Windows 10 Windows 10 Coming Out of Hibernation Every 5 Minutes From Midnight Until 2:00AM

[California L33]

I have a relatively new desktop running Windows 10. Recently it started waking from hibernation (I haven’t tested it with sleep mode, but I assume it would do the same) every 5 minutes from approximately midnight until approximately 2:00 AM. When I say every 5 minutes I mean exactly every 5 minutes. The computer turns on, runs its fans at full for a couple of seconds to make sure I’m awake, then goes back into hibernation after about two to three minutes, only to do it again after 5 minutes has elapsed from the last time it woke. The only way I can stop it and get some sleep is to literally unplug it from the wall (or shut it down.) I found log files which show it doing 2 things in pairs. One on the minute, and the next thing about 30 seconds later. I’ve copied 2 pairs of these events, but it continued until 1:57:32 AM then stopped. That’s turning on and off 24 times in 2 hours, which can’t be good for the machine, or for my sleep. It does this every night. How do I stop it? I would like it to NEVER come out of hibernation, or sleep mode, without the power button being pushed.





_____





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:02:00 AM


Event ID: 16394


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Offline downlevel migration succeeded.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="49152">16394</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:02:00.713084700Z" />


<EventRecordID>21353</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


</EventData>


</Event>


__________





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:02:32 AM


Event ID: 16384


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Successfully scheduled Software Protection service for re-start at 2120-09-10T07:02:32Z. Reason: RulesEngine.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="16384">16384</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:02:32.499560500Z" />


<EventRecordID>21354</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


<Data>2120-09-10T07:02:32Z</Data>


<Data>RulesEngine</Data>


</EventData>


</Event>


__________





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:07:00 AM


Event ID: 16394


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Offline downlevel migration succeeded.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="49152">16394</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:07:00.707717200Z" />


<EventRecordID>21355</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


</EventData>


</Event>


__________





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:07:32 AM


Event ID: 16384


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Successfully scheduled Software Protection service for re-start at 2120-09-10T07:07:32Z. Reason: RulesEngine.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="16384">16384</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:07:32.499909900Z" />


<EventRecordID>21356</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


<Data>2120-09-10T07:07:32Z</Data>


<Data>RulesEngine</Data>


</EventData>


</Event>





__________

 

[Neemobeer]

The events you posted have nothing to do with power settings or config.
I would start by checking in the firmware to see if you have any timers set to wake the system

I would also look at the powercfg utility
powercfg /waketimers should tell you if there are any timers set to wake the system
powercfg /devicequery wake_armed shows devices that are configured to wake the system
powercfg /lastwake should show you what last woke the system (will need to do this when it wakes late at night)

 

[California L33]

The events you posted have nothing to do with power settings or config.
I would start by checking in the firmware to see if you have any timers set to wake the system

I would also look at the powercfg utility
powercfg /waketimers should tell you if there are any timers set to wake the system
powercfg /devicequery wake_armed shows devices that are configured to wake the system
powercfg /lastwake should show you what last woke the system (will need to do this when it wakes late at night)

Thanks for the help. The 'lastwake' command run immediately after it woke up showed that 'Universal Orchestrator Start' was the problem.
__________

Type: Wake Timer
Owner: [SERVICE] \Device\HarddiskVolume3\Windows\System32\svchost.exe (SystemEventsBroker)
Owner Supplied Reason: Windows will execute 'NT TASK\Microsoft\Windows\UpdateOrchestrator\Universal Orchestrator Start' scheduled task that requested waking the computer.
__________

A bit of searching came up with this page to correct the problem- Fix: Computer automatically waking up from Sleep in Windows 10

The sticking point for me was that I tried to skim the page and didn't realize that I HAD to download and use Pstools to make the changes, as the 'creator' of this task was a 'user' named S-1-5-18 for whom I did not have a password, and even running things as Administrator won't let you make changes without the program psexec.exe

This page-

Turn off Task Scheduler "Universal Orchestrator Idle Start" on Task Scheduler

Hi everyone, I have a problem to DISABLE some existing tasks on Tasks Scheduler. And I think, these tasks were added by Microsoft when I upgrade my windows 10 to version 1903. When I try to disable ,

answers.microsoft.com

-explained it more clearly to me.

I don't know if this is the only or best way to solve the problem. I don't even know for sure it's solved, though it did allow me to uncheck 'Wake the computer to run this task' and save it, but I wanted to post this here so if others are having the same problem they can see an option. (If this turns out _not_ to be the solution I'll come back and edit or reply.) If there's a _better_ solution please post it. I, obviously, am no computer expert.