Did KB5005033 break my Surface Book hibernation by power button?

Loren Amelang 1 Reputation point
2021-08-24T22:22:51.517+00:00

126100-slide-to-shut-down-your-pc.jpg

"Wait until you see the message “Slide to shut down your PC”."

Has Microsoft changed how this works recently (August 2021)? I have the original Surface Book, and had never seen this screen. Mine was set to hibernate on a power button press, and it always just did.

Suddenly this week it shows this screen for a few seconds after a power button press, and then just crashes - no crash dump, nothing in the logs, just gone. Takes several long presses of the power button to recover, and the log just says "The previous system shutdown at xxx on xxx was unexpected." Sometimes it adds "The WinFsp.Launcher service terminated unexpectedly" when a reboot attempt fails.

If I set the power button to "Sleep" or "Do Nothing", it always shuts down on a button press, and doesn't crash. If I hibernate from the Win->Power->Hibernate menu item it hibernates properly.

Last update: August 10, 2021—KB5005033
Hmmm...
It includes:
Power.Settings.Button.ppkg,Not versioned,31-Jul-2021,17:56,"5,727"
Power.Settings.Control.ppkg,Not versioned,31-Jul-2021,17:55,"6,916"
Power.Settings.Graphics.ppkg,Not versioned,31-Jul-2021,17:55,"5,833"
Power.Settings.Sleep.ppkg,Not versioned,31-Jul-2021,17:55,"7,254"

Maybe they did change something? And no longer support the original Surface Book?

https://www.bleepingcomputer.com/news/microsoft/windows-10-kb5005033-and-kb5005031-cumulative-updates-released/
Says:
Microsoft fixed an issue that prevents power plans and Game Mode from working as expected

They seem to have broken mine... Wish I could remember not to use the power button to hibernate...

BTW, no relevant tags seem to be allowed, and I can't post without some, so I'm taking any I can...

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

7 answers

Sort by: Most helpful
  1. Loren Amelang 1 Reputation point
    2021-08-31T02:56:38.663+00:00

    My suspicion was correct - after hibernating successfully a few times from the Win menu and from TouchMe, the Surface Book went back to the “Slide to shut down your PC” screen for an instant, and then total death.

    I've given up on hibernation, disabled it with "powercfg -hibernate off", and set all the power config choices to act like a phone - sleep quickly when not plugged in, never hibernate or shut down.

    Despite the power button being configured to sleep, pressing it while running shuts the system down. BUT instead of instant black and no feedback, it calls up the colored startup/update screen and lists all the steps in shutting down! I don't remember ever seeing that on this machine!

    So far the sleep strategy is working... Dare I hope?

    The scary-looking WHEA errors keep happening on every boot - don't seem fatal at all...

    http://forum.asrock.com/forum_posts.asp?TID=18645&title=b560-steel-legend-whealogger-fatal-hardware-error#:~:text=%22The%20Windows%20Hardware%20Error%20Architecture,updates,%20and%20even%20overclocking.%22

    You can at least learn which Windows process is causing this error.

    In Event Viewer see the number in the "Execution ProcessID" (every reboot it is a different process ID), and then in Task Manager find that process ID.
    Right-click a process in the Details tab, and you can click "Go To Service(s)" and it will take you to the actual service running in the Services tab. It looks like my WHEAs were reported by "Diagnostic Policy Service" (DPS). Interesting.

    Yes - mine too...

    Path to executable:
    C:\WINDOWS\System32\svchost.exe -k LocalServiceNoNetwork -p

    -a---- 11/24/2020 10:47 PM 57360 svchost.exe

    http://localservicenonetwork.svchost-exe.net
    --> status on my machine
    -----
    --> Not in Services?:
    Service Short Description Windows Firewall API
    Service Full Description Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.
    Service Executable File Path c:\windows\system32\firewallapi.dll
    Service Host Launch Command C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    Service Privileges:
    SeAssignPrimaryTokenPrivilege
    SeAuditPrivilege
    SeChangeNotifyPrivilege
    SeCreateGlobalPrivilege
    SeImpersonatePrivilege
    SeIncreaseQuotaPrivilege
    Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc

    --> Not running:
    Service Short Description Performance Logs & Alerts
    Service Full Description Performance Logs and Alerts Collects performance data from local or remote computers based on preconfigured schedule parameters, then writes the data to a log or triggers an alert. If this service is stopped, performance information will not be collected. If this service is disabled, any services that explicitly depend on it will fail to start.
    Service Executable File Path c:\windows\system32\pla.dll
    Service Host Launch Command C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
    Service Privileges SeImpersonatePrivilege
    Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pla

    --> Not running:
    Service Short Description WWAN Auto Config Service
    Service Full Description This service manages mobile broadband (GSM & CDMA) data card/embedded module adapters and connections by auto-configuring the networks. It is strongly recommended that this service be kept running for best user experience of mobile broadband devices.
    Service Executable File Path c:\windows\system32\wwansvc.dll
    Service Host Launch Command C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    Service Privileges SeChangeNotifyPrivilege
    SeImpersonatePrivilege
    SeAuditPrivilege
    Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WwanSvc

    --> Running:
    Service Short Description Base Filtering Engine
    Service Full Description The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
    Service Executable File Path c:\windows\system32\bfe.dll
    Service Host Launch Command C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    Service Privileges SeAuditPrivilege
    Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE

    --> Running:
    Service Short Description WDI Diagnostic Policy Service
    Service Full Description The Diagnostic Policy Service enables problem detection, troubleshooting and resolution for Windows components. If this service is stopped, diagnostics will no longer function.
    Service Executable File Path c:\windows\system32\dps.dll
    Service Host Launch Command C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
    Service Privileges SeChangeNotifyPrivilege
    SeCreateGlobalPrivilege
    SeAssignPrimaryTokenPrivilege
    SeImpersonatePrivilege
    Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS
    -----

    These changed files from the update (which apparently were not the problem):
    Power.Settings.Button.ppkg,Not versioned,31-Jul-2021,17:56,"5,727"
    Power.Settings.Control.ppkg,Not versioned,31-Jul-2021,17:55,"6,916"
    Power.Settings.Graphics.ppkg,Not versioned,31-Jul-2021,17:55,"5,833"
    Power.Settings.Sleep.ppkg,Not versioned,31-Jul-2021,17:55,"7,254"

    Have all been changed to 11-Jun versions, accessed yesterday. But so are all the other Packages, except:
    07/23/2018 06:50 PM 5,616 Surface.Power.Policy.Adaptive.ppkg
    07/23/2018 06:50 PM 8,093 Surface.Power.Policy.Defaults.ppkg

    Seems they are all accessed on every boot?

    Do they really tinker with basic things like the power button every month?

    @Anonymous

    These groups may be your best resource to find out.
    https://answers.microsoft.com/en-us/surface/forum
    https://techcommunity.microsoft.com/t5/surface-devices/ct-p/SurfaceDevices

    Are you suggesting I copy this thread into those groups? Or just search them for new posts? Searching hasn't found anything close.

    mail alerts have been broken and erratic for the last week or so, they're working on it.

    Thanks! My Microsoft account has my proper eMail address. Several MS services can't seem to update it from the change last year...

    @S.Sengupta :

    Run Surface Diagnostic Toolkit

    Tried that. It changed my power settings to default values, didn't help the hibernattion problem at all.

    0 comments No comments

  2. Anonymous
    2021-08-31T02:59:18.75+00:00

    Are you suggesting I copy this thread into those groups?

    Yes, I'd ask for help with surface hardware in the dedicated forums I linked.

    --please don't forget to upvote and Accept as answer if the reply is helpful--

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.