I just got my replacement PSU and it seems to allow me to play longer, but I still get a random system restart in certain situations.For example, I don't shut down when starting a match in siege, entering an arma or dayz server, but I do crash when entering a new dayz server one time and I've shut down starting up an intensely modded skyrim. I've switched sata ports, checked loose connections etc. and nothing.
EVGA GTX 980 TI HYBRID
G.SKILL RIPJAWS 4X4 DDR3 RAM
TWO 500 GB SAMSUNG EVO SSDS
WD BLACK 1 TB HHD
I7 4790K
CORSAIR AX760 PSU
CORSAIR C70 CASE
My event viewer seems to suggest it all started 5/10 with a series of errors before the first shutdown. I'm also pretty sure that this all happened after I installed a windows update and it didn't work properly in a weird way to where it didn't install on restart and said I needed no new updated when I checked again. Then when I checked another time it downloaded and installed some updated.
Here's the logs.
Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 5/10/2018 11:29:38 AM
Event ID: 35
Task Category: (2)
Level: Error
Keywords:
User: SYSTEM
Computer: Battōsai
Description:
Performance power management features on processor 0 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>35</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:29:38.341204000Z" />
<EventRecordID>18</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="248" />
<Channel>System</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">0</Data>
</EventData>
</Event>
This error appeared for every one of the 8 processors.
Then this error
Log Name: Microsoft-Windows-AppModel-Runtime/Admin
Source: Microsoft-Windows-AppModel-Runtime
Date: 5/10/2018 11:29:42 AM
Event ID: 36
Task Category: None
Level: Error
Keywords: AppContainer
User: SYSTEM
Computer: Battōsai
Description:
DeleteAppContainerProfile failed with error 0x800706BA because it was unable to unregister with the firewall.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
<EventID>36</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000002</Keywords>
<TimeCreated SystemTime="2018-05-10T18:29:42.266810600Z" />
<EventRecordID>2</EventRecordID>
<Correlation />
<Execution ProcessID="568" ThreadID="636" />
<Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ErrorCode">2147944122</Data>
</EventData>
</Event>
Then some even tracing warnings and errors as well as some print service warnings and errors followed by the same processor firmware errors again.
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 5/10/2018 11:32:50 AM
Event ID: 28
Task Category: Provider
Level: Error
Keywords: (2048),(512),Provider
User: SYSTEM
Computer: Battōsai
Description:
Error setting traits on Provider {8444a4fb-d8d3-4f38-84f8-89960a1ef12f}. Error: 0xC0000001
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>28</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>3</Task>
<Opcode>25</Opcode>
<Keywords>0x8000000000000a20</Keywords>
<TimeCreated SystemTime="2018-05-10T18:32:50.584511000Z" />
<EventRecordID>9</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="140" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ProviderGuid">{8444A4FB-D8D3-4F38-84F8-89960A1EF12F}</Data>
<Data Name="ErrorCode">3221225473</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-MSDTC Client 2
Date: 5/10/2018 11:33:06 AM
Event ID: 4104
Task Category: Cluster
Level: Error
Keywords: Classic
User: N/A
Computer: Battōsai
Description:
Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-MSDTC Client 2" Guid="{155CB334-3D7F-4ff1-B107-DF8AFC3C0363}" EventSourceName="MSDTC Client 2" />
<EventID Qualifiers="16384">4104</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>14</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:33:06.179481200Z" />
<EventRecordID>23</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Battōsai</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">
</Data>
<Data Name="param2">0x8007085A</Data>
</EventData>
</Event>
Then all these msdtc client errors and warnings
Then a bunch of these WMI warnings
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 5/10/2018 11:34:53 AM
Event ID: 63
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Battōsai
Description:
A provider, InvProv, has been registered in the Windows Management Instrumentation namespace ROOT\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>63</EventID>
<Version>2</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:34:53.856419800Z" />
<EventRecordID>179</EventRecordID>
<Correlation ActivityID="{4B5D3009-E88D-0002-8A33-5D4B8DE8D301}" />
<Execution ProcessID="3312" ThreadID="3784" />
<Channel>Application</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
<Provider>InvProv</Provider>
<Namespace>ROOT\CIMV2</Namespace>
</data_0x8000003F>
</UserData>
</Event>
Then a bunch of these errors
Log Name: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
Source: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
Date: 5/10/2018 11:34:56 AM
Event ID: 822
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Battōsai
Description:
MDM PolicyManager: Acquiring the merge lock, Policy: (NULL), Area: (NULL), Result
0x80070002) The system cannot find the file specified..
