My computer restarts randomly. Looking at the events, I found this is caused by user32
The process C:\WINDOWS\system32\shutdown.exe (DESKTOP-442H1OG) has initiated the restart of computer DESKTOP-442H1OG on behalf of user DESKTOP-442H1OG\light for the following reason: No title for this reason could be found
Reason Code: 0x800000ff
Shutdown Type: restart
Comment:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<Provider Name="User32" Guid="{b0aa8734-56f7-41cc-b2f4-de228e98b946}" EventSourceName="User32" />
<EventID Qualifiers="32768">1074</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2021-04-11T22:46:39.8986715Z" />
<EventRecordID>15308</EventRecordID>
<Correlation />
<Execution ProcessID="772" ThreadID="1548" />
<Channel>System</Channel>
<Computer>DESKTOP-442H1OG</Computer>
<Security UserID="S-1-5-21-1258443999-3138952152-1899505544-1001" />
</System>
<Data Name="param1">C:\WINDOWS\system32\shutdown.exe (DESKTOP-442H1OG)</Data>
<Data Name="param2">DESKTOP-442H1OG</Data>
<Data Name="param3">No title for this reason could be found</Data>
<Data Name="param4">0x800000ff</Data>
<Data Name="param5">restart</Data>
<Data Name="param6" />
<Data Name="param7">DESKTOP-442H1OG\light</Data>
</EventData>
</Event>
I would like to understand
(1) How to find the reason for the restart
(2) How to prevent this from happening
Any help will be appreciated.
Update: I assembled a new workstation with another set of hardware. I still experienced the same problem.
The thing that makes me frustrated is that Windows did NOT log down the specific reason/process/thread that triggered the shutdown, which made troubleshooting almost impossible. Besides, both community and customer service did not provide any solution except pasting links of random articles on the internet and "reinstall".
Finally I found the solution by myself: Download from here and do a clean install with formatted disk, it currently runs for 2 weeks without a single restart.
<link removed by Moderator>