I've been racking my head for a while now trying to figure out why I'm getting this event ID stating tha tI tried to shutdown the server and it failed. See, I've not tried to shutdown the server at all. I run 2 WIN2k3R2SP2 servers as terminal servers in a cluster with NLB. These machines are in a sensative environment so I can not cut and paste the event log. But a tthe end of this post is what I get. But I've not tried at all to shut down the server. I go into it periodically to check on the status of accounts and such and log off. I could understand a possible fat finger one time but so far today I have 2 attempts to shut down the server and yesterday one, when I NEVER TRIED TO SHUT IT DOWN... I found another guy with the same problem through Google but there was no resolution. Can anyone tell me why this happens, only on this server and so infrequently? I'm afriad when it comes time to have the guys in IA audit I'll have to explain something that I never tried to do... Goggle Ref: http://www.eggheadcafe.com/software/aspnet/29912656/event-1073.aspx Thanks, Mike Event Type: Warning Event Source: USER32 Event Category: None Event ID: 1073 Date: 2/7/2007 Time: 11:55:44 AM User: DOMAIN\Administrator Computer: xyz Description: The attempt by user DOMAIN\administrator to restart/shutdown computer xyz failed

Possibly some script or faulty power button. Regards, Dave Patrick .... Microsoft Certified Professional -Microsoft MVP [Windows]

Hi Mike, There are a couple of things that are going on here. First, check out this MSDN article: http://www.microsoft.com/Downloads/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en You could be experiencing an issue related to the user profile hive. Also, there is a little extra information about the event you're seeing here: http://www.microsoft.com/technet/support/ee/transform.aspx?ProdName=Windows+Operating+System&ProdVer=5.2&EvtID=1073&EvtSrc=User32&LCID=1033 Brent HU, TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks Brent for he information. I'll check that out today. Mike Long

Hi Mike, I hope to hear from you at your earliest convenience. Thanks, Brent Hu, TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I had this problem when I had notepad opened and not saved. When I tried to logoff, it prompted if I wanted to save, not save or cancel. I clicked on cancel and the event 1073 was generated on the server. So, I just tried to logoff and cancelled. But the 1073 event was generated. To workaround it you may set the following keys: AutoEndTasks = 1 http://technet.microsoft.com/en-us/library/cc978604.aspx HungAppTimeout = put a very low value http://technet.microsoft.com/en-us/library/cc978614.aspx WaitToKillAppTimeout = put a very low value. http://technet.microsoft.com/en-us/library/cc978624.aspx After setting these entries, you must logoff and logon again to the settings take effect. Daniel