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider" Guid="{3DA494E4-0FE2-415C-B895-FB5265C5C83B}" />
<EventID>822</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:34:56.140657800Z" />
<EventRecordID>1</EventRecordID>
<Correlation />
<Execution ProcessID="1368" ThreadID="7108" />
<Channel>Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Message1">NULL</Data>
<Data Name="Message2">NULL</Data>
<Data Name="HexInt3">0x80070002</Data>
<Data Name="HRESULT">0x80070002</Data>
</EventData>
</Event>
Then appreadiness errors.
Log Name: Microsoft-Windows-User Device Registration/Admin
Source: Microsoft-Windows-User Device Registration
Date: 5/10/2018 11:35:23 AM
Event ID: 360
Task Category: None
Level: Warning
Keywords:
User: BATTOSAI\Tonio
Computer: Battōsai
Description:
Windows Hello for Business provisioning will not be launched.
Device is AAD joined ( AADJ or DJ++ ): Not Tested
User has logged on with AAD credentials: No
Windows Hello for Business policy is enabled: Not Tested
Windows Hello for Business post-logon provisioning is enabled: Not Tested
Local computer meets Windows hello for business hardware requirements: Not Tested
User is not connected to the machine via Remote Desktop: Yes
User certificate for on premise auth policy is enabled: Not Tested
Machine is governed by none policy.
See https://go.microsoft.com/fwlink/?linkid=832647 for more details.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Device Registration" Guid="{23B8D46B-67DD-40A3-B636-D43E50552C6D}" />
<EventID>360</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:35:23.757876100Z" />
<EventRecordID>2</EventRecordID>
<Correlation />
<Execution ProcessID="7200" ThreadID="7296" />
<Channel>Microsoft-Windows-User Device Registration/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-21-3488844248-2404736620-2365867626-1001" />
</System>
<EventData>
<Data Name="Message">Windows Hello for Business provisioning will not be launched.</Data>
<Data Name="DeviceIsJoined">Not Tested</Data>
<Data Name="AADPrt">No</Data>
<Data Name="NgcPolicyEnabled">Not Tested</Data>
<Data Name="NgcPostLogonProvisioningEnabled">Not Tested</Data>
<Data Name="NgcHardwarePolicyMet">Not Tested</Data>
<Data Name="UserIsRemote">Yes</Data>
<Data Name="LogonCertRequired">Not Tested</Data>
<Data Name="MachinePolicySource">none</Data>
</EventData>
</Event>
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 5/10/2018 11:35:24 AM
Event ID: 4
Task Category: Logging
Level: Warning
Keywords: Session
User: SYSTEM
Computer: Battōsai
Description:
The maximum file size for session "Circular Kernel Context Logger" has been reached. As a result, events might be lost (not logged) to file "C:\WINDOWS\system32\WDI\LogFiles\BootCKCL.etl". The maximum files size is currently set to 104857600 bytes.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>10</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2018-05-10T18:35:24.554487500Z" />
<EventRecordID>12</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="296" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Circular Kernel Context Logger</Data>
<Data Name="FileName">C:\WINDOWS\system32\WDI\LogFiles\BootCKCL.etl</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">41943168</Data>
<Data Name="MaxFileSize">104857600</Data>
</EventData>
</Event>
Then
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 5/10/2018 11:39:44 AM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: BATTOSAI\Tonio
Computer: Battōsai
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user BATTOSAI\Tonio SID (S-1-5-21-3488844248-2404736620-2365867626-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:39:44.453829100Z" />
<EventRecordID>415</EventRecordID>
<Correlation />
<Execution ProcessID="1016" ThreadID="11084" />
<Channel>System</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-21-3488844248-2404736620-2365867626-1001" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
<Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
<Data Name="param6">BATTOSAI</Data>
<Data Name="param7">Tonio</Data>
<Data Name="param8">S-1-5-21-3488844248-2404736620-2365867626-1001</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>
Log Name: System
Source: EventLog
Date: 5/10/2018 11:41:47 AM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Battōsai
Description:
The previous system shutdown at 11:32:58 AM on 5/10/2018 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 5/10/2018 11:41:44 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: Battōsai
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
This was when it all started. Now I've gotten a fast boot error etc. and not sure what to do. I honestly think it's windows related though. Any help is appreciated.
