Improper Shutdown Occurrence Is Reported in Event Viewer (241840)

The information in this article applies to:

Microsoft Windows NT Server 4.0 Terminal Server Edition SP4

This article was previously published under Q241840

SYMPTOMS

When you restart a Windows NT-based computer after it is improperly shut down, the following error message may appear in the system log in Event Viewer:

Event ID: 6008
Source: Event Log
Description: The previous system shutdown at time on date was unexpected.

CAUSE

A remote shutdown problem using the InitiateSystemShutdown function was fixed in Windows NT 4.0, Terminal Server Edition, Service Pack 4 (SP4). This fix caused this problem.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows NT Server version 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

152734 How to Obtain the Latest Windows NT 4.0 Service Pack

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows NT Server version 4.0, Terminal Server Edition Service Pack 6.

MORE INFORMATION

This fix was created from a similar fix made in Windows NT 4.0. For additional information about Winlogon.exe, please see the following article in the Microsoft Knowledge Base:

236949 Improper Shutdown Occurrence Is Reported in the Event Viewer

Modification Type:	Minor	Last Reviewed:	9/23/2005
Keywords:	kbHotfixServer kbQFE kbbug kbfix kbQFE KB241840