Improper Shutdown Occurrence Is Reported in Event Viewer

View products that this article applies to.

This article was previously published under Q241840

Expand all | Collapse all

SYMPTOMS

When you restart a Windows NT-based computer after it is improperly shut down, the following error message may appear in the system log in Event Viewer:

Event ID: 6008
Source: Event Log
Description: The previous system shutdown at time on date was unexpected.

Back to the top

CAUSE

A remote shutdown problem using the InitiateSystemShutdown function was fixed in Windows NT 4.0, Terminal Server Edition, Service Pack 4 (SP4). This fix caused this problem.

Back to the top

To resolve this problem, obtain the latest service pack for Windows NT Server version 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

152734 (http://support.microsoft.com/kb/152734/EN-US/ ) How to Obtain the Latest Windows NT 4.0 Service Pack

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows NT Server version 4.0, Terminal Server Edition Service Pack 6.

Back to the top

MORE INFORMATION

This fix was created from a similar fix made in Windows NT 4.0. For additional information about Winlogon.exe, please see the following article in the Microsoft Knowledge Base:

236949 (http://support.microsoft.com/kb/236949/EN-US/ ) Improper Shutdown Occurrence Is Reported in the Event Viewer

Back to the top