none
Event ID 1076, Reason Code: 0xa000000

    Question

  • i have one server 2003 with the unexpected reboot during last night, i was found that in the event log error as following:
    Event ID 1076,  Reason Code: 0xa000000

    anyone has any idea about this?
    Saturday, September 05, 2009 3:38 PM

Answers

  • I would post this in Windows forum instead of Exchange Server - General Discussion... :)


    Amit Tank | MVP – Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

    • Proposed as answer by Amit Tank Monday, September 07, 2009 8:16 AM
    • Marked as answer by Xiu Zhang - MSFT Tuesday, September 08, 2009 3:14 AM
    Saturday, September 05, 2009 3:54 PM
  • hi,

    Reason code: 0xa000000 - This event refers to the failure indicated by the previous EventLog 6008 event. The User32 1076 event is written when the first user with shutdown privileges logs on to the computer after an unexpected restart or shutdown and supplies a reason for the occurrence. An unexpected restart or shutdown is one that the system cannot anticipate, such as when the user pushes the computer''s reset button or unplugs the power cord.

    A member of the Administrators security group can also log the reason for a remote computer's unexpected restart or shutdown using the Shutdown.exe tool. If many remote computers are unexpectedly shut down, as in the case of a power outage, Shutdown.exe provides a way for the administrator to remotely log the same shutdown reason on all the affected computers.

    The User32 1076 event is written to the system log only when the Shutdown Event Tracker group policy setting is enabled or not configured on a computer running a Windows Server 2003 operating system. For more information about Shutdown Event Tracker group policy settings, see Help and Support.

    Regards, Ajaj Desai (India)
    Monday, September 07, 2009 4:15 AM

All replies

  • I would post this in Windows forum instead of Exchange Server - General Discussion... :)


    Amit Tank | MVP – Exchange Server | MCITP: EMA | MCSA: M | http://ExchangeShare.WordPress.com

    • Proposed as answer by Amit Tank Monday, September 07, 2009 8:16 AM
    • Marked as answer by Xiu Zhang - MSFT Tuesday, September 08, 2009 3:14 AM
    Saturday, September 05, 2009 3:54 PM
  • hi,

    Reason code: 0xa000000 - This event refers to the failure indicated by the previous EventLog 6008 event. The User32 1076 event is written when the first user with shutdown privileges logs on to the computer after an unexpected restart or shutdown and supplies a reason for the occurrence. An unexpected restart or shutdown is one that the system cannot anticipate, such as when the user pushes the computer''s reset button or unplugs the power cord.

    A member of the Administrators security group can also log the reason for a remote computer's unexpected restart or shutdown using the Shutdown.exe tool. If many remote computers are unexpectedly shut down, as in the case of a power outage, Shutdown.exe provides a way for the administrator to remotely log the same shutdown reason on all the affected computers.

    The User32 1076 event is written to the system log only when the Shutdown Event Tracker group policy setting is enabled or not configured on a computer running a Windows Server 2003 operating system. For more information about Shutdown Event Tracker group policy settings, see Help and Support.

    Regards, Ajaj Desai (India)
    Monday, September 07, 2009 4:15 AM