Solved

Can't find reason for Windows 7 Auto Shutdown

Posted on 2012-04-03
13
560 Views
Last Modified: 2012-04-10
Last year I somehow created an automatic shurdown at 11:30 p.m. for a client's Win 7 Pro PC, and now I can't remember what I did!

I need to stop it from shutting down automatically at the customer's request. I looked in the task scheduler, where I would have thought I would have created a call to shutdown.exe, but no such task exists.

So my bottom line is that I can't figure out how to undo my own auto shutdown. Crazy, I know! Can anyone tell me what to look for?

Thanks!
0
Comment
Question by:bricar1
  • 7
  • 3
  • 3
13 Comments
 
LVL 59

Expert Comment

by:LeeTutor
Comment Utility
0
 
LVL 59

Expert Comment

by:LeeTutor
Comment Utility
Or could you have installed this program:

http://download.cnet.com/Auto-Shutdown/3000-2381_4-10640426.html?tag=contentBody;pop
Auto Shutdown
0
 

Author Comment

by:bricar1
Comment Utility
No, neither of these were done. Just to make sure I did a search for all .bat files.

I'm baffled by this. Again, normally I would do it in the task scheduler but I just don't see the task listed. Same user, admin privileges.

Any other ideas, anybody?
0
 
LVL 59

Expert Comment

by:LeeTutor
Comment Utility
0
 

Author Comment

by:bricar1
Comment Utility
No, it wasn't a program.
0
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
Comment Utility
Hi.

This should be easy. If you are perfectly sure that it shuts down at 11:30 every day, then it's a scheduler and nothing else. So first check if there are other 3rd party schedulers active. You could simply look at the processes in task manager. If there is no other scheduler active, make sure, that the shutdown is not triggered from a remote computer - simply disconnect the network a few minutes before. If it still shuts down, it has to be the local scheduler. So start cmd.exe elevated by rightclicking it and selecting "run as administrator" and run the command
schtasks |findstr 11:30 

Open in new window

to see whether you simply overlooked it.

If that does not help, use procmon to monitor what's going on - but you have to configure procmon first: set it to use a backing file (hit ctrl+B) instead of the pagefile, so that your recordings are not lost when the computer is beeing shut down. Next time you open procmon, pay attention not to overwrite that file but simply start procmon and open the latest backing file and analyse - good luck in finding it.

So just for the method:
1) disconnect the network
2) make sure that no 3rd parfty schedulers are started
3) (elevated command) schtasks |findstr 11:30
4) start procmon with backing file
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:bricar1
Comment Utility
I'll try your suggestions.

Interestingly, there is a "sister" machine right next to that one (same OS and same basic setup) that DOES INDEED show the "Shutdown" task that I created for that one at 11:00 p.m.

So I have one computer that shuts down at 11:30 and does not list the task, and another computer right next to it (they are in a 2-computer workgroup) that shuts down at 11:00 and DOES show the task!

I decided to disable the task on the 2nd machine.
0
 

Author Comment

by:bricar1
Comment Utility
Just did the search and nothing came up for 11:30, tried again with 11 and two unrelated tasks came up.

So the indication is that the task does not exist!

I need to try to stop the PC from shutting down tonight (because the client just went away on vacation and wants to access it with Splashtop Remote on their iPad - Tested out perfectly yesterday), and if it shuts down I might not be able to restart it remotely (only if BIOS allows).

I was thinking of trying to bypass the shutdown in one of two ways:

1) Rename "shutdown.exe" to prevent it from running.
2) Create a new task (if possible) to RE-START (instead of shut down) at 11:28. This could conceivably prevent the shutdown command from having any effect.

In other words, the computer would be engaged in the process of rebooting while the "shutdown" command was supposed to execute, thereby rendering it ineffective.

Any thoughts on those possibilities?
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 500 total points
Comment Utility
1) possible if you circumvent windows resource protection http://msdn.microsoft.com/en-us/library/windows/desktop/aa382503(v=vs.85).aspx there are google hints on how to. However there could be other shutdown methods involved.
2) try it, could work if the server is slow on starting. I would use  11:29:45. However, if the task or whatever it is, is setup to rerun missed starts, that won't work.

So 3) a scheduled restart using a wake on lan tool like WOL would be better just to make sure it's available.
0
 

Author Comment

by:bricar1
Comment Utility
It's not a server, rather a Windows 7 machine.

This attempt at a fix is a one shot deal because the client went away on vacation today and the machine is scheduled for a shutdown at 11:30. Once it shuts down I will have no access to it until she returns in a week. She was hoping to be able to access this computer via her iPad remotely, and that will be impossible if the machine shuts down.

I suppose I could knock the clock back in order to buy some time.

Not sure if Wake on Lan is enabled in BIOS, and can't check because I have no access to the site.
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 500 total points
Comment Utility
Wait - try to modify who is allowed to shutdown the system. Simply remove everyone. http://technet.microsoft.com/en-us/library/cc759478(v=ws.10).aspx
0
 

Author Comment

by:bricar1
Comment Utility
I set up a test run on my Win 7 box here. I set up a hard time for shutdown and tested it. Then I set up a restart one minute before in order to interrupt the shutdown. It worked. I got a simple reboot and there was no problem. I just implemented it on the client's machine remotely, and I will report back tomorrow whether it worked or not. Fingers crossed. Thanks for the help! More tomorrow...
0
 

Author Comment

by:bricar1
Comment Utility
McKnife,

All good idea. Points awarded, but I ended up having to implement that automatic reboot in order to overlap the shutdown. It works fine. I'll look into it more when I end up on-site. Thanks for the help!
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Hi Friends, These registry tweaks will help you optimizing your Windows 7 system for any VDI. This will improve the machine performanance and can be used on normal systems also. These are few registry tweaks which will add value by enhancing the …
The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now