Windows 10 Windows 10 Coming Out of Hibernation Every 5 Minutes From Midnight Until 2:00AM

C

California L33

Well-Known Member
Joined
May 21, 2017
Messages
4
I have a relatively new desktop running Windows 10. Recently it started waking from hibernation (I haven’t tested it with sleep mode, but I assume it would do the same) every 5 minutes from approximately midnight until approximately 2:00 AM. When I say every 5 minutes I mean exactly every 5 minutes. The computer turns on, runs its fans at full for a couple of seconds to make sure I’m awake, then goes back into hibernation after about two to three minutes, only to do it again after 5 minutes has elapsed from the last time it woke. The only way I can stop it and get some sleep is to literally unplug it from the wall (or shut it down.) I found log files which show it doing 2 things in pairs. One on the minute, and the next thing about 30 seconds later. I’ve copied 2 pairs of these events, but it continued until 1:57:32 AM then stopped. That’s turning on and off 24 times in 2 hours, which can’t be good for the machine, or for my sleep. It does this every night. How do I stop it? I would like it to NEVER come out of hibernation, or sleep mode, without the power button being pushed.





_____





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:02:00 AM


Event ID: 16394


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Offline downlevel migration succeeded.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="49152">16394</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:02:00.713084700Z" />


<EventRecordID>21353</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


</EventData>


</Event>


__________





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:02:32 AM


Event ID: 16384


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Successfully scheduled Software Protection service for re-start at 2120-09-10T07:02:32Z. Reason: RulesEngine.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="16384">16384</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:02:32.499560500Z" />


<EventRecordID>21354</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


<Data>2120-09-10T07:02:32Z</Data>


<Data>RulesEngine</Data>


</EventData>


</Event>


__________





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:07:00 AM


Event ID: 16394


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Offline downlevel migration succeeded.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="49152">16394</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:07:00.707717200Z" />


<EventRecordID>21355</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


</EventData>


</Event>


__________





Log Name: Application


Source: Microsoft-Windows-Security-SPP


Date: 10/4/2020 12:07:32 AM


Event ID: 16384


Task Category: None


Level: Information


Keywords: Classic


User: N/A


Computer: DESKTOP-8GA7KAD


Description:


Successfully scheduled Software Protection service for re-start at 2120-09-10T07:07:32Z. Reason: RulesEngine.


Event Xml:


<Event xmlns="Link Removed">


<System>


<Provider Name="Microsoft-Windows-Security-SPP" Guid="{E23B33B0-C8C9-472C-A5F9-F2BDFEA0F156}" EventSourceName="Software Protection Platform Service" />


<EventID Qualifiers="16384">16384</EventID>


<Version>0</Version>


<Level>4</Level>


<Task>0</Task>


<Opcode>0</Opcode>


<Keywords>0x80000000000000</Keywords>


<TimeCreated SystemTime="2020-10-04T07:07:32.499909900Z" />


<EventRecordID>21356</EventRecordID>


<Correlation />


<Execution ProcessID="0" ThreadID="0" />


<Channel>Application</Channel>


<Computer>DESKTOP-8GA7KAD</Computer>


<Security />


</System>


<EventData>


<Data>2120-09-10T07:07:32Z</Data>


<Data>RulesEngine</Data>


</EventData>


</Event>





__________
 
Solution
C
Thanks for the help. The 'lastwake' command run immediately after it woke up showed that 'Universal Orchestrator Start' was the problem.
__________

Type: Wake Timer
Owner: [SERVICE]...
Sort by date Sort by votes
The events you posted have nothing to do with power settings or config.
I would start by checking in the firmware to see if you have any timers set to wake the system

I would also look at the powercfg utility
powercfg /waketimers should tell you if there are any timers set to wake the system
powercfg /devicequery wake_armed shows devices that are configured to wake the system
powercfg /lastwake should show you what last woke the system (will need to do this when it wakes late at night)
 
Upvote 0 Downvote
Thanks for the help. The 'lastwake' command run immediately after it woke up showed that 'Universal Orchestrator Start' was the problem.
__________

Type: Wake Timer
Owner: [SERVICE] \Device\HarddiskVolume3\Windows\System32\svchost.exe (SystemEventsBroker)
Owner Supplied Reason: Windows will execute 'NT TASK\Microsoft\Windows\UpdateOrchestrator\Universal Orchestrator Start' scheduled task that requested waking the computer.
__________

A bit of searching came up with this page to correct the problem- Fix: Computer automatically waking up from Sleep in Windows 10

The sticking point for me was that I tried to skim the page and didn't realize that I HAD to download and use Pstools to make the changes, as the 'creator' of this task was a 'user' named S-1-5-18 for whom I did not have a password, and even running things as Administrator won't let you make changes without the program psexec.exe

This page-

Turn off Task Scheduler "Universal Orchestrator Idle Start" on Task Scheduler

Hi everyone, I have a problem to DISABLE some existing tasks on Tasks Scheduler. And I think, these tasks were added by Microsoft when I upgrade my windows 10 to version 1903. When I try to disable ,
answers.microsoft.com

-explained it more clearly to me.

I don't know if this is the only or best way to solve the problem. I don't even know for sure it's solved, though it did allow me to uncheck 'Wake the computer to run this task' and save it, but I wanted to post this here so if others are having the same problem they can see an option. (If this turns out _not_ to be the solution I'll come back and edit or reply.) If there's a _better_ solution please post it. I, obviously, am no computer expert.
 
Upvote 0 Downvote
Solution
You must log in or register to reply here.