RE: Can`t logoff from Server

Hello,

Thanks for posting!

From your post, my understanding on this issue is: When you try to logoff
from the server there is a event ID 1073 shown in the event log file. If I
have misunderstood your concern please let me know.

Based on the Event Source and Event ID, I found the following information
from TechNet (http://www.microsoft.com/technet/support/eventserrors.mspx)as
reference:

Details
Product: Windows Operating System
Event ID: 1073
Source: User32
Version: 5.2
Symbolic Name: WARNING_EW_SHUTDOWN_CANCELLED
Message: The attempt by user %2 to restart/shutdown computer %1 failed

Explanation:
This event is written when a user or application attempts, but fails, to
restart or shut down the computer by using either the graphical user
interface (GUI) or the shutdown command.

User Action:
If you still want to restart or shut down the computer, save any open
files, close any applications that are running, and then you can:

Use either the graphical user interface (GUI) or the shutdown command again.
Press CTRL+ALT+DELETE, and then while pressing CTRL, click Shut Down to
force a shutdown.
Press the reset or power button on the computer.

Based on my research the issue may be related to third-party
applications/services. I suggest you perform the following tests to isolate
the issue.

Suggestion 1: Please boot the system into Safe Mode environment and test
the issue.

To troubleshoot startup problems in Safe mode, follow these steps:
1. Click Start, and then click Shut Down.
2. Click Restart, and then click OK.
3. When you see the message Please select the operating system to start,
press F8.
4. In Windows Advanced Option Menu, use the arrow keys to select Safe Mode,
and then press ENTER.

Note: NUM LOCK must be off before the arrow keys on the numeric keypad will
function.
5. If you are running other operating systems on the computer, click
Microsoft Windows Server 2003 on the list that is displayed, and then press
ENTER.

Suggestion 2: I suggest you perform a Clean Boot.

A Clean Boot will allow us to isolate any programs that are loading at
startup that may be causing a conflict with other device drivers or
programs that are installed in your computer.

1. Run MSCONFIG.EXE. (MSCONFIG is a built-in tool for Windows XP\2003
systems. For Windows 2000 systems, you can use the one attached in this
post.)
2. In the Services tab, click "Hide All Microsoft Services" and click
"Disable All".
3. In the Startup tab, click "Disable All". Click OK. (This will
temporarily prevent third-party programs from running automatically during
start-up.)
4. Restart the computer.

If the problem does not occur, it indicates that the problem is related to
one application or service we have disabled. You can use the MSCONFIG tool
again to re-enable the disabled item one by one to find out the culprit.

Hope the information helps. If there is anything that is unclear please
feel free to let me know.

Best Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can`t logoff from Server
| thread-index: AcY93KQKBsvGJ6Z6TrqXVHog7AGO1A==
| X-WBNR-Posting-Host: 212.79.172.242
| From: "=?Utf-8?B?UmV4IEtyZW1lcg==?=" <rex@xxxxxxxxxxxxxx>
| Subject: Can`t logoff from Server
| Date: Thu, 2 Mar 2006 01:35:28 -0800
| Lines: 18
| Message-ID: <64EDA78F-C6B8-4B81-AA80-351484CD2690@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.general
| Path: TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.general:90202
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Hi,
|
| when i try to logoff from the server there is the event shown below:
|
| Event Type: Warning
| Event Source: USER32
| Event Category: None
| Event ID: 1073
| Date: 02.03.2006
| Time: 10:11:58
| User: Kremer
| Computer: Server1
| Description:
| The attempt by user sage\Kremer to restart/shutdown computer Server1
failed
|
| Has anybody seen this behavior?
|
| regards
|

.