Windows 2000 Pro delayed or lack of shutdown

Hi hiloguy,

have you scanned for malware and that kind of fun?

also what does the event viewer have to say about this

when you shutdown and the fan boosts up, are you still able to bring up the task manager and find what process is going crazy?

Cheers!

Can be caused by resource conflicts or a bad driver, or a problem with a service not stopping. Have a look at these two regarding troubleshooting:
http://support.microsoft.com/?kbid=266169
http://support.microsoft.com/?kbid=315409

Checking the event logs as suggested by Jay__Jay70 should reveal more details that will help to diagnose actual device, driver or service that is causing the issue.

Thanks all,

Yes, ran Adaware/Spybot, no problems.  

Regarding the event logs/event viewer, do you mean the "services and applications" feature under computer management?   If so, then per the support documents above, I need to troubleshoot drivers and services to figure out where the conflict might be?  To do this, I save a copy of services/drivers while running normally and while running in safe mode and compare?  Troubleshoot by uninstalling/disabling the service(s) or driver(s) that were not running in safe mode?  Please advise if true, because I guess I have some work to do.  Oh man, I was hoping for an easy fix.  

Thank you, please advise if any short cuts that I might try.  

As for Event logs referring to Errors in the event viewer, in computer management, or, simply enter   eventvwr    in the "Run" box. Then in the event viewer look under Application and System logs. Look for any red stop errors. When you find them (only concern yourself with relatively current ones, since the problem began) list the "Event ID" and the "Source" name such as;  1054  Uservenv.  Then perhaps we can give you a hand sorting out the problem.

Thanks.  Following is info I pulled from the logs:  

System Log:

7031 Service Control Manager:  The InCD Helper service terminated unexpectedly.  It has done this 1 time(s).  The following action will be taken in 0 milliseconds:  No action.  

116 Removable Storage:  RSM could not identify the media in drive 0 of library Sony DVD RW DW-22A.  An error was encountered while attempting to read data from the media.  

11 Disk:  The driver detected a controller error on \Device\Harddisk2\DR4

Application Log:

1000 Userenv:  Windows cannot upload your registry class file.  If you have a roaming profile, your settings are not replicated.  contact your adminstrator.  DETAIL-Access is denied, Build number {{2195}}

Does anything pop up as unusual?  Appreciate the help!

A few possibilities:

7031 Service Control Manager:
This error is often a result of other problems, though often related to the print spooler. You might want to stop and re-start the spooler service before shut down. It might help to indicate there is a problem.

116 Removable storage
Can be caused by blank CD in the tray during shut down. Can be problems with attached USB drives or memory sticks. If you have any temporarily remove them
Can also be problems with Easy CD creator with Media player 7. See:
http://support.microsoft.com/default.aspx?scid=kb;en-us;269381

11 Disk
Can be caused by problems with SCSI drive. I am assuming you do not have SCSI's so this wouldn't be the case. Can also be problems with attached USB drives or memory sticks. If you have any temporarily remove them. Can also be a bad drive cable, though I don't believe this would corresponds to the slow shut down.

I would try booting to safe mode. See if you have the same problem there. If not you ca b sure it is driver/device related.
Another possibility, MSConfig is not included in Windows 2000 but you can use the XP version (as per http://www.jsifaq.com/subI/tip4200/rh4221.htm ) With that you could disable as many services or applications as possible from starting at boot. See if the problem disappears, and if so start re-enabling until you find the culprit. Good chance it is related to your CD/DVD unit. Updated drivers may resolve.

Thanks RobWill,

I will have to troubleshoot later, when I am home to access my system.  You've been a great help, also with questions in the past.  

Thanks hilogug for the complement, hopefully we can be of some help here as well.
Good luck, and let us know how you make out. Jay_Jay70, is excellent with this "stuff" and 1/2 way around the world in a different time zone, so between us you can probably get 24 hour support out of us.  :-)
--Rob

ah Thanks Rob :)      

http://www.sysinternals.com/Utilities/ProcessExplorer.html

this is a peice of software which will expand on any processes that are running - kind of like task manager on drugs..... can be very handy for checking what services are causing grief on your machine

in regards to your error messages Rob has already dealt with them :)

just out of curiosity how often does the userenv error occur? and do you notice any issues when you boot your machined up? any errors on restart??

Thanks all.  Booted in safe mode, no problem on shut down.  Then booted normally and did not start up any software or other hardware and NO problem on shut down.  So I guess services/applications starting up at boot can be eliminated.  

Usually my computer is left on for several days at a time (with Belkin UPS/voltage regulator).  I use Nero for burning DVDs/media stuff, and I'd bet this is the problem.  Possibly InCD (Nero's optical driver?).  So, I will maybe try and use Nero to burn something, or recode something and see what happens.  The only other thing I really do on the computer is word processing, general internet access/downloads.    

Currently, no external drives connected to the system (although I do have a Lacie 500GB HD and thumb drive that is occassionally connected).  Did not try to shut down with external drives connected.

Did no print anything prior to working shutdown.

Also, no system log errors (red Xs) since 03/16/06, which was the service control manager error.  No application log errors since 03/17/06, which was the userenv error.  Last userenv error prior to 03/17/06 was 01/19/06.  

Regarding the sysinternals utility, when should this be run?        