Is it possible that my entire wall plug is causing a problem for my psu? Or the cables?
EVGA GTX 980 TI HYBRID
G.SKILL RIPJAWS 4X4 DDR3 RAM
TWO 500 GB SAMSUNG EVO SSDS
WD BLACK 1 TB HHD
I7 4790K
CORSAIR AX760 PSU
CORSAIR C70 CASE
My event viewer seems to suggest it all started 5/10 with a series of errors before the first shutdown. I'm also pretty sure that this all happened after I installed a windows update and it didn't work properly in a weird way to where it didn't install on restart and said I needed no new updated when I checked again. Then when I checked another time it downloaded and installed some updated.
Here's the logs.
Log Name: System
Source: Microsoft-Windows-Kernel-Processor-Power
Date: 5/10/2018 11:29:38 AM
Event ID: 35
Task Category: (2)
Level: Error
Keywords:
User: SYSTEM
Computer: Battōsai
Description:
Performance power management features on processor 0 in group 0 are disabled due to a firmware problem. Check with the computer manufacturer for updated firmware.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Processor-Power" Guid="{0F67E49F-FE51-4E9F-B490-6F2948CC6027}" />
<EventID>35</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>2</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:29:38.341204000Z" />
<EventRecordID>18</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="248" />
<Channel>System</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Group">0</Data>
<Data Name="Number">0</Data>
</EventData>
</Event>
This error appeared for every one of the 8 processors.
Then this error
Log Name: Microsoft-Windows-AppModel-Runtime/Admin
Source: Microsoft-Windows-AppModel-Runtime
Date: 5/10/2018 11:29:42 AM
Event ID: 36
Task Category: None
Level: Error
Keywords: AppContainer
User: SYSTEM
Computer: Battōsai
Description:
DeleteAppContainerProfile failed with error 0x800706BA because it was unable to unregister with the firewall.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-AppModel-Runtime" Guid="{F1EF270A-0D32-4352-BA52-DBAB41E1D859}" />
<EventID>36</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x2000000000000002</Keywords>
<TimeCreated SystemTime="2018-05-10T18:29:42.266810600Z" />
<EventRecordID>2</EventRecordID>
<Correlation />
<Execution ProcessID="568" ThreadID="636" />
<Channel>Microsoft-Windows-AppModel-Runtime/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ErrorCode">2147944122</Data>
</EventData>
</Event>
Then some even tracing warnings and errors as well as some print service warnings and errors followed by the same processor firmware errors again.
