Multipoint Server 2012 shut down every day RRS feed

  • Question

  • Hello!

    Last week my Server HP Proliant ML 350 Gen9 starting shut down every day at almost the same hour (around 3pm).

    I have intalled Windows Multipoint Server 2012 with 18 Zero Clients Atrust M320.

    Event viewer System report:

    • 20 minutes before shut down server get error: A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 40.
    • then start shut down with this information: 

    The process C:\Windows\Explorer.EXE (HP-SERVER) has initiated the power off of computer HP-SERVER on behalf of user HP-SERVER\ucitelj1 for the following reason: Other (Unplanned)
     Reason Code: 0x0
     Shutdown Type: power off

    HP-SERVER is the name of my server and ucitelj1 is one of my users.

    Event viewer Aplication report:

    • at the same time when shut down started: The following application attempted to veto the shutdown: WmsSessionAgent.exe.
    • next Warning: 

    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.  

     DETAIL - 
     4 user registry handles leaked from \Registry\User\S-1-5-21-22593305-1046198516-1279374043-1032:
    Process 17188 (\Device\HarddiskVolume4\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-22593305-1046198516-1279374043-1032
    Process 1520 (\Device\HarddiskVolume4\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-22593305-1046198516-1279374043-1032\Software\Microsoft\Windows\CurrentVersion\Internet Settings
    Process 1520 (\Device\HarddiskVolume4\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-22593305-1046198516-1279374043-1032\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
    Process 1520 (\Device\HarddiskVolume4\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-22593305-1046198516-1279374043-1032\Printers\DevModePerUser

    I already do this:

    • erase ucitelj account and add new acount
    • Hard reset of this client
    • check Task Scheduler

    I ask for help!

    Tuesday, April 2, 2019 6:04 AM

All replies