Article ID: 326564
NoticeThis article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center
(http://support.microsoft.com/win2000)is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy
When you restart the computer after a program that uses the InitiateSystemShutdownEx function shuts it down automatically, the following event may be logged to the System event log:
Event ID: 6008
Source: Event Log
The previous system shutdown at Time on Date was unexpected.
This problem may occur if both of the following conditions are true:
Hotfix informationA supported feature that modifies the default behavior of the product is available from Microsoft. However, this feature is intended to modify only the behavior that this article describes. Apply this feature only to systems that specifically require it.
If the feature is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the feature.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific feature. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the feature is available. If you do not see your language, it is because the feature is not available for that language. The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Date Time Version Size File name -------------------------------------------------------------- 15-Aug-2002 08:34 5.0.2195.5265 42,256 Basesrv.dll 15-Aug-2002 08:34 5.0.2195.5907 222,992 Gdi32.dll 15-Aug-2002 08:34 5.0.2195.6011 708,880 Kernel32.dll 15-Aug-2002 08:34 5.0.2195.4733 332,560 Msgina.dll 15-Aug-2002 08:34 5.0.2195.6000 379,664 User32.dll 15-Aug-2002 08:34 5.0.2195.5968 369,936 Userenv.dll 08-Aug-2002 15:23 5.0.2195.6003 1,642,416 Win32k.sys 15-Aug-2002 08:30 5.0.2195.6013 179,472 Winlogon.exe 15-Aug-2002 08:34 5.0.2195.5935 243,472 Winsrv.dll
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
For more information about how to use the Remote Shutdown tool (Shutdown.exe) to shut down shut down and restart a local or remote Windows 2000-based computer, click the following article number to view the article in the Microsoft Knowledge Base:
317371For more information about how to install multiple hotfixes while only restarting one time, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/317371/ )How to use the Remote Shutdown tool to shut down and restart a computer in Windows 2000
296861For more information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/296861/ )How to install multiple Windows updates or hotfixes with only one reboot
(http://support.microsoft.com/kb/883635/ )You may experience an abnormal shutdown of your Windows 2000 Server-based computer after the Windows logon screen saver starts