California L33
Well-Known Member
- Joined
- May 21, 2017
- Messages
- 4
- Thread Author
-
- #1
I have a relatively new desktop running Windows 10. Recently it started waking from hibernation (I haven’t tested it with sleep mode, but I assume it would do the same) every 5 minutes from approximately midnight until approximately 2:00 AM. When I say every 5 minutes I mean exactly every 5 minutes. The computer turns on, runs its fans at full for a couple of seconds to make sure I’m awake, then goes back into hibernation after about two to three minutes, only to do it again after 5 minutes has elapsed from the last time it woke. The only way I can stop it and get some sleep is to literally unplug it from the wall (or shut it down.) I found log files which show it doing 2 things in pairs. One on the minute, and the next thing about 30 seconds later. I’ve copied 2 pairs of these events, but it continued until 1:57:32 AM then stopped. That’s turning on and off 24 times in 2 hours, which can’t be good for the machine, or for my sleep. It does this every night. How do I stop it? I would like it to NEVER come out of hibernation, or sleep mode, without the power button being pushed.
_____
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:02:00 AM
Event ID: 16394
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Offline downlevel migration succeeded.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">16394</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:02:00.713084700Z" />
<EventRecordID>21353</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
__________
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:02:32 AM
Event ID: 16384
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Successfully scheduled Software Protection service for re-start at 2120-09-10T07:02:32Z. Reason: RulesEngine.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">16384</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:02:32.499560500Z" />
<EventRecordID>21354</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
<Data>2120-09-10T07:02:32Z</Data>
<Data>RulesEngine</Data>
</EventData>
</Event>
__________
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:07:00 AM
Event ID: 16394
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Offline downlevel migration succeeded.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">16394</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:07:00.707717200Z" />
<EventRecordID>21355</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
__________
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:07:32 AM
Event ID: 16384
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Successfully scheduled Software Protection service for re-start at 2120-09-10T07:07:32Z. Reason: RulesEngine.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">16384</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:07:32.499909900Z" />
<EventRecordID>21356</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
<Data>2120-09-10T07:07:32Z</Data>
<Data>RulesEngine</Data>
</EventData>
</Event>
__________
_____
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:02:00 AM
Event ID: 16394
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Offline downlevel migration succeeded.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">16394</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:02:00.713084700Z" />
<EventRecordID>21353</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
__________
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:02:32 AM
Event ID: 16384
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Successfully scheduled Software Protection service for re-start at 2120-09-10T07:02:32Z. Reason: RulesEngine.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">16384</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:02:32.499560500Z" />
<EventRecordID>21354</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
<Data>2120-09-10T07:02:32Z</Data>
<Data>RulesEngine</Data>
</EventData>
</Event>
__________
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:07:00 AM
Event ID: 16394
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Offline downlevel migration succeeded.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="49152">16394</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:07:00.707717200Z" />
<EventRecordID>21355</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
</EventData>
</Event>
__________
Log Name: Application
Source: Microsoft-Windows-Security-SPP
Date: 10/4/2020 12:07:32 AM
Event ID: 16384
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: DESKTOP-8GA7KAD
Description:
Successfully scheduled Software Protection service for re-start at 2120-09-10T07:07:32Z. Reason: RulesEngine.
Event Xml:
<Event xmlns="Link Removed">
<System>
<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />
<EventID Qualifiers="16384">16384</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2020-10-04T07:07:32.499909900Z" />
<EventRecordID>21356</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>DESKTOP-8GA7KAD</Computer>
<Security />
</System>
<EventData>
<Data>2120-09-10T07:07:32Z</Data>
<Data>RulesEngine</Data>
</EventData>
</Event>
__________
Solution
- Joined
- Jul 4, 2015
- Messages
- 8,998
The events you posted have nothing to do with power settings or config.
I would start by checking in the firmware to see if you have any timers set to wake the system
I would also look at the powercfg utility
powercfg /waketimers should tell you if there are any timers set to wake the system
powercfg /devicequery wake_armed shows devices that are configured to wake the system
powercfg /lastwake should show you what last woke the system (will need to do this when it wakes late at night)
I would start by checking in the firmware to see if you have any timers set to wake the system
I would also look at the powercfg utility
powercfg /waketimers should tell you if there are any timers set to wake the system
powercfg /devicequery wake_armed shows devices that are configured to wake the system
powercfg /lastwake should show you what last woke the system (will need to do this when it wakes late at night)
California L33
Well-Known Member
- Joined
- May 21, 2017
- Messages
- 4
- Thread Author
-
- #3
Thanks for the help. The 'lastwake' command run immediately after it woke up showed that 'Universal Orchestrator Start' was the problem.
__________
Type: Wake Timer
Owner: [SERVICE] \Device\HarddiskVolume3\Windows\System32\svchost.exe (SystemEventsBroker)
Owner Supplied Reason: Windows will execute 'NT TASK\Microsoft\Windows\UpdateOrchestrator\Universal Orchestrator Start' scheduled task that requested waking the computer.
__________
A bit of searching came up with this page to correct the problem- Fix: Computer automatically waking up from Sleep in Windows 10
The sticking point for me was that I tried to skim the page and didn't realize that I HAD to download and use Pstools to make the changes, as the 'creator' of this task was a 'user' named S-1-5-18 for whom I did not have a password, and even running things as Administrator won't let you make changes without the program psexec.exe
This page-
Turn off Task Scheduler "Universal Orchestrator Idle Start" on Task Scheduler
Hi everyone, I have a problem to DISABLE some existing tasks on Tasks Scheduler. And I think, these tasks were added by Microsoft when I upgrade my windows 10 to version 1903. When I try to disable ,
answers.microsoft.com
-explained it more clearly to me.
I don't know if this is the only or best way to solve the problem. I don't even know for sure it's solved, though it did allow me to uncheck 'Wake the computer to run this task' and save it, but I wanted to post this here so if others are having the same problem they can see an option. (If this turns out _not_ to be the solution I'll come back and edit or reply.) If there's a _better_ solution please post it. I, obviously, am no computer expert.