I was online this a.m. and all of a sudden a window came up on the desktop saying, "restarting". I checked my updates file and nothing had been updated by windows. Where do I look to find out what was going on. Like what was updated that required a restart? Thanks.
📎 AI Summary:
The thread discusses a sudden Windows restart experienced by Fenway16, who is seeking to identify the cause despite no recent updates. Contributors suggest checking the System log and filtering for User32 events; Fenway16 explores Event Viewer but finds it complex, eventually highlighting a Dell update entry. The overall tone is collaborative, with assistance provided to interpret system logs and identify potential updates that caused the restart.
The thread discusses a sudden Windows restart experienced by Fenway16, who is seeking to identify the cause despite no recent updates. Contributors suggest checking the System log and filtering for User32 events; Fenway16 explores Event Viewer but finds it complex, eventually highlighting a Dell update entry. The overall tone is collaborative, with assistance provided to interpret system logs and identify potential updates that caused the restart.
Solution
I looked in maintenance for reliability settings - it did say Dell update which I guess would require a restart. I did not receive a notification from Dell that they were updating something. Just a restart. I guess I'll go with that. Thanks for the help.
I managed to get this snip - perhaps it will tell why.
Microsoft Defender: No threats detected
Scan details
Microsoft Defender: No threats detected
Scan details
Last edited by a moderator:
You can also open a powershell prompt and copy and paste this. Should give you any less common shutdown (or non-user initiated ) shutdowns.
Get-EventLog -LogName System -Source User32 -newest 100 | ? { $_.Message -notlike "*explorer.exe*" -and $_.Message -notlike "*winlogon.exe*" }
Get-EventLog -LogName System -Source User32 -newest 100 | ? { $_.Message -notlike "*explorer.exe*" -and $_.Message -notlike "*winlogon.exe*" }
Try the new cross-platform PowerShell Installing PowerShell - PowerShell
PS C:\Users\PV> Get-EventLog -LogName System -Source User32 -newest 100 | ? { $_.Message -notlike "*explorer.exe*" -and $_.Message -notlike "*winlogon.exe*" }
>> Like Quote ReplyReport
Index Time EntryType Source InstanceID Message
----- ---- --------- ------ ---------- -------
10653 Sep 10 16:50 Warning User32 2147484721 The attempt by user DELL02\PV to restart/shutdo...
7626 Aug 13 14:07 Warning User32 2147484721 The attempt by user DELL02\PV to restart/shutdo...
7530 Aug 12 10:03 Warning User32 2147484721 The attempt by user DELL02\PV to restart/shutdo...
Like : The term 'Like' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:2 char:2
+ Like Quote ReplyReport
+ ~~~~
+ CategoryInfo : ObjectNotFound: (Like:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
This is what came up. No mention of 12/22 when the event took place. I copied paste into power shell and copied paste for here.
PS C:\Users\PV> Get-EventLog -LogName System -Source User32 -newest 100 | ? { $_.Message -notlike "*explorer.exe*" -and $_.Message -notlike "*winlogon.exe*" }
>> Like Quote ReplyReport
Index Time EntryType Source InstanceID Message
----- ---- --------- ------ ---------- -------
10653 Sep 10 16:50 Warning User32 2147484721 The attempt by user DELL02\PV to restart/shutdo...
7626 Aug 13 14:07 Warning User32 2147484721 The attempt by user DELL02\PV to restart/shutdo...
7530 Aug 12 10:03 Warning User32 2147484721 The attempt by user DELL02\PV to restart/shutdo...
Like : The term 'Like' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:2 char:2
+ Like Quote ReplyReport
+ ~~~~
+ CategoryInfo : ObjectNotFound: (Like:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
This is what came up. No mention of 12/22 when the event took place. I copied paste into power shell and copied paste for here.
I'll try doing it according to the diagram. Again where do I find "system logs" -- I went into the "manage" file but don't see logs mentioned. While I don't see any problem with the pc, this does have me concerned. No one has indicated a problem from this symptom. It does show a Dell update so I keep thinking that is it. Thanks.
