Shutdown Event Tracker showing on every login on Server 2019

windows-server-2019 unexpected-shutdown

59,818

Solution 1

In research of this issue I've found it has been reported occurring on Server 2016 and 2019. Removing two registry keys appears to resolve the issue.

To resolve I opened the Registry using an account with admin privileges on the server, and navigated to and deleted the two following registry keys (after backing up, of course):

\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability
.\DirtyShutdown
.\DirtyShutdownTime

After removing these two registry keys the Shutdown Event Tracker did not show up on subsequent logins.

Solution 2

Just change the value of \HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability .\DirtyShutdown to 0

59,818

music2myear

30-something guy who loves God, people, music, and computers, and happens to be reasonably good at the latter two. IT experience is nearly all self- and real-world-taught with no classroom and only a wee little bit of book learnin'. I'm driven by the dual motivations of being unable to leave well-enough alone and the desire to make technology work better for the user. My experience is mostly in Wintel systems administration and user support, with a smattering of *nix experience, mostly in the CLI, mostly on test machines and small-role systems, and I've acquired that experience in a wide range of professional business environments ranging from fast-food mega-conglomo-corps to international law firms to one of the largest corporate banks in the world, to small manufacturing firms and government departments.

Updated on September 18, 2022

Comments

music2myear almost 2 years

I took control of a new VM running Windows Server 2019 (Datacenter) recently. Since that time, on each login to the server (via RDP) the Shutdown Event Tracker shows asking for information about an unexpected shutdown.

Checking the Event Viewer there is no evidence of a restart, unexpected or otherwise, since the previous time I'd seen this message previously and filled it out.

How do I stop this from showing each logon or clear whatever is stuck in the system that is triggering it?

I don't want to NOT see this dialog when it is warranted, I just know it's not warranted in this case and want to know how to stop it from showing up on EVERY logon.

The server is up to date on patches, serving files without much of any additional software except for the Splunk UniversalForwarder mandated by HQ.
- Gustav about 4 years
  
  Apart from the annoyance, a more important issue caused by this this popup is, that it blocks the running of a group policy user logon script.
jiraiya over 4 years

This really helped me, thanks a million.
jk7 over 4 years

Just changing the value of the DirtyShutdown key from 1 to 0 also works.
Edwin Arias about 4 years

But change the value of \HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability .\DirtyShutdown to 0 will disabled this features and is not right.
Caltor about 4 years

@EdwinArias Do you have a better idea?
Caltor about 4 years

@EdwinArias Are you sure this disables the feature rather than just changing the current state?
Brain2000 over 3 years

I hope you didn't really backup first