Event ID 6008 shown in System Event logs after an unexpected reboot

Last Modified

Mon Jun 24 19:16 GMT 2019

Description

  • Event ID 6008 shown in System Event logs after an unexpected reboot
    • EventLog Category: None
    • Event ID: 6008
    • User (If Applicable): N/A
    • Computer: PC01
    • Event Description: The previous system shutdown at 02:32:38 on 28/04/2018 was unexpected.
    • Event Log Name: System Event Log
    • Type: error
    • Event Log Date Time: 2018-04-28 02:35:23

Environment

  • N-able N-central
  • N-able RMM

Solution

  • This problem may occur if both of the following conditions are true:
    1. The computer is locked or is configured with a password-protected screensaver
    2. The shutdown operation is initiated automatically by a program that uses the InitiateSystemShutdownEx function with the force flag.
  • For example, you use the Remote Shutdown tool (Shutdown.exe) to force/schedule a shut down
  • In this situation, the Event Log service is not notified about the shutdown event, and as a result, the shutdown operation is incorrectly considered by the Event Log service as an unexpected event.
  • For more information on this please go here