Debugging windows standby issue

Posted on 2008-11-09
Last Modified: 2013-12-04

I have a following issue: one of processes in the system, is running a thread, which sets SetThreadExecutionState to ES_SYSTEM_REQUIRED. This prevents system from entering standby. I've disabled all custom software, and most of unneeded services/drivers, and it still happens. It happens only if there is network connection active.

I need a way to debug and find out which thread does this. If I could use SoftIce, i could set breakpoint on SetThreadExecutonState, but SoftIce does not work on XP SP3. I tried to use Syser, but couldn't get it to work.

I'm open for all suggestions.
Question by:QQ
    LVL 9

    Expert Comment

    There is this place to look for a posible solution:

    LVL 9

    Expert Comment

    For example, something to check:

    OpenGL Screen Saver Prevents Power Management Standby Mode

    When you configure your computer to use an OpenGL screen saver and the System Standby feature in Advanced Power Management (APM), your computer may not start the Standby mode.  This issue can occur if the OpenGL screen saver starts before the time you configured for the Standby mode to start has elapsed.

    LVL 9

    Expert Comment

    The Computer Cannot Enter Standby or Hibernate If a Direct3D-Based Screen Saver Is Running

    Microsoft has released a new update for Windows XP, which addresses a rather small flaw that may prevent the computer from entering standby or hibernation mode if a Direct3D-based screen saver is running. Despite replacing two DirectX libraries and all the 3D screen savers that have been shipped with Windows XP, this update does also replace the winlogon.exe with an updated build.  Download here:


    Author Comment

    Hi guys,

    thanks for all the links.

    I have no screensaver enabled.

    And the problem is caused exactly by ES_SYSTEM_REQUIRED flag being set.

    I have read the first link, but I didn't see anything that could help me..

    Accepted Solution

    I found the issue - it was caused by someone connecting to the computer through netbios file sharing.

    Admins: You can close the question. I would like points refunded.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Suggested Solutions

    Entering a date in Microsoft Access can be tricky. A typo can cause month and day to be shuffled, entering the day only causes an error, as does entering, say, day 31 in June. This article shows how an inputmask supported by code can help the user a…
    Since upgrading to Office 2013 or higher installing the Smart Indenter addin will fail. This article will explain how to install it so it will work regardless of the Office version installed.
    In this fourth video of the Xpdf series, we discuss and demonstrate the PDFinfo utility, which retrieves the contents of a PDF's Info Dictionary, as well as some other information, including the page count. We show how to isolate the page count in a…
    This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA.…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now