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 5/10/2018 11:32:50 AM
Event ID: 28
Task Category: Provider
Level: Error
Keywords: (2048),(512),Provider
User: SYSTEM
Computer: Battōsai
Description:
Error setting traits on Provider {8444a4fb-d8d3-4f38-84f8-89960a1ef12f}. Error: 0xC0000001
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>28</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>3</Task>
<Opcode>25</Opcode>
<Keywords>0x8000000000000a20</Keywords>
<TimeCreated SystemTime="2018-05-10T18:32:50.584511000Z" />
<EventRecordID>9</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="140" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ProviderGuid">{8444A4FB-D8D3-4F38-84F8-89960A1EF12F}</Data>
<Data Name="ErrorCode">3221225473</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Windows-MSDTC Client 2
Date: 5/10/2018 11:33:06 AM
Event ID: 4104
Task Category: Cluster
Level: Error
Keywords: Classic
User: N/A
Computer: Battōsai
Description:
Failed trying to get the state of the cluster node: .The error code returned: 0x8007085A
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-MSDTC Client 2" Guid="{155CB334-3D7F-4ff1-B107-DF8AFC3C0363}" EventSourceName="MSDTC Client 2" />
<EventID Qualifiers="16384">4104</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>14</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:33:06.179481200Z" />
<EventRecordID>23</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Battōsai</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">
</Data>
<Data Name="param2">0x8007085A</Data>
</EventData>
</Event>
Then all these msdtc client errors and warnings
Then a bunch of these WMI warnings
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 5/10/2018 11:34:53 AM
Event ID: 63
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Battōsai
Description:
A provider, InvProv, has been registered in the Windows Management Instrumentation namespace ROOT\CIMV2 to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>63</EventID>
<Version>2</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:34:53.856419800Z" />
<EventRecordID>179</EventRecordID>
<Correlation ActivityID="{4B5D3009-E88D-0002-8A33-5D4B8DE8D301}" />
<Execution ProcessID="3312" ThreadID="3784" />
<Channel>Application</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="http://manifests.microsoft.com/win/2006/windows/WMI">
<Provider>InvProv</Provider>
<Namespace>ROOT\CIMV2</Namespace>
</data_0x8000003F>
</UserData>
</Event>
Then a bunch of these errors
Log Name: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin
Source: Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider
Date: 5/10/2018 11:34:56 AM
Event ID: 822
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Battōsai
Description:
MDM PolicyManager: Acquiring the merge lock, Policy: (NULL), Area: (NULL), Result
0x80070002) The system cannot find the file specified..Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider" Guid="{3DA494E4-0FE2-415C-B895-FB5265C5C83B}" />
<EventID>822</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:34:56.140657800Z" />
<EventRecordID>1</EventRecordID>
<Correlation />
<Execution ProcessID="1368" ThreadID="7108" />
<Channel>Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Message1">NULL</Data>
<Data Name="Message2">NULL</Data>
<Data Name="HexInt3">0x80070002</Data>
<Data Name="HRESULT">0x80070002</Data>
</EventData>
</Event>
Then appreadiness errors.
Log Name: Microsoft-Windows-User Device Registration/Admin
Source: Microsoft-Windows-User Device Registration
Date: 5/10/2018 11:35:23 AM
Event ID: 360
Task Category: None
Level: Warning
Keywords:
User: BATTOSAI\Tonio
Computer: Battōsai
Description:
Windows Hello for Business provisioning will not be launched.
Device is AAD joined ( AADJ or DJ++ ): Not Tested
User has logged on with AAD credentials: No
Windows Hello for Business policy is enabled: Not Tested
Windows Hello for Business post-logon provisioning is enabled: Not Tested
Local computer meets Windows hello for business hardware requirements: Not Tested
User is not connected to the machine via Remote Desktop: Yes
User certificate for on premise auth policy is enabled: Not Tested
Machine is governed by none policy.