Any other ideas on what to troubleshoot?  Update driver/firmware on DVD drive (I'll search)?  Thanks.  

hiloguy,  you mentioned Nero. There were shutdown issues with version 5 & 6 of Nero, I believe it was the INCD part of the software, and the application would hang on shutdown. I just did a search and couldn't find the related articles, but you might want to try uninstalling at least the INCD part or disable with MSConfig, if the problem persist just as one step to try to isolate the problem.
--Rob

morning all :)

i know the issue which rob was getting at with the INCD utility but as far as i am aware this was with xp, and the solution was to run it in 2000 compatibility mode (i think)

it is certainly seeming to be linked to an app that you are running throughout the day if you are saying that booting, leaving it running, not opening anything and then restarting give you no errors.

do you run any of the UPS software on the machine, i have seen this software do all sorts of interesting things to both 2000 and xp machines

that process explorer can be run at any time, i would leave the machine on for an hour or two with that running and see what happens, how long have you left the machine completely idle and then shut down?

run regedit
check     HKLM\software\ms\windows\currentversion\run

if you locate incd in there then deffinitely get rid of it and see how you go      also check your start-programs-startup folder

Thanks all,

Sorry, have not had a chance to sit down at this machine.  

No UPS software running.  

I'll try the process explorer thing during the day, when I'm at work.  What am I looking for?    

Regarding Regedit, how do I start/run the check?  

The only thing in my start up folder is hotsync for my PDA and the SIS utility for the motherboard.  

I did run Nero to decode a DVD.  Upon shut down, it paused for maybe 20 seconds, but it did shut down.  Usually the pause is much longer.  But usually my computer is on for days at a time.  I truly think that if I do not run Nero/InCD then no problems.  But I think I need InCD to run Nero?    

Thanks.  I'll probably get back to this machine later tonight (0737 our time now).  

with regedit youhave to navigate down to that key

let me know how you go

You mentioned the PDA. Long shot but it could cause a delay if in the cradle at the time of shut down.

>>"But I think I need InCD to run Nero?"
You don't need it to burn CD's or use Nero but you need it for drag an drop functions and I believe for formatting re-writables.

Thanks all,

Checked Regedit.  Yes, InCD is in there.  I did not delete yet.  Just worried that it will affect function of Nero?

Upon coming home from work, (computer not used during entire day/since restart), shut down was delayed for 20-30 seconds, but system did shut down.  

Ran Process Explorer throught the entire day.  Not sure exactly what I was looking for.  System Idle Process near 100%.  The Sygate firewall and Winmgmt.exe popped up once inawhile as a process under the CPU collumn.  Acronis TrueImage (disc imaging), Atomic.exe (auto time clock), and HistoryKill (privacy guard) were highlighted in purple.  

PDA is not usually in the cradle.  No external drives connected, nothing in the DVD drive.

You folks have gone above and beyond.  Any final ideas on this problem?  Should I just go into Regedit and delete InCD from HKLM\software\ms\windows\currentversion\run?  Maybe I just need to restart/shutdown more often?  Does this problem have any other impact on system performance, aside from the fact that occassionally I need to hold the power button to get my system to shut down?  Any other ideas before we give it a rest on this problem (unless, this problem truly has affect on future system performance).  

Your efforts have been much appreciated.  

Thanks all,

I will try to disable some of the start up items.  

Rob, per the web site you referenced:
"Microsoft did NOT include MSConfig in Windows 2000.  In tip 2620, I introduced StartUpCPL as a freeware alternative.
Microsoft did include MSConfig in Windows XP.You can run MSConfig in Windows 2000 by using the Windows XP version. Copy the following files to a folder in your path:
%SystemRoot%\PCHEALTH\HELPCTR\Binaries\msconfig.exe
%SystemRoot%\Help\msconfig.chm

Are you advising to try StartUpCPL or using MSConfig?  How do I "copy the following files to a folder in your path"?  

I'll also try the Windows system file checker.  I'll let you all know what happens.  Appreciated.  

I have never used the StartUpCPL app, but I would trust anything from that site. However, for consistency best bet would be MSConfig, I would say.
--Rob

Hello all,

I think we solved the problem.  I tried out StartUpCPL and unchecked a bunch of items that I did not think needed to be started up, in the following folders [Startup (user), Startup (common), HKLM/Run, HKCU/Run].    

Also did the Windows system file checker, which stated some dll files(?) were needed?

Did all this 12 hours ago, burned a DVD, printed a document.  Shut down this morning (12 hours later) went quick and smooth.  

Final questions.  Did I cause any problems by possibly unchecking startup items in the folders above?  Is the Windows system file checker the same as booting from the Win2000 Pro OS disk and running a disk repair?  

Hopefully all goes well.  Thanks again.      

>>"Did I cause any problems by possibly unchecking startup items in the folders above? "
Depends on what you un-checked.  :-)  
Generally no system critical services can be un-checked, but you might find some services or applications you have added may not work. You can go back in, and check them again. Usually you would do as you have done and then over the next few days re-enable those items you un-checked one at a time, and see when it breaks again, thus narrowing down the problematic service or application. You can always Goggle for a service name to see what it does.

>>"Is the Windows system file checker the same as booting from the Win2000 Pro OS disk and running a disk repair? " 
As I understand it similar but not the same., assuming you are referring to a repair install. The SFC is less intrusive. A repair install can overwrite some files or registry entries causing some add-ons not to work. That is less likely to happen with SFC. It simply compares files and replaces any system files that are missing or corrupted.....in theory.

Thanks hiloguy , and good luck.
--Rob

hiloguy,

nothing in that \run key is crucial to windows, windows keys are stored somehwere completely different and cant be removed easily - that \run key is for 3rd party appz and you cant do to much damage removing them - you just have to start your pograms manually. Only things i ever have sitting in there are hotkey utils for notebooks.

Great news.  Great job you guys!  Thanks for everything.  

thats a pleasure mate, all the best

cheers Rob, nice working with you again

Good to hear hiloguy.
Good to 'see' you too James.
--Rob