Computer shuts down every morning between 6am and 7am

Hello,

Problem - I am running Windows 10 v2004 OS Build 20231.1000 (Insider Preview Build). I updated to this build on October 8, 2020. I leave this computer on 24/7. Since that day, I have found the machine shut down every morning. I would think the problem is tied to this version of Windows except the first occurrence happened before the OS update.

So Far - I have used Event Viewer to look at Administrative Events but don't see Error or Critical Error events prior to the shutdowns. I have noted when the last entry was, so I know that the shutdowns occur between 6:00am and 7:00am. I don't see any log files in C:\Windows that have entries around the shutdown time. Reliability Monitor shows "Windows was not shut down properly" but the entry is time stamped after I restart the computer. There are no concerning entries prior to the shutdowns.

BIOS - The BIOS is at defaults (no overclocking). Specs below. I know it is weird to have 2 different RAM kits installed. The 2x16GB kit is for my next build but I went ahead and installed the DIMMs into this machine to test them. Even though they are all 3200MHz CL14 rated DIMMs, they are all running at JDEC standard and have been running this way for months.

Corsair AIO Water Cooler - I have had issues in the past with the Corsair AIO water cooler whacking out and letting the CPU overheat, but that was resolved by using RPM control instead of PWM control for the pump speed due to Corsair firmware bugs. I don't think this is the cause because I run a program called SIV that monitors the pump speed and logs anytime the it goes under 1800RPM (normal is ~2800RPM) and that log has no recent entries.

Help - I am looking for guidance on where else to look in Event Viewer, or wherever else, for clues to what is causing these daily shut downs. If I navigate to Applications Services and Logs - Microsoft - Windows, there are dozens of folders but I don't know which ones to look in.

Specs:

Windows 10 v2004 OS Build 20231.1000 (Insider Preview Build)
CPU - Intel i7-8700K
MOBO - Asus Maximus Hero WIFI
RAM - G.Skill F4-3200C14-16GTZR - 2x16G DDR4 RAM
RAM - G.Skill F4-3200C14-8GTZR - 2x8GB DDR4 RAM
GPU - Nvidia Titan GPU
PSU - EVGA 1000G3 PSU
AIO - Corsair H110i AIO Water Cooler
OS Drive - NVME - Samsung 960Pro 512GB
Data Drive - NVME - Samsung 970Pro 512GB
Data Drives (PCIE SSD) 2 x Intel SSDSC2BW240A4 205GB
Data Drive (PCIE SSD) Samsung 850Pro 512GB
Data Drive - Platter - Western Digital Black (WDC2003FZEX) 2TB
Data Drive - USB - SeaGate Backup Plus 2TB - Windows File History Backup Drive
Data Drive - USB - SeaGate Backup Plus 2TB - Macrium Reflect Backup Drive

Thanks!

Thank you. I have extracted and imported these Custom View Definitions. The Power - Restarts, Shutdowns and Crashes - OS Unexpected Shutdown do show the last 4 days of shutdowns. Times are 6:05:28am, 7:12:13am, 7:08:419am, and 8:03:20am. This at least gives me the exact times that it happened, and extends the window to about 2 hours. Event ID is 6008 for all of them which is Unexpected Shutdown. There is nothing else in these event views of interest.

I am sure there are no shutdown settings in the BIOS as I have not been in the BIOS in weeks but I will check just to make sure.

I do run Macrium Reflect which does a Full back up every Sunday at 2:00am, and a Differential backup every day (but Sunday) at 6:00am. I thought it might be related to this but the shutdown on Sunday was at 7:08am which is long after the Full back up was completed. The differential backups were also completed OK.

I also have Core Temp running with logging enabled. Core Temp logs all CPU core temps every minute, min and max temps, core load, and core speed. The logs do not show any high temps so its not the Corsair pump whacking out (which it has done in the past when under PWM speed control). If Core Temp is shut down (or the computer shuts down), the log file is closed and a new one is generated when Core Temp restarts.

Strangely, Core Temp logs continued for several minutes past the time stamps on the Shut Down events. For example, on Oct 9, the Event Log says the system shut down at 6:05:28am but the Core Temp log runs until 6:11:00am. On Oct 10, the Core Temp log stops 28 min after the Shut Down event time stamp. On Oct 11, the Core Temp log ran for 33 minutes past the shut down event time stamp. I don't understand how this is happening unless the Event Log time stamps are not in sync with the Core Temp log time stamps. Anyway, it does not appear to be temperature related.

Thanks again for the custom Event Viewer Definitions. I will keep an eye on them.

OK well thank you anyway. Adding those custom views to the Event Viewer was very helpful. I am eliminating the obvious suspects (Corsair AIO cooler, Macrium backups). The V2 Log Collector looks like a quite powerful diagnostic tool that collects a lot of info. I am digging through it now but suspect and hope that @Ztruker will take a look with much more experienced eyes.

Hmmm. You are right - I have not looked at Task Scheduler. I opened it up but for some reason, my Task Status panel is blank, even if I set it to Last 30 Days. In View, Show Hidden Tasks is checked. . I don't know why Task Status is blank, because obviously tasks are running and have been running. Active Tasks is populated as expected. I just added TS Tasks to Event Viewer and it is also blank. I have used NirSoft utilities before and will check out TaskSchedulerView.



Many thanks.