Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 119
  • Last Modified:

VMs with 1074 events and mysterious power off

Environment is Vmware hosts running 400 VMs (windows 7) and Citrix XenDesktop so users can connect to their VMs thru a browser.  

I have noticed that a lot of the VMs are power off at different times and I don't know why.  The logs are riddled with 1074 events initiated by winlogon.exe and explorer.exe on behalf of the user who is logged on.  The odd one is:

The process C:\Windows\system32\winlogon.exe (CDP-COSU114) has initiated the power off of computer CDP-COSU114 on behalf of user ABC_domain\Faith_Jones for the following reason: No title for this reason could be found
 Reason Code: 0x500ff
 Shutdown Type: power off
 Comment:

We have confirmed that the Citrix Controller is NOT doing this.  

We have confirmed that the Vmware hosts are not doing this.

I'm looking for other places to look for dead bodies.  Anyone have any thoughts on this?

Thanks

Cliff
0
crp0499
Asked:
crp0499
  • 2
  • 2
1 Solution
 
asavenerCommented:
Likely that folks are hitting the shutdown option when trying to log off, if they're getting full desktops.

Create a group policy that removes the power off option except for designated admins.
0
 
crp0499CEOAuthor Commented:
We tried that, but removing the power off means no restart either and they need to be able to restart.
0
 
asavenerCommented:
Can you give them a reboot option on the portal, but not inside the OS?
0
 
crp0499CEOAuthor Commented:
Inside the portal?  what do you mean?
0
 
Tony JLead Technical ArchitectCommented:
Well assuming it's users just hitting the power off button in their VDI desktop, why not just change that to reboot?

Win 7 introduced this as a GPO:

User Configuration -> Administrative Templates -> Start Menu and Taskbar -> Change Start Menu power button

You can then set the default option here to Restart. Granted this doesn't stop them shutting the machine down if they really want to, but it does minimise the chances as they have to think about what they're doing.

Alternatively, you could use GPO to remove the option to shutdown, then deliver a shortcut to shutdown /r /f /t 0 and call it "Restart machine".

I do accept that neither of these are the most seamless options.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now