computer restarted by WMIPrvse.exe in the night automaticlly

Question

_{Friday, January 17, 2020 6:30 AM}

windows log showing below info. how to identity which software causing the reboot?

"The process C:\WINDOWS\system32\wbem\wmiprvse.exe  has initiated the restart of computer FEI-18-0390 on behalf of user NT AUTHORITY\SYSTEM for the following reason: No title for this reason could be found"

Reason Code: 0x80070015

Shutdown Type: restart

Comment:

All replies (2)

_{Monday, January 20, 2020 7:10 AM}

Hi,

WmiPrvSE.exe is Windows Management Instrumentation (WMI) Provider Host process. 

Is there any change before such problem happens? Including driver installation/update, configuration change and etc. If so, try to undo the change and check the result.

Besides, please run “sfc /scannow” to check/repair system files.

If problem persists, try to find the application/process which call this process:

1. Open Event Viewer -> Applications and Service Logs -> Microsoft -> Windows -> WMI-Activity -> Operational
2. Try to find Error event and check section ClientProcessId via event general information.
3. Then, find the process name via Task Manager using the PID information. 

Best Regards,
Eve Wang

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Thursday, January 23, 2020 8:11 AM}

Hi,

How things are going there on this issue?

Please let me know if you would like further assistance.

Best Regards,
Eve Wang 

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].