Share via

Power off of computer 'Hostname' on behalf of user NT AUTHORITY\SYSTEM

  • Article

Question

Thursday, January 25, 2018 10:35 AM

Hi

Has anyone experienced and know why 'Windows 10 Enterprise 2016 LTSB build 14393.2007' power off computer on behalf of user 'NT AUTHORITY\SYSTEM'?

Event Logs

  1. ID. 109 - Kernel-Power: The kernel power manager has initiated a shutdown transition. Shutdown Reason: Button or Lid
  2. ID. 1074 - User32: The process C:\windows\system32\winlogon.exe (hostname) has initiated the power off of computer hostname on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found  Reason Code: 0x500ff  Shutdown Type: power off  Comment.
  3. ID. 1 - Kerne-General: The system time has changed to ‎2018‎-‎01‎-‎24T04:58:27.751000000Z from ‎2018‎-‎01‎-‎24T04:58:27.752062400Z. Change Reason: An application or system component changed the time.
  4. ID. 42 - Kernel-Power: The system is entering sleep. Sleep Reason: Application API
  5. ID. 8033 BROWSER: The browser has forced an election on network \Device\NetBT_Tcpip_{C2E2154B-D916-4934-B56D-8955B5AE326E} because a master browser was stopped.

Regards

Frederick

All replies (2)

Friday, January 26, 2018 9:53 AM ✅Answered

Hi Frederick,

Did you performed any actions before the issue occur?

What's the device model? 

Is the computer joined the domain? Do you log on with the domain profile or local profile? Please test the another profile and see if the issue occurs.

As some time hardware corruption could cause this issue, please try to check the power supply measure (witch with another adapters or change to button) to check the issue again.

Please try to check if the issue occur with other user account.

Here is a similar issue you could visit to:

On a computer running Windows Vista, Windows 7, Windows Server 2008 and Windows Server 2008 R2 an incorrect shutdown reason code written to SEL on user initiated shutdown

Bests,

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

Wednesday, February 7, 2018 9:07 AM

Hi Joy-Qiao

Thanks for your quick reply and suggestions, I'm sorry I haven't replied earlier.
Even though I haven't found a clear cause for the mysterious shutdown and because the computer has worked since. I think the PSU has a problem as you mention, so I will change it out to a new one.

Thanks for your help

Regards

Frederick