locked
Event 5973 on a fresh installed Windows Server 2016 RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    2
    Sign in to vote

    Hi,

    I have installed a few Windows Server 2016 and all of them have the following event regularly:

    Application log - error

    Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: This app can't be activated by the Built-in Administrator. See the Microsoft-Windows-TWinUI/Operational log for additional information.

    How do I deactivate cortana on my servers and stop this error from occuring?

    KL_Dane

    Wednesday, December 14, 2016 10:56 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I did manage to solve this issue and I am not seeing these event errors any more!

    The solution is actually quite simple, so simple it is kind of stupid!

    We install the server, we run Windows Update and all that stuff we do.

    Then we join the server to a domain and that requires a reboot. After reboot we log on with our domain credentials and we get alot of Event id 5973.
    But the local administrator needs to log on to run some final setup of the domainjoin and then we need to do another reboot of the server.

    Now we can log on with our domain credentials and never get a single event id 5973 in our Application Log ;)

    KL_Dane

    • Marked as answer by KL_Dane Thursday, October 25, 2018 8:16 AM
    Thursday, October 25, 2018 8:16 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    The Store apps require UAC to be enabled. The built-in account doesn't have UAC. You might try creating a new account with local admin or you could set this one to Enabled

     

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Wednesday, December 14, 2016 3:54 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Dave,

    Thanks for your reply.

    I just installed this server, joined it to my domain and then only log on as domain admin.

    This error occurs every 1½-2 hours, and I am not trying to start any Cortana. Is it not possible to stop it from trying to run and by doing that, this error will not be shown?

    KL_Dane

    Thursday, December 15, 2016 7:56 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    It probably will persist until it can successfully activate. You could also mention it over here on uservoice.

    https://windowsserver.uservoice.com/forums/295047-general-feedback

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Thursday, December 15, 2016 2:52 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Dave,

    Thanks for your reply.

    I just installed this server, joined it to my domain and then only log on as domain admin.

    This error occurs every 1½-2 hours, and I am not trying to start any Cortana. Is it not possible to stop it from trying to run and by doing that, this error will not be shown?

    KL_Dane

    Hello,

    What version of Windows 2016 server have you installed? Build version and Standard or Enterprise. I do not have any of these errors in a 2016 DC I checked.

    Thursday, December 15, 2016 11:09 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Mr. Happy,

    I have installed the standard version in a Hyper-V VM, running on a Windows 2016/2012R2 mixed Failover Cluster (in the process of upgrading all hosts to 2016).

    

    KL_Dane

    Friday, December 16, 2016 3:55 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Ok checked same version two servers. Mine is test AD environment so no real settings. 

    Does the start search work? if you search for task does that work? Is the SearchUI.exe process running or suspended? Basically is the present in the details tab on task manager?

    So would think this is down to GPO settings in you AD. See the post by Dave Patrick see what is applied on the servers that are affected.

    Saturday, December 17, 2016 6:25 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Mr Happy,

    The start search works and finds the Task Manager. The SearchUI.exe is suspended:

    I have tried the GPO settings from Dave Patrick's reply, but no change. The last entry i see is from the 18th at 14.00 so willwait another day to look for more entries.

    KL_Dane

    Monday, December 19, 2016 7:02 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Here is a similar thread below for your reference.

    Apps won't open or run in administrator account

    https://answers.microsoft.com/en-us/windows/forum/windows8_1-performance/apps-wont-open-or-run-in-administrator-account/11071e14-ce60-4d55-b2d6-2817d8dfa953

    Best Regards,

    Jay

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, December 20, 2016 3:13 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Are there any updates?

    If the reply above has resolved your problem, please mark it as answer as it would be helpful to anyone who encounters the similar issue.

    Best Regards,

    Jay

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, December 27, 2016 7:00 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Jay,

    I have not been to the office due to vacation. I will look into this in the new year thanks ;)

    KL_Dane

    Tuesday, December 27, 2016 7:08 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I took time to check up on this today and it has not resolved the issue. Any other ideas to solve this will be greatly appreciated.

    KL_Dane

    Wednesday, December 28, 2016 8:50 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    How do I deactivate cortana on my servers and stop this error from occurring？

    >>>To achieve this, please refer to the article below.

    How to turn off Cortana and stop personal data gathering

    http://www.windowscentral.com/how-turn-cortana-and-stop-personal-data-gathering-windows-10

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Best Regards,

    Jay

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, December 30, 2016 7:56 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Jay,

    Thank you for your suggestion. When searching for cortana or Cortana with capital C, i see:

     

    In the settings it is not enabled yet:

    KL_Dane

    Friday, December 30, 2016 11:15 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    And with a fresh error event:

    KL_Dane

    Friday, December 30, 2016 11:17 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Did you ever get this resolved? We get the same errors on most of our 2016 servers.
    Thursday, January 4, 2018 6:37 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I did not resolve this, I ended up ignoring the error in my monitoring.

    KL_Dane

    Thursday, January 4, 2018 7:52 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    I might be wrong but I noticed that the eventvwr entry only appears if a search is triggered (eg. magnifying glass left to the windows symbol). Not sure if other actions trigger it as well. Cortana was already disabled (get to know me...) on my VM with 2016 server OS. But i also applied a solution via gpedit.msc (https://windowsforum.com/threads/how-to-properly-disable-cortana-in-microsoft-windows-10.211998/). Still if I am doing a search the event can be seen in the eventvwr immediately. I know it does not help to get rid of the messages but knowing what these events are might help to ignore them :)
    Thursday, February 8, 2018 3:15 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Same error for me on a 2016 server.... unable to open start menu and same error in the events log.

    No  solution?

    Tuesday, September 11, 2018 8:39 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Same Windows 2016 Standard fresh installed, same error but the frequency of this event can be more important, sometimes 15 min. 

    If anybody have an idea, or a workaround? 

    Thank you.

    Wednesday, October 24, 2018 2:47 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I did manage to solve this issue and I am not seeing these event errors any more!

    The solution is actually quite simple, so simple it is kind of stupid!

    We install the server, we run Windows Update and all that stuff we do.

    Then we join the server to a domain and that requires a reboot. After reboot we log on with our domain credentials and we get alot of Event id 5973.
    But the local administrator needs to log on to run some final setup of the domainjoin and then we need to do another reboot of the server.

    Now we can log on with our domain credentials and never get a single event id 5973 in our Application Log ;)

    KL_Dane

    • Marked as answer by KL_Dane Thursday, October 25, 2018 8:16 AM
    Thursday, October 25, 2018 8:16 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    I'm not aware of any additional steps with the local admin account after joining a server to the domain.

    Can you detail what steps were performed after the domain join to stop event 5973?

    thanks

    Thursday, October 25, 2018 3:14 PM
  • Question
    Sign in to vote
    1
    Sign in to vote

    I'm not aware of any additional steps with the local admin account after joining a server to the domain.

    Can you detail what steps were performed after the domain join to stop event 5973?

    thanks

    I don't know what exactly is needed, I just tried to log on as the local admin right after domain join + reboot as a test and then the event error stopped.

    1. Join domain
    2. reboot
    3. log on with local administrator
    4. reboot
    5. event error never shows, not even once.

    KL_Dane

    Saturday, October 27, 2018 2:38 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello! I also ran into this problem.

    In addition to KL_Dane’s advice, I still had to turn on the UAС.

    Sunday, April 26, 2020 3:42 PM