See https://go.microsoft.com/fwlink/?linkid=832647 for more details.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-User Device Registration" Guid="{23B8D46B-67DD-40A3-B636-D43E50552C6D}" />
<EventID>360</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:35:23.757876100Z" />
<EventRecordID>2</EventRecordID>
<Correlation />
<Execution ProcessID="7200" ThreadID="7296" />
<Channel>Microsoft-Windows-User Device Registration/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-21-3488844248-2404736620-2365867626-1001" />
</System>
<EventData>
<Data Name="Message">Windows Hello for Business provisioning will not be launched.</Data>
<Data Name="DeviceIsJoined">Not Tested</Data>
<Data Name="AADPrt">No</Data>
<Data Name="NgcPolicyEnabled">Not Tested</Data>
<Data Name="NgcPostLogonProvisioningEnabled">Not Tested</Data>
<Data Name="NgcHardwarePolicyMet">Not Tested</Data>
<Data Name="UserIsRemote">Yes</Data>
<Data Name="LogonCertRequired">Not Tested</Data>
<Data Name="MachinePolicySource">none</Data>
</EventData>
</Event>
Log Name: Microsoft-Windows-Kernel-EventTracing/Admin
Source: Microsoft-Windows-Kernel-EventTracing
Date: 5/10/2018 11:35:24 AM
Event ID: 4
Task Category: Logging
Level: Warning
Keywords: Session
User: SYSTEM
Computer: Battōsai
Description:
The maximum file size for session "Circular Kernel Context Logger" has been reached. As a result, events might be lost (not logged) to file "C:\WINDOWS\system32\WDI\LogFiles\BootCKCL.etl". The maximum files size is currently set to 104857600 bytes.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
<EventID>4</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>10</Opcode>
<Keywords>0x8000000000000010</Keywords>
<TimeCreated SystemTime="2018-05-10T18:35:24.554487500Z" />
<EventRecordID>12</EventRecordID>
<Correlation />
<Execution ProcessID="4" ThreadID="296" />
<Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="SessionName">Circular Kernel Context Logger</Data>
<Data Name="FileName">C:\WINDOWS\system32\WDI\LogFiles\BootCKCL.etl</Data>
<Data Name="ErrorCode">3221225864</Data>
<Data Name="LoggingMode">41943168</Data>
<Data Name="MaxFileSize">104857600</Data>
</EventData>
</Event>
Then
Log Name: System
Source: Microsoft-Windows-DistributedCOM
Date: 5/10/2018 11:39:44 AM
Event ID: 10016
Task Category: None
Level: Error
Keywords: Classic
User: BATTOSAI\Tonio
Computer: Battōsai
Description:
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
and APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
to the user BATTOSAI\Tonio SID (S-1-5-21-3488844248-2404736620-2365867626-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
<EventID Qualifiers="0">10016</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8080000000000000</Keywords>
<TimeCreated SystemTime="2018-05-10T18:39:44.453829100Z" />
<EventRecordID>415</EventRecordID>
<Correlation />
<Execution ProcessID="1016" ThreadID="11084" />
<Channel>System</Channel>
<Computer>Battōsai</Computer>
<Security UserID="S-1-5-21-3488844248-2404736620-2365867626-1001" />
</System>
<EventData>
<Data Name="param1">application-specific</Data>
<Data Name="param2">Local</Data>
<Data Name="param3">Activation</Data>
<Data Name="param4">{D63B10C5-BB46-4990-A94F-E40B9D520160}</Data>
<Data Name="param5">{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}</Data>
<Data Name="param6">BATTOSAI</Data>
<Data Name="param7">Tonio</Data>
<Data Name="param8">S-1-5-21-3488844248-2404736620-2365867626-1001</Data>
<Data Name="param9">LocalHost (Using LRPC)</Data>
<Data Name="param10">Unavailable</Data>
<Data Name="param11">Unavailable</Data>
</EventData>
</Event>
Log Name: System
Source: EventLog
Date: 5/10/2018 11:41:47 AM
Event ID: 6008
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Battōsai
Description:
The previous system shutdown at 11:32:58 AM on 5/10/2018 was unexpected.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="EventLog" />
<EventID Qualifiers="32768">6008</EventID>
<Level>2</Level>
</Event>
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 5/10/2018 11:41:44 AM
Event ID: 41
Task Category: (63)
Level: Critical
Keywords: (70368744177664),(2)
User: SYSTEM
Computer: Battōsai
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Kernel-Power" Guid="{331C3B3A-2005-44C2-AC5E-77220C37D6B4}" />
This was when it all started. Now I've gotten a fast boot error etc. and not sure what to do. I honestly think it's windows related though. Any help is appreciated.
Is it possible that my entire wall plug is causing a problem for my psu? Or the cables?
Facebook
Twitter
Instagram