April 8th, 2011 8